Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
35,151–35,200 of 99,067
Messe Friedrichshafenmesse-friedrichshafen.com
Transportation · Germany
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Messe Friedrichshafen is a prominent German exhibition company specializing in leisure-themed trade fairs and events, holding a leading position in Europe. The website reflects a professional and well-structured digital presence, targeting exhibitors, visitors, and event organizers. The company offers venue services, ticketing, accommodation, and event calendars, supporting a comprehensive event hosting business model. Technically, the site employs modern web technologies including Bootstrap, Algolia Autocomplete, and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. The absence of WHOIS registration data is a notable concern but is mitigated by the professional site and external references. Overall, the site demonstrates good content quality, privacy compliance, and business credibility with room for improvement in transparency and contact information.
Höhenpasshoehenpass.de
Manufacturing · Germany
51Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Höhenpass operates a specialized e-commerce platform focused on providing fall protection equipment, inspection services, and employee training. The company positions itself as an expert in safety solutions, targeting businesses and professionals requiring personal protective equipment against falls. The website is well-structured with clear navigation and a comprehensive product catalog, supported by a Shopware CMS platform and Cloudflare DNS services. Technical infrastructure includes modern JavaScript libraries and Google Analytics for tracking, indicating a mature digital presence. Security posture is solid with HTTPS enforced and Cloudflare integration, though the absence of explicit security policies and security headers suggests room for improvement. Privacy compliance is basic, with cookie consent mechanisms present but no visible privacy or cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences.
- HHengst Filtration
hengst.com
Manufacturing
54Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Hengst Filtration is a manufacturing company specializing in filtration systems for passenger cars, trucks, industrial applications, hydraulics, and healthcare sectors. The company appears to have a strong market position with a global reach, targeting B2B customers in automotive and industrial fields. The website content is professional and well-structured, reflecting a mature business with a focus on product and service information. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA v3, Cookiebot for consent management, and Google Tag Manager for analytics and marketing integration. The CMS appears to be Onacy CMS, and the site is served over HTTPS with good SSL configuration, though some security headers are not explicitly detected. Security posture is solid with no obvious vulnerabilities, but the absence of a published privacy policy, terms of service, and WHOIS registration data reduces trust and compliance confidence. The website employs extensive tracking and marketing tools, including Google Analytics, HubSpot, Microsoft Advertising, and YouTube embeds, with a comprehensive cookie consent mechanism in place. Overall, the site is safe for general audiences and professionally maintained, but improvements in transparency and security documentation are recommended.
Transportation · Germany
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
EUROBIKE is a well-established global platform for the bicycle and ecomobility industry, organizing trade fairs and events primarily in Frankfurt, Germany. The website reflects a mature business with a clear focus on international trade visitors and exhibitors, offering comprehensive event information, exhibitor services, and networking opportunities. Technically, the site is built on Adobe Experience Manager with modern tracking and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is strong with HTTPS, consent mechanisms, and no visible vulnerabilities, although DNSSEC is not enabled and some security headers could be improved. Overall, the domain registration and WHOIS data support the legitimacy and long-standing presence of the business. The site is free from adult or questionable content and maintains a professional and trustworthy online presence.
Transportation · China
71Medium
NIS2 10 · GDPR 58
NIS2 10 · GDPR 58
AERO Asia is a professional trade fair platform focused on the general aviation industry in the Asia-Pacific region, jointly organized by Messe Frankfurt (HK) Ltd and Zhuhai Airshow Group Co Ltd. The website presents detailed event information, product ranges, and multimedia content, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, video streaming via Brightcove, and analytics through Google Tag Manager and LinkedIn Insight. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance documentation. No WHOIS data is available for the subdomain, but the domain is a subdomain of the reputable messefrankfurt.com, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Other
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ECRA (European Committee for Rope Access) is a cooperative organization representing over 20,000 rope access technicians across Europe through member associations from France, Norway, Spain, and Germany. The organization focuses on sharing safety knowledge, maintaining high standards of training, and supporting certification processes for rope access professionals. The website serves as an informational platform highlighting the cooperative nature and recent events of the member associations. Technically, the website is built on TYPO3 CMS with jQuery, featuring a responsive design and good accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and external links to reputable associations support its legitimacy. Overall, the site is professional, safe, and targeted at industry professionals and associations.
