Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,168001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
7,501–7,550 of 99,069
Accueil | Foire Européenne de Strasbourgfoireurop.com
Other · France
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.foireurop.com represents the Foire Européenne de Strasbourg, a European fair event held in Strasbourg, France. The site provides information about the event, targeting visitors and exhibitors interested in attending. The business model revolves around event organization and promotion, catering primarily to the general public and regional visitors. The website is built on Drupal 10, leveraging modern web technologies such as FontAwesome, Leaflet.js for maps, and Slick Carousel for UI components. Analytics are handled via Matomo and Google Tag Manager, with cookie consent managed through tarteaucitron.io, indicating some level of GDPR compliance awareness. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit privacy or terms of service pages in the provided content. No contact information or incident response channels are clearly presented, which may hinder user trust and compliance. The WHOIS data is unavailable, raising concerns about domain registration legitimacy and reducing overall trustworthiness. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences. Overall, the website demonstrates moderate digital maturity with good technical implementation and content quality but requires improvements in transparency, security best practices, and business credibility to enhance trust and compliance. Strategic recommendations include publishing clear privacy and terms policies, adding contact and security incident information, and improving security headers and monitoring of third-party scripts.
Hospitality · France
54Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.foire-colmar.com represents the Foire aux Vins d’Alsace, a well-established regional event combining a gastronomic wine fair, commercial exhibition, and music festival. It targets a broad audience including families, wine enthusiasts, and visitors to the Alsace region. The event is notable for its long history (77 editions) and diverse offerings including over 1500 wines, 350 exhibitors, and international artists. Technically, the site is built on Joomla CMS, uses modern web technologies, and implements GDPR-compliant privacy and cookie policies with consent mechanisms. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and rich multimedia content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not evident and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the professional presentation and external ticketing partnership support trust. Overall, the site is a credible and professional digital presence for a major cultural event in France.
Sociétéfoireinternationale-nancy.com
Retail · France
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Foire Expo de Nancy is a regional event organizer based in France, specializing in hosting a multi-sector trade fair that includes automotive, furniture, beauty, crafts, and gastronomy. The website serves as a platform for exhibitors and visitors to discover products, compare offers, and access event information. The business operates a ticketing system and provides exhibitor services, positioning itself as a key regional event in the Nancy area. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with clear policies and GDPR-aligned consent. Overall, the site is professional, trustworthy, and well-maintained, supporting the business's event-driven model effectively.
Mégacité Amiensmegacite.fr
Hospitality · France
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Mégacité Amiens is a regional event venue in France specializing in exhibitions, congresses, and various events. The website presents a professional image with clear branding and relevant content targeting event organizers and attendees. The business model revolves around venue rental and event hosting services, positioning itself as an important player in the hospitality sector within the Amiens region. The site is built on Drupal 10 and incorporates modern web technologies and analytics tools such as Google Tag Manager and Matomo, indicating a moderate level of digital maturity. Privacy compliance is addressed through cookie consent mechanisms and a privacy policy, reflecting awareness of GDPR requirements. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical setup suggest a legitimate and trustworthy business. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and contact information availability.
- MMONEV
monev.fr
Other · France
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MONEV is a French association established in 1928 that manages and owns the Parc des Expositions "Théophile Giraud" in Montluçon. It organizes a wide range of events including agricultural, cultural, commercial, and sporting activities. The organization emphasizes sustainable development, notably through a large photovoltaic solar panel installation on its premises. The website targets event organizers and the general public interested in regional exhibitions and fairs. The business model revolves around event management and venue rental, positioning MONEV as a key regional player in the exhibition and event sector. Technically, the website is built on the WebSee CMS platform and utilizes common JavaScript libraries such as jQuery, Jssor Slider, and Fancybox for interactive features. The site is moderately performant, mobile-optimized, and accessible, with basic SEO practices in place. However, there is no evidence of advanced analytics or tracking services, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible HTTP security headers and explicit security or privacy policies. Cookie consent is implemented, reflecting some privacy compliance. The absence of WHOIS data limits domain trust verification, but the website content and contact information appear legitimate and consistent with a regional association. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy front for MONEV's business activities, though improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.
