Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
39,951–40,000 of 99,067
SIZsiz.ch
Education · Switzerland
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
SIZ is a neutral examination organization in Switzerland that certifies ICT user knowledge through diplomas within the Swiss education system. The website presents a professional and consistent brand image, targeting ICT learners and professionals in Switzerland. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern and maintainable infrastructure. The site is accessible, mobile-optimized, and uses HTTPS, but lacks visible privacy and cookie policies, as well as security headers, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected in the provided data. Overall, the website is trustworthy and credible but would benefit from enhanced privacy compliance and security best practices.
HWZ Hochschule für Wirtschaft Zürichfh-hwz.ch
Education · Switzerland
51Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
HWZ Hochschule für Wirtschaft Zürich is a well-established higher education institution based in Zurich, Switzerland, specializing in business and economics education. The website presents a professional image with a clear focus on educational offerings, practical experience, and networking opportunities. The target audience primarily includes students and professionals seeking business education. The institution maintains a solid market position within the Swiss education sector, supported by a consistent brand presence and comprehensive content.
examen.ch AGexamen.ch
Education · Switzerland
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
examen.ch AG is a Swiss-based company specializing in the comprehensive organization and administration of federal professional examinations throughout Switzerland. Their services include managing all facets of written and oral exams with a focus on smooth administrative and logistical processes supported by IT solutions. The company is trusted by reputable sponsoring associations responsible for various professional sectors' federal exams. Technically, the website is built on the Magnolia CMS platform and uses common JavaScript libraries such as jQuery, Popper.js, and Tippy.js. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site implements cookie consent mechanisms and uses Google Analytics with default denied consent for ad and analytics storage, but lacks explicit security headers and published security policies. Overall, the website is safe, professional, and compliant with basic privacy regulations, though it could improve in security posture and transparency.
- SIC Ticino
sicticino.ch
Education · Switzerland
74Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SIC Ticino is a regional trade union organization focused on providing educational and professional development services in the commercial and sales sectors within Ticino, Switzerland. The website presents a well-structured and professional digital presence, leveraging WordPress with Elementor and Astra theme, enhanced by SEO and anti-spam plugins. The organization offers a range of training programs, support for companies, and digital skills assessments, positioning itself as a key player in the regional education and trade union landscape. Technically, the site is modern, mobile-optimized, and integrates Google Analytics for user insights. Security posture is strong with HTTPS enforcement, security headers, and anti-spam measures, though explicit security policies and incident response contacts are absent. Privacy compliance is robust, featuring GDPR-aligned privacy and cookie policies with consent mechanisms. Overall, the site is trustworthy, professional, and safe for general audiences.
- Home | Association romande des employés de commerce
sec-romandie.ch
Other · Switzerland
73Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The website www.sec-romandie.ch appears to be a small business site hosted on the Wix platform, primarily in French. The content is minimal and mostly technical, with no visible business descriptions, contact information, or privacy-related policies. The technical infrastructure relies on Wix's standard scripts and polyfills, indicating a basic digital maturity level. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no incident response or vulnerability disclosure information. Overall, the site lacks critical compliance and trust indicators, which poses a moderate risk for users and visitors.
Kaufmännischer Verband Zürichkfmv-zuerich.ch
Non-profit · Switzerland
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Kaufmännischer Verband Zürich is a well-established non-profit professional association serving employees and commercial professionals in the Zurich region. The organization provides membership services, legal and salary advice, career counseling, and organizes events and seminars to support its members. The website reflects a mature digital presence with a clear focus on community engagement and professional development. Technically, the site is built on the DNN CMS platform using ASP.NET WebForms, enhanced with modern JavaScript libraries and tracking tools. While the site is mobile-optimized and well-structured, some compliance gaps exist such as the absence of a privacy policy and terms of service pages. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and publishing incident response information. Overall, the domain registration data aligns well with the website content, supporting the legitimacy and trustworthiness of the organization.
- Home | Kaufmännischer Verband Ostschweiz
kvostschweiz.ch
Other · Switzerland
68Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
The website www.kvostschweiz.ch appears to be a small business site hosted on the Wix platform, targeting a Swiss audience. The content is minimal and primarily technical with no visible business descriptions, contact information, or policies. The technical infrastructure relies on Wix's standard scripts and hosting, indicating a basic digital maturity level. Security posture is weak due to the absence of security headers, privacy policies, and incident response contacts. No vulnerabilities or malicious content were detected, but the lack of transparency and business information limits trust. Overall, the site requires significant improvements in content, security, and compliance to enhance credibility and user trust.