Transportation · Germany
58Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Moobly is a German-based online platform specializing in ridesharing services tailored for mountain trips. It enables users to find and offer carpool rides to various alpine destinations, promoting cost savings and environmental benefits by reducing CO2 emissions. The website is well-branded and targets environmentally conscious outdoor enthusiasts and mountain travelers. Technically, the site leverages the Enhavo CMS and integrates Google Maps API for geolocation and ride point-of-interest features, supported by Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Security-wise, the site uses HTTPS but lacks several security headers and explicit security policies, which could be improved. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the platform appears legitimate and functional but would benefit from enhanced privacy disclosures and security hardening.
- Startseite » alpenvereinaktiv.com
alpenvereinaktiv.com
Other
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website alpenvereinaktiv.com serves as a comprehensive tour portal for Alpine clubs, offering detailed information on mountain tours, climbing, hiking, and other outdoor activities primarily in the Alpine region. It is affiliated with major Alpine associations such as DAV, OEAV, and AVS, which enhances its credibility and market position. The platform provides community features, current conditions, and subscription-based premium services, targeting outdoor enthusiasts and club members. Technically, the site uses modern JavaScript libraries including Leaflet.js for mapping and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced, but the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The lack of WHOIS data is a concern but does not negate the site's apparent legitimacy given its professional content and affiliations. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security practices.
Deutscher Alpenverein e.V.dav360.de
Other · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website dav360.de serves as the login portal for the Deutscher Alpenverein e.V., a prominent German alpine club. It provides members and administrative staff access to the DAV360 portal, facilitating internal management and member services. The site is clearly branded and targeted at a German-speaking audience, with a focus on secure access to organizational resources. The business model centers on membership management and service delivery within a non-profit framework. The site positions itself as a trusted platform for the alpine community in Germany.
- DAV Summit Club
dav-summit-club.de
Hospitality · Germany
57Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
DAV Summit Club is a German-based travel company specializing in guided hiking, mountaineering, winter sports, and adventure tours worldwide. The website presents a broad portfolio of over 600 trips across 100 countries, targeting outdoor enthusiasts and adventure travelers. The business model focuses on experiential travel with expert guides and diverse travel types including training and safety courses. The company appears established with a medium-sized market presence in the hospitality sector.
Seebergerseeberger.de
E-commerce · Germany
66Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Seeberger operates a professional e-commerce platform focused on selling natural snacks such as nuts, dried fruits, and coffee products primarily targeting the German and broader European market. The website is built on the Shopify platform, leveraging modern web technologies and providing a seamless user experience with mobile optimization and accessibility features. The company maintains a strong brand presence with consistent branding and comprehensive content quality. Security posture is robust with HTTPS enforced, standard Shopify security headers, and privacy compliance including GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, the site is trustworthy, well-maintained, and suitable for general consumers seeking premium snack products.
Bergader Privatkäsereibergader.de
Retail · Germany
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bergader Privatkäserei is a well-established German cheese manufacturer with a history dating back to 1902. The company specializes in traditional cheese products and emphasizes quality, sustainability, and regional sourcing. Their website serves as a comprehensive platform for product information, recipes, and corporate values, targeting general consumers interested in specialty cheeses. Technically, the site is built on TYPO3 CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and spam protection via Google reCAPTCHA, though some standard security headers could be improved. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy. Overall, the website projects a professional and trustworthy image consistent with the company's market position.
Finance · Germany
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Versicherungskammer Bayern is a large regional insurance provider in Germany offering a wide range of insurance products including auto, home, liability, health, travel, life, and retirement insurance. The website targets private customers, families, professionals, farmers, companies, and municipal clients, providing comprehensive product information and multiple online service portals. The company emphasizes customer service with online claims reporting and contract management features. Technically, the website uses modern web technologies such as jQuery, Modernizr, and a consent management platform (Usercentrics), built on a CMS framework (OEVD CMS) with responsive design and accessibility considerations. Security posture is good with HTTPS enforced and sandboxed iframes, though some security headers could be improved. Privacy compliance is supported by a cookie consent mechanism but lacks explicit privacy policy and terms of service links in the provided content. No WAF or blocking mechanisms were detected, and the domain WHOIS data is limited but consistent with a legitimate business. Overall, the website is professional, trustworthy, and well-structured, suitable for its insurance business model.
Non-profit · Germany
74Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Jugend des Deutschen Alpenvereins (JDAV) is the youth division of the Deutscher Alpenverein, a prominent German alpine club. The organization focuses on providing youth-oriented alpine sports education, courses, and community engagement activities. Their website reflects a well-structured, content-rich platform targeting young members and interested parties in Germany. The site leverages modern web technologies such as Vue.js and employs privacy-conscious analytics via Plausible. Social media integration and partner affiliations enhance their outreach and credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. Overall, the website is professional, trustworthy, and aligned with the organization's mission.
