Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
22,901–22,950 of 99,068
Pan Europelow-impact-farming.info
Other · Belgium
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.low-impact-farming.info is an advocacy and informational platform operated by Pan Europe, a non-profit organization focused on promoting sustainable agriculture practices, specifically low impact farming and Integrated Pest Management (IPM) across Europe. The site provides educational resources, policy position papers, and multimedia content to support pesticide reduction and environmentally friendly farming methods. It targets farmers, policymakers, environmental advocates, and the general public interested in sustainable agriculture. The business model is centered on advocacy and education rather than commercial sales, positioning itself as a niche player in the European sustainable agriculture sector. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics and Google Tag Manager for user tracking and AddToAny for social sharing. The site is mobile optimized with good accessibility and SEO practices, though performance is moderate. The technical infrastructure appears maintained and up to date, but lacks some advanced security headers and formal privacy/cookie policies. From a security perspective, the site uses HTTPS and anonymizes IPs in analytics, but does not implement key security headers or publish security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. WHOIS data is unavailable due to privacy protection, which is reasonable for this non-profit entity. Overall, the security posture is moderate but could be improved with better policy transparency and technical controls. The overall risk assessment is low to moderate. The site is legitimate and trustworthy for its advocacy purpose but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, implementing security headers, adding a security.txt file, and improving incident response visibility.
SELA Immosela-immo.fr
Real Estate · France
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.
Loire-Atlantique Développementboxloireatlantique.com
Hospitality · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
LA Box Loire-Atlantique is a French regional e-commerce platform specializing in local and responsible tourism gift boxes, offering curated weekend stays and activities in the Loire-Atlantique region. The company, represented by Loire-Atlantique Développement, targets consumers interested in authentic local experiences and sustainable tourism. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supported by modern WordPress and WooCommerce technologies. SEO and structured data are well implemented, enhancing discoverability and user engagement. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit contact information or incident response details are visible. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, suggesting a need for further verification. Overall, the website presents a trustworthy and professional front for a niche hospitality business, with room for improvement in security and transparency.
- LLoire-Atlantique Développement
sorties-scolaires-loireatlantique.com
Education · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website sorties-scolaires-loireatlantique.com is operated by Loire-Atlantique Développement and serves as a regional platform for organizing school outings and pedagogical stays in the Loire-Atlantique area of France. It targets schools, teachers, and parents of primary and college students, offering educational trips and classes de découvertes. The site is positioned as a trusted regional educational tourism service provider with a medium-sized organizational footprint, founded in 2019. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and Complianz GDPR for cookie consent. The hosting registrar is Nuxit, and the site uses HTTPS with a good SSL configuration. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and reCAPTCHA on forms but lacks some security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding a comprehensive privacy policy, enabling DNSSEC, and enhancing security headers to strengthen the security posture and privacy compliance.
Les Enfoirésenfoires.fr
Non-profit · France
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Les Enfoirés is a prominent French non-profit organization focused on social aid and fundraising through charity concerts and merchandise sales. The website serves as the official platform to engage supporters, partners, and the general public with information about events, news, and donation opportunities. The organization leverages a modern WordPress-based infrastructure with integrations such as Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's apparent legitimacy and professional presentation.
Le Tambourassoletambour.com
Other · France
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Le Tambour is a French non-profit cultural association founded in 2001, dedicated to literary diffusion by connecting literature with other art forms. The organization offers writing workshops, public readings, theatrical performances, and text montages aimed at diverse audiences including schools and urban communities. The website reflects a professional and consistent brand presence with clear contact information and regional partnerships. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.
Rtonertone.fr
Technology · France
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Rtone is a French product development studio specializing in end-to-end product lifecycle services, from conception to development and management. The company targets businesses and product developers seeking specialized product development expertise. The website is built on WordPress and employs modern digital tools such as Cookiebot for consent management, Matomo and Hotjar for analytics, and Google Tag Manager for marketing integration. The domain is mature, registered since 2007 with OVH, indicating a stable business presence. Technically, the site uses a standard WordPress CMS with Yoast SEO for optimization and includes several third-party scripts for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and could be improved. From a security and compliance perspective, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is found on the homepage, which slightly reduces privacy compliance and business credibility scores. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are present, supporting the legitimacy of the domain and business. Overall, Rtone presents a professional and trustworthy online presence with room for improvement in transparency and security best practices. Strategic enhancements in published policies and security headers would strengthen compliance and trust.
