Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,189001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
35,901–35,950 of 99,067
Éditions Mimésiseditionsmimesis.fr
Media · France
54Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Éditions Mimésis is a specialized publishing company focused on academic and cultural books and journals, primarily serving the French and Italian markets. Their offerings include physical and digital publications, with an active online catalog and eBook store partnership. The website is professionally designed, mobile-optimized, and provides comprehensive content including news, events, and product details. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Technically, the site is built on WordPress with WooCommerce and uses modern libraries and frameworks, though some security headers are missing. The absence of WHOIS data limits domain trust verification, but the overall digital presence and business information support legitimacy. Contact details and social media links are clearly presented, enhancing business credibility.
Mimesis Verlagmimesisverlag.de
Education · Italy
53Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Mimesis Verlag is a specialized academic publishing house focusing on humanities and philosophical works, founded in 2017 as part of the Éditions Mimésis publishing group. The website serves as an e-commerce platform for their publications, targeting academics and readers interested in philosophy and related fields. The site is built on WordPress with WooCommerce, leveraging modern plugins and frameworks to provide a professional and user-friendly experience. The presence of privacy and cookie policies, along with a consent mechanism, indicates good compliance with GDPR requirements. Security posture is adequate with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit security policies are recommended. Overall, the website is trustworthy, well-maintained, and aligned with the business's academic publishing mission.
Aestheticaaestheticaedizioni.it
E-commerce · Italy
54Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Aesthetica Edizioni is a specialized Italian cultural book publisher focusing on aesthetics and philosophy. The website serves as an e-commerce platform offering a curated catalog of books with detailed descriptions and pricing. The business is positioned as a niche player in the cultural publishing sector, targeting Italian-speaking readers interested in academic and philosophical literature. Technically, the site is built on WordPress with WooCommerce and uses common plugins like Yoast SEO and Swift Framework. While the site is mobile optimized and has good SEO practices, it runs outdated versions of WordPress and WooCommerce, which pose potential security risks. The security posture is moderate with HTTPS enabled but lacks advanced security headers and up-to-date software. Privacy and cookie policies are present and GDPR compliant, but no direct contact information or security incident response details are found. Overall, the website is professional and trustworthy but would benefit from technical updates and enhanced security measures.
- MMIM Edizioni srl
mimesisinternational.com
Education · Italy
53Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Mimesis International is a specialized academic publishing company based in Italy, focusing on interdisciplinary cultural, philosophical, and social science publications. The website serves as a platform to showcase their extensive catalog of books and journals, targeting scholars and intellectual audiences globally. The company operates a professional and content-rich website built on WordPress, with a moderate technical infrastructure hosted by Netsons. The site is well organized, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements in security headers and incident response disclosures are recommended. Overall, the website reflects a credible and trustworthy academic publisher with a stable domain history and consistent branding.
- MMimebù
mimebu.it
Education · Italy
54Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mimebù is an Italian publishing company specializing in children's and educational books, offering a diverse catalog including illustrated albums, narrative series, and interactive ebooks. The website serves as an e-commerce platform targeting children, educators, parents, and book retailers, positioning itself as a niche player in the Italian educational publishing market. The company leverages WordPress and WooCommerce for its digital presence, with additional plugins for SEO and downloads. While the site is well-structured and visually consistent, it lacks visible privacy and terms of service policies, which are important for compliance and trust. The cookie consent mechanism is implemented, indicating some attention to privacy regulations. Technically, the site uses an outdated WordPress and WooCommerce version, which poses security risks and should be updated promptly. Security headers are not evident, and no advanced analytics or tracking services are detected, suggesting minimal user tracking. Overall, the site is functional and professional but would benefit from security and compliance improvements.
Jouvencejouvence.it
E-commerce · Italy
54Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Jouvence is a small Italian e-commerce business specializing in the sale of niche books focused on history, philosophy, religion, and Arabic literature. The website is built on WordPress with WooCommerce for e-commerce functionality and uses several common web technologies such as jQuery, Bootstrap, and FontAwesome. The site is well-branded and provides a good user experience with clear navigation and mobile optimization. However, it lacks visible privacy and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but outdated software versions and minimal security headers present potential risks. No WAF or blocking mechanisms interfere with content accessibility. Overall, the site is legitimate and functional but would benefit from updates and improved compliance documentation.