Deutscher Alpenverein (DAV) Shopdav-shop.de
Retail · Germany
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The DAV Shop website serves as the official e-commerce platform for the Deutscher Alpenverein, offering specialized alpine maps, books, and outdoor equipment. It targets alpine enthusiasts and members of the DAV, positioning itself as a niche leader in the German outdoor retail market. The site provides a professional and consistent user experience with clear navigation and relevant content tailored to its audience. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries like jQuery and integrates privacy-focused tools such as Cookiebot and Matomo analytics. The infrastructure suggests a moderately performing platform with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR, but lacks explicit security headers and a published security policy or incident response plan. Overall, the website is trustworthy and compliant with privacy regulations, though it could improve its security posture by implementing additional headers and vulnerability disclosure mechanisms.
rightmartrightmart.de
Other · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
rightmart.de is a German online legal services platform specializing in consumer rights, serving over 1.2 million consumers annually. The website is professionally designed using WordPress CMS with modern SEO and performance optimization tools such as Yoast SEO and WP Rocket. The platform offers legal advice and consultation services primarily targeting consumers in Germany. The technical infrastructure is robust, hosted on Google Cloud DNS with fast loading times and excellent mobile optimization. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies are lacking. Privacy compliance is a notable gap due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.
Downdetectordowndetectorapi.com
Technology
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Downdetector API provides a RESTful interface for enterprises to integrate outage and incident data into their systems. The service is well documented with clear endpoint descriptions, authentication mechanisms, and usage guidelines. The technical infrastructure leverages modern web technologies and Cloudflare DNS for reliability. Security posture is solid with HTTPS and token-based authentication, though the site lacks published privacy and security policies. Overall, the platform is suitable for developers and businesses requiring real-time status monitoring data, with room for improvement in compliance transparency and security documentation.
- IIntegrity S.A.
dssmanager.com
Technology · Portugal
75Medium
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
Integrity S.A. operates DSSManager, a PCI-DSS compliance management platform designed to provide continuous and structured services beyond traditional audits. The company targets organizations seeking to maintain PCI-DSS compliance through a combination of a SaaS platform and expert consulting services. The website presents a professional and consistent brand image, emphasizing specialized support, risk assessments, and continuous compliance monitoring. Technically, the site leverages modern frontend frameworks such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for analytics, and uses Cloudflare for DNS services. The site is mobile-optimized with good performance and basic accessibility features. Security-wise, the website enforces HTTPS, implements a Content-Security-Policy header, and includes GDPR-compliant privacy and cookie consent mechanisms. However, DNSSEC is not enabled, and there is no published security policy or incident response contact information. WHOIS data is transparent and consistent with the company's identity and domain age, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility.
Integrity S.A.keepitsecure24.com
Technology · Portugal
73Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Keep IT Secure 24, operated by Integrity S.A. under the Devoteam Cyber Trust brand, is a cybersecurity service provider specializing in continuous penetration testing and vulnerability management. Their unique managed service model offers continuous security testing synchronized with change management processes, differentiating them from traditional annual penetration testing approaches. The company holds multiple prestigious certifications including ISO 27001, CREST, and PCI-DSS QSA, reinforcing their credibility and expertise in the cybersecurity domain. Technically, the website employs modern frameworks such as Bootstrap and integrates essential analytics and security technologies including Google Analytics, Google Tag Manager, and a robust Content Security Policy. The site is well-structured, mobile-optimized, and provides clear navigation, contributing to a positive user experience. Privacy and cookie policies are comprehensive and include a consent mechanism, demonstrating compliance with GDPR and related regulations. From a security perspective, the site shows good practices with HTTPS enforcement and CSP headers, though additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registrant data and lack of explicit incident response or vulnerability disclosure contacts slightly reduce trustworthiness. Overall, the risk posture is strong but could benefit from improved transparency in domain registration and incident handling. Strategically, the company should focus on enhancing domain registration transparency, publishing a vulnerability disclosure policy, and providing more direct contact channels such as phone numbers or dedicated security contacts to further build trust and compliance.
- Zine EOOD
bootstrapstudio.io
Technology · Bulgaria
60Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Bootstrap Studio, developed by Zine EOOD, is a well-established desktop application designed for visual web design using the Bootstrap framework. The company targets web designers, developers, students, and freelancers with a one-time purchase business model complemented by optional hosting and smart form services. The website reflects a mature product with a strong market position supported by thousands of users and positive testimonials. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates Paddle for payments and ProfitWell for analytics, ensuring a fast, responsive, and SEO-optimized user experience. Security posture is solid with HTTPS enforced and domain registration consistent with company information, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for its users.