- Paris Saint-Germain
psg.fr
Media · France
74Medium
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Paris Saint-Germain's official website serves as a comprehensive digital platform for fans and stakeholders to access the latest news, live match updates, and exclusive content related to the club's various sports activities including men's and women's football, handball, judo, and esports. The site is professionally designed with consistent branding and targets a global audience of sports enthusiasts and PSG supporters. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.
- ilévia
ilevia.fr
Transportation · France
67Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ilévia operates as the primary public transportation provider for the Métropole Européenne de Lille, offering comprehensive bus, metro, tram, and bike-sharing services. The website serves residents and visitors with route planning, schedules, ticketing, and news about local events, positioning ilévia as a key mobility facilitator in the region. The digital presence is modern, leveraging Next.js and React frameworks, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, security headers, and script nonce usage, though the absence of WHOIS data and explicit security policies slightly reduce transparency. Overall, ilévia's website reflects a professional, trustworthy, and user-centric platform supporting urban mobility.
- Iiléwatt
ilewatt.fr
Energy · France
68Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
iléwatt is a regional electric vehicle charging service operated by the European Metropolis of Lille (MEL), targeting residents and EV users within the metropolitan area. The service offers a subscription model with preferential rates and a mobile app for locating chargers and monitoring charging sessions in real time. The website is professionally designed, mobile-optimized, and provides comprehensive information about the service, subscription offers, and pricing. It integrates modern web technologies including Angular and Tealium for tag management and analytics. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. However, the absence of WHOIS data and lack of explicit security policy or incident response contact information slightly reduce the overall trustworthiness. The site maintains a high security posture with HTTPS and secure form practices, but could improve by adding explicit security headers and a vulnerability disclosure policy.
- La C'ART
lacart.fr
Government · France
69Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
La C'ART is a cultural subscription service offering access to 15 museums and art centers in the Lille metropolitan area, targeting residents and visitors interested in arts and culture. The website is well-branded, professionally designed, and provides comprehensive information about the pass, events, and partner institutions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics tools like Matomo and Facebook Pixel. It is mobile-optimized and includes accessibility features, although some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure information. WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and external references indicate legitimacy. Overall, the site is a reliable and professional platform for cultural engagement in Lille.
Office de Tourisme de Lillelilletourism.com
Hospitality · France
72Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
The website www.lilletourism.com serves as the official online presence of the Office de Tourisme de Lille, providing comprehensive tourism information, cultural insights, and online booking services for visitors to Lille, France. It targets tourists and visitors interested in exploring Lille's heritage, events, gastronomy, and shopping. The site is multilingual, supporting French, English, and Dutch, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a custom Woody theme and leverages modern JavaScript libraries and modules to deliver a rich, responsive user experience. Accessibility and SEO best practices are well implemented, contributing to excellent content quality and navigation clarity. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks explicit security headers and published privacy or incident response policies, which are areas for improvement. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website demonstrates a mature digital infrastructure suitable for its role in tourism promotion, with recommendations to enhance privacy transparency and security posture.
- E-BAAN,SE
hapra.cz
Technology · Czech Republic
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
HAPRA Design is a Czech digital agency specializing in web design, e-commerce development, SEO, social media management, and online marketing services. With over 20 years of experience, the company offers comprehensive digital solutions aimed at businesses seeking to enhance their online presence. Their service portfolio includes website and e-shop creation, content management, PPC advertising, and technical maintenance, positioning them as a full-service digital partner. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site employs a modern technology stack including PHP, MySQL, JavaScript libraries such as jQuery, Bootstrap framework, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is mobile-optimized and uses a custom CMS named publishWEB. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish security policies, and improve accessibility compliance to further strengthen their security posture and trustworthiness.
