Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
35,701–35,750 of 99,067
Other
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website pintrk.com is currently inaccessible, serving only a standard 404 Not Found error page with no visible content, metadata, or business information. The domain WHOIS data is suspicious, showing a future creation date and the registrant listed as a registrar company rather than an end-user business. No privacy, cookie, or terms of service policies are present, and no contact or security information is available. The technical infrastructure appears minimal, with nginx serving the error page and no detected security headers or HTTPS information. Overall, the site lacks any meaningful presence or trust indicators, resulting in a very low legitimacy and security posture score.
JP/Politikens Hus A/Sjppol.dk
Media · Denmark
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
JP/Politikens Hus A/S is a major Danish media house established in 2003, operating multiple news and publishing brands that reach approximately 3 million Danes monthly. The company holds a strong market position with about 100 million visits per month, offering news media, publishing, and niche media services. The website reflects a professional and consistent brand image targeting the Danish general public and media consumers. Technically, the site is built on WordPress using modern libraries such as jQuery and Modernizr, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with minor gaps in security and privacy transparency.
Vergic ABpsplugin.com
Technology · Sweden
67Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Vergic AB operates the Vergic Engage platform, a digital-first customer engagement solution designed to improve customer experience and revenue through personalized digital interactions. The company targets businesses and public organizations seeking to enhance their digital customer service and sales channels. The platform offers a comprehensive suite of tools including live chat, chatbots, video, digital voice, and collaboration features, supported by APIs and integrations with major CRM and contact center systems. Recently acquired by Puzzel, Vergic maintains a strong market presence with reputable clients primarily in Sweden and the Nordic region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses several security best practices, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Overall, Vergic presents a professional and trustworthy digital presence with a solid business model and technical foundation. The main risk lies in the lack of WHOIS transparency, which should be investigated further. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining rigorous third-party script audits to ensure ongoing security and compliance.
- Google Schema.org & Structured Data Tools by Classy Schema
classyschema.org
Technology
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ClassySchema.org is a niche technology website offering specialized online tools to help web developers, SEO professionals, and digital marketers create structured data markup compliant with schema.org standards. The platform focuses on editors for FAQ, How-to, and Video pages to enable Google Rich Snippets, enhancing search visibility. The business appears to be a small, focused SaaS provider founded in 2019, with a consistent domain registration and a moderate market position in the structured data tooling space. Technically, the site employs modern JavaScript frameworks and libraries such as DevExtreme and Quill Editor, integrates Google Analytics 4 for extensive user and error tracking, and uses Cloudflare for DNS and likely CDN services. Performance and mobile optimization are moderate to good, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.
- RRivella AG
rivella.ch
Retail · Switzerland
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Rivella.ch is the official website of Rivella AG, a Swiss beverage company known for its unique soft drinks made from milk serum. The website primarily serves as a corporate and product information portal targeting general consumers in Switzerland and German-speaking regions. The business model focuses on manufacturing and retail distribution of beverages, with a strong local market presence. The website uses modern web technologies such as Gatsby for static site generation and integrates Google Tag Manager for analytics purposes. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and enhancing privacy compliance. Overall, the website is functional but basic in content quality and user experience, with room for improvement in transparency and security practices.
- Pricenow AG
nendazveysonnaz.ch
Transportation · Switzerland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website shop.nendazveysonnaz.ch is an e-commerce platform operated by Pricenow AG, focused on selling ski passes and related tourism services for the Swiss Alps region, particularly the 4 Vallées and Printse ski areas. It targets tourists, skiers, and outdoor enthusiasts seeking access to ski lifts and seasonal passes. The platform uses modern web technologies including React, Next.js, and Sanity CMS, providing a responsive and user-friendly experience. Structured data and Open Graph tags are implemented to enhance SEO and social sharing. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks explicit security headers and formal privacy and cookie policies, which are compliance gaps. Contact information is limited but present in meta tags. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security hardening.