- Aesculap Akademie GmbH
aesculap-academy.com
Healthcare · Germany
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Aesculap Akademie GmbH operates a global healthcare education platform providing innovative training and professional development services. The website targets healthcare professionals worldwide, offering a range of courses and events to enhance skills and knowledge. The company positions itself as a specialized academy within the healthcare education sector, with a medium-sized organizational footprint based in Germany. Technically, the website is built on a modern Angular framework with Material Design components, hosted partially on AWS infrastructure. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility improvements are possible. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit incident response information. The absence of WHOIS data for the domain is a notable concern, as it reduces transparency and trustworthiness despite the professional presentation and clear contact information. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is secure and compliant with privacy regulations but would benefit from enhanced security policies and WHOIS transparency.
- Mmedperts.com is for sale
medperts.com
Other
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website medperts.com is currently a parked domain sales page hosted by NameSilo, a reputable ICANN-accredited domain registrar. The site offers the domain for sale at a fixed price with options to buy or bid via the NameSilo marketplace. There is no active business or service associated with the domain, and the content is minimal, focused solely on domain sales. The technical infrastructure relies on standard web technologies including jQuery and Shadowbox, with Google Tag Manager and Analytics for tracking. The site lacks privacy, cookie, and terms of service policies, and does not provide any contact information or business details. Security posture is basic with no visible security headers or HTTPS status from the provided data. WHOIS data is unavailable, indicating the domain is currently unregistered or expired, which aligns with the domain being offered for sale. Overall, the site serves as a domain marketplace landing page rather than a functional business website.
The easyBrand Company Ltd.cronly.app
Technology
57Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Cronly.app is a specialized SaaS platform offering comprehensive cron job management including monitoring, scheduling, backup, and integration services. The company positions itself as a reliable tool for developers and teams to ensure their scheduled tasks run smoothly, with additional features like SSL certificate monitoring and extensive integrations via Zapier, Slack, and email. The website is professionally designed with clear navigation and interactive features such as a pricing calculator, targeting a developer audience. The business appears to be a small technology company founded in 2018, operating under The easyBrand Company Ltd. brand. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple analytics platforms such as Matomo, Google Tag Manager, and Clicky. It uses Google reCAPTCHA for form security and enforces HTTPS with strong security headers, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, Cronly demonstrates good practices including HTTPS enforcement, use of security headers, and form protection via reCAPTCHA. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are important for compliance and transparency. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data aligns well with the website's claims, showing consistent registration details and domain age appropriate for the business history. Overall, Cronly.app presents a trustworthy and professional online presence with a strong technical foundation and good security posture. To further enhance compliance and user trust, implementing a cookie consent banner and publishing security policies are recommended. The site is safe for general audiences and free from any adult or questionable content.
Club Diplomatique De Genèveclubdiplomatique.ch
Government · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Club Diplomatique De Genève is a recognized private association founded in 1976 that serves as the official platform for the Geneva international community, including governmental, academic, and private actors. The website reflects a well-established organization with a clear focus on fostering relationships and organizing events that promote Geneva's international stature. The site is professionally designed, mobile-optimized, and uses modern WordPress technologies with SEO and performance plugins. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit cookie consent and security policy disclosures. Overall, the site demonstrates high business credibility and trustworthiness with room for improvement in privacy compliance and security transparency.
pharmaciepluspharmacieplus.ch
Healthcare · Switzerland
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
pharmacieplus is a Swiss network of nearly 100 pharmacist-owned pharmacies providing a wide range of health services including prevention, vaccination, and personalized care. The website presents a professional and consistent brand image targeting the general public seeking pharmacy and health services in Switzerland. Technically, the site is built on a modern React and Gatsby framework with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published privacy or security policies. No contact emails or phone numbers were explicitly found in the HTML content, which could impact user trust and compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security transparency.
Opéra de Lausanneopera-lausanne.ch
Hospitality · Switzerland
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Opéra de Lausanne is a well-established cultural institution located in Lausanne, Switzerland, with a rich history dating back to 1871. The organization focuses on delivering high-quality opera performances, cultural mediation, and educational programs to a broad audience including opera enthusiasts and the general public. The website reflects a professional and consistent brand image, providing comprehensive information about performances, ticketing, and institutional details. It supports multilingual access (French and English) and integrates secure online ticket sales through a trusted partner platform.