- e-BAAN Internet s.r.o.
ostravski.cz
Technology · Czech Republic
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
e-BAAN Internet s.r.o., operating under the brand 'Ostravski', is a Czech Republic-based small technology company specializing in web design, e-commerce solutions, and related digital services. With over 20 years of experience and a customer base exceeding 500 clients, the company offers comprehensive web development services including domain registration, hosting, SEO, graphic design, and content management. Their market position is focused on small businesses, freelancers, schools, and municipalities primarily within the Moravian-Silesian region and broader Czech Republic. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs a variety of modern web technologies such as jQuery, Bootstrap modals, Owl Carousel, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search engine visibility. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data raises concerns about domain registration transparency. No explicit security or incident response policies are published, and security headers are missing, which could expose the site to certain risks. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is moderate but could be improved with best practices. The overall risk assessment suggests the website is legitimate and professionally maintained but would benefit from enhanced transparency in domain registration and improved security practices. Strategic recommendations include adding security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.
Other · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Kulturní středisko Omega is a municipal cultural center serving the Brno-sever district in the Czech Republic. It organizes a wide range of cultural, educational, and social events, including concerts, theater performances, exhibitions, and courses. The organization manages multiple venues across Brno and aims to provide quality cultural experiences to a broad audience. Technically, the website uses modern frontend technologies such as Bootstrap and Swiper.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and includes CSRF tokens in forms, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy indicated by the website content. Overall, the site is safe, professional, and focused on community cultural engagement.
International Animal Rescueinternationalanimalrescue.org
Non-profit · United Kingdom
73Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
International Animal Rescue is a well-established non-profit organization dedicated to saving and protecting animals worldwide. Their website reflects a professional and comprehensive approach to animal rescue, rehabilitation, conservation, and community engagement. The organization targets animal welfare supporters, donors, volunteers, and the general public interested in wildlife protection. Their business model relies on donations, adoptions, fundraising, and merchandise sales, positioning them as a reputable charity in the animal welfare sector. Technically, the website is built on Drupal 10 with Commerce 2, integrating modern analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security measures include HTTPS enforcement and reCAPTCHA v3 on forms, though some security headers could be improved for enhanced protection. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security policies or incident response contacts are found, which could be areas for improvement. WHOIS data is privacy protected, common for non-profits, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity, making it a reliable platform for supporters and stakeholders. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response to further strengthen trust and compliance.
swaraOwaswaraowa.org
Non-profit · Indonesia
60Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
swaraOwa is a small non-profit organization dedicated to the conservation of Indonesian gibbons and their habitats. The website serves as an educational and community engagement platform, featuring detailed blog posts, field stories, and conservation updates. It targets conservationists, researchers, local communities, and donors interested in biodiversity preservation. Technically, the site is built on WordPress and hosted via Cloudflare, using standard web technologies and Google Analytics for tracking. While the site is accessible and content-rich, it lacks formal privacy and cookie policies, and runs an outdated WordPress version, which poses security risks. The security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from improved privacy compliance and security hardening.
- Play For Nature
playfornature.org
Non-profit · France
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Play For Nature is a French non-profit organization dedicated to biodiversity conservation and environmental education. Founded in 2013, it operates by raising public awareness and collecting funds to support various conservation programs worldwide. The website serves as a platform to showcase supported projects, promote educational activities, and facilitate donations and sponsorships. The organization targets a general audience interested in environmental protection and biodiversity. Technically, the website is built on a modern WordPress CMS infrastructure using Elementor for page building and Yoast SEO for optimization. It employs standard web technologies including jQuery, Swiper.js for sliders, Google reCAPTCHA for form security, and CookieYes for cookie consent management. Hosting is provided by OVH sas, a reputable provider. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements Google reCAPTCHA to protect forms. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. No privacy policy or terms of service pages were detected, which may impact compliance with GDPR and other regulations. Incident response and vulnerability disclosure mechanisms are not evident. Overall, the website is professional, trustworthy, and well-positioned within its niche. To improve, it should implement comprehensive privacy and security policies, enable DNSSEC, and add security headers. These steps will enhance user trust and regulatory compliance.
Van Tienhoven Foundationvantienhovenfoundation.com
Other · Netherlands
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Van Tienhoven Foundation is a small non-profit organization based in the Netherlands dedicated to providing small grants for the protection of threatened species and key ecosystems worldwide. Their focus is on practical, community-led conservation efforts that generate sustainable environmental impact. The website is professionally designed using WordPress with modern technologies such as jQuery and Slick Carousel, optimized for mobile and SEO. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust verification but the presence of official documents, contact information, and testimonials supports legitimacy. Overall, the site effectively communicates its mission and services to conservation stakeholders globally.