Other · Switzerland
72Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
The website www.kv-verband.ch represents a Swiss-based business or association, likely targeting a German-speaking audience. The site is built using the Wix platform, leveraging standard Wix scripts and polyfills, indicating a moderate level of technical infrastructure. The content is basic and informational, with no advanced interactive features or e-commerce capabilities detected. The website lacks critical privacy and cookie policies, contact information, and security headers, which impacts its compliance and security posture negatively. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site appears legitimate but basic in terms of business presentation and security maturity.
- Kaufmännischer Verband Basel
kfmv-beidebasel.ch
Education · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Kaufmännischer Verband Basel is a regional professional association serving the kaufmännisch (commercial) sector in the Basel region of Switzerland. It acts as a competence center for career development and education, offering membership benefits, consulting services, seminars, events, and discounts. The website reflects a well-structured business model focused on supporting professionals and apprentices in the commercial field. The organization maintains a strong regional presence with partnerships in education and a clear focus on social partnership and fair employment conditions. Technically, the website is built on the webIQ 6.3 framework, leveraging modern JavaScript libraries and responsive design to deliver a good user experience across devices. The site includes comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.
Società impiegati commercio Svizzerasicsvizzera.ch
Non-profit · Switzerland
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Società impiegati commercio Svizzera is a longstanding Swiss non-profit association representing commerce employees, with a history spanning over 150 years. The organization focuses on advocating for fair and progressive working conditions, promoting lifelong learning, and supporting modern work models. Their market position is strong as the oldest active employee association in Switzerland, targeting professionals in the commerce sector. Technically, the website is built on TYPO3 CMS, hosted by RTP GmbH, and integrates modern compliance tools such as Cookiebot and Google Tag Manager, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of malicious content or blocking mechanisms.
Schweizerischer Kaufmännischer Verband (SKV)buerogeschichten.ch
Education · Switzerland
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bürogeschichten.ch is an educational website dedicated to documenting and showcasing the evolution of commercial professions in Switzerland over the past 150 years. It is affiliated with the Schweizerischer Kaufmännischer Verband (SKV), a Swiss commercial association, and serves as a niche resource for students, professionals, and historians interested in the history and development of office work and commercial careers. The site offers rich multimedia content including images, gifs, audio, and videos to engage its audience. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Bootstrap, Lodash, Swiper, and LightGallery. It is well-optimized for mobile devices and includes standard SEO and accessibility features, although accessibility could be improved further. Performance is moderate, with a good balance of multimedia content and usability. From a security perspective, the site enforces HTTPS and includes important security headers such as Content-Security-Policy and Strict-Transport-Security. It implements a cookie consent mechanism and maintains a comprehensive privacy policy compliant with GDPR. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and safe for general audiences. It demonstrates good privacy compliance and business credibility but could benefit from additional transparency in security policies and contact information to further strengthen its security and compliance stance.
Société suisse des employés de commercesecsuisse.ch
Other · Switzerland
69Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Société suisse des employés de commerce is a longstanding Swiss employee association specializing in labor and training competencies, boasting over 150 years of history. It holds a prominent market position as the oldest active employee association in Switzerland, targeting commerce sector employees and professionals. The website reflects a professional and consistent brand image, with content focused on its core services and audience. Technically, the site is built on TYPO3 CMS, hosted by RTP GmbH, and integrates modern cookie consent management via Cookiebot, ensuring GDPR compliance. The site demonstrates good SEO, accessibility, and mobile optimization, with moderate performance. Security posture is strong, featuring HTTPS, security headers, and no visible vulnerabilities. However, explicit contact information and security policies are not prominently found, suggesting areas for improvement. Overall, the site is trustworthy and professionally maintained, with extensive use of analytics and marketing tools from reputable providers.
FOCUS MONEYfemale-finance-award.de
Finance · Germany
62Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
FOCUS MONEY operates as a prominent German media brand specializing in finance-related content and events, notably the Female Finance Award which celebrates outstanding women in the finance sector. The website serves as an information and lead generation platform targeting finance professionals and stakeholders. Technically, the site employs a modern technology stack including Bootstrap, jQuery, and integrates advanced consent management and anti-bot verification mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR compliance evident through Sourcepoint CMP integration, although explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and well-positioned within its niche, with room for improvement in publishing security documentation and enhancing accessibility.