- RRhône FM
rhonefm.ch
Media · Switzerland
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Rhône FM is a regional radio station based in the Valais region of Switzerland, providing local news and information primarily in French. The website serves as a digital presence for the station, targeting the general public in the region with news broadcasting services. The business model focuses on media broadcasting and information dissemination within a localized market. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, with integration of Google Tag Manager for analytics and a consent management platform for cookie compliance. The site demonstrates good mobile optimization and a professional design, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. WHOIS data confirms the domain's legitimacy and consistency with the business's regional focus. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.
- Magic Pass
magicpass.ch
Hospitality · Switzerland
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Magic Pass operates a subscription service providing free and unrestricted access to partner leisure and sports facilities primarily in Switzerland. The website presents a professional and consistent brand image with clear business focus on hospitality and leisure sectors. The technical infrastructure includes modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, supported by third-party widgets from Elfsight. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit contact information, terms of service, and a dedicated security policy page, which are areas for improvement. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, supporting a medium-sized business model in the hospitality industry.
Other
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at mappresspro.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policies are available for review. The domain is registered since 2018 with Tucows Domains Inc. and uses SiteGround hosting, indicating a legitimate registration and hosting setup. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies severely limit the ability to assess the company's business model, services, or compliance posture. Technically, the site uses Google Fonts but no other detectable technologies or analytics. Security posture cannot be fully evaluated due to the blocked content, but no security headers or HTTPS details were found in the provided data. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.
Other · Switzerland
55Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website 'swisstastes.ch' presents itself as a culinary and gourmet portal focused on Swiss tastes and culture, targeting a general audience interested in food and travel. The site uses WordPress CMS with the Enfold theme and integrates plugins such as MapPress for Google Maps and Google Tag Manager for analytics. The technical infrastructure is moderately modern, with basic mobile optimization and SEO features. However, the site lacks visible privacy and cookie policies, contact information, and security best practices such as security headers and vulnerability disclosures. This indicates a low maturity in security and privacy compliance. Overall, the website is functional but requires improvements in security posture and compliance to enhance trust and professionalism.
STnetstnet.ch
Transportation · Switzerland
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
STnet AG is a Swiss company specializing in transport and mobility services, providing digital solutions and information primarily for public transport users in Switzerland. The company maintains a professional and well-structured website built on WordPress, incorporating modern web technologies and monitoring tools such as New Relic and Google Tag Manager. The website is accessible, mobile-optimized, and offers clear contact information, including email, phone, and contact forms, supporting user engagement and service inquiries. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response details are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the website reflects a trustworthy and professional digital presence aligned with the company's business focus.
- SAGAFLOR AG
sagaflor.de
Retail · Germany
72Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
SAGAFLOR AG is a well-established German company with over 60 years of experience in the garden and pet retail market. The company operates a B2B business model focusing on partnerships, supplier networks, and employee recruitment, supported by multiple proprietary brands. Their website reflects a professional and consistent brand image, targeting entrepreneurs and partners in the garden and pet sectors. Technically, the site is built on TYPO3 CMS with Bootstrap framework and uses Matomo for privacy-conscious analytics. Hosting is provided by Deutsche Telekom, aligning with the company's German base. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.
SmartBearsmartbear.co
Technology · United States
70Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
SmartBear is a well-established enterprise software company specializing in tools for software testing, API lifecycle management, and observability. The company offers a comprehensive suite of products targeting developers, testers, and software teams to improve software quality and performance. Their market position is strong, supported by a mature domain and consistent branding. Technically, the website employs modern JavaScript libraries, analytics, and monitoring tools, hosted on AWS infrastructure with Kentico CMS. The site is well-optimized for SEO, mobile, and accessibility. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security policy disclosures are limited. Overall, the site reflects a mature digital presence with professional content and strong business credibility.
HTML Codexhtmlcodex.com
Technology
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HTML Codex is a specialized provider of free and premium HTML website templates, targeting web developers, designers, and businesses seeking customizable and developer-friendly templates. The company operates a WordPress-based website with a clear market position as a top designer and publisher of free HTML templates since its domain registration in 2019. The business model revolves around offering both free and paid templates, supported by advertising and premium sales. Technically, the website employs modern web technologies including Bootstrap, jQuery, and WordPress plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and user experience. Hosting and DNS are managed via Cloudflare, providing reliable performance and security.