- Bürgerliche Allianz Riehen
allianz-riehen.ch
Government · Switzerland
65Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
The website www.allianz-riehen.ch represents the Bürgerliche Allianz Riehen, a local political alliance focused on the municipal council elections in Riehen, Switzerland. The site primarily serves as an informational platform for the upcoming Gemeinderatswahlen scheduled for October 19, 2025. The business model is centered on political engagement and voter information dissemination within the local government sector. The website is built on the Wix platform, utilizing Wix Thunderbolt technology, and is hosted by Wix.com. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy for its intended local audience but would benefit from enhanced compliance and security measures.
FDP.Die Liberalen Riehen-Bettingenfdp-riehen.ch
Government · Switzerland
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FDP.Die Liberalen Riehen is a local political party in Riehen, Switzerland, providing community-focused political content, news, event agendas, and membership information. The website serves residents and voters interested in liberal politics in the Basel-Stadt region. The organization operates as a non-profit political entity with a clear local presence and active engagement in municipal elections and political discourse. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, offering good mobile responsiveness and user experience. The site integrates GDPR-compliant cookie consent mechanisms and uses Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-maintained, supporting the party's community engagement goals effectively.
FDP.Die Liberalen Frauen beider Baselfdp-frauen-bs.ch
Government · Switzerland
52Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FDP.Die Liberalen Frauen beider Basel is a regional political organization advocating for liberal women in Basel-Stadt, Switzerland. The website serves as a platform for news, events, membership, and political positions, targeting politically engaged women and citizens in the region. The organization operates as a non-profit entity with a clear community focus and active social media presence. Technically, the website is built on TYPO3 CMS with modern front-end technologies, providing a responsive and user-friendly experience. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the site demonstrates good professionalism, trustworthiness, and compliance with privacy regulations.
- LDLIBROS, S.L.
letrasylibros.es
Retail · Spain
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
LetrasyLibros.es operates as a niche online bookstore specializing in new and specialized authors, serving a Spanish-speaking audience primarily in Spain. The business is a small retail entity affiliated with the editorial Letras de Autor, focusing on providing a platform for lesser-known authors to reach readers. The website is built on the PrestaShop e-commerce platform, integrating modern web technologies such as Google Analytics and reCAPTCHA to enhance user experience and security. The site is well-structured, mobile-optimized, and provides clear navigation and content relevant to its target audience. Security posture is adequate with HTTPS enforced and privacy policies in place, though there is room for improvement in security headers and incident response documentation. Overall, the website presents a trustworthy and professional front for its business model, with clear contact information and compliance with GDPR regulations.
Other
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website rent-swiss.com appears to be a parked or placeholder domain with minimal original content. The main visible content is an iframe loading HTTP content from an unrelated and suspicious external domain. There is no privacy policy, cookie policy, terms of service, or contact information available on the site. The domain is registered since 2007 with Network Solutions, indicating a legitimate registration history, but the website itself lacks substantive business information or branding. Technically, the site uses basic JavaScript and external tracking scripts from questionable sources, with no HTTPS on the iframe content and no security headers, which poses security risks. Overall, the website's security posture is weak, privacy compliance is absent, and business credibility is low. The site is likely monetized through advertising and tracking rather than providing genuine services.
Q8 FMPfmp-formation.com
Other
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website fmp-formation.com appears to be a newly registered domain (January 2024) hosting a login page for a service titled 'Q8 FMP'. The site content is minimal, focusing solely on user authentication with no public business descriptions, contact information, or policy documents. The domain uses Cloudflare DNS but lacks DNSSEC and security headers, indicating moderate technical maturity. The absence of privacy and cookie policies, as well as contact details, limits compliance and trustworthiness. Security practices include HTTPS and a CSRF token in the login form, but further improvements are needed. Overall, the site is functional but lacks comprehensive business and security transparency, resulting in a moderate risk profile.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website changenligne.com/lander appears to be a minimal placeholder or parking page with very limited content and no visible business information. The domain is registered with GoDaddy.com, LLC since November 2022 and is currently active with standard domain status locks but lacks DNSSEC. The site uses basic JavaScript and a proprietary framework labeled 'PW' with Google AdSense for advertising. There are no privacy, cookie, or terms of service policies present, nor any contact or security-related information. The technical infrastructure is basic, with moderate performance and minimal mobile optimization. Security posture is weak due to lack of security headers and DNSSEC, and privacy compliance is absent. Overall, the site lacks professionalism and trust indicators, suggesting it is either under development or not actively maintained.