Transportation · Germany
51Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
The website focus-mobility.de serves as an expert platform dedicated to sustainable mobility, primarily focusing on E-Bikes and related electric mobility solutions. It offers comprehensive news, expert reports, and product testing to inform and guide consumers interested in the evolving transportation landscape. The site targets environmentally conscious individuals and mobility enthusiasts in Germany, positioning itself as a trusted source for mobility-related content and product evaluations. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates multiple third-party services including Google Tag Manager and INFOnline Measurement Manager for analytics and consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, reflecting a good baseline security posture. GDPR compliance is actively managed through consent mechanisms, although explicit privacy policies and security incident response information are not evident in the provided content. No critical vulnerabilities or WAF protections were detected, indicating open and accessible content. Overall, the website presents a professional and trustworthy front for its business domain, with solid technical implementation and moderate privacy compliance. Strategic improvements in explicit privacy documentation, security headers, and incident response transparency would further enhance its security and compliance stature.
- BBurda Digital Health
focus-gesundheit.de
Healthcare · Germany
65Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
FOCUS-Gesundheit is a well-established German healthcare media platform operated under Burda Digital Health. It specializes in publishing annually updated recommendation lists of top doctors, clinics, rehabilitation centers, and health resorts in Germany. The website offers comprehensive health information, expert articles, podcasts, and print magazine distribution targeting patients and the general public seeking reliable healthcare guidance. The business model includes premium profile listings for medical professionals, enhancing visibility and patient engagement. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates multiple tracking and consent management tools to ensure GDPR compliance. Hosting is managed via Amazon AWS infrastructure, providing reliable performance and scalability. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS with a Content Security Policy and uses a consent management platform for privacy compliance. However, it lacks some security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or WAF blocking were detected, indicating a mature security posture. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, though it would benefit from publishing explicit privacy and security policies to enhance transparency and user trust.
- BurdaVerlag Publishing GmbH
focus-epaper.de
Media · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The FOCUS E-Paper Plattform is a digital subscription service operated by BurdaVerlag Publishing GmbH, a reputable media company in Germany. The platform provides users with access to digital magazine content via login and subscription management. The website is professionally designed with consistent branding and clear navigation, targeting German-speaking customers interested in digital media subscriptions. The business model centers on subscription-based access to e-paper content, positioning the company as a significant player in the German digital media market. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and FontAwesome Pro icons, with indications of Bootstrap and Symfony frameworks. The domain is managed via MarkMonitor name servers, reflecting professional domain management. The site is mobile-optimized with good user experience, though some SEO and accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected in the provided content, and no incident response or security policy information is published. Privacy compliance is partially addressed with a comprehensive privacy policy on a related domain, but no cookie consent mechanism is evident. No vulnerabilities or suspicious patterns were found, and the domain registration is consistent with the business identity. Overall, the website presents a low-risk profile with good business credibility and a solid technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and privacy compliance, further strengthening user trust and regulatory adherence.
Progetto Yayaprogettoyaya.org
Non-profit · Italy
59Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Progetto Yaya is a small non-profit organization focused on raising awareness and collecting testimonies about racial and ethnic profiling in Italy. The website serves as an advocacy platform to inform the public and support victims, leveraging partnerships with organizations such as Occhio Ai Media and Associazione Cittadini del Mondo Ferrara. The content is well-structured, multilingual, and targeted at a socially conscious audience. Technically, the site is built on Joomla CMS with Yootheme and UIkit frameworks, providing a modern and responsive user experience. Security posture is adequate with HTTPS enforced and GDPR-compliant cookie consent, though improvements like enabling DNSSEC and adding security headers are recommended. Overall, the website demonstrates good business credibility and privacy compliance, with clear contact information and no suspicious content detected.
Volusion, LLCvolusion.com
E-commerce · United States
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Volusion, LLC is an established ecommerce platform founded in 2003, offering a comprehensive online store builder and selling platform targeting small to medium businesses. The company provides a range of services including site building, payment processing, marketing support, and integrations with major payment and shipping providers. Their market position is solid with a focus on customizable ecommerce solutions and business growth facilitation. Technically, the website leverages modern frameworks such as React and Next.js, hosted and protected via Cloudflare, ensuring fast performance and mobile optimization. The site includes extensive integrations and tracking tools to support marketing and analytics needs. Security posture is strong with HTTPS enforcement, domain transfer protections, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to enhance trust and security transparency.