Digital Partners Groupdpgroupcorp.com
Technology
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Digital Partners Group is a technology company specializing in the development and production of proprietary technology-based products primarily focused on improving digital environments and fostering closer connections between companies and people. Founded in 2010, the company has evolved from mobile platform consultancy to multi-industry digital product development, offering solutions such as user analytics (Undato), subscription management (Sindyk Smart), mobile site optimization (Sindyk Speed), custom software development, and SEO services. The company targets digital actors and businesses seeking advanced technological solutions to enhance their digital presence and user engagement. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics for user tracking. Hosting and DNS services are provided via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. SEO optimization is good with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers like Content-Security-Policy. No privacy or cookie policies are published, and no incident response or security policy information is available. Google Analytics is used without visible cookie consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and trustworthy with a moderate security posture and good business credibility. However, improvements in privacy compliance, security headers, and explicit security policies are recommended to enhance trust and regulatory adherence.
QMetry Inc.qmetry.com
Technology · United States
63Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
QMetry Inc. is a technology company specializing in AI-enabled test management and automated testing tools designed for agile enterprises. Their product suite includes scalable test management solutions integrated with popular DevOps tools and AI capabilities to accelerate test case authoring and improve testing efficiency. The company is positioned as a leader in the software testing domain with a strong focus on innovation and customer collaboration. The website demonstrates a mature digital infrastructure leveraging modern frameworks such as Angular and integrates advanced marketing and analytics tools, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies could be enhanced. Overall, the site is professional, well-branded, and trustworthy, supported by customer testimonials and third-party reviews. However, the absence of WHOIS data raises some concerns about domain registration transparency, warranting further verification.
SmartBear Softwarereflect.run
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Reflect.run is a professional SaaS platform operated by SmartBear Software, specializing in AI-powered automated end-to-end testing for web and mobile applications. The platform emphasizes no-code test creation, maintenance, and execution with generative AI capabilities, targeting software testers, QA teams, and developers. The website presents a strong market position as an innovative alternative to traditional code-based testing frameworks, offering integrations with popular CI/CD and test management tools. Technically, the site is built using the Hugo static site generator and leverages modern JavaScript libraries and multiple marketing and analytics tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and follows several best practices but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain appears legitimate and professionally managed, though WHOIS data is privacy-protected.
SEO Communityseocommunity.social
Technology
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
SEO Community operates a Mastodon-based social platform dedicated to professionals and enthusiasts in the Search Engine Optimization field. The platform facilitates community engagement and content sharing within the SEO niche, positioning itself as a specialized social network within the fediverse. The website branding is consistent and professional, targeting a small but focused audience. Technically, the site leverages Mastodon's open-source platform with React and modern web technologies, providing a responsive and functional user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, though cookie consent mechanisms are absent. Overall, the site is legitimate and trustworthy for its community purpose, though improvements in security and privacy transparency are recommended.
- AAACSB
aacsb.edu
Education
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AACSB is a globally recognized organization focused on accrediting business schools and fostering a network of business education leaders. The website demonstrates a mature and professional presence with comprehensive services including accreditation, membership, learning opportunities, events, and insightful research. The organization targets educators, businesses, and learners worldwide, positioning itself as a leader in business education accreditation and development. Technically, the website employs modern analytics and marketing technologies such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and OneTrust for cookie consent, indicating a digitally mature infrastructure. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data is notable but likely due to .edu domain registration policies rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around vulnerability disclosures.
- University of Fribourg
unifr.ch
Education · Switzerland
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The University of Fribourg is a well-established public educational institution founded in 1889, offering a broad range of academic programs including Bachelor, Master, and Doctorate degrees. It serves a diverse audience including students, researchers, and employees, with a strong regional and international presence. The website reflects the university's bilingual and multicultural identity, providing comprehensive information about studies, research, campus life, and support services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.