Lausanne Tourismelausanne-tourisme.ch
Hospitality · Switzerland
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Lausanne Tourisme operates the official tourism website for the city of Lausanne, Switzerland, providing comprehensive information on local events, attractions, accommodations, and business services related to tourism. The website targets tourists, local visitors, and business event planners, positioning itself as a key destination marketing organization for the Olympic Capital. The site is built on WordPress with multilingual support and uses modern web technologies such as jQuery, Google Tag Manager, and Slick Slider to deliver a rich user experience. The design is professional, mobile-optimized, and content-rich, supporting excellent user engagement and navigation. Security posture is solid with HTTPS enforcement and anti-clickjacking measures, though explicit security headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies in the analyzed content. Overall, the website demonstrates high business credibility and trustworthiness, consistent with an official city tourism entity.
- WWinarco AG
tamoilcard.info
Energy
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.tamoilcard.info is a business-oriented platform primarily focused on providing fuel card services under the brand associated with Winarco AG. The site targets both private individuals and companies, offering account management and card request functionalities. The business operates within the energy and transportation sectors, positioning itself as a niche service provider. The website's technical infrastructure leverages modern web technologies including the Yii PHP framework, jQuery, Bootstrap, and integrates Google Tag Manager for analytics. The presence of a cookie consent banner indicates some level of privacy compliance, although no explicit privacy policy or terms of service are found on the login page. Security measures include HTTPS enforcement and CSRF protection on forms, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. WHOIS data is unavailable due to query failure or privacy protection, which limits transparency but does not necessarily indicate illegitimacy. Overall, the site presents a moderate risk profile with a solid business credibility but could enhance its security and compliance posture.
Oldtimermuseen.deoldtimermuseen.de
Transportation · Germany
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Oldtimermuseen.de is a specialized online portal dedicated to providing comprehensive information about over 350 oldtimer museums across Germany. It serves classic vehicle enthusiasts and tourists by offering detailed museum guides, interactive maps, and press resources. The website enjoys a solid market position within its niche, supported by partnerships and positive media coverage. Technically, it is built on WordPress with modern plugins and libraries, ensuring good SEO, mobile optimization, and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. Overall, the site is trustworthy, professional, and safe for general audiences.
co2.auto GmbH Niederlassung Österreichco2-auto.at
Energy · Austria
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
co2-auto.at is an Austrian-focused online platform operated by co2.auto GmbH Niederlassung Österreich that facilitates the registration and sale of CO2 emission reduction quotas (THG-Quote) for electric vehicle owners and charging station operators. The platform enables users to register their electric vehicles, upload required documents, and receive an annual ePrämie (bonus) by bundling and submitting eQuoten to the Austrian Umweltbundesamt. The website is well-structured, informative, and targets electric vehicle owners in Austria, providing clear guidance and support for quota trading. Technically, the site uses standard web technologies with good mobile optimization and SEO practices but lacks explicit CMS or advanced frameworks. Security posture is solid with HTTPS and encrypted session management, though security headers and incident response policies are not explicitly published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and serves a niche market in the energy and transportation sectors.
Informa PLCcphi.com
Healthcare · United Kingdom
68Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
CPHI, operated by Informa PLC, is a leading global platform uniting pharmaceutical professionals through multi-channel events and digital solutions. The website reflects a mature, enterprise-level business with a strong market position in healthcare event management and digital marketing services. The technical infrastructure leverages Adobe Experience Manager CMS, modern analytics, and marketing tools, ensuring a professional and engaging user experience. Security posture is robust with HTTPS, reCAPTCHA, and consent management, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR-aligned consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and effective digital maturity.
MDT travel underwriting GmbHmdt-versicherung.de
Other · Germany
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
MDT travel underwriting GmbH operates as an independent travel insurance partner based in Germany, offering a range of travel insurance products including annual policies, insurance packages, trip cancellation, and health insurance. Established in 2008, the company positions itself as a reliable and flexible partner for both private and business customers, emphasizing competitive pricing and comprehensive coverage. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to travelers. Technically, the site is built on WordPress with SEO optimization via Yoast and employs Google Tag Manager and New Relic for analytics and performance monitoring. Security posture is solid with HTTPS enforced and privacy compliance evidenced by cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.
Digital Commerce Awarddigital-commerce-award.ch
E-commerce · Switzerland
53Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The Digital Commerce Award website serves as a professional platform recognizing the best Swiss online shops, hosting annual award events and facilitating industry networking. The site targets e-commerce professionals and businesses within Switzerland, positioning itself as a reputable and established industry award organizer since 2012. The business model revolves around event organization, industry recognition, and fostering community engagement within the Swiss digital commerce sector. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating multiple analytics and marketing tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a cookie consent mechanism and vulnerability disclosure policy suggests room for compliance improvements. Overall, the site is well-designed, content-rich, and trustworthy, with minor gaps in privacy compliance and incident response transparency.