Task Force Tips (TFT)tft.com
Manufacturing · United States
66Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Task Force Tips (TFT) is a well-established manufacturer and provider of premium firefighting equipment, technical support, and educational resources, serving firefighters and emergency responders primarily in the United States. The company has a strong market position with a domain registered since 1998, reflecting a mature and credible business. Their website is professionally designed, mobile-optimized, and rich in relevant content targeted at their specialized audience. The digital infrastructure is based on WordPress with modern plugins and integrations such as HubSpot for marketing and analytics, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and domain-level protections, though improvements like enabling DNSSEC and publishing explicit security policies would enhance trust further. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet regulatory requirements. Overall, the website and business present a high level of professionalism and trustworthiness with room for compliance and security enhancements.
FlippingBook Limitedcld.bz
Technology · Malta
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
FlippingBook Limited operates the FlippingBook Cloud platform, a SaaS solution focused on creating, storing, and delivering digital catalogs, brochures, and magazines. The company targets business professionals and organizations seeking premium digital publishing tools. The website content and branding are consistent with a mature technology provider established in 2014, with a medium-sized business footprint and a clear market niche in digital publishing. The technical infrastructure leverages modern web technologies including jQuery, AWS CloudFront CDN, and Google Analytics for performance and user insights. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers, and does not publish a security policy or incident response contacts. Privacy compliance is basic, with no cookie consent mechanism detected and privacy policies hosted on the main corporate domain. Overall, the website is trustworthy and professionally maintained but could improve in security and privacy transparency.
Other
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at microfinity.com is currently inaccessible, returning a 404 Not Found error with minimal JSON error message. No usable content, metadata, or business information is available for analysis. The domain is registered since 2008 with Network Solutions, LLC and uses Volusion nameservers, indicating hosting on the Volusion e-commerce platform. Due to the lack of accessible content, no meaningful assessment of the company's business model, services, or market position can be made. The technical infrastructure appears minimal or misconfigured, and no security or privacy policies are present on the site. Overall, the website appears inactive or improperly configured, limiting any further analysis.
- TTrusted Shops
trstd.com
E-commerce · Germany
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.trstd.com serves as a multilingual country selection landing page for Trusted Shops, a European e-commerce trust and review platform. It offers buyer protection and shop reviews targeted at European consumers. The site is professionally designed with clear navigation and localized country-specific links. However, the technical infrastructure is basic, relying on static HTML and SVG graphics without visible CMS or advanced frameworks. Security posture is weak due to lack of HTTPS enforcement confirmation, missing security headers, and absence of privacy or cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance. Overall, the site is functional and trustworthy in content but requires improvements in security and compliance documentation.
Podigeepodigee.com
Technology · Germany
65Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Podigee is a professional podcast hosting and analytics provider primarily serving the German and DACH markets. The company offers a comprehensive platform that enables users to upload, publish, and analyze podcasts with ease, targeting creative individuals, SMEs, and enterprise clients. Their website demonstrates strong branding consistency, excellent content quality, and clear trust indicators such as customer testimonials and GDPR compliance. Technically, the site is built using modern technologies including the Hugo static site generator, jQuery, and Plyr media player, with integrated Cookiebot for consent management and Matomo for analytics. Security posture is good with HTTPS enforced and privacy mechanisms in place, though some security headers and explicit incident response contacts are missing. The WHOIS data for the domain is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy evident on the site. Overall, Podigee presents a mature digital presence with a strong focus on privacy and user experience.
Datatrans AGdatatrans.ch
Finance · Switzerland
65Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Datatrans AG is a Swiss-based company specializing in advanced payment solutions tailored for companies demanding high-performance and flexible payment platforms. Their service model emphasizes integration freedom with various financial partners, positioning them as a key player in the payment processing sector within Switzerland and potentially neighboring regions. The website reflects a professional and consistent brand image, targeting business clients seeking reliable payment infrastructure. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Ahrefs, and uses Cookiebot for GDPR-compliant cookie management. The site is well-optimized for mobile and SEO, with good performance metrics and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and provides a comprehensive cookie consent mechanism, though it lacks explicit security policy or incident response pages. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site demonstrates a mature digital presence with good privacy compliance and security posture, suitable for its business domain.