Lessebo Paperlessebopaper.com
Manufacturing · Sweden
70Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Lessebo Paper is a premium paper manufacturer based in Sweden, emphasizing environmentally friendly and sustainable production methods. The company has a long heritage dating back to 1693, positioning itself as a leader in climate-friendly paper products. Their website reflects a professional and consistent brand image, targeting businesses and consumers interested in high-quality, sustainable paper solutions. The business model focuses on manufacturing and selling premium paper with a strong environmental ethos. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. Hosting is provided by Loopia, a known provider. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is supported by the Yoast SEO plugin, enhancing search visibility. From a security perspective, the site uses HTTPS with a good SSL configuration and employs reCAPTCHA to mitigate automated abuse. However, it lacks several security headers and does not publish a security policy or incident response contacts. No vulnerability disclosure or security.txt file is present, which are areas for improvement. Privacy compliance is limited, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and publishing vulnerability disclosure information.
Citypaketetcitypaketet.se
Media · Sweden
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Citypaketet is a collaborative advertising platform formed by three of Sweden's largest morning newspapers: Dagens Nyheter, Göteborgs-Posten, and Sydsvenskan. Established in 1994, it targets urban audiences in Sweden's three largest cities by offering combined media advertising solutions across print and digital channels. The website presents a professional image with clear business information and a focus on delivering impactful advertising campaigns. Technically, the site is built on WordPress using the Avada theme and several plugins, including Yoast SEO and Download Manager, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site is trustworthy and well-positioned in the media sector, though improvements in privacy compliance and security best practices are recommended.
leeadsdoohleeadsdooh.com
Media · Sweden
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Leeads Dooh is a Swedish media and advertising company specializing in digital out-of-home (DOOH) advertising solutions. The company offers a variety of advertising packages including programmatic DOOH, large city center screens, supermarket-based advertising, roadside digital signage, and electric vehicle charging station ads. Positioned as one of Sweden's leading DOOH providers, Leeads Dooh targets businesses seeking nationwide outdoor advertising coverage through a single sales contact. The website is professionally designed, mobile-optimized, and provides clear service descriptions and contact information. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN services and Google reCAPTCHA for form security. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and incident response disclosures. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the active and professional website presence mitigates this risk. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security transparency.
Non-profit · Germany
62Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Arbeiter-Samariter-Jugend Deutschland (ASJ) is a well-established non-profit youth organization affiliated with the Arbeiter-Samariter-Bund (ASB). The website serves as an information hub for youth engagement, educational projects, and community services across Germany. It targets young people and members interested in social and democratic participation. The organization maintains a consistent brand presence and provides relevant content such as campaigns, publications, and event information. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and Klaro! for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.
Real Estate · Germany
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Immobilienverband Deutschland (IVD) is a well-established real estate association in Germany, founded in 2000, serving over 6,200 members including brokers, property managers, and experts. The website acts as a professional portal offering political representation, legal advice, networking opportunities, exclusive information, contract templates, and continuing education. It holds a strong market position as a national association with multiple regional sub-associations. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, WPBakery, and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS and CAPTCHA protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages in the provided content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
- Wollenhaupt GmbH
wollenhaupt.de
Manufacturing · Germany
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Wollenhaupt GmbH is a well-established regional company based in Nordhessen, Germany, specializing in print media and web services. Celebrating 100 years in business, the company offers a comprehensive range of services including print production, web design, and an e-commerce shop focused on labels and container cards. Their market position is that of a trusted medium-sized service provider with a strong local presence and a commitment to sustainable production practices. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients in the region. Technically, the website is built on a modern WordPress platform using the Enfold theme and WooCommerce for e-commerce functionality. It integrates several third-party tools such as Google Analytics, Google Tag Manager, and Rapidmail for newsletter management. The site is mobile optimized and demonstrates good SEO practices including structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the provided data, the overall posture is good with no exposed sensitive data or obvious vulnerabilities. The use of standard WordPress plugins and regular updates is recommended to maintain security. Privacy compliance is well addressed with comprehensive policies and user consent options. Overall, the website presents a low risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, conducting regular security audits especially for WooCommerce and contact forms, and continuous monitoring of third-party scripts for privacy risks.