- The Vanguard Group, Inc.
vanguard.com
Finance · United States
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Vanguard Group, Inc. is a leading global investment management company with a 50-year history, serving over 30 million investors worldwide. The company offers a broad range of financial products including mutual funds, ETFs, IRAs, and retirement plans, complemented by personalized financial advice and market insights. Vanguard's business model emphasizes low costs, long-term investment perspectives, and client ownership structure, positioning it as a trusted leader in the finance industry. Technically, the website leverages modern web technologies such as React and Next.js, with robust performance and excellent mobile optimization. The site employs advanced tag management and analytics tools including Adobe Launch and OneTrust for privacy compliance. Security is well implemented with HTTPS, Content Security Policy headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital infrastructure. Security posture is strong with best practices observed, though explicit security policy and incident response contacts are not publicly detailed. The WHOIS data for the subdomain is unavailable, likely due to it being a subdomain rather than a registered domain, but the main domain is well-established and trustworthy. Overall, the site is professional, secure, and compliant, with extensive tracking and advertising integrations managed transparently. The overall risk is low, with recommendations to publish explicit security policies and incident response information to enhance transparency and trust further. The site is safe for general audiences with no adult or questionable content detected.
AMFF 2025atlantidafilmfest.com
Media · Spain
52Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Atlàntida Mallorca Film Fest (AMFF) is a cultural media entity organizing a film festival in Mallorca, Spain, with a focus on sustainability and artistic expression. The website serves as a portal for festival programming, news, and event information, targeting a general audience interested in film and culture. The business is positioned as a niche cultural event with a small organizational size and a history dating back to 2013. Technically, the website is built on WordPress using Elementor and Yoast SEO Premium, hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site demonstrates moderate performance and good mobile optimization, with modern web technologies and SEO best practices implemented. Analytics are handled via Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to comply with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good, with a clear cookie policy and consent mechanism, though no explicit privacy or security policy pages were identified. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on cultural content and user experience. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies to enhance trust and compliance.
Swissmemswissmem.ch
Manufacturing · Switzerland
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Swissmem is a prominent Swiss industry association representing the MEM (Mechanical, Electrical, and Metal) sector. The organization provides a range of services including representation of interests, consulting, education, compensation fund management, and networking opportunities for its members. The website reflects a professional and consistent brand image targeting Swiss industry stakeholders. The technical infrastructure is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Analytics, HubSpot, and Cookiebot for consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but explicit security headers and a published security policy are absent. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.
Publikapublika.com
Technology · France
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Publika is a French digital communication agency headquartered in Montpellier with an international network presence including Spain, Madagascar, and Canada. The company specializes in digital marketing, web and mobile development, and branding services. Their client portfolio includes notable companies such as Sanofi and Canal Plus, indicating a strong market position in the digital communication sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeted at businesses seeking digital marketing and communication solutions. Technically, the site uses modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing insights. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by social media presence and client references.
Jungfreisinnige Schweizjfgl.ch
Government · Switzerland
52Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Jungfreisinnige Kanton Glarus is a liberal youth political party based in the canton of Glarus, Switzerland, advocating for freedom and self-responsibility with minimal state intervention. The website serves as an informational and engagement platform targeting young politically active individuals in the region. Technically, the site is built on WordPress using the Avada theme, enhanced with SEO tools like Yoast and security features such as Google reCAPTCHA and Matomo analytics. The site demonstrates good SEO practices and moderate performance with mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of explicit privacy and cookie policies and incident response information indicates room for improvement in compliance and transparency. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.
—
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Other
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.ford-jung-melsungen.de is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of actual business content. This prevents any meaningful extraction of business, compliance, or contact information. The domain's WHOIS data indicates it is legitimately registered and uses official Ford DNS servers, suggesting affiliation with the Ford brand or dealership network. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or digital maturity. Technically, the site is protected by Cloudflare, but no further infrastructure or CMS details are available due to the block. Security posture cannot be fully evaluated beyond the presence of Cloudflare protection. Overall, the site currently offers no visible privacy, cookie, or terms of service policies, and no contact information is exposed. The AI risk score is low due to the blocked content, and further analysis requires access beyond the WAF challenge.