NaturZoo Rheinenaturzoo.de
Hospitality · Germany
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
NaturZoo Rheine operates as a medium-sized zoological park in Germany, hosting over 1,500 animals across approximately 100 species. The website serves as an informative platform targeting families, school groups, and animal enthusiasts, offering details about the zoo's exhibits, educational programs, and visitor information. The business model is non-profit, focusing on conservation, education, and recreation. The site is well-branded and consistent, with clear trust signals including affiliations with recognized zoo associations and transparent contact information. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as Slick Slider and FontAwesome. It integrates Google Tag Manager and Google Analytics for visitor tracking, with a GDPR-compliant cookie consent mechanism in place. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks visible security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen its security maturity.
Fundacja DODOfundacjadodo.pl
Non-profit · Poland
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Fundacja DODO is a Polish non-profit foundation dedicated to supporting the Wrocław Zoo and animal welfare initiatives. The website serves as a platform for fundraising and donations, leveraging WooCommerce and payment gateways such as Przelewy24 and Tpay. The organization appears to be small-sized and locally focused, with a domain age consistent with its founding year of 2016. The website is built on WordPress with modern technologies including React and jQuery, and integrates marketing tools like MailerLite for email campaigns. Mobile optimization and user experience are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance documentation.
Eezy LLCbrusheezy.com
Media
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Brusheezy, operated by Eezy LLC, is a well-established online platform offering a vast collection of free and premium Photoshop brushes and related graphic design resources. The website targets graphic designers and digital artists seeking high-quality Photoshop assets. It operates a freemium business model, providing free downloads alongside premium subscription options for unlimited access. The site enjoys a strong market position within the digital media resource niche, supported by a vibrant community and a network of related sites such as Vecteezy and Videezy. Technically, Brusheezy employs a modern technology stack including JavaScript libraries, analytics tools like Google Analytics and Snowplow, and advertising frameworks such as Freestar and Google DoubleClick. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. From a security perspective, the site demonstrates good practices including HTTPS enforcement and CSRF protection in forms. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Brusheezy presents a low-risk profile with a professional online presence and comprehensive content offerings. The main concern is the absence of WHOIS data transparency, which slightly impacts trust but does not detract significantly from the site's legitimacy. Strategic improvements in security policy publication and WHOIS transparency would enhance its credibility and compliance standing.
- Selectra
selectra.info
Energy · France
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Selectra is a French comparison platform specializing in energy, internet, mobile, insurance, and banking services. It offers consumers tools and advisory services to reduce their bills by comparing providers and facilitating switching. The website is well-established with a strong market presence in France, supported by extensive customer reviews and multiple sector coverage. Technically, the site is built on Drupal 10, uses modern analytics and tracking tools, and implements good privacy and cookie consent mechanisms. Security posture is solid with HTTPS and Content Security Policy in place, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
iSport.czisport.cz
Media · Czech Republic
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
iSport.cz is a prominent Czech sports news portal providing up-to-date sports news, live results, videos, and premium subscription content. It serves a broad audience of sports enthusiasts primarily in the Czech Republic and is part of the larger Deník Sport media group. The website offers comprehensive coverage of football, hockey, tennis, MMA, and other sports, with a strong focus on live event updates and multimedia content. Technically, the site employs modern web technologies including advanced analytics, consent management, and advertising frameworks, ensuring a responsive and user-friendly experience across devices. Security posture is robust with HTTPS enforcement and consent compliance, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance adherence.
- Kavárna Stará Pošta
starapostabela.cz
Hospitality · Czech Republic
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kavárna Stará Pošta is a small local café and bar located in Bělá pod Bezdězem, Czech Republic, offering specialty coffee (Nordbeans), local beers (Zichovec), Prosecco, smoothies, homemade desserts, and light meals. The business targets a general mature audience seeking a calm and welcoming space for socializing or relaxation. The website is built on WordPress with modern plugins like Elementor and WooCommerce, featuring a professional design and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.