Foire Internationale de Bordeaux | 24 au 1er juin 2025foiredebordeaux.com
Other · France
64Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website www.foiredebordeaux.com represents the Bordeaux International Fair event scheduled for 2025. It serves as an informational and promotional platform targeting visitors and exhibitors in the Nouvelle-Aquitaine region of France. The site provides event details, exhibitor lists, programming, and visitor FAQs, positioning itself as a regional event organizer with a medium-sized digital presence. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and uses OneTrust for cookie consent management. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and policies are not evident. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or privacy protection, which impacts trustworthiness. Overall, the website is professional and functional but would benefit from clearer business and privacy disclosures to enhance credibility and compliance.
Tours Événementslafoiredetours.fr
Retail · France
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
La Foire de Tours is a prominent regional event organizer hosting the largest commercial fair in the Centre-Val de Loire region of France. The website provides comprehensive information about the event scheduled for May 2026, including exhibition universes, gastronomic village, artist participation, and sustainability initiatives. The organization, Tours Événements, appears to be well-established with multiple certifications and a strong social media presence. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and a cookie consent framework. The site is performant, mobile-optimized, and SEO-friendly, providing a good user experience. However, some security best practices like security headers and explicit incident response policies are missing. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy. Business credibility is supported by clear contact information, certifications, and consistent branding, although the absence of WHOIS data slightly reduces trust. Overall, the website is a professional and trustworthy digital presence for the event, with recommendations to enhance security headers and publish security policies to further strengthen trust and compliance.
ROCHEXPO – Association Foire Exposition de la Haute-Savoie Mont-Blancfoire-internationale74.com
Other · France
56Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website represents ROCHEXPO, an association organizing the Foire Internationale Haute-Savoie Mont-Blanc, a well-established regional event celebrating its 100th anniversary in 2025. The site provides comprehensive information about the event, exhibitors, schedules, and social media engagement, targeting a broad audience including visitors and exhibitors interested in home, leisure, and gastronomy. Technically, the site is built on WordPress 6.8 with common plugins for analytics, social media integration, and performance optimization. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trust. Security posture is generally good but could be improved by adding security headers and publishing incident response information.
Comexposiumfoiredeparis.fr
Retail · France
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Foire de Paris is a prominent and historic French trade fair event organized by Comexposium, attracting over 400,000 visitors annually. The website provides comprehensive information about the event, including ticketing, exhibitors, and cultural programming. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Sitecore CMS, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, likely due to privacy protection, but the site shows strong trust signals and professional branding. Overall, the website is well-designed, user-friendly, and trustworthy for its audience.
Foire de Toulousefoiredetoulouse.com
Other · France
65Medium
NIS2 22 · GDPR 53
NIS2 22 · GDPR 53
Foire de Toulouse is a regional event organizer focused on the International Fair of Toulouse, providing event information and services to visitors and exhibitors. The website is built on Drupal 10 and integrates modern web technologies such as Matomo analytics, Google Tag Manager, and accessibility tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks visible security headers and formal privacy or incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and branding appear professional and consistent with a legitimate event. Strategic improvements in security headers, privacy disclosures, and domain registration transparency are recommended to enhance trust and compliance.
Foire de Lyon 2026 - du 20 au 30 mars - Lyon Eurexpofoiredelyon.com
Hospitality · France
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Foire de Lyon is a regional event organizer hosting a major fair in Lyon, France, scheduled for March 20-30, 2026. The website provides comprehensive information about the event, including exhibitor details, visitor guides, and partner information. The digital infrastructure is built on Drupal 10 with integrations for video content, analytics, and cookie consent management, reflecting a modern and mature web presence. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the professional content and strong social media presence support trustworthiness. Overall, the site is well-positioned to serve its audience effectively with moderate risk factors to monitor.
Exponantesfoiredenantes.fr
Retail · France
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Foire de Nantes is a well-established regional event organizer based in Nantes, France, specializing in hosting a large annual fair that combines shopping, leisure, and cultural discovery. The event targets families and general visitors interested in home improvement, well-being, and gastronomy. The website reflects a professional and consistent brand presence with clear event information and partner endorsements. Technically, the website uses a custom CMS likely built on Ruby on Rails, incorporating modern JavaScript libraries such as jQuery, Modernizr, and Matomo for analytics. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site shows good practices such as CSRF protection and cookie consent but lacks explicit security policy documentation and incident response contacts. The absence of WHOIS data for the domain is a concern that slightly reduces trustworthiness, though the professional site and event legitimacy mitigate this risk. Overall, the website is a credible and professional platform for the Foire de Nantes event, with moderate technical and security maturity. Strategic improvements in security headers, WHOIS transparency, and incident response readiness are recommended to enhance trust and compliance.