MG Motor Europemgmotor.de
Transportation · Finland
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
MG Motor Europe operates a professional website targeting Finnish customers interested in electric and hybrid vehicles. The site offers detailed product information, configurators, test drive requests, and dealer locators, positioning itself as a key player in the European electric automotive market. The technical infrastructure is modern, leveraging popular JavaScript libraries, Google Analytics, and Imgix CDN for images, hosted likely on cloud.ccm19.de. Security posture is solid with HTTPS and domain verification meta tags, but lacks explicit privacy and cookie policies in the analyzed content. WHOIS data is unavailable due to EURid privacy policies, which is common for EU domains. Overall, the website is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.
- FFrölich Reisen
froelichreisen.de
Transportation · Germany
51Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Frölich Reisen is a German travel agency specializing in organized travel packages including bus tours, flights, cruises, and premium travel options. The website presents a professional and well-structured digital presence with a focus on user experience and clear navigation. The technical infrastructure is based on WordPress with modern web technologies and integrations such as Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is partial, with a cookie consent mechanism implemented but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and serves its business purpose effectively, though improvements in privacy transparency and security documentation are recommended.
Brucy.sebrucy.se
Technology · Sweden
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Brucy.se is a Swedish technology company offering a subscription-based website service tailored for small to medium-sized businesses and larger organizations. Their service includes website design, hosting, SEO, and ongoing support, all bundled into fixed monthly fees. The company positions itself as a cost-effective and comprehensive solution for businesses seeking professional online presence without the hassle of managing technical details. The website demonstrates a modern technical infrastructure using Nuxt.js and integrates Google Tag Manager and cookie consent mechanisms, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the presence of client logos, Google reviews, and structured data enhance credibility. Overall, Brucy.se presents a professional and trustworthy business with room for improvement in privacy and security transparency.
Andreas Ullrich GmbH Bauunternehmungbau-mit-ullrich.de
Real Estate · Germany
54Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Andreas Ullrich GmbH Bauunternehmung operates a professional construction services website focused on modern architecture and energy-efficient solid construction. The company targets private and commercial clients in Germany, offering turnkey building, commercial construction, shell construction, and renovation services. The website reflects a small but established regional business with a consistent brand and good content quality. Technically, the site is built on WordPress with common plugins like Yoast SEO and Borlabs Cookie, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and regular vulnerability assessments. Overall, the site is trustworthy and compliant with GDPR, though it lacks explicit terms of service and incident response policies.
Fritz Reuter und Sohnreuterundsohn.de
Real Estate · Germany
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Fritz Reuter und Sohn is a well-established local painting and renovation company based in Kassel, Germany, with a history spanning over 100 years. The company offers a wide range of interior and exterior painting services, including specialized offerings such as Feng Shui color consulting and mold remediation. Their target audience includes both residential and commercial customers in Kassel and surrounding areas. The website reflects a professional and consistent brand image, supported by active social media channels and modern web technologies.
- Home
loth-online.de
Other · Germany
52Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website loth-online.de is currently under construction and provides minimal content, primarily placeholder images and basic navigation links. There is no detailed business description, contact information, or service offerings visible. The site is hosted on German servers (rzone.de) and uses basic web technologies including HTML, CSS, JavaScript, and jQuery. A cookie consent banner is implemented, indicating some attention to privacy compliance. However, no privacy policy content beyond a linked page is visible, and no terms of service or security policies are present. The WHOIS data is limited, showing only domain status and nameservers, with no registrant details, which reduces trustworthiness. No WAF or blocking mechanisms are detected, and the site is fully accessible.
ars vivendiav-licht.de
Retail · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
ars vivendi is a small German retailer specializing in high-quality lighting products and services, including branded indoor and outdoor lighting, technical lighting, and related services such as planning, delivery, installation, and repair. The company partners with multiple well-known lighting brands, positioning itself as a niche retailer in the lighting market. The website is built on Joomla CMS with Bootstrap and several third-party plugins, offering a basic but functional online presence. However, some maintenance issues such as broken image sliders are present. Security posture is limited with no visible security headers or cookie consent mechanisms, and privacy compliance is minimal despite GDPR relevance. Contact information is clearly provided, enhancing business credibility. Overall, the website is accessible and moderately professional but requires improvements in security and privacy compliance.