- BIKEMAX
bikemax.cz
Retail · Czech Republic
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BIKEMAX.cz operates as the largest bicycle and electric bike gallery in the Czech Republic, offering a wide range of bicycles, accessories, and related services including bike servicing and franchise opportunities. The company targets cycling enthusiasts and general consumers within the Czech market, leveraging a medium-sized e-commerce retail business model. The website reflects a professional and consistent brand presence with clear navigation and comprehensive product categories. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern JavaScript libraries and tracking tools such as Google Analytics, Facebook SDK, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured technical stack supporting the business operations. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. While basic security headers are likely present, explicit security policies and incident response contacts are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected during analysis. Overall, the website presents a trustworthy and professional front for BIKEMAX's retail operations. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing incident response contact information to strengthen trust and compliance.
- Stella Tech BV
mars-amp31.com
Other · Curaçao
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Marsbahis is an online gambling platform licensed in Curacao, offering a wide range of betting and casino games primarily targeting Turkish-speaking users. The website leverages AMP technology to provide a fast and mobile-optimized experience, integrating Google Analytics for user tracking. The business model centers on user registration, deposits, withdrawals, and promotional bonuses to attract and retain customers. The platform positions itself as a licensed and trustworthy operator within the online gambling industry, emphasizing its Curacao license and various gambling services. Technically, the site is well-optimized for performance and mobile use but lacks some advanced security headers and cookie consent mechanisms. The WHOIS data presents a significant anomaly with a domain creation date set in the future, which raises concerns about data accuracy and trustworthiness. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security transparency.
Other
62Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website www.abmanufaktura.cz is currently inaccessible, returning a 403 Forbidden error which blocks access to any content. Due to this restriction, no metadata, business information, or technical details could be extracted. The lack of WHOIS data further complicates verification of domain legitimacy and ownership. The absence of contact information, privacy policies, or security headers indicates a very low digital maturity and security posture. Overall, the site appears non-functional or restricted, preventing meaningful business or security analysis.
- BBěhy Zlín, z.s.
behyzlin.cz
Other · Czech Republic
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Běhy Zlín, z.s. is a small non-profit organization based in the Czech Republic focused on organizing running competitions and running school workshops primarily in the Zlín region. The website serves as a hub for event information, registration, news updates, and community engagement. It targets local runners and sports enthusiasts, providing event schedules, partner information, and educational content. The organization has been active since 2014, with a consistent domain registration and transparent business information. Technically, the website uses modern web technologies including JavaScript libraries like jQuery, Moment.js, and Swiper.js, and is built on the Nette PHP framework. It is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism with granular controls, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
- Městské informační centrum Havířov
michavirovshop.cz
E-commerce · Czech Republic
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MIC Havířov shop is an e-commerce platform operated by the Municipal Information Center of Havířov, offering a variety of collectible souvenirs, textile goods, and publications related to the city of Havířov. The website targets local residents and tourists interested in purchasing local memorabilia conveniently online or at their physical location. The business model is primarily retail-focused with a local government affiliation, positioning it as a trusted source for authentic Havířov merchandise. Technically, the website is built on the Upgates e-commerce platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. Security is well-handled with HTTPS enforced and secure form validation, but lacks some advanced security headers and explicit security policies. From a security and compliance perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements and provides basic privacy and terms of service documentation. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be further investigated. No major vulnerabilities or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website presents a professional and trustworthy front for a local government-affiliated e-commerce business, with room for improvement in domain transparency and security header implementation. Strategic recommendations include verifying domain registration, enhancing security policies, and publishing vulnerability disclosure information to strengthen trust and compliance.
Genesiigenesii.fr
Technology · France
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Genesii is a French technology company specializing in bespoke web application development, custom websites, and AI integration services. Positioned as a small but innovative agency, it serves businesses seeking digital transformation solutions. The company holds the 'Jeune Entreprise Innovante' certification, highlighting its commitment to innovation and research, particularly in machine learning and e-learning platforms. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting its business credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Owl Carousel, and Swiper. It integrates Google Analytics, Google Tag Manager, and Calendly for marketing and scheduling. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a GDPR-compliant cookie consent mechanism. However, additional security headers and a published security policy would enhance its security posture. The security evaluation shows a good baseline with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the website content and certifications support legitimacy. Overall, the site is safe, professional, and trustworthy, with recommendations to improve security headers and incident response transparency. Strategically, Genesii should focus on enhancing its security documentation, expanding accessibility compliance, and maintaining transparency in data protection to strengthen trust and compliance in the evolving regulatory landscape.