- Page d'accueil | Foire Orléans
foirexpo-orleans.fr
Other · France
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.foirexpo-orleans.fr represents an event or expo based in Orléans, France, likely targeting a general audience interested in local exhibitions or fairs. The site is built on Drupal 10, indicating a modern CMS infrastructure, and integrates common web technologies such as FontAwesome for icons, YouTube iframe API for video content, Matomo for analytics, and Google Tag Manager for marketing tags. The presence of a cookie consent mechanism via Tarteaucitron shows some attention to privacy compliance, although no explicit privacy or terms of service pages were detected. Security posture is moderate but lacks visible security headers and detailed policies, and WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is functional and accessible but would benefit from enhanced transparency and security practices.
Foire de Nicefoiredenice.com
Hospitality · France
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Foire de Nice is a well-established event organizer hosting the International Fair of Nice, featuring over 350 brands and 300 exhibitors in a large venue in Nice, France. The website is professionally designed using WordPress with a focus on user experience and clear navigation. It provides detailed information about the event's universes and services, targeting a broad audience interested in lifestyle, home, and automotive products. The technical infrastructure leverages common WordPress plugins and libraries, including cookie consent management and advertising tools. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness. Overall, the website is functional, compliant with privacy regulations, and trustworthy from a content perspective, but domain legitimacy should be further verified.
Dijon Bourgogne Eventsdijonbourgogne-events.com
Hospitality · France
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Dijon Bourgogne Events operates the Parc des Expositions et Congrès de Dijon, providing venue services for fairs, congresses, and exhibitions in the Dijon and Bourgogne region of France. The company appears to be a regional event venue operator founded recently in 2023, with a medium-sized business profile. The website is built on WordPress using the Divi theme and incorporates SEO and user experience best practices such as Yoast SEO and Google Fonts. The site is mobile optimized and includes social media integration with LinkedIn, Facebook, and Instagram. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is professional and relevant to its business domain but could benefit from enhanced security and compliance documentation.
ManpowerGroupmanpowergroup.fr
Other · France
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ManpowerGroup is a leading global human resources services company with a strong presence in France and worldwide. The company offers comprehensive HR solutions including recruitment, training, career management, and outsourcing services. Their website reflects a professional and enterprise-grade digital presence, leveraging WordPress and Elementor with modern tracking and consent tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data slightly impacts domain trust but is mitigated by the company's established brand and certifications such as Top Employer 2024 and CyberVadis. Overall, the website is well-designed, accessible, and compliant with GDPR requirements.
- MMartin Massera
multilanguage.xyz
Technology · Argentina
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Multilanguage for Weebly is a small technology business specializing in providing a SaaS application that enables Weebly website owners to add multiple languages and translate their websites easily. The company targets Weebly users who want to internationalize their online presence and increase traffic and sales by offering multilanguage support and translation services, including store product and checkout translation. The business maintains a niche market position with a focused service offering and positive user testimonials, supported by a clear contact presence and social media engagement. Technically, the website is built on the Weebly platform, utilizing jQuery 1.8.3, Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics, marketing, and security. Hosting is provided via EditMySite CDN, likely part of Weebly's infrastructure. The site demonstrates moderate performance and good mobile optimization but uses an outdated jQuery version and lacks some modern security headers. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but it lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a GDPR info page but no cookie consent banner or terms of service page. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is moderate due to missing cookie consent and outdated libraries. Strategic improvements in privacy compliance, security headers, and updated libraries would enhance the security posture and user trust.
BREDbred.fr
Finance · France
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BRED is a French retail banking institution focused on providing personalized advisory services to individual customers. The website presents a professional and consistent brand image with a clear focus on retail banking services. The technical infrastructure leverages modern web technologies including Angular, Adobe DTM for tag management, and Didomi for consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and incident response information are not publicly visible. The absence of WHOIS data from AFNIC is unusual but does not detract significantly from the website's legitimacy given the professional content and technical indicators. Overall, the site is well-structured, GDPR compliant, and safe for general audiences.