- MMasin Idriss
masin-idriss.com
Real Estate · Germany
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Masin Idriss is a small German-based interior design and furniture company specializing in creating functional and individual design concepts for various types of spaces including homes, lofts, and commercial premises. The company emphasizes craftsmanship and professional planning, supported by a partner network (GOETHE 64) and a commitment to fostering young talent through internships and coaching. The website reflects a niche market position with a focus on quality and personalized service. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive galleries. It is hosted by IONOS SE, a reputable provider, and shows moderate performance with good mobile optimization. However, the site lacks advanced security headers and DNSSEC, which are recommended for improved security posture. From a security perspective, the site uses HTTPS but does not implement additional security policies or incident response contacts. Privacy compliance is minimal, with a basic privacy policy linked in the imprint but no cookie consent mechanism or GDPR explicit indicators. No forms or tracking scripts are present, reducing data collection risks but also limiting marketing insights. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced security measures and privacy compliance improvements to align with best practices and regulatory requirements.
Göhler Treppen GmbH & Co. KGgoehlertreppen.de
Manufacturing · Germany
62Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Göhler Treppen GmbH & Co. KG is a specialized manufacturer and installer of custom staircases based in Germany, with over 30 years of industry experience. The company offers bespoke stair solutions including wooden, metal, and design stairs, as well as renovation and integrated furniture solutions. Their market position is that of a trusted regional expert with a strong emphasis on craftsmanship and customer-centric service. The website reflects a mature digital presence built on WordPress, featuring modern technologies such as jQuery, Swiper.js, and Borlabs Cookie for privacy compliance. SEO and accessibility are well addressed, with structured data enhancing search visibility. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not fully evident. The domain WHOIS data is minimal but consistent with the business claims, hosted on German infrastructure. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
- Rübeling Textil - Kissenmanufaktur
ruebeling.com
Retail · Germany
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Rübeling Textil - Kissenmanufaktur is a German-based manufacturer specializing in high-quality garden furniture cushions, with a market presence spanning over 25 years. The company positions itself as a leading manufacturer in Germany, emphasizing craftsmanship and exclusive fabrics. The website reflects a professional retail business model targeting consumers and businesses interested in premium garden furniture accessories. Technically, the website is built on WordPress using the Avada theme and incorporates Yoast SEO for search optimization. The site is accessible, mobile-optimized, and demonstrates moderate performance. Security posture is adequate with HTTPS enabled, but lacks advanced DNS security measures such as DNSSEC and security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy practices.
- Widget Logic Wordpress plugin for widget control
widgetlogic.org
Technology
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Widget Logic is a recently launched WordPress plugin website focused on providing users with granular control over widget and Gutenberg block visibility using WordPress conditional tags and PHP code. The site targets WordPress administrators and developers seeking flexible widget management solutions. The business model is currently free distribution with potential for future monetization. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Bootstrap and Google Tag Manager for analytics. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security at the infrastructure level. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks important security headers and published security policies. The plugin itself uses eval() on user input, which is a significant security risk if widget editors are not trusted. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Analytics tracking is implemented via Google Tag Manager, but no explicit user consent mechanisms are detected. Overall, the website is functional and credible for its niche but requires improvements in privacy compliance, security best practices, and user guidance on plugin risks. The domain registration is consistent with a new product launch and shows no suspicious patterns. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear security and incident response information.
EDSI-Tech Sàrlmycity.travel
Technology · Switzerland
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
EDSI-Tech Sàrl is a Swiss technology company specializing in applied research, software development, artificial intelligence, and big data solutions tailored for the tourism industry. The company positions itself as a leader in providing innovative digital tools that help tourism professionals and enterprises gain competitive advantages and improve operational efficiency. Their key offerings include tourism information systems, consulting services, AI-driven chatbots, and custom software development. The website reflects a professional and modern digital presence, leveraging WordPress and Elementor with integrations such as Google reCAPTCHA and Google Analytics for security and analytics purposes. The company demonstrates a solid market position with a client portfolio of regional tourism partners and a domain registration dating back to 2005, indicating established operations. Security posture is adequate with HTTPS and transfer protection on the domain, but lacks published security policies and advanced security headers. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.