Association La SEVEseve-asso.fr
Education · France
64Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Association La SEVE is a small French non-profit organization focused on education about biodiversity and permaculture training. The website presents a professional and consistent brand image with clear navigation and relevant content targeting a general audience interested in environmental education. The organization offers key services including nature animations, project accompaniment, and environmental site management, positioning itself as a regional leader in ecological education and permaculture. Technically, the site is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is basic with no explicit privacy or cookie policies found, but a cookie consent mechanism is present. Overall, the site is trustworthy and safe, with no adult or questionable content detected. However, the absence of WHOIS data reduces domain trustworthiness, suggesting a need for domain registration verification.
M+Hmh.cz
Transportation · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
M+H is a Czech Republic based small business specializing in automotive services including chiptuning, decarbonization, and car media systems. The company claims 28 years of experience, positioning itself as an established player in the automotive enhancement sector. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and use of reCAPTCHA and cookie consent, but lacks visible security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding appear professional and consistent. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.
- Hotel Lions Plzeň
hotellionsplzen.cz
Hospitality · Czech Republic
54Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hotel Lions Plzeň is a small family-run hospitality business located near the historic center of Plzeň, Czech Republic. The hotel offers modern accommodation, restaurant services, conference facilities, and parking including electric vehicle charging. The website is professionally designed with good content quality and clear navigation, supporting multiple languages. The technical infrastructure is based on common web technologies including jQuery and Bootstrap, hosted likely by Czechia.com. Security posture is moderate with cookie consent implemented but lacking explicit privacy policies and security headers. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for users but would benefit from enhanced security and compliance documentation.
Retail · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hawaj.cz is a Czech e-commerce retailer specializing in garden furniture, pools, whirlpools, solar showers, toys, pet supplies, and related leisure products. The website positions itself as an established player with 17 years of market presence, targeting Czech consumers seeking home and garden products. The site features a professional design with clear navigation and a broad product catalog. Technically, the site uses modern JavaScript libraries, Bootstrap 4, and integrates multiple marketing and analytics tools such as Facebook Pixel, Google Tag Manager, Hotjar, and Biano Pixel. HTTPS is enforced, and cookie consent mechanisms are in place, indicating a baseline of security and privacy awareness. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registrant data, reduce overall trust and compliance posture. No WAF or content blocking was detected, and the content is safe for general audiences.
- Mega levné pneu
megalevnepneu.cz
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Mega levné pneu is a Czech Republic-based retailer specializing in the sale of tires and wheels for a wide range of vehicles including motorcycles, cars, trucks, and agricultural machinery. The company also offers onsite tire services (pneuservis) near Prague, emphasizing fast service and ecological tire disposal. The website presents a professional and content-rich platform targeting vehicle owners and fleet operators in the region. Technically, the site uses legacy technologies such as windows-1250 charset and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and credible but would benefit from enhanced security and compliance transparency.
Education · France
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Université de Technologie Belfort-Montbéliard (UTBM) is a recognized French public higher education institution specializing in engineering, master, and doctoral programs. It maintains accreditations such as CTI and the EUR-ACE label, emphasizing quality education and research. The website targets students, researchers, companies, and alumni, offering comprehensive academic and continuing education services. The institution has a solid market position within the French and international education sectors, supported by active social media presence and international partnerships. Technically, the website is built on WordPress with modern plugins and frameworks including Bootstrap, jQuery, and WPBakery. It employs GDPR-compliant cookie consent mechanisms and supports multilingual content via Weglot. Performance and mobile optimization are good, with accessibility features implemented. Analytics are primarily handled via Matomo, with Google Analytics configured but inactive. Security posture is good with HTTPS enforced and no exposed sensitive data. However, the absence of a published security policy and incident response contacts is a gap. The WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the institution's established reputation and accreditation. Overall, UTBM's website is professional, secure, and compliant, serving its educational mission effectively. Strategic improvements include publishing security policies and incident response information to enhance transparency and trust.
Other
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.paysagistes.pro appears to be a professional service site related to landscaping, primarily targeting a French-speaking audience. The site is built on WordPress and utilizes common web technologies such as Font Awesome and Google Maps API for icons and location services. However, the content provided is minimal and mostly technical resources, with no visible business descriptions, contact information, or privacy policies. The WHOIS data is unavailable or protected, which limits the ability to fully verify the domain's legitimacy and ownership details. The site is accessible without any WAF or security challenge blocking access.