Light Touch Studiolight-touch.fr
Other · France
56Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Light Touch Studio is a small creative agency based in Guadeloupe, France, specializing in graphic design, web development, and content strategy. With 15 years of experience, the company emphasizes collaborative and tailored communication solutions for brands seeking to enhance their visibility and identity. The website is professionally designed using WordPress and Elementor, showcasing a portfolio of client projects and clear contact options including a GDPR-compliant contact form. The technical infrastructure is modern and hosted by OVH, a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the website reflects a trustworthy and credible business with a focus on quality creative services.
Other · France
58Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website ktgp.fr currently presents an extremely minimal online presence with only a placeholder message and no substantive content. The domain is newly registered in March 2024 and hosted by OVH with consistent French name servers, indicating a legitimate but nascent business or project. There is no metadata, structured data, or business information available on the site, limiting the ability to assess the company's market position or services. Technically, the site lacks modern web technologies, security headers, and privacy compliance mechanisms, reflecting a low digital maturity level. Security posture is minimal with no visible HTTPS enforcement or security best practices implemented. Overall, the site is low trust and low content quality, representing a high risk for users seeking business or security assurances.
Neutraneutra.com
E-commerce · Netherlands
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Neutra is a premium fashion e-commerce brand specializing in minimalist and sophisticated footwear designs. The company operates a well-structured Shopify-based online store with a strong emphasis on design, quality, and subtlety. Their market position targets discerning consumers who value timeless style and craftsmanship. Technically, the website leverages modern e-commerce technologies including Shopify, Klaviyo for marketing automation, and Facebook Pixel for analytics and retargeting. The site is performant, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain protections in place, though some security headers and policies could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business demonstrates a high level of professionalism and trustworthiness, with room for improvement in explicit security policy disclosures and incident response readiness.
Rivedroite Parisrivedroite-paris.com
Retail · France
70Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Rivedroite Paris operates an e-commerce website specializing in sustainable bags and accessories crafted by formerly unemployed designers using recycled and upcycled materials. The brand targets environmentally conscious consumers seeking unique fashion items. The website is built on the Shopify platform using the Impulse theme, integrating multiple marketing and analytics tools such as TikTok Pixel, Microsoft Clarity, Klaviyo, and Google Tag Manager, indicating a moderate level of digital maturity and marketing sophistication. The site is mobile-optimized and presents a professional design with clear navigation and relevant content.
—
74Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Elie Topelietop.com
E-commerce · France
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Elie Top is a French luxury jewelry brand operating an e-commerce platform built on Shopify. The website showcases various collections and high-end jewelry creations targeting consumers interested in artisanal and creative luxury products. The brand maintains a consistent and professional online presence with multilingual support and active social media channels. Technically, the site leverages modern e-commerce technologies including Shopify's Dawn theme, Google Tag Manager, Facebook Pixel, and consent management frameworks, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforced and form protection via hCaptcha, although explicit security headers and incident response information are not publicly documented. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. The absence of WHOIS data is a concern but the overall digital maturity and trust indicators suggest a legitimate business. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies.
- Château de Berne
chateauberne-vin.com
E-commerce · France
69Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Château de Berne operates a premium e-commerce platform specializing in the sale of wines from the Côtes de Provence region. The website targets mature wine consumers primarily in France and the European Union, offering a range of rosé, red, and white wines under AOP certification. The business model is focused on direct-to-consumer online sales, supported by loyalty programs and professional partnerships. The company appears to be medium-sized, founded around 2020, and maintains a consistent brand presence with professional design and clear navigation. Technically, the website is built on the Shopify platform, leveraging a modern tech stack including JavaScript, jQuery, and various third-party marketing and analytics tools such as Klaviyo, Smile.io, and Gorgias. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with visible cookie consent mechanisms and comprehensive privacy policies. The security posture is solid but could benefit from enhancements such as explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or blocking WAFs were detected. The site uses extensive tracking and marketing pixels, indicating a mature digital marketing strategy but requiring ongoing privacy vigilance. Overall, Château de Berne presents a trustworthy and professional online presence with good business credibility and technical implementation. Strategic improvements in security transparency and DNS security would further strengthen its posture.
Skin & Outskinandout.fr
Retail · France
69Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Skin & Out is a French e-commerce company specializing in natural and holistic acne treatment products targeted at adults. The website is professionally designed using the Shopify platform, integrating multiple marketing and analytics tools such as Yotpo, Klaviyo, and Facebook Pixel to support customer engagement and sales. The company positions itself as a leader in natural acne solutions in France, offering a range of products including skincare, dietary supplements, and personalized coaching. Technically, the website demonstrates a modern infrastructure with good performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS, security headers, and form protection via hCaptcha, although explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. Overall, the website appears legitimate and trustworthy, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure program, and enhancing incident response transparency.