International Olympic Committeeolympicchannel.com
Media
65Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
The website olympics.com serves as the official digital platform for the Olympic Games, operated under the International Olympic Committee (IOC). It provides comprehensive coverage of Olympic events, athlete profiles, sports news, and multimedia content including video highlights. The site targets a global audience of sports enthusiasts, athletes, media professionals, and the general public interested in Olympic content. It maintains a strong market position as the authoritative source for Olympic information and related services such as merchandise sales. Technically, the site leverages a modern web stack including React with Next.js framework, THEOplayer for video streaming, and multiple third-party services for analytics, user engagement, and consent management. Hosting and content delivery are supported by Akamai CDN, ensuring fast and reliable performance globally. The site is well optimized for mobile devices and accessibility, with good SEO practices and structured metadata. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. Privacy compliance is robust, featuring comprehensive privacy and cookie policies managed via OneTrust, and GDPR compliance indicators. However, there is no publicly visible security policy, incident response contact, or vulnerability disclosure page, which could enhance transparency and trust. Overall, olympics.com presents a professional, secure, and user-friendly experience with high content quality and strong business credibility. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than malicious intent. Strategic recommendations include publishing explicit security and incident response policies, implementing a security.txt file, and enhancing contact information for security matters to further strengthen trust and compliance.
- HHuman Verification
milanocortina2026.org
Other
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website milanocortina2026.org is currently inaccessible beyond a security CAPTCHA challenge page implemented via AWS WAF. This prevents access to any substantive content, including business information, policies, or services. The domain is registered with Key-Systems GmbH since 2018, consistent with the event timeline for the 2026 Winter Olympics. The technical infrastructure leverages AWS WAF and CAPTCHA services to protect against bots and spam. Due to the content being blocked, no privacy, cookie, or terms of service policies are detectable, nor is any contact information or business description available. The security posture is limited to the presence of WAF protections but lacks visible security headers or metadata. Overall, the site cannot be fully analyzed until the CAPTCHA challenge is passed or removed.
Airbnb, Inc.airbnb.com
Hospitality · United States
63Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Airbnb, Inc. operates a leading global online marketplace for vacation rentals and travel experiences, serving millions of users worldwide. The platform connects hosts offering diverse lodging options with travelers seeking unique accommodations, supporting over 8 million listings across more than 220 countries. Airbnb's market position is strong, leveraging a scalable digital platform with extensive localization and a trusted brand. Technically, the website employs modern web technologies including React, advanced performance monitoring, and robust SEO and accessibility features, ensuring a fast and user-friendly experience across devices. Security posture is solid with HTTPS enforcement, comprehensive security headers, and active error monitoring, though explicit public security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting adherence to GDPR and other regulations. Overall, Airbnb demonstrates a mature digital presence with high trustworthiness and professionalism, suitable for its enterprise scale and global audience.
Dolby OptiViewtheoplayer.com
Technology
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Dolby OptiView is a technology-focused subdomain under the Dolby brand, offering advanced live streaming and playback solutions with real-time engagement and seamless ad integration. The platform targets developers and media companies seeking high-fidelity audio and video streaming capabilities. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, modern SEO tools, and multiple analytics and marketing technologies, indicating a strong digital marketing and user engagement strategy. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service. Overall, the site is professional, trustworthy, and well-branded, consistent with the Dolby corporate identity.
Coteriescoteries.com
Technology · Switzerland
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Coteries is a Swiss digital agency specializing in web design, UX/UI, web and mobile development, and digital marketing services. Positioned as an expert and client-focused agency in the Swiss market, it serves a diverse clientele including startups and large enterprises such as Swisscom and EPFL. The company emphasizes quality, innovation, and close collaboration with clients. Technically, the website is built on modern platforms like Webflow and Shopify, leveraging advanced analytics and bot protection tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, CAPTCHA protections, and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy digital agency with a solid market presence.
Refokusrefokus.com
Technology
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Refokus is a boutique digital agency specializing in high-end branding, web design, and Webflow development services targeted at B2B startups, venture capital firms, and large innovative organizations. The company positions itself as a fast, quality-focused agency leveraging Webflow, AI, and proprietary frameworks to deliver conversion-focused websites. Technically, the website is built on Webflow CMS with modern JavaScript libraries such as GSAP and ThreeJS, ensuring a visually engaging and performant user experience. Analytics and marketing tools like Google Analytics, Ahrefs, and Intellimize are integrated with consent mechanisms. Security posture is strong with HTTPS and some security headers, though explicit privacy and cookie policies are missing, and no contact information or security incident channels are visible. WHOIS data is unavailable, which reduces trust slightly but the professional presentation and technology use indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and security, but privacy compliance and business credibility could be improved.