Adis Transitionadis-transition.com
Manufacturing · France
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Adis Transition is a small French consulting business specializing in management de transition and operational leadership within high technology and industrial sectors. The company leverages nearly 30 years of experience to support business leaders in transforming and optimizing industrial performance. Their services include general management, operational diagnostics, R&D direction, and industrial transformation. The website is professionally designed using WordPress, featuring modern technologies such as Google reCAPTCHA v3 for form protection. While the site is well-structured and content-rich, it lacks explicit privacy and terms of service pages, and no WHOIS registration data is available, which raises some legitimacy concerns. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is safe, business-focused, and trustworthy, but improvements in transparency and security practices are recommended.
Julie Fuchsjuliefuchs.fr
Other · France
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Julie Fuchs is a professional artist photographer, accredited trainer in mental health first aid (PSSM), and facilitator in collective intelligence. The business focuses on supporting organizations with relational and mental health challenges at work, combining photography with consulting and facilitation services. The website is built on the Wix platform, leveraging modern web technologies and analytics tools, but lacks comprehensive privacy and cookie policies. Security posture is good with HTTPS and some security hardening scripts, though explicit security headers are missing. WHOIS data is unavailable, which limits domain trust verification. Overall, the site presents a professional image but could improve transparency and compliance aspects.
Brain Behind Ltdbrain-behind.com
Finance · United Kingdom
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Brain Behind Ltd is a UK-based medium-sized company founded in 2005, specializing in high-volume loyalty and mission-critical loyalty solutions integrated with existing payment terminals. The company serves a diverse B2B audience including financial institutions, retailers, tourism operators, and urban mobility planners. Their product suite includes enterprise vouchers, loyalty programs for banks, tourism solutions, and contract farming administration systems. The website reflects a mature business with a consistent brand and strong partner ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, hosted on UKFast infrastructure. Security posture is moderate with room for improvement in DNSSEC and HTTP security headers. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable provider of payment and loyalty solutions.
- NName.com, Inc.
domainsite.com
Technology
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
domainsite.com is a legacy domain registrar website that has merged with Name.com, Inc. The site serves primarily as an informational placeholder directing users to Name.com for domain management and registration services. The business operates in the domain registration sector, targeting domain owners and registrants. The merger consolidates services under the Name.com brand, maintaining user credentials and domain products without disruption. Technically, the website uses Bootstrap 3 and basic JavaScript, hosted likely on AWS infrastructure, with minimal SEO and accessibility features. Security posture is moderate with domain status locks in place but lacks DNSSEC and security headers. No privacy or cookie consent mechanisms are present, and no direct contact or incident response information is provided on this page. Overall, the domain registration and business information are consistent and legitimate, reflecting a stable and established registrar entity.
NaKoncerty.cznakoncerty.cz
Media · Czech Republic
52Partial
DNS & email only
DNS & email only
NaKoncerty.cz is a Czech language media portal dedicated to providing news, updates, and information about concerts, festivals, and the music scene in the Czech Republic. The website offers a variety of articles covering upcoming events, festival news, and concert reviews, targeting music enthusiasts and festival goers primarily in the Czech region. The business model revolves around content publication and advertising revenue, leveraging Google AdSense and Jetpack analytics for monetization and user insights. Technically, the website is built on the WordPress CMS platform, utilizing common web technologies such as jQuery, Slick Carousel, and FontAwesome for UI enhancements. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. However, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The website is mobile optimized with a responsive design and moderate performance. From a security perspective, the site demonstrates basic good practices such as HTTPS usage but misses critical security headers and formalized privacy compliance mechanisms. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is not publicly available, indicating privacy protection or registry restrictions, but the website content and structure suggest a legitimate and professional media portal. Overall, NaKoncerty.cz presents a well-structured and content-rich platform for music event information in the Czech Republic. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen the site's security posture and business credibility while maintaining its role as a valuable resource for its audience.
videezyvideezy.com
Media
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Videezy is an online platform providing free and premium stock video footage, 4K videos, and After Effects templates targeted at videographers and content creators. The site operates a freemium business model, offering a community-driven resource for video content. The platform is well-branded and professionally designed, with a consistent user experience and clear navigation. Technically, the website employs modern JavaScript libraries, analytics tools, and monitoring services, indicating a mature digital infrastructure. However, some technical aspects such as security headers and privacy policies are lacking or not detected in the provided content. The security posture is moderate with HTTPS enforced and CSRF protections, but missing some best practices and incident response information. Overall, the website is safe for general audiences and maintains a moderate trust level, though the absence of WHOIS registration data reduces domain transparency and trustworthiness.