Payrexx AGpayrexx.com
Finance · Switzerland
72Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Payrexx AG is a Swiss-based payment service provider established in 2013, offering a comprehensive suite of online and offline payment solutions tailored for businesses and merchants. Their platform enables acceptance of all major payment methods without complicated contracts, emphasizing simplicity, cost-effectiveness, speed, and reliability. The company targets a broad business audience seeking flexible payment processing capabilities, including white-label solutions and POS integrations. Payrexx maintains a solid market position within the finance sector, supported by a professional and consistent brand presence. Technically, the website is built on the Squarespace CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, HubSpot, and Piwik PRO for analytics and marketing. The site is hosted on Amazon AWS infrastructure via Squarespace, with good mobile optimization and SEO practices. The presence of multiple marketing and tracking tools indicates a mature digital marketing strategy, although accessibility features are basic. From a security perspective, the website enforces HTTPS with HSTS enabled, employs a cookie consent banner compliant with GDPR, and avoids exposing sensitive data. However, there is room for improvement by enabling DNSSEC, publishing explicit security policies, and adding vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected, and the WHOIS data aligns well with the business information, supporting legitimacy. Overall, Payrexx.com presents a trustworthy, professional, and well-maintained online presence with a strong focus on payment services. Strategic recommendations include enhancing security transparency, expanding compliance documentation, and continuous monitoring of third-party scripts to maintain a robust security posture.
- International Association of Accessibility Professionals
accessibilityassociation.org
Education · United States
72Medium
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
The International Association of Accessibility Professionals (IAAP) operates a professional membership and certification platform focused on accessibility education and resources. The website is built on Salesforce Experience Cloud, leveraging modern web technologies such as Lightning Web Components and Salesforce CMS. The platform offers a comprehensive range of services including certification programs, educational content, events, and community engagement for accessibility professionals globally. Technically, the site demonstrates good performance, mobile optimization, and excellent accessibility features, aligning well with its mission. Security posture is strong with HTTPS and strict Content-Security-Policy headers, though improvements can be made in cookie consent and incident response transparency. Overall, the domain appears legitimate despite lack of public WHOIS data, likely due to privacy protection. The site integrates trusted payment processors and analytics tools, supporting a professional and trustworthy user experience.
Hospitality · Germany
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website tripadvisor.de is currently inaccessible due to a CAPTCHA challenge implemented by a WAF or anti-bot service, preventing content retrieval and analysis. The domain is hosted on Amazon AWS DNS infrastructure, indicating a legitimate enterprise-level hosting environment. Due to the blocking mechanism, no metadata, contact information, or business details could be extracted from the provided HTML content. Consequently, the website's privacy, cookie, and security policies cannot be assessed. The content safety rating is safe based on the absence of explicit content, but this is limited by the lack of accessible content. Overall, the site appears to be a legitimate enterprise hospitality-related domain but requires removal of access restrictions for a full security and compliance evaluation.
Retail
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Sizera is a technology-driven company offering AI-powered clothing size and fit solutions targeted at fashion retailers. Their platform aims to increase online conversions, reduce product returns, and optimize production processes by leveraging data and artificial intelligence. The website presents a professional and modern interface built with Next.js and React, indicating a contemporary technical infrastructure. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Security posture is weak due to missing HTTPS verification, lack of security headers, and absence of privacy and cookie policies. Overall, while the business concept is clear and relevant to the retail sector, the technical and security maturity requires significant improvement to build trust and ensure compliance.
ExchangeRates.Proexchangerates.pro
Finance
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ExchangeRates.Pro is a specialized online platform offering real-time price comparison for Bitcoin and 50 other cryptocurrencies, aggregating offers from a wide range of exchanges, brokers, and P2P marketplaces globally. The platform supports 204 currencies and 571 payment systems, targeting cryptocurrency traders and investors seeking optimal exchange rates. Technically, the website employs modern frontend technologies such as Vue.js and Element UI, with integration of Google Analytics and ShareThis for tracking and social sharing. The site is well-designed with good navigation and mobile optimization, though accessibility could be improved. Security-wise, the site uses HTTPS with good SSL configuration and basic security headers, but lacks published security policies, vulnerability disclosure, and contact information for incident response. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and functional but would benefit from enhanced privacy and security transparency.
Finance
73Medium
NIS2 22 · GDPR 35
NIS2 22 · GDPR 35
The website whitebit.com is currently inaccessible due to a Cloudflare security challenge page, which prevents access to the actual content. The domain is well-established, registered since 2008, and uses Cloudflare for DNS and security services. Due to the blocked content, no detailed information about the company's services, policies, or contact details can be extracted. The domain WHOIS data indicates a legitimate and mature registration consistent with a professional business in the finance sector. However, the lack of accessible content limits the ability to assess the website's technical infrastructure, security posture, and compliance status comprehensively.