Oldtimerland Bodenseeoldtimerland-bodensee.eu
Transportation · Germany
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Oldtimerland Bodensee operates a niche website focused on classic car events, rentals, restoration, and consulting services primarily targeting enthusiasts in the Bodensee region of Germany. The website offers event information, partner links, and a newsletter subscription with a clear privacy notice, indicating a small but focused business model. Technically, the site is built on the Jimdo CMS platform, leveraging common web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains, but the website content and external partner links support legitimacy. Overall, the site presents a professional and trustworthy front for its business niche.
- Mmia356.de – Top-Deals
mia356.de
E-commerce
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website mia356.de is a German-language deals aggregator platform offering discounted products across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. It operates primarily through affiliate marketing, linking to Amazon product offers. The site also indicates that the domain is currently for sale, suggesting it may be a parked or monetized domain rather than a fully established business. The technical infrastructure is basic but functional, using standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. The site is mobile responsive and provides a live search feature for deals, enhancing user experience. However, there is no evidence of a CMS or advanced frameworks, and performance is moderate. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about legitimacy and trustworthiness. Overall, the site is functional for affiliate marketing but lacks critical security, compliance, and business transparency features.
- SServiceNow
servicenow.com
Technology · United States
72Medium
NIS2 77 · GDPR 85
NIS2 77 · GDPR 85
ServiceNow is a leading enterprise cloud company specializing in AI-powered workflow automation and IT service management solutions. Their website demonstrates a strong market position with comprehensive product offerings targeting enterprises and IT professionals. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Akamai CDN, and advanced JavaScript frameworks, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, strong security headers, and secure authentication integrations. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not publicly detailed. Overall, the website reflects a mature, professional enterprise with high trustworthiness and digital maturity.
RootMetricsrootmetrics.com
Technology · United States
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
RootMetrics is a well-established technology performance benchmarking company specializing in mobile network operator testing and 5G performance measurement. As a recognized industry standard and now a subsidiary of Ookla, RootMetrics provides actionable insights to consumers and businesses to improve their connected technology experiences. The website reflects a professional and consistent brand presence with comprehensive content and multimedia elements that engage its target audience effectively. Technically, the site employs modern JavaScript frameworks such as AngularJS and uses marketing automation tools like Eloqua and HubSpot forms, hosted on AWS infrastructure, ensuring good performance and scalability. Security posture is solid with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are not evident, indicating room for improvement. Privacy and terms policies are comprehensive and hosted on the parent company domain, demonstrating good privacy compliance. Overall, the website is trustworthy, well-designed, and serves its business purpose effectively.
- Ookla
speedtest.net
Technology · United States
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Speedtest.net, operated by Ookla, is a leading global platform providing internet speed testing services accessible via web and multiple mobile and desktop applications. The website offers comprehensive tools for measuring broadband speed and network performance, targeting general internet users and professionals alike. The platform enjoys a strong market position with a well-established brand and extensive service offerings including research, awards, and performance directories. Technically, the website employs a modern technology stack including JavaScript frameworks, AWS AppSync, Firebase, and integrates multiple advertising and analytics services. The site is hosted by Hetzner Online and demonstrates fast performance, excellent mobile optimization, and good accessibility and SEO practices. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy page and explicit incident response contact information. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms, reflecting GDPR adherence. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure program, and enhancing transparency on data retention and incident response to further strengthen trust and security posture.
SOS-Verkehrsrecht.desos-verkehrsrecht.de
Transportation · Germany
70Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
SOS-Verkehrsrecht.de is a specialized German legal service provider focusing on traffic law, offering digital and transparent legal consultation and representation for clients facing fines, points, and driving bans. With over 150,000 cases handled and TÜV-certified customer satisfaction, the company holds a strong market position in Germany. Their business model leverages an intuitive online questionnaire and remote legal services to efficiently serve clients nationwide. Technically, the website is built on a modern WordPress platform hosted on AWS, optimized for performance and mobile responsiveness, and integrates GDPR-compliant consent management. Security posture is solid with HTTPS and best practices, though some security headers could be explicitly verified. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, making it a reliable resource for its target audience.