- FELCO SA
felco.com
Manufacturing · Switzerland
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
FELCO SA is a Swiss precision manufacturing company specializing in pruning shears and cutting tools, targeting gardeners and professionals who require high-quality cutting solutions. The company maintains a strong market position as a reputable Swiss brand with a focus on innovation and sustainability. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations with marketing and analytics tools such as Google Tag Manager, Klaviyo, and Rakuten Advertising. The technical infrastructure is robust, with good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforcement, security headers, and use of CAPTCHA for forms, though explicit privacy and cookie policies are not detected in the provided content. The absence of WHOIS data raises some concerns about domain registration transparency, but the professional website and consistent branding support legitimacy. Overall, the site presents a trustworthy and professional front for FELCO's business operations.
- Patrick Roger
patrickroger.com
E-commerce · France
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Patrick Roger operates a premium chocolatier e-commerce website based in France, offering a variety of chocolate products and merchandising items. The website is professionally designed and hosted on Shopify, featuring rich content, clear navigation, and strong branding consistency. The company targets general consumers interested in luxury chocolates and related products. Technically, the site leverages modern e-commerce technologies including Shopify's platform, Cloudfront CDN, and integrates analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement and hCaptcha for form protection, contributing to a solid security posture. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, though the overall site professionalism mitigates immediate concerns. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms.
ODENoden.fr
E-commerce · France
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ODEN is a French e-commerce brand specializing in natural cosmetic oils and skincare products sourced from French farmers. The website is built on the Shopify platform using the Symmetry theme and integrates multiple marketing and subscription services such as Klaviyo, Facebook Pixel, and Seal Subscriptions. The brand positions itself as a natural cosmetics provider with a focus on local sourcing and quality. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with a reputable hosting provider (OVH). However, explicit privacy policies and terms of service pages are not found in the provided content, which is a compliance gap. The site employs extensive tracking and marketing scripts, indicating a moderate to extensive user tracking level. Security posture is good with HTTPS and consent management, but could be improved by adding explicit security headers and policies. Overall, the site is professional and trustworthy but should enhance privacy and security transparency.
Maison Closemaison-close.com
E-commerce · France
73Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Maison Close is a French-based high-end lingerie e-commerce brand established in 2005, specializing in luxury and sensual lingerie products. The website is professionally designed, leveraging the Shopify platform with regional subdomains to target European markets. It offers free delivery and returns, catering to a mature audience interested in premium lingerie. The technical infrastructure is modern, with extensive use of third-party marketing and analytics tools such as Klaviyo, Yotpo, and Google Tag Manager, ensuring robust digital marketing capabilities. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a trustworthy and professional e-commerce presence with room for improvement in security transparency and direct contact information.
Puressentiel Francepuressentiel.com
Retail · France
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Puressentiel France operates a professionally designed e-commerce website specializing in natural health and aromatherapy products, primarily essential oils. The website is built on the Shopify platform, leveraging modern web technologies and multiple marketing and analytics tools to optimize user experience and business insights. The brand positions itself as a trusted provider of natural and organic health products in the French market. Technically, the site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies in French. WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not raise legitimacy concerns given the consistent branding and content. Overall, the website is trustworthy, professional, and well-maintained, serving a general audience interested in natural health products.
- ADEME
carnetadapt.org
Government · France
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
CarNet'Adapt is a French government-backed initiative managed by ADEME to create a Caribbean network focused on climate change adaptation, particularly in agriculture and food sectors. The project is co-financed by the Interreg Caraïbes program and involves multiple regional partners. The website is bilingual, professionally designed, and provides comprehensive information about the project, partners, events, and resources. Technically, the site is built on Drupal 10 and uses Cloudflare DNS services, though DNSSEC is not enabled. Security posture is adequate with HTTPS and domain protection flags but lacks published security policies and some security headers. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is trustworthy, well-maintained, and serves a niche governmental and non-profit audience.