MyCCImycci.ch
Government · Switzerland
74Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MyCCI is a regional member portal serving multiple Latin Swiss chambers of commerce, providing centralized access to chamber services and information. The website targets members of these chambers and acts as a gateway to individual chamber portals. The business model focuses on membership facilitation and information dissemination within the regional commerce ecosystem. Technically, the site uses modern JavaScript libraries such as jQuery and Kendo UI within an ASP.NET MVC framework, delivering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS assumed but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No contact information or incident response details are provided, limiting transparency. Overall, the site is functional and trustworthy but could improve in privacy compliance and security best practices.
- CConnoisseur Circle
die-besten-hotels.ch
Hospitality · Austria
61Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Connoisseur Circle is a well-established luxury travel and hospitality media platform founded in 2007, primarily serving German-speaking luxury travelers and hospitality professionals. The website offers rich content including news, hotel ratings, travel insights, and B2B services, positioning itself as a reputable source in the luxury travel media sector. The business model revolves around media publishing with subscription and B2B components, targeting a medium-sized audience in Austria and neighboring regions. Technically, the site is built on TYPO3 CMS, leveraging modern tools such as Cookiebot for GDPR-compliant cookie consent, Facebook Pixel for marketing, and Matomo for analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security-wise, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security headers and DNSSEC, which are recommended for enhanced protection. No direct contact information or incident response policies are published, which could be improved to increase trust and compliance. Overall, the domain registration is consistent with the business history, indicating legitimacy and trustworthiness.
Falstafffalstaff.com
Media · Germany
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Falstaff is a well-established German-language media platform specializing in gourmet food, wine ratings, travel, and lifestyle content. It offers a rich variety of services including wine reviews, restaurant guides, travel articles, cocktail recipes, and a subscription-based magazine with an online shop. The website demonstrates a professional and consistent brand presence targeting mature audiences interested in gastronomy and travel. Technically, the site leverages modern web technologies such as Laravel Livewire, Bootstrap, and various JavaScript libraries, ensuring a responsive and accessible user experience. Advertising and tracking integrations like Google Tag Manager, Facebook Pixel, and Taboola indicate a monetization strategy through ads and affiliate marketing. Security-wise, the site enforces HTTPS and includes CSRF tokens in forms, but lacks visible security headers and explicit privacy or cookie policies in the analyzed content. The WHOIS data is notably absent, which raises concerns about domain registration legitimacy, although the website content and external links suggest a legitimate business. Overall, the site scores well on content quality and technical implementation but should improve privacy compliance and domain transparency.
EarthCheckearthcheck.org
Other
66Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
EarthCheck is a globally recognized certification, consulting, and advisory organization specializing in sustainable destinations and tourism. Established in 2001, it holds a leading market position offering services that promote environmental responsibility within the tourism sector. The website reflects a professional digital presence built on WordPress with modern SEO and event management tools, supporting its business model effectively. The technical infrastructure is solid with HTTPS enabled and integration of analytics and marketing tools, although there is room for improvement in DNS security and security headers. Security posture is moderate with no critical vulnerabilities detected but lacks some best practices such as DNSSEC and security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy and professionally maintained, supporting EarthCheck's business credibility and market leadership.
Media · Spain
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Centro Español de Derechos Reprográficos (CEDRO) is a prominent Spanish non-profit organization dedicated to the collective management of intellectual property rights for authors and editors of books, magazines, newspapers, and sheet music. The organization offers a comprehensive suite of services including rights licensing, legal advice, anti-piracy measures, and social aid programs. CEDRO maintains a strong market position in Spain as a trusted rights management entity with over 36,000 members and extensive licensing agreements. The website reflects a professional and well-structured digital presence with clear navigation and rich content tailored to authors, editors, and users of protected content.
- Bubok Publishing, s.l.
bubok.co
Media · Colombia
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bubok Publishing, s.l. operates the website bubok.co, a leading self-publishing and book distribution platform targeting independent and novice authors primarily in Colombia and Spanish-speaking markets. The company offers a comprehensive suite of services including book publishing, editorial assistance, and international distribution, supported by a network of subsidiaries and partner companies. The website is professionally designed, content-rich, and optimized for user experience, reflecting a mature digital presence. Technically, the site employs a modern tech stack with popular libraries and tracking tools, though some legacy components like older jQuery versions are present. Security measures include HTTPS enforcement and reCAPTCHA integration, but could benefit from enhanced security headers and explicit incident response contacts. Privacy compliance is robust with clear cookie and privacy policies and user consent mechanisms. Overall, the site demonstrates a strong market position and trustworthy business operations.