JouwWeb B.V.webador.nz
Technology · New Zealand
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Webador is a well-established website builder platform operated by JouwWeb B.V., founded in 2009 and headquartered in Eindhoven, Netherlands. The platform targets small business owners and individuals in New Zealand and globally, offering AI-powered website creation, domain registration, and e-commerce capabilities. The website demonstrates a professional, user-friendly design with strong branding and trust signals such as high Trustpilot ratings and active social media presence. Technically, the site employs modern JavaScript frameworks, Google Analytics 4, and performance monitoring tools, ensuring fast load times and mobile responsiveness. Security posture is strong with HTTPS enforced, nonce-based script security, and cookie consent mechanisms, though some security headers could be more explicitly declared. Privacy compliance is robust with clear policies and GDPR adherence. Overall, Webador presents a credible, secure, and mature digital presence suitable for its target market.
JouwWeb B.V.webador.com.au
Technology · Australia
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Webador is a technology company specializing in an AI-powered website builder platform tailored primarily for small business owners and individuals in Australia and other markets. The platform offers easy website creation, online store setup, domain registration, and business email services through a subscription model with multiple tiers including free options. The company positions itself as user-friendly and SEO-optimized, boasting a large customer base and positive trust indicators such as high Trustpilot ratings and industry recognition. Technically, Webador employs modern JavaScript frameworks, Google Analytics, and performance monitoring tools, ensuring a fast, responsive, and accessible user experience. Security posture is solid with HTTPS enforcement and secure form handling, although explicit security policies and incident response contacts are not publicly documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies and opt-in consent mechanisms. Overall, Webador presents a credible, professional, and trustworthy online presence with room for improvement in transparency around security policies and WHOIS data availability.
JouwWeb B.V.webador.pl
Technology · Netherlands
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Webador.pl is a Polish localized website builder platform operated by JouwWeb B.V., a Netherlands-based company founded in 2009. The platform targets small business owners and individuals seeking easy-to-use, AI-powered website creation tools with SEO optimization, responsive design, and integrated e-commerce capabilities. The business model is subscription-based with multiple tiers including free, Lite, Pro, and Business plans. The company maintains a strong market position in Poland and other countries with over 290,000 users and a high Trustpilot rating. Technically, the website uses modern JavaScript frameworks, Google Analytics 4, and Google Tag Manager for analytics and marketing, with a fast, mobile-optimized, and accessible design. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and incident response policies could be improved. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policies. Overall, the website and business demonstrate professionalism, trustworthiness, and technical maturity.
JouwWeb B.V.webador.ca
Technology · Netherlands
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Webador is a technology company specializing in an AI-powered website builder platform tailored primarily for small business owners and individuals. The platform enables users to create professional websites, online stores, and blogs with ease, leveraging AI for content creation and offering SEO-optimized, responsive designs. With over 290,000 customers and a strong presence in Canada and other countries, Webador positions itself as a user-friendly and accessible solution in the competitive website builder market. The company operates under the legal entity JouwWeb B.V., based in Eindhoven, Netherlands, and maintains a consistent brand across multiple regional domains.
JouwWeb B.V.webador.fi
Technology · Netherlands
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Webador.fi is a Finnish localized website builder platform operated by JouwWeb B.V., a Netherlands-based company founded in 2009. The service targets small business owners and individuals in Finland, offering AI-powered website creation, ecommerce solutions, domain registration, and custom email services. The platform is well-positioned in the Nordic market with a strong user base and positive trust indicators such as a high Trustpilot rating and active social media presence. Technically, the website uses modern JavaScript frameworks, Google Analytics 4, and performance monitoring tools, delivering a fast and mobile-optimized user experience. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers and public security policies could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, Webador.fi presents a professional, trustworthy, and user-friendly service with a solid technical foundation and good business credibility.
JouwWeb B.V.webador.no
Technology · Netherlands
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Webador.no is a Norwegian localized website builder platform operated by JouwWeb B.V., a Dutch company founded in 2009. The company offers an AI-powered website builder tailored for small business owners, providing easy-to-use tools for creating websites, online stores, and blogs. Their platform emphasizes SEO optimization, responsive design, and includes free .NO domain registration for the first year. The business model is SaaS-based, targeting small to medium enterprises primarily in Norway and other international markets through localized domains. The website demonstrates a high level of digital maturity with modern analytics, marketing integrations, and a professional user experience. Technically, the site uses a custom CMS platform with JavaScript frameworks, Google Tag Manager, Google Analytics 4, and SpeedCurve for performance monitoring. The site is well-optimized for mobile devices and SEO, with fast loading times and clear navigation. Security posture is strong with HTTPS enforced and secure form handling, although explicit security headers and a published security policy are absent. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with opt-in consent mechanisms. The security posture is solid but could be improved by publishing incident response contacts and vulnerability disclosure policies. The WHOIS data for the .NO domain is not publicly available due to registry policy, which is standard and does not detract from legitimacy. Overall, Webador.no presents as a trustworthy, professional platform with a strong market position in the website builder industry for small businesses. Strategic recommendations include enhancing security transparency, adding incident response information, and maintaining compliance with evolving privacy regulations to sustain trust and competitive advantage.