- CCNP Assurances
cnp-protectionsociale.fr
Finance · France
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
CNP Assurances Protection Sociale is a major French insurance provider specializing in complementary health and provident insurance products. The website targets individuals, professionals, and enterprises in France, offering tailored insurance solutions with an emphasis on ease of obtaining quotes online. The company is positioned as a trusted and established player in the social protection sector, supported by consistent branding and verified corporate information. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager and New Relic, with a strong focus on user experience and mobile optimization. Security posture is good with HTTPS enforced and monitoring tools in place, though explicit security headers and incident response information could be improved. Overall, the site presents a professional and trustworthy digital presence with minor gaps in domain registration transparency.
Peppa Pig Live Českopeppapiglive.cz
Hospitality · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Peppa Pig Live Česko is a localized entertainment website promoting live theatrical performances of the popular children's character Peppa Pig in the Czech Republic. The site targets families and children, offering ticket sales and multimedia content related to the live shows. The business operates on a small scale, focusing on event promotion and audience engagement through social media and online presence. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The domain registration is recent but consistent with the business localization and branding, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its family-friendly entertainment purpose.
Městská část Praha 1planuj1.cz
Government · Czech Republic
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website planuj.praha1.cz serves as the official platform for the sustainable development strategy of the Prague 1 district. It provides detailed information about urban planning initiatives, public participation opportunities, sociological research, and participatory budgeting. The site targets residents, local stakeholders, and visitors interested in the future development of Prague 1. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries such as jQuery and Swiper.js. It is served over HTTPS with a valid SSL certificate, ensuring secure connections. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. The security posture is moderate, with no detected vulnerabilities but lacking security headers. Overall, the site is professional, content-rich, and trustworthy as a government resource, but could enhance privacy compliance and security best practices.
- Hledej Chorvatsko | pokoje a apartmány v Chorvatsku
travelplan.cz
Hospitality · Czech Republic
50Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
The website www.ubytovanivchorvatsku.cz is a specialized online platform offering accommodation listings primarily focused on Croatia. It provides users with a comprehensive search interface to find private apartments and rooms across various Croatian regions, targeting tourists seeking affordable and direct bookings without intermediary commissions. The site features detailed listings with images, pricing, and location data, supporting a user-friendly experience with mobile responsiveness and clear navigation. Technically, the site employs common web technologies such as jQuery, Google Fonts, FontAwesome, Google Adsense, Facebook Pixel, and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and relevant for its niche but would benefit from enhanced privacy compliance and security practices.
- Ventusky - Weather Forecast, Radar and Wind Maps
ventusky.com
Technology
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Ventusky is a specialized weather forecasting and visualization platform offering live weather maps, radar, satellite imagery, and detailed forecasts powered by multiple reputable weather models. The platform targets general users and weather enthusiasts, providing free access with an optional Premium subscription for advanced features. The website demonstrates a good level of content quality and user experience with consistent branding and relevant, professional content. Technically, the site uses modern web technologies including JavaScript and Google Analytics, with moderate performance and good mobile optimization. However, explicit privacy and cookie policies are not found, and no contact information is provided on the main page, which may impact user trust and compliance. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. WHOIS data is unavailable, which reduces domain trustworthiness but the site content and technical setup appear legitimate. Overall, the site is safe for general audiences and provides valuable weather services.
- CCZECH WINTER - accommodation and skiing on Czech mountains
czechwinter.com
Hospitality · Czech Republic
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
CzechWinter.com is a niche online portal dedicated to providing accommodation listings and skiing information for tourists interested in the Czech mountain regions. The website offers direct contact to houseowners for cottages, apartments, and hotels, focusing on winter lodging and skiing activities. The business appears to be a small, regionally focused hospitality service provider established around 2008, with a modest online presence and monetization through Google AdSense advertising. From a technical perspective, the website uses basic HTML, CSS, and JavaScript with no modern frameworks or CMS detected. Hosting is provided by a Czech hosting provider as indicated by the nameservers. The site lacks HTTPS enforcement and modern security headers, which lowers its security posture. Mobile optimization and accessibility are minimal, and SEO practices are basic. There is no evidence of privacy or cookie policies, nor GDPR compliance mechanisms. Security-wise, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low maturity level in security and compliance. No contact information or incident response channels are provided, which could hinder user trust and regulatory compliance. However, no malicious or adult content is detected, and the domain registration data is consistent and legitimate. Overall, the website serves its niche purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.