- Hermann Klein GmbH & Co. KG
klein-fuldatal.audi
Transportation · Germany
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Hermann Klein GmbH & Co. KG operates as an authorized Audi dealership located in Fuldatal, Germany, offering new and used Audi vehicles, customer service, and after-sales support. The website is well integrated into Audi's digital ecosystem, leveraging Adobe Experience Manager headless CMS and modern JavaScript frameworks to deliver a responsive and user-friendly experience. The site includes comprehensive cookie consent management aligned with GDPR requirements, reflecting a strong commitment to privacy compliance. Security posture is robust with HTTPS enforcement and privacy management tools, although explicit security policy and incident response contacts are not found. Overall, the domain appears legitimate and professionally maintained, though WHOIS data is not publicly available, likely due to privacy protection.
- Škoda Auto Deutschland GmbH
skoda-auto.de
Transportation · Germany
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Škoda Auto Deutschland GmbH operates the official German website for the Škoda automotive brand, providing comprehensive information about their vehicle models, financing options, after-sales services, and electric mobility solutions. The company is a large, well-established player in the transportation sector in Germany, with a strong market presence and a broad portfolio including electric vehicles. The website targets both individual consumers and business customers, offering tools such as vehicle configurators, dealer locators, and financing calculators. Technically, the website employs a modern technology stack including React, Bootstrap, and jQuery, hosted on a reliable infrastructure likely powered by Microsoft Azure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with extensive use of structured data and meta tags. Performance is moderate, with good loading times and responsive design. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contact details. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website presents a low-risk profile with strong trust indicators and professional digital maturity. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen the security posture.
SEAT Deutschland GmbHseat.de
Transportation · Germany
72Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
SEAT Deutschland GmbH operates a comprehensive automotive website targeting the German market, offering new and used car sales, leasing options, test drives, and after-sales services. The company is a subsidiary of the Volkswagen Group and maintains a strong market presence in Germany with a broad portfolio of vehicles and services. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to consumers interested in SEAT vehicles. Technically, the site leverages Adobe Experience Manager as its CMS, integrates modern analytics and tag management tools, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are present and comprehensive, indicating good compliance with GDPR. Overall, the website reflects a mature digital infrastructure supporting a large enterprise automotive business.
- CUPRA
cupra.de
Transportation · Germany
75Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The website offers comprehensive information about CUPRA's vehicle lineup, electric mobility solutions, financing, leasing, and after-sales services. It is clearly positioned as a premium brand under the Volkswagen Group umbrella, targeting automotive customers in Germany interested in modern, sporty, and electric vehicles. The site features a professional design, clear navigation, and is optimized for mobile devices. Technically, it is built on Adobe Experience Manager and hosted on Volkswagen Group's cloud infrastructure, integrating advanced marketing and analytics tools such as Google Tag Manager and Adobe Analytics. Security posture is strong with HTTPS enforced, security headers present, and cookie consent managed via OneTrust. However, explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.
- Association Vaud OEnotourisme (AVOE)
vaud-oenotourisme.ch
Hospitality · Switzerland
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Vaud Oenotourisme is a Swiss non-profit association dedicated to the development and promotion of wine tourism in the canton of Vaud and Switzerland. The organization provides tools, training, networking, and certification to professionals in the oenotourism sector, aiming to enhance the regional wine tourism market. The website serves as a hub for professionals to access resources, events, and partnership information, positioning itself as a key regional player in this niche tourism industry. The content is primarily in French and targets industry stakeholders and partners.
UDITIS SAuditis.ch
Technology · Switzerland
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
UDITIS SA is a Swiss IT company established in 2000, specializing in cloud and infrastructure services, IT service management, and online solutions. It serves a diverse clientele including SMEs and multinational corporations across sectors such as healthcare, finance, and industry. Since 2022, UDITIS has been part of the Sequotech group, enhancing its technological expertise and market reach. The company offers a broad portfolio of IT services and solutions, positioning itself as a trusted technology partner in Switzerland. The website demonstrates a solid technical infrastructure with modern web technologies including jQuery and a proprietary CMS (WebMaker). It features responsive design and good SEO practices, with integrated cookie consent management and Google Analytics for traffic analysis. The site is well-structured, professionally designed, and provides clear navigation and contact information, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and implements secure forms with anti-CSRF tokens. Cookie consent mechanisms are in place, supporting GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, UDITIS presents a trustworthy and professional online presence with a strong business foundation. Strategic enhancements in security transparency and incident readiness would further strengthen its security posture and client trust.
