Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,181001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
24,501–24,550 of 99,068
Storck BVstorck.nl
Retail · Netherlands
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Storck BV is a well-established confectionery company operating in the Netherlands, offering popular brands such as merci, Knoppers, Werther's Original, and Toffifee. The website serves as a corporate and consumer portal providing brand information, company vision, career opportunities, and consumer services. The company maintains a strong market position with a focus on quality and sustainability. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information could be improved. Overall, the site reflects a professional and trustworthy business presence.
STORCK SLOVENSKO, s.r.o.storck.sk
Manufacturing · Slovakia
69Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
STORCK SLOVENSKO, s.r.o. operates as a Slovak subsidiary of the international Storck group, specializing in manufacturing and retailing confectionery products. The website serves as a corporate and consumer information portal, showcasing brands like merci, Toffifee, and Knoppers, and providing career and consumer service information. The site targets general consumers and potential employees within Slovakia and related markets. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Storck Sp. z o.o.storck.pl
Retail · Poland
68Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Storck Polska operates as a subsidiary of the global Storck confectionery company, focusing on manufacturing and distributing well-known confectionery brands in Poland. The website provides comprehensive information about the company, its brands, career opportunities, and corporate news, targeting consumers, potential employees, and business partners within Poland. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries, ensuring a responsive and accessible user experience. Privacy and cookie policies are implemented in compliance with GDPR, enhancing user trust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information could be improved. The absence of WHOIS data limits domain registration transparency but does not detract from the professional presentation and legitimacy of the site.
Storck (Schweiz) GmbHstorck.ch
Retail · Switzerland
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Storck (Schweiz) GmbH operates a professional and well-structured website focused on confectionery products and brand promotion in Switzerland. The company presents multiple well-known brands and provides comprehensive information about product quality, corporate values, and career opportunities. The website is built on TYPO3 CMS and uses modern JavaScript libraries, ensuring a good technical foundation and user experience. Privacy and cookie policies are implemented with a consent mechanism, reflecting compliance with GDPR requirements. However, explicit contact emails and phone numbers are not directly listed, relying instead on contact forms. Security posture is generally good with HTTPS and cookie consent, but lacks visible security headers and explicit security policies or incident response information. WHOIS data aligns well with the website content, confirming legitimacy and trustworthiness. Overall, the site is professional, secure, and compliant, suitable for its target audience.
Storck Hungária KFT.storck.hu
Retail · Hungary
70Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Storck Hungária KFT. operates as the Hungarian distributor and brand representative for the international Storck confectionery group. The website provides product information, corporate details, and career opportunities primarily targeting Hungarian consumers and business partners. The site is built on TYPO3 CMS with a modern JavaScript stack, ensuring good performance and mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are absent. Overall, the website reflects a professional and trustworthy corporate presence.
STORCK GES.M.B.H.storck.at
Retail · Austria
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
STORCK GES.M.B.H. operates the www.storck.at website as the Austrian corporate presence of the Storck confectionery brand. The site provides comprehensive information about the company, its brands, career opportunities, and consumer services. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS and uses modern JavaScript libraries, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not published. The absence of WHOIS data from NIC.AT limits domain registration trust assessment but does not detract from the site's professional appearance and content quality. Overall, the site is a trustworthy corporate resource for consumers and job seekers in Austria.
STORCK CANADA INC.storck.ca
Retail · Canada
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Storck Canada Inc. operates a professional corporate website presenting its confectionery business, brand portfolio, quality standards, career opportunities, and contact information primarily via a contact form. The website is built on TYPO3 CMS and uses modern JavaScript libraries and Piwik PRO analytics, reflecting a mature digital infrastructure. Privacy and cookie policies are clearly presented and GDPR compliant, enhancing user trust. However, the absence of WHOIS data for the domain www.storck.ca raises concerns about domain registration transparency and trustworthiness. No direct company contact emails or phone numbers are published, and no explicit security or incident response policies are available, which could be improved to strengthen security posture and user confidence.