Taskize Limitedtaskize.com
Finance
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Taskize Limited operates a modern SaaS collaboration platform designed to streamline and modernize communications within the financial sector. Positioned as a Euroclear company, Taskize serves a global client base of over 600 firms across 88 countries, focusing on increasing operational capacity, reducing regulatory risk, and improving client satisfaction. Their platform offers solutions spanning communication, interoperability, business processes, data, and AI, targeting investment operations teams and financial market participants. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrated analytics tools such as Google Analytics and HubSpot Analytics. The site is mobile-optimized and SEO-friendly, though there is room for improvement in accessibility and security header implementation. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates good privacy compliance, including GDPR adherence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The WHOIS data for the domain is unavailable, which slightly impacts trustworthiness, but the strong corporate association with Euroclear and professional web presence mitigate concerns. Overall, Taskize presents a credible, well-positioned business with a mature digital presence. Strategic improvements in security transparency and WHOIS data availability would further strengthen their trust profile and compliance posture.
- MMFEX Mutual Funds Exchange AB
mfex.com
Finance · Sweden
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MFEX Mutual Funds Exchange AB, now rebranded as Euroclear FundsPlace®, operates as a financial services platform integrated within the Euroclear group. The company provides a comprehensive end-to-end solution for fund distribution and processing across multiple asset classes, including private market funds. The website reflects a professional and consistent brand image aligned with Euroclear's market infrastructure, targeting financial institutions and asset managers. Technically, the site is built on modern web technologies such as Next.js and React, offering good mobile optimization and user experience. However, some technical aspects like security headers and SEO metadata could be improved. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the business content and branding suggest a legitimate financial entity. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.
Finance · Luxembourg
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Banque centrale du Luxembourg (BCL) website serves as the official online presence of Luxembourg's national central bank, a key member of the Eurosystem. It provides comprehensive information on monetary policy, financial stability, payment systems, research, and publications. The site targets a broad audience including financial institutions, researchers, policymakers, and the general public. The business model is government-oriented, focusing on monetary authority functions and financial oversight. The website demonstrates consistent branding and professional content aligned with its authoritative role. Technically, the site is built on Infopark CMS Fiona with Bootstrap framework, incorporating modern web technologies such as Font Awesome icons and Google Custom Search. It features embedded multimedia content and is mobile responsive. Performance is moderate with room for improvement in accessibility and SEO optimization. No critical technical flaws were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published security policies or incident response contacts. The absence of privacy and cookie policies reduces compliance confidence. WHOIS data is unavailable due to a malformed query, which slightly impacts domain trustworthiness but does not detract from the site's authoritative content. Overall, the website is a reliable and professional resource for central banking information in Luxembourg, with recommendations to enhance privacy compliance, security headers, and WHOIS transparency to strengthen trust and security posture.
- М
Finance · North Macedonia
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Macedonian Stock Exchange (Македонска Берза АД Скопје) operates as the primary regulated securities market in North Macedonia, providing official listings, trading platforms, market data, indices, and regulatory information. The website targets investors, listed companies, brokers, and financial professionals, offering comprehensive market insights and educational resources. The business model centers on facilitating capital market operations and compliance within the Macedonian financial sector. Technically, the website employs a modern web stack including jQuery, Bootstrap, and C3.js for interactive charts, hosted on a local provider (uhost.mk). The site is mobile-optimized with good SEO and accessibility basics, though some enhancements could improve accessibility compliance. The infrastructure supports dynamic market data updates and user interaction via search and contact forms. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is good with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a financial institution, with moderate technical maturity and compliance. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen the platform.
forwardfamab.de
Other · Germany
57Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Forward (fwd:) is a German non-profit association representing the event industry sector, focusing on political advocacy, community building, and sustainability initiatives. The organization positions itself as a key voice for the event industry in Germany, providing networking, knowledge transfer, and regional representation services. The website is professionally designed, content-rich, and targets industry members and stakeholders. Technically, the site is built on WordPress with Elementor and several plugins, showing a modern and well-maintained infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is privacy protected, consistent with GDPR regulations, and the domain appears legitimate with no suspicious indicators. Overall, the site demonstrates a mature digital presence with good compliance and trust signals.
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website ifesnet.com is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any substantive content or business information. The domain is long-established, registered since 2003 with a reputable registrar and uses Cloudflare DNS and security services. Due to the WAF challenge, no privacy policies, contact information, or business descriptions are available for analysis. The technical infrastructure relies heavily on Cloudflare's security and performance platform, including Turnstile captcha and Cloudflare Insights for analytics. The security posture appears to be strong in terms of perimeter defense, but internal security and compliance details cannot be assessed. Overall, the site is low in transparency and content quality due to the blocking mechanism, resulting in a low AI score and limited risk assessment capability.