Vercorinvercorin.ch
Hospitality · Switzerland
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Vercorin.ch is a professionally developed tourism website dedicated to promoting the Vercorin region in Switzerland. It offers comprehensive information on accommodation, activities, events, and practical visitor details, targeting tourists and families interested in outdoor and cultural experiences. The site integrates booking and reservation services through partner domains and maintains a consistent brand presence with official regional partners and media. Technically, the site uses a modern JavaScript stack with Google Tag Manager, reCAPTCHA, and a custom CMS platform (MyCity Tourism Information System). The website is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance gaps. No direct contact emails or phone numbers are exposed, relying on a contact form. Overall, the site is trustworthy and well-positioned as a regional tourism portal but should improve privacy and security disclosures.
techniConcept Sàrlgruyerepaysdenhaut.ch
Government · Switzerland
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Le Parc naturel régional Gruyère Pays-d'Enhaut is a Swiss regional park dedicated to sustainable tourism, environmental conservation, and regional development across three cantons. The website serves as an informative portal for tourists, local residents, and partners, offering event information, educational resources, and membership opportunities. The park is supported by federal and cantonal authorities, emphasizing its official and non-profit nature. Technically, the website is built on the Neos CMS platform, utilizing modern web technologies such as Swiper.js for interactive elements, FontAwesome for icons, and Matomo for analytics, ensuring a fast, mobile-optimized, and accessible user experience. Security is well implemented with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is comprehensive and clearly presented, enhancing business credibility.
- Bad Schinznach AG
bad-schinznach.ch
Hospitality · Switzerland
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Bad Schinznach AG is a well-established Swiss company specializing in wellness, hospitality, and healthcare services. The company operates thermal baths, a Kurhotel, a private rehabilitation clinic, and offers complementary services such as gastronomy and golf. Their market position is strong regionally, supported by a comprehensive service portfolio targeting tourists, wellness seekers, and patients. The website reflects a mature digital infrastructure using modern technologies like Next.js and React, with good performance and mobile optimization. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities. Overall, the company presents a trustworthy and professional online presence.
VAUDvaudplus-produits.ch
Government · Switzerland
57Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website www.vaud.ch/terroir is an official government platform representing the Canton of Vaud in Switzerland. It focuses on promoting the region's rich terroir, local products, and quality certifications such as the VAUD CERTIFIÉ D’ICI label. The site targets residents, local producers, and visitors interested in regional gastronomy and culture. It serves as a comprehensive informational and promotional tool, reinforcing the Canton’s market position as a reputable and authentic source of local products and tourism information. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Matomo Analytics, and Facebook Pixel, ensuring robust tracking and marketing capabilities. The design is professional, mobile-optimized, and accessible with clear navigation and rich content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent branding and official domain registration.
Val d’Anniviers Tourismvaldanniviers.ch
Hospitality · Switzerland
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Val d’Anniviers Tourism operates a professional and content-rich website promoting the Val d’Anniviers region in Switzerland as a mountain tourism destination. The site provides comprehensive information on accommodation, activities, events, ski lifts, webcams, and local culture, targeting tourists and visitors interested in alpine experiences. The business model focuses on destination marketing and facilitating bookings through linked platforms. Technically, the website uses a custom CMS (MyCity Tourism Information System), integrates Google Tag Manager and reCAPTCHA, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and anti-bot measures, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy, well-branded, and professionally maintained, with room for improvement in privacy and security transparency.
AdFest | Executive Advertising Summit | Dorado, Puerto Ricoislandadfest.com
Other
65Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
The website www.islandadfest.com appears to be inactive or unregistered based on the WHOIS data which returned no match for the domain. The website content is minimal and primarily consists of Wix platform default scripts and styles without any meaningful business or service information. There are no privacy policies, cookie consent mechanisms, contact details, or security policies present. The technical infrastructure is based on Wix CMS with standard JavaScript libraries and polyfills but lacks any advanced frameworks or analytics integrations. Security posture is weak due to absence of HTTPS confirmation, security headers, or incident response information. Overall, the site lacks legitimacy and trust indicators, suggesting it is either a placeholder or an abandoned domain. Strategic recommendations include registering the domain properly, implementing HTTPS, adding privacy and cookie policies, and providing clear business and contact information to improve trust and compliance.