CHEXCH.COMchexch.com
Finance
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Chexch.com is an established online platform specializing in monitoring electronic currency exchangers, including cryptocurrencies and various payment systems. Founded in 2015, it offers users a free and efficient service to find the most profitable exchange rates with real-time updates and user reviews. The website targets individuals and businesses seeking reliable and advantageous currency exchange options. Technically, the site uses a traditional jQuery-based stack with amCharts for data visualization and is hosted behind Cloudflare DNS services, ensuring decent performance and security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site employs HTTPS and domain transfer protections but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the domain's WHOIS data and website content indicate a legitimate and trustworthy service with moderate risk due to missing compliance documentation. Strategic recommendations include enhancing privacy compliance, implementing security headers, and providing clear contact and incident response information.
Non-profit · Italy
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Libera is a prominent Italian non-profit association dedicated to combating organized crime and corruption through social promotion, education, and civic engagement. The organization operates a broad network of regional and local coordinations, offering educational programs, memorial activities, justice initiatives, and international cooperation projects. Their website reflects a mature digital presence with comprehensive content, clear calls to action for donations and participation, and a consistent brand identity. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates major analytics and payment platforms like Google Analytics, Facebook Pixel, PayPal, and Stripe. Privacy and cookie policies are well implemented and GDPR compliant. However, explicit security policies and incident response contacts are absent, representing an area for improvement. Overall, the website is professional, trustworthy, and serves as an effective platform for the organization's mission.
Emoe Srlemoe.it
Other · Italy
57Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Emoe Srl is a small, dynamic digital marketing and communication agency based in Torino, Italy. The company specializes in web development, ecommerce solutions, SEO, branding, social media marketing, and advertising campaigns. Their market position is that of a specialized agency offering integrated digital marketing services tailored to SMEs, professionals, and startups in the Torino area. The website is professionally designed with excellent content quality and consistent branding, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and uses modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a solid digital maturity and business credibility.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at agkjs.com is currently inaccessible or contains no visible content, consisting solely of an empty HTML skeleton. There is no metadata, no forms, no scripts, no external links, and no business or contact information present. The domain WHOIS data is privacy protected, providing no registrant details, which combined with the lack of website content, suggests the domain is either parked, inactive, or blocked by security mechanisms. The absence of HTTPS and security headers further indicates a minimal or non-existent technical infrastructure. Due to these factors, the website does not present any identifiable business operations or services, and no trust or compliance indicators are available.
- Login
finative.cloud
Other
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at app.finative.cloud is a login portal for a cloud-based service, likely SaaS, focused on user authentication. The site presents a minimal but functional login interface with language selection and password/email input fields. The business description and detailed company information are not publicly available on this page, limiting insights into market position or business model. The technical infrastructure uses standard web technologies including HTML5, CSS3, and JavaScript, with assets hosted on finative.cloud subdomains. The site is mobile optimized and shows moderate performance but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enforced and secure password input fields, but lacks visible security headers and formal security or privacy policies. No contact or incident response information is provided, and the domain uses WHOIS privacy protection, which is common for SaaS providers but reduces transparency. Overall, the site is functional for its purpose but would benefit from enhanced compliance and security disclosures.
- Ccdntrf
cdntrf.com
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website cdntrf.com presents an extremely minimal online presence with only a single word displayed and no additional content or metadata. The domain is registered since 2015 with NameCheap and uses Cloudflare DNS servers, indicating a stable and legitimate registration. However, the lack of any meaningful content, contact information, or policies severely limits the website's business credibility and user trust. Technically, the site lacks modern SEO, accessibility, and security best practices, with no security headers or DNSSEC enabled. The security posture is basic with HTTPS likely enabled but no advanced protections observed. Overall, the site appears to be either under development or abandoned, providing no clear business or service information. Strategic recommendations include enhancing website content, adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response information to improve trust and compliance.
Non-profit · Switzerland
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kaufmännischer Verband Schweiz is a longstanding Swiss non-profit association representing employees, with a history spanning over 150 years. The organization focuses on promoting fair and progressive working conditions, modern work models, and lifelong learning. Their market position as the oldest active employee association in Switzerland underscores their credibility and influence in labor and social policy. The website reflects this professionalism with a well-structured, multilingual presence and clear business focus. Technically, the website is built on TYPO3 CMS, hosted by RTP GmbH, and employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics. The site demonstrates good SEO practices, mobile optimization, and accessibility at a basic level. Performance is moderate, suitable for the target audience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Privacy compliance is well addressed through comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, the website and organization present a low-risk profile with strong business credibility and compliance. Strategic recommendations include publishing dedicated security and incident response policies, enhancing accessibility, and providing direct contact information for improved user trust and transparency.