- Editorial Bubok
bubok.pt
Media · Portugal
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Bubok Portugal is a well-established self-publishing platform and editorial group that empowers independent authors to publish and distribute their books with ease and professionalism. The company offers a comprehensive suite of services including editorial support, book distribution, and a dedicated bookstore for new authors. With a strong market position in Portuguese-speaking countries and a network of subsidiaries, Bubok provides a trusted and user-friendly environment for authors and readers alike. The website reflects a mature digital presence with integrated marketing and analytics tools, clear contact channels, and a focus on user experience.
- Bubok Publishing S.L.
bubok.fr
Media · France
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Bubok Publishing S.L. operates the website www.bubok.fr, a French-language self-publishing platform targeting independent authors. The company offers editorial services, book publishing, and distribution both in print and digital formats. The website is professionally designed with good navigation and content quality, supporting a medium-sized business with a strong market position in independent publishing. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Security posture is strong with HTTPS and bot protection, though some security headers could be improved. WHOIS data is unavailable, which slightly reduces transparency but does not significantly impact trust given the site's professionalism and trust signals. Overall, the site is safe, well-maintained, and trustworthy for its target audience.
- Bubok Publishing, s.l.
bubok.com.mx
Media · Mexico
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bubok Publishing, s.l. operates the website bubok.com.mx, a leading self-publishing platform focused on independent and novice authors primarily in Mexico and Spanish-speaking markets. The company offers a comprehensive suite of services including book publishing, editorial assistance, and international distribution. With a strong market presence and over 140,000 authors worldwide, Bubok positions itself as a trusted partner for authors seeking control over their publishing process. The website features rich content, including book listings, author resources, and active community engagement, supported by modern web technologies and analytics tools.
Institutional Evaluation Programme (IEP)iep-qaa.org
Education · Switzerland
54Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Institutional Evaluation Programme (IEP) is a specialized quality assurance agency operating under the European University Association (EUA), focused on supporting higher education institutions worldwide in strategic leadership and quality management. The website presents a professional and consistent brand image, targeting universities and quality assurance bodies with services including institutional evaluations and capacity building. The domain is well-established since 2017 and hosted by a reputable registrar, reflecting a credible business presence. Technically, the website employs a modern technology stack including Joomla CMS, jQuery, Bootstrap, Google Analytics, and HubSpot for marketing and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-managed with HTTPS and no evident vulnerabilities, though some security headers could be improved for enhanced protection. Privacy compliance is robust with clear cookie consent mechanisms, privacy policy, and terms of use pages. Contact information is transparent and includes physical address, phone, email, and social media links, enhancing trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, the website demonstrates a strong security posture, good technical implementation, and clear business credibility. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and improving accessibility features to meet broader compliance standards.
European University Associationeua-solutions.org
Education · Switzerland
54Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
EUA Solutions is a consultancy service operated under the European University Association, providing expert advice and tailored services to higher education institutions and stakeholders across Europe. The organization leverages its extensive network of over 750 institutions to offer specialized consultancy in quality assurance, doctoral education evaluation, internationalization, and strategic studies. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at universities, national authorities, and decision-making bodies in the education sector. Technically, the site is built on Joomla CMS with modern JavaScript libraries such as jQuery and Bootstrap, supported by Google Analytics and HubSpot for marketing and analytics. Hosting is managed via Combell, with domain registration dating back to 2017, consistent with the business timeline. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements are recommended in security headers and incident response transparency. Overall, the site demonstrates a solid digital presence with moderate performance and good mobile optimization.
- EUA Council for Doctoral Education
eua-cde.org
Education · Belgium
60Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The EUA Council for Doctoral Education (EUA-CDE) operates as the largest European network dedicated to doctoral education, uniting academic leaders and professionals across more than 30 countries. The organization focuses on community building, hosting thematic workshops and events, publishing reports, and advocating for doctoral education policies at the European level. The website reflects a mature and professional academic network with consistent branding and a clear mission to enhance doctoral education and research training in Europe. Technically, the website is built on Joomla CMS, leveraging Bootstrap for responsive design and jQuery for interactivity. It integrates multiple third-party services including Google Analytics, Google Tag Manager, HubSpot marketing and analytics tools, ShareThis social sharing, and Google reCAPTCHA Enterprise for form security. Hosting is provided by Combell, a reputable European hosting provider. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS with appropriate security headers and uses reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response contact information. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for an academic network, with room for improvement in privacy transparency and security disclosures. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing accessibility features to further strengthen trust and compliance.