brucynobrucy.no
Technology · Sweden
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Brucy is a technology company offering a modern website platform targeted at small to medium businesses primarily in Norway and Sweden. Their service model is subscription-based, providing complete website creation, SEO optimization, hosting, and maintenance with optional premium consulting services. The company positions itself as an affordable alternative to traditional web agencies and DIY platforms. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and fast performance. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security headers and privacy policies are missing, indicating room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and business-focused, with clear contact information and social media presence.
- HLTHY
hlthy.se
Healthcare · Sweden
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
HLTHY is a Swedish SaaS provider offering a comprehensive journalsystem tailored for rapidly growing clinics in Sweden. Their platform integrates clinical record keeping, marketing, and financial management into a single user-friendly interface. The website demonstrates a professional design with clear messaging targeting healthcare providers seeking to streamline operations and grow their patient base. Technically, the site is built on Webflow with modern integrations such as Intercom for support and Calendly for scheduling, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration status, impacting overall trust. Strategic recommendations include enhancing privacy compliance, adding security headers, and clarifying domain registration details to improve credibility and compliance.
Unilabsunilabs.se
Healthcare · Sweden
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Unilabs is a well-established healthcare company specializing in medical laboratory and diagnostic services primarily in Sweden. The company operates a professional website that targets healthcare providers and patients, offering comprehensive information about their services. The website is built on a Drupal CMS platform and integrates modern technologies such as Google Tag Manager and OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts, which could be improved. The domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's history. Overall, the website presents a professional and trustworthy digital presence with room for enhanced security transparency.
entusiastbilarentusiastbilar.se
Transportation · Sweden
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Entusiastbilar.se is a Swedish niche website dedicated to the valuation, sale, and inspiration around enthusiast and veteran cars. Operated by Nilskog Bilgruppen, the site offers personalized car valuations, sales facilitation including nationwide pickup, and expert guidance. The business targets car enthusiasts and collectors in Sweden, providing a trusted platform with expert knowledge and a strong community focus. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, hosted via a CDN, and optimized for performance and mobile use. Security posture is good with HTTPS enforced, though explicit security headers and privacy policies are missing. The absence of WHOIS data for the domain is a concern but the professional site content and clear business information mitigate some trust issues. Strategic improvements include adding privacy and cookie policies, enhancing security headers, and verifying domain registration status. Overall, the site presents a professional, trustworthy, and user-friendly experience for its target audience.
- Sälja Bilen
salja-bilen.se
Transportation · Sweden
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Sälja Bilen is a Swedish car valuation and buying service operated by Nilskog Bilgruppen, providing free and fast car valuations and a streamlined selling process. The website is professionally designed using modern frameworks like Nuxt.js and Vue.js, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the business content and contact information appear trustworthy and consistent with a small transportation sector company in Sweden.
- JP/Politikens Hus
medielogin.dk
Media · Denmark
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Medielogin.dk is a digital access portal providing login and account creation services for JP/Politikens Hus, a major Danish media house. The platform facilitates user authentication to access various digital media products under the JP/Politikens Hus umbrella. The website is professionally designed with consistent branding and clear navigation, targeting media consumers and subscribers in Denmark. The business model centers on subscription and access management for digital content. Technically, the site uses jQuery and related UI libraries, with moderate performance and good mobile optimization. However, no CMS or hosting details are evident from the HTML content. Security posture is moderate; HTTPS is assumed but no explicit security headers or incident response policies are published. Privacy and cookie policies exist but lack explicit consent mechanisms, indicating room for GDPR compliance improvement. No contact emails or phone numbers are directly available, which may impact user support accessibility. Overall, the domain registration data aligns well with the business, indicating high legitimacy and trustworthiness.