Bitcoin-Kurier | News & Bildung zu Bitcoin und Blockchainbitcoin-kurier.de
Media · Germany
63Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Bitcoin-Kurier.de is a German-language online media platform focused on delivering news and educational content related to Bitcoin and blockchain technology. The website targets individuals interested in cryptocurrency, providing articles and resources to inform and educate its audience. Technically, the site is built on WordPress CMS, utilizing plugins such as WP Rocket for performance optimization and Rank Math PRO for SEO enhancements. Hosting and DNS are managed via Cloudflare, which provides security and performance benefits. From a security perspective, the website lacks visible security headers and formal security policies, which suggests room for improvement in its security posture. Privacy and cookie policies are not present, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, the site is accessible without WAF or blocking mechanisms, and content is safe for general audiences. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.
- LogMeIn
logmeininc.com
Technology
68Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
LogMeIn is an established enterprise technology company specializing in remote access, remote support, and unified endpoint management software solutions targeted at IT professionals and managed service providers (MSPs). Their website demonstrates a mature digital presence with modern web technologies, professional design, and comprehensive product offerings such as LogMeIn Resolve, Rescue, Pro, Central, and GoToMyPC. The company positions itself as a leader in simplifying IT infrastructure management and enhancing productivity through AI-driven tools and secure remote support capabilities. Technically, the website is built on a modern stack including Next.js and Sitecore, hosted on Sitecore Cloud, and integrates consent management and analytics tools to comply with privacy regulations. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and public security policies are absent. The lack of WHOIS data limits domain registration transparency but does not detract significantly from the overall legitimacy given the professional branding and partner ecosystem. Strategic recommendations include enhancing public security disclosures, improving privacy policy visibility, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

Retail · Germany
63Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Berufsbekleidung.de is an e-commerce outlet store specializing in professional workwear for the medical, nursing, and gastronomy sectors in Germany. The website offers a wide range of affordable and functional clothing items such as cook jackets and kasacks, targeting professionals and teams in these industries. The business model focuses on retail sales with an emphasis on robust materials and team outfitting. The site is built on the Prestashop platform and integrates modern technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. Hosting and content delivery leverage CDN services for performance optimization. Security-wise, the site employs HTTPS and is protected by the Kuratoron WAF, although explicit security headers are not fully implemented. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the website presents a professional and trustworthy front for its niche market, with room for improvement in security best practices and compliance documentation.
profi dressprofidress.de
Retail · Germany
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
profi dress is a German-based e-commerce retailer specializing in professional work clothing for sectors such as gastronomy, hotels, spas, retail, and sales. Established since 1979, the company positions itself as a provider of high-quality professional apparel with custom solutions for its clientele. The website is built on the PrestaShop platform, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance respectively. Hosting is provided via a CDN (kxcdn.com), ensuring moderate performance and good mobile optimization. Security is enhanced by the Kuratoron Web Application Firewall, providing protection without obstructing user access. However, the site lacks explicit privacy policies, terms of service, and incident response contacts, which are critical for compliance and trust. Overall, the site demonstrates a solid business presence with room for improvement in transparency and security documentation.
CLINIC DRESSclinicdress.de
Healthcare · Germany
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
CLINIC DRESS operates a professional e-commerce platform specializing in workwear and professional clothing for the medical, nursing, and cosmetic sectors. The company emphasizes quality, comfort, and over 70 years of experience, targeting healthcare professionals primarily in Germany. The website is built on the Prestashop CMS platform and employs modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The presence of Kuratoron WAF indicates a proactive security posture to protect against web threats. However, the absence of explicit privacy policies, terms of service, and contact information limits transparency and user trust. The SSL configuration is robust, ensuring secure data transmission.
Elefantelefant.ch
Hospitality · Switzerland
62Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Elefant is a community-oriented hospitality and event venue located in Baar, Switzerland, operated under the parent organization Stiftung zuwebe. The website presents a well-structured and content-rich platform offering information about gastronomy, events, and educational training programs primarily in hospitality and kitchen sectors. The business targets a broad local audience including families and community members, emphasizing inclusivity and sustainability. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for event management and SEO optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though it lacks explicit security policies and incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-positioned as a local community hub.
- Stiftung zuwebe
wertsache.ch
E-commerce · Switzerland
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Stiftung zuwebe operates a Swiss-based non-profit e-commerce webshop specializing in gift and food products such as Apéroplatten, Chlaussäcke, and Geschenkboxen. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in regional specialty products. The technical infrastructure is built on the PepperShop platform using modern libraries like jQuery and Bootstrap, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the site demonstrates good privacy compliance and business credibility with transparent contact information and social media presence.