شتورك الشرق الأوسط وإفريقياstorck.ae
Retail · United Arab Emirates
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website for Storck Middle East and Africa presents a professional and well-structured digital presence focused on confectionery products and corporate information. The company operates in the retail sector with a strong brand presence in the UAE and globally, supported by multiple localized domains. The site is built on TYPO3 CMS with a modern JavaScript technology stack and includes essential privacy and cookie consent mechanisms, indicating a good level of digital maturity. However, direct contact information such as emails and phone numbers are not prominently displayed, which could impact user engagement and trust. Security posture is solid with HTTPS and cookie consent, but lacks explicit security policies or incident response details. Overall, the site is trustworthy, well-branded, and compliant with GDPR, suitable for its target audience in the Middle East and Arabic-speaking consumers.
Storck USA, L.P.storck.us
Retail · United States
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Storck USA, L.P. operates as a confectionery company with a portfolio of well-known candy brands targeted at consumers in the United States. The website serves as a corporate and brand information portal, showcasing products, company vision, career opportunities, and latest news. The site is built on TYPO3 CMS and employs modern JavaScript libraries and Piwik PRO for analytics, indicating a moderate level of digital maturity. The presence of cookie consent and a comprehensive privacy policy reflects attention to privacy compliance. However, the absence of visible contact emails or phone numbers on the homepage suggests contact is managed through dedicated service pages. Security posture is moderate with no visible security headers and no explicit incident response or security policy information publicly available. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and brand consistency support its legitimacy. Overall, the site is well-structured, user-friendly, and trustworthy for its intended audience.
Storckstorck.sg
Retail · Singapore
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Storck Singapore operates as the local corporate website for the international confectionery company Storck, presenting its brand portfolio, corporate vision, career opportunities, and consumer services. The website targets consumers, potential employees, and business partners within Singapore and the broader region. The business model focuses on manufacturing and retailing confectionery products with a strong brand presence. Technically, the site is built on TYPO3 CMS and employs modern JavaScript libraries, ensuring a responsive and accessible user experience. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which should be monitored. Overall, the website is professional and trustworthy but could improve transparency and security documentation.
Storck UK Limitedstorck.co.uk
Retail · United Kingdom
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Storck UK Limited operates a corporate website focused on its confectionery business in the United Kingdom. The site provides detailed brand information, career opportunities, and consumer services, positioning Storck as a reputable confectionery manufacturer and retailer. The website is built on TYPO3 CMS with a modern JavaScript stack and includes multimedia content such as videos and image sliders. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced, though some security headers and incident response disclosures could be improved. The domain www.storck.co.uk itself is not registered according to WHOIS data, indicating the site may be served on a different domain or subdomain, which slightly impacts domain trustworthiness but does not detract from the professional presentation and legitimacy of the content.
Energy · France
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ALEPTE - Agence Locale de l'Énergie Paris Terres d'Envol is a local energy agency focused on informing, advising, and supporting individuals, local authorities, social landlords, asset managers, businesses, and artisans in the Paris Terres d'Envol territory. The agency provides services such as energy diagnostics, renovation support, and educational workshops, positioning itself as a trusted local resource in the energy sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the SPIP CMS platform and utilizes modern web technologies including Google Analytics, Google Tag Manager, WebFont Loader, and Owl Carousel for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable concern, impacting the trustworthiness of the domain registration. However, the presence of multiple reputable partners and the professional nature of the content mitigate some risks. Overall, ALEPTE's website is a well-structured and informative platform serving its community effectively but would benefit from enhanced security practices, transparent privacy policies, and domain registration transparency to improve trust and compliance.
- Mac Mini Vault
macminivault.com
Technology
61Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Mac Mini Vault is a specialized technology company providing enterprise-grade Mac cloud hosting and dedicated server solutions, focusing on Mac minis, Mac Pros, and Mac Studios. The company targets businesses and enterprises requiring high-density Mac hosting and colocation services. Their market position is niche but professional, with a clear business model centered on dedicated Mac hardware hosting and managed services. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site is well-structured, mobile-optimized, and includes essential business contact information and social media presence, supporting digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected. Overall, the website is professional and trustworthy from a user perspective but would benefit from improved transparency and security documentation.