Education · Romania
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website cilm.ro represents the language center affiliated with Universitatea Transilvania din Brașov, offering foreign language courses and exam preparation for recognized certifications such as TOEFL, Cambridge, IELTS, DELF, DALF, and SPRACHDIPLOM. The business targets individuals seeking language proficiency certifications and language learning in the Brașov region. The site is professionally designed with clear academic branding and detailed information about courses and instructors, including links to university profiles. Technically, the site uses a modern Bootstrap framework with jQuery, is mobile responsive, and has good SEO practices, though it lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS assumed but no DNSSEC or security headers detected. No analytics or tracking scripts are present, indicating minimal user tracking. The domain is well-established since 2010 and registered through a Romanian registrar, consistent with the educational nature of the site. Overall, the site is trustworthy and professional but could improve privacy compliance and security hardening.
- Jaguar
jaguar.com
Transportation
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Jaguar is a globally recognized luxury automotive brand offering a wide range of vehicles with a strong digital presence tailored to multiple international markets and languages. The website analyzed serves as a market selector, enabling users to access localized Jaguar sites based on region and language preferences. The site demonstrates a mature digital infrastructure leveraging Adobe Experience Manager CMS, modern JavaScript libraries, and integrated marketing and analytics tools such as Adobe Target and Google Tag Manager. Security posture is strong with HTTPS enforced and consent mechanisms for cookies implemented, although explicit privacy policies and terms of service are not present on the analyzed page. The absence of WHOIS data for the domain introduces some uncertainty, but the professional branding and extensive localization strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its intended audience.
LAKRIDS BY BÜLOWlakridsbybulow.no
E-commerce · Norway
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
LAKRIDS BY BÜLOW is a premium e-commerce business specializing in handcrafted gourmet licorice and chocolate products, targeting a general audience primarily in Norway. The website is built on the BigCommerce platform, leveraging modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and multiple analytics and advertising pixels to optimize marketing efforts. The site demonstrates good design quality, mobile optimization, and SEO practices, supporting a positive user experience and professional brand image. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not published. The domain registration is recent but consistent with the business launch, indicating legitimacy. Overall, the site is safe, trustworthy, and compliant with basic privacy regulations, though improvements in transparency and security documentation are recommended.
Lakrids by Johan Bülow A/Slakridsbybulow.dk
E-commerce · Denmark
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Lakrids by Johan Bülow A/S operates a premium e-commerce platform specializing in gourmet licorice and chocolate products. The company holds a strong market position in the Nordic region as a B Corp certified producer, emphasizing sustainability and quality. Their website reflects a mature digital infrastructure leveraging BigCommerce and multiple modern marketing and analytics technologies, ensuring a seamless user experience and effective customer engagement. Security posture is solid with HTTPS and consent management, though some improvements in security headers and explicit policies are recommended. Overall, the domain registration and business information align well, supporting legitimacy and trustworthiness.
Hapag-Lloyd Cruisesdenn-zeit-ist-luxus.com
Hospitality · Germany
55Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website 'Denn Zeit ist Luxus' serves as a login portal for a luxury cruise booking service affiliated with Hapag-Lloyd Cruises. It offers users access to E-Booking services and promotional materials, targeting travel agents and customers interested in premium cruise experiences. The site maintains a professional appearance with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Botfriends Webchat, alongside a cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and secure form inputs; however, the absence of explicit security headers and missing WHOIS registration data present areas for improvement. Privacy compliance is well addressed with accessible privacy and cookie policies, and GDPR adherence is evident. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in domain registration and security header implementation.
- AAlgarve 2020
algarve2020.eu
Other
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Algarve 2020 is a travel-focused website providing content about the Algarve region in Portugal and other travel destinations. The site offers travel articles, guides, and tourism information targeting travel enthusiasts and tourists interested in this region. The business model is content publishing through a WordPress platform, with a niche focus on travel and tourism. The website demonstrates good content quality and consistent branding but lacks formal business contact information and privacy-related policies. Technically, the site is built on WordPress using the Blocksy theme and Yoast SEO plugin, with lazy loading for images to improve performance. The site is mobile optimized and uses HTTPS with good SSL configuration. However, it lacks advanced security headers and formal privacy and cookie policies, which are important for compliance and trust. From a security perspective, the site has a solid foundation with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security maturity. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website is a legitimate travel content platform with moderate technical and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.