Other
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website okomo.com is currently a parked domain primarily used for domain leasing or sales. It lacks any substantive business content, services, or contact information. The site displays a prominent banner advertising the domain's availability for lease or joint venture, targeting domain investors or buyers. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript with Google Adsense and Google Ad Services scripts for monetization. There is no evidence of a content management system or advanced frameworks. Security posture is weak, with no visible security headers or HTTPS confirmation, and no privacy or cookie consent mechanisms implemented. WHOIS data raises concerns due to a future domain creation date and registration via a drop-catching registrar, indicating low legitimacy and trustworthiness. Overall, the site presents a low-risk profile but lacks business credibility and security maturity.
- Diwa Mediamatik
diwa.ch
Technology · Switzerland
73Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
Diwa Mediamatik is a small Swiss technology company specializing in web design, hosting, and media services with over 30 years of experience. Their business model focuses on providing end-to-end internet presence solutions including CMS, SEO consulting, and media production primarily targeting clients in the Aargau region. The website demonstrates a solid technical foundation using modern web technologies and a proprietary CMS named Jasmin. While the site is well-structured, mobile-optimized, and includes a cookie consent mechanism, it lacks explicit security policies and terms of service. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.
Hugi Pro Sport GmbHhugiprosport.ch
Retail · Switzerland
52Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Hugi Pro Sport GmbH is a Swiss-based company founded in 2011, serving as the official Swiss general representative for the tennis and squash brand Tecnifibre. The company operates a professional website targeting both end customers and registered dealers, offering an online shop for sports products. The business model combines B2C and B2B e-commerce, focusing on retail distribution within Switzerland. The website is well-branded, consistent, and provides clear contact information, enhancing trust and credibility. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap 5 and integrates various libraries such as jQuery and Smart Slider 3. It uses Google Analytics for visitor tracking and is mobile-optimized with good SEO practices. Performance is moderate, and accessibility is basic but functional. Security is enforced via HTTPS with anonymized IP tracking in analytics, though some security headers are missing, and no explicit cookie consent mechanism is present. The security posture is solid but could be improved by adding standard security headers and formalizing incident response policies. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional and secure platform for its retail operations. Strategic recommendations include implementing a cookie consent banner to enhance GDPR compliance, adding missing security headers, and publishing a security policy or incident response contact to improve transparency and readiness.
Tennis Academy System 4®tennisparks-system4.com
Other · Switzerland
67Medium
NIS2 22 · GDPR 50
NIS2 22 · GDPR 50
Tennis Academy System 4® operates a local tennis academy based in Lutry, Switzerland, providing tennis training and related services. The website is built on the Wix platform, supporting multiple languages including French, German, and English, targeting tennis players and enthusiasts in the region. The business appears to be a small-scale service provider with a focus on tennis fundamentals and academy programs. Technically, the site uses Wix's Thunderbolt framework and standard JavaScript polyfills, with hosting and infrastructure managed by Wix.com. Performance and mobile optimization are moderate to good, but SEO and accessibility features are basic. Security posture is adequate with HTTPS enabled and some JavaScript security measures, but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is safe, professional, and trustworthy for its intended audience but would benefit from enhanced privacy and security practices.
Other
72Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.head.com is a commercial retail platform focused on sports equipment and accessories. The site employs modern frontend technologies such as React and integrates payment processing through Adyen Checkout, with customer review functionality powered by Yotpo. The website content is accessible without any WAF or security challenge blocking, indicating good availability. However, the site lacks visible privacy, cookie, and terms of service policies, as well as explicit contact information, which impacts compliance and trust. Security headers are not detected, and SSL configuration details are limited, suggesting room for improvement in security posture. Overall, the site appears legitimate and safe for general audiences but would benefit from enhanced transparency and security best practices.
Fourteen SA14fourteen.com
E-commerce · Switzerland
68Medium
NIS2 22 · GDPR 50
NIS2 22 · GDPR 50
14Fourteen is a Swiss-based company specializing in premium tennis apparel and sportswear, emphasizing Swiss quality and Italian design. The website serves as a corporate information portal and links to an e-commerce shop for tennis gear and accessories. The company positions itself in the premium sportswear market targeting tennis players and enthusiasts. Technically, the site is built on the BigCommerce platform using the Stencil framework, with integration of modern web technologies such as Google Fonts and Google Analytics 4. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No direct contact emails or phone numbers are found on the corporate site, which may impact user trust. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements include publishing comprehensive privacy and terms of service pages, enhancing security headers, and providing clear contact information to improve trust and compliance.