Other
68Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at run.app is currently inaccessible, serving only a standard 404 Not Found error page with no business or security related content. There is no metadata, structured data, or contact information available to analyze. The lack of accessible content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site does not present any detectable technologies, scripts, or security headers, and no evidence of WAF or security blocking mechanisms was found. The security posture cannot be evaluated due to the absence of content and configuration data. Overall, the site appears inactive or misconfigured, resulting in a very low trust and credibility score.
Marsbahismars-giris3.com
Other
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Marsbahis is an online gambling and betting platform offering a variety of services including sports betting, live casino games, and slot games. The platform targets adult users interested in online gambling, primarily Turkish-speaking audiences. It emphasizes user security and privacy in its messaging but lacks published privacy and cookie policies. Technically, the website uses AMP technology for fast mobile performance and is hosted behind Cloudflare DNS, with a domain registered recently in 2024. Security posture is moderate with HTTPS enabled but lacks security headers and incident response contacts. Overall, the site is functional and professional but needs improvements in privacy compliance and security transparency.
Nadační fond Eduzměnacpv-kh.cz
Education · Czech Republic
60Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website cpv-kh.cz represents the Nadační fond Eduzměna, a regional educational support center focused on the Kutnohorsko region in the Czech Republic. It provides information about the Eduzměna project, aiming to enhance educational opportunities and wellbeing for children, parents, teachers, and school leadership. The site offers resources such as workshops, mental health initiatives, and community support, positioning itself as a key regional educational partner. Technically, the site is built on WordPress using Elementor, with modern libraries like Bootstrap and FontAwesome, and integrates marketing and analytics tools including Google Analytics and Facebook Pixel. The site is hosted likely by WEDOS, a Czech hosting provider, and uses HTTPS with a good SSL configuration. Security posture is solid with no visible vulnerabilities, though explicit security headers and policies are not fully implemented. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information includes a clear phone number and social media links, but no verified company email was found. Overall, the site is professional, well-branded, and trustworthy, serving a non-profit educational mission. Strategic improvements include publishing privacy and security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.
BICZ a.s.bicz.cz
Real Estate · Czech Republic
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
BICZ a.s. is a Czech Republic based real estate investment company specializing in residential housing projects, property reconstruction, and rental services. The company positions itself as a leading specialist in its sector, targeting investors and clients interested in responsible real estate investment. The website reflects a professional business model focused on property development and management within the Czech market. Technically, the website is built on WordPress with modern plugins and analytics tools such as Google Analytics and Cookiebot for GDPR compliance. The site is mobile optimized and presents good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and technical setup appear professional and trustworthy. Overall, the site is safe for general audiences and does not contain any adult or questionable content.
Transportation
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website smartwings.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct access to the site's content. This prevents extraction of business, contact, or policy information from the site. The domain is registered since 2003 with a reputable registrar and uses Cloudflare for DNS and security services. However, no privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions accessible. The technical infrastructure relies on Cloudflare's security and CDN services, but the lack of accessible content limits the ability to assess digital maturity or user experience. Security posture is partially observable through the use of Cloudflare's WAF and Turnstile challenge, but no additional security headers or policies are evident. Overall, the site appears legitimate based on domain age and registration data, but the blocking mechanism significantly limits analysis and lowers the trust and quality scores.
- PPROTECTON HOLDING, a.s.
protecton.cz
Other · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Protecton HOLDING, a.s. is a well-established Czech security services company founded in 2017, offering a broad range of security-related services including personal protection, monitoring, technical solutions, and event security. The company operates with a large workforce and manages multiple subsidiaries, positioning itself as a significant player in the Czech security market. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable security solutions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and is hosted likely with WEDOS, a Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in security transparency and incident response readiness.