Flirc Inc.flirc.tv
Technology · United States
68Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Flirc Inc. is a small technology company specializing in media center accessories and Raspberry Pi cases, operating primarily through an e-commerce platform powered by Shopify. The company has a mature domain registered since 2008 and offers a range of hardware products including universal remote controls, USB receivers, and custom Raspberry Pi cases. Their market position is niche but well-established, supported by positive media mentions and customer testimonials. Technically, the website leverages modern web technologies and Shopify's robust infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and use of hCaptcha for form protection, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with moderate user tracking for analytics and marketing purposes.
Dobré víly dětem | Úvoddobrevily.cz
Non-profit · Czech Republic
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Dobré víly dětem is a Czech website focused on supporting children and families, aiming to help children believe they can be happy in life despite past experiences. The site appears to be a small-scale or non-profit initiative founded around 2015. The website is built using the Weblium CMS platform and incorporates standard tracking technologies such as Google Analytics and Facebook Pixel. The technical infrastructure is moderate with HTTPS enabled and service workers registered, but lacks advanced security headers and comprehensive privacy or cookie policies. No explicit contact or incident response information is provided, which limits transparency and user trust. Overall, the site is accessible and safe for general audiences, with content targeted at children and families.
iovoxiovox.com
Technology
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iovox is a technology company specializing in call tracking, analytics, and communication solutions designed to optimize marketing ROI and improve customer journey insights. Established in 2007, the company offers a flexible platform with global coverage and multilingual 24/7 support, targeting businesses seeking to enhance lead generation and operational efficiency. Their services include advanced call tracking, conversational AI, developer APIs, and white label options, positioning them as a competitive player in the telecommunications technology sector. The website demonstrates a professional digital presence with good content quality and user experience. Technically, the site employs modern JavaScript libraries, Bootstrap framework, and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforcement and standard security headers, though lacks explicit published security or incident response policies. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and privacy policies. Overall, the domain WHOIS data is missing or privacy protected, which slightly impacts trust but does not outweigh the professional business presentation and operational indicators.
SORENecodesign.solar
Energy · France
53Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
SOREN operates a specialized website focused on the eco-design and environmental impact assessment of photovoltaic solar panels. The company provides consultancy and simulation tools aimed at improving the sustainability and recyclability of solar panels, positioning itself as a niche player in the renewable energy sector. The website is professionally designed, multilingual, and supported by EU Horizon 2020 funding, indicating a credible and research-backed initiative. Technically, the site is built on WordPress with modern plugins and themes, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and dedicated security policies are absent. Overall, the domain WHOIS data is privacy protected but the website content and social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving incident response transparency.
DBAMdbam.fr
Other · France
57Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
DBAM is a specialized event equipment rental and sales company based in Nantes, France, with over 25 years of experience. They provide professional sound, lighting, structure, and electrical distribution equipment primarily for event organizers and production companies. The website is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a good level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the website is professional, well-structured, and trustworthy, though it could enhance compliance and security transparency.
Mediatel CZ |mediatel.cz
Other
61Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Mediatel CZ appears to be a business-oriented website likely focused on media or related services, as suggested by the domain and website title. The site is built on WordPress using the Divi theme and integrates Bitrix24 CRM tools, indicating a moderate level of digital maturity and customer engagement capabilities. However, the absence of WHOIS data limits the ability to verify domain legitimacy and ownership details. The website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance with data protection regulations such as GDPR. Security posture is moderate but could be improved by implementing standard security headers and ensuring robust SSL configurations. Overall, the site is accessible and safe for general audiences but requires enhancements in compliance and security to improve trust and professionalism.
General Codecodepublishing.com
Government
65Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
General Code is a specialized provider of municipal code solutions designed to integrate ordinances, zoning codes, and building codes with various municipal systems. The company targets government entities and municipalities, positioning itself as a forward-thinking technology partner in the government sector. The website is built on WordPress, leveraging modern SEO and analytics tools to enhance digital presence and user engagement. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and incident response policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies, and no GDPR indicators were found. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and presentation suggest a legitimate business. Overall, the site is professional but would benefit from improved transparency and security practices.
ICC CDSicc-cds.com
Technology · United States
66Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
ICC Community Development Solutions, LLC operates as a specialized technology provider focused on streamlining community development operations for