- Ospi
ospi-network.com
Other
60Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Ospi is a professional service and network provider with a focus on offerings such as Octanorm and related services. The website is designed using Webflow CMS and incorporates modern web technologies including Lottie animations and Google Analytics for user tracking. The site is accessible without any WAF or security blocking mechanisms, indicating good availability. However, the absence of WHOIS data raises concerns about domain registration legitimacy and trustworthiness. Contact information is clearly provided, but the site lacks privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers or detailed SSL configuration information. Overall, the website presents a professional business front but requires improvements in security and compliance documentation.
INOBATbatteryman.ch
Energy · Switzerland
70Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Battery-Man is a Swiss environmental initiative operated by INOBAT, focused on promoting battery recycling and sustainability. The website serves as an educational platform encouraging the public to collect and properly dispose of used batteries, supported by a network of collection points and an online shop for related materials. The initiative has been active since 2012 and maintains a consistent brand presence with active social media channels. Technically, the website uses modern web technologies including JavaScript libraries and video embeds, hosted likely by Qube AG. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with privacy regulations.
Bobcat Companybobcatdobris.cz
Manufacturing · Czech Republic
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Bobcat Dobříš is a prominent manufacturing hub specializing in compact loaders, excavators, and related construction and agricultural machinery. Operating as part of the global Doosan group, the company serves the EMEA region and exports worldwide. The website reflects a mature business with a strong market position, comprehensive product offerings, and a commitment to innovation and social responsibility. Technically, the site employs modern web technologies, including Google Tag Manager and cookie consent tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.
- Futaba Czech, s.r.o.
fcz.cz
Manufacturing · Czech Republic
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Futaba Czech, s.r.o. is a medium-sized manufacturing company specializing in automotive parts, operating as a subsidiary of the Japanese Futaba Industrial Co., Ltd. Founded in 2004, the company emphasizes environmentally friendly production technologies such as pressing and welding. The website presents a professional and consistent brand image with clear business information and product offerings targeting automotive industry clients and job seekers. Technically, the site uses established JavaScript libraries and a custom CMS, delivering moderate performance and good mobile optimization. Security posture is adequate with GDPR compliance and cookie consent mechanisms, though lacking visible HTTP security headers and explicit incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the overall digital presence is credible and professional. Strategic improvements in security headers, incident response transparency, and domain registration clarity are recommended to enhance trust and compliance.
Avant Tecnoavanttecno.com
Manufacturing · Finland
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Avant Tecno is a manufacturer specializing in articulated loaders and a wide range of attachments, targeting industrial and construction sectors. The website presents a professional image with a focus on product versatility and multi-functionality. The company appears to be established in Finland with a medium-sized business profile. Technically, the website is built on the concrete5 CMS platform and utilizes modern web technologies including jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site integrates Google Maps API and various marketing and analytics tools such as HubSpot and Hotjar, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS data for the domain reduces trust slightly, though the website content and technology usage suggest a legitimate business. Overall, the site is functional, moderately optimized, and compliant with basic privacy requirements, but could improve transparency and security posture.
Muhr und Bender KGmubea.com
Manufacturing · Germany
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Muhr und Bender KG (Mubea) is a globally recognized supplier and innovative lightweight specialist primarily serving the automotive industry, with additional focus on aviation and micromobility sectors. The company offers a broad range of products including springs, stabilizers, precision steel tubes, and composite components, positioning itself as a market leader in lightweight automotive components. The website reflects a mature digital presence built on Drupal 11, featuring modern frontend technologies and a comprehensive content structure targeting industry professionals, partners, and potential employees. Technically, the site employs a robust CMS with responsive design, accessibility considerations, and SEO best practices. Analytics are implemented via Etracker, and cookie compliance mechanisms are in place, demonstrating attention to privacy regulations such as GDPR. However, explicit security headers and incident response policies are not publicly documented, representing an area for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS domain registration details reduces trustworthiness slightly, but the professional presentation and extensive business information mitigate concerns. Overall, the site is secure, compliant, and professionally maintained, supporting Mubea's reputation as a reliable industry partner. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen trust and compliance posture.