JouwWeb B.V.webador.dk
Technology · Denmark
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Webador.dk is a Danish localized website offering platform operated by JouwWeb B.V., a Dutch company founded in 2009. The platform targets small business owners and entrepreneurs, providing an AI-driven website builder with subscription plans ranging from free to business tiers. The service includes website creation, webshop management, domain registration, and business email hosting. The website is professionally designed, mobile-optimized, and SEO-friendly, with strong trust signals such as a high Trustpilot rating and active social media presence. Technically, the site uses modern JavaScript frameworks, Google Analytics 4, and Google Tag Manager for analytics and marketing, with fast performance and good accessibility. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and policies are not fully documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies and opt-in consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but other trust indicators support legitimacy.
JouwWeb B.V.webador.mx
Technology · Netherlands
70Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Webador.mx is a Spanish-language localized website builder platform operated by JouwWeb B.V., a Netherlands-based company founded in 2009. It offers AI-powered website creation tools, domain registration with .COM.MX domains, professional email services, and ecommerce capabilities targeting entrepreneurs and small businesses primarily in Mexico. The platform emphasizes ease of use, SEO optimization, and responsive design, supported by a strong customer base of over 290,000 users and positive trust signals such as a 4.5-star Trustpilot rating. Technically, the site uses modern JavaScript frameworks, Google Analytics 4, and performance monitoring tools, delivering fast and mobile-optimized experiences. Security posture is solid with HTTPS, secure forms, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure pages are absent. WHOIS data confirms legitimacy and consistency with the business claims. Overall, Webador.mx presents a professional, trustworthy, and technically mature service for website creation in the Mexican market.
JouwWeb B.V.webador.ch
Technology · Netherlands
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Webador, operated by JouwWeb B.V., is a well-established technology company founded in 2009, specializing in providing an AI-assisted website builder platform tailored for small businesses and individual users, particularly targeting the Swiss market with .CH domains. The platform emphasizes ease of use, rapid website creation, and includes features such as e-commerce capabilities, domain registration, professional email services, and SEO optimization. The company maintains a strong market position with over 290,000 customers and positive trust indicators including high Trustpilot ratings and transparent pricing. Technically, the website employs modern JavaScript frameworks, Google Analytics 4, and performance monitoring tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is robust with HTTPS enforcement, secure forms, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are not publicly available. Overall, the website and business demonstrate high credibility, compliance with GDPR, and a professional digital presence.
JouwWeb B.V.webador.be
Technology · Belgium
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Webador is a well-established technology company founded in 2009, specializing in providing an AI-powered website builder platform tailored for small businesses and entrepreneurs, primarily in Belgium and other European markets. The platform offers comprehensive services including website creation, e-commerce capabilities, domain registration with .BE domains included, professional email services, and SEO optimization. The company maintains a strong market position with over 290,000 users and a high Trustpilot rating, reflecting customer satisfaction and trust. Technically, Webador employs modern web technologies including JavaScript, Google Tag Manager, and responsive design principles ensuring excellent mobile optimization and fast performance. The platform uses proprietary CMS technology and integrates third-party services such as Vimeo for video content and SpeedCurve for performance monitoring. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. From a security perspective, the website enforces HTTPS and secure form handling with password strength indicators. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Webador presents a professional, trustworthy, and technically sound online presence with strong business credibility. The absence of WHOIS data is due to .be domain registry policies and does not detract from the legitimacy of the business. Strategic recommendations include improving security header implementation and publishing a formal security policy to further strengthen trust and compliance.
JouwWeb B.V.webador.co.uk
Technology · Netherlands
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Webador.co.uk is a localized UK version of the Webador website builder platform operated by JouwWeb B.V., a Netherlands-based company founded in 2009. The platform offers AI-powered website creation tools, domain registration, ecommerce capabilities, and business email services targeted primarily at small business owners. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools such as Google Analytics 4 and Google Tag Manager. Despite the domain www.webador.co.uk not being registered in Nominet's WHOIS database due to naming rule violations, the website content is fully accessible and legitimate, serving as a regional front for the Webador platform. The company demonstrates strong trust indicators including a high Trustpilot rating and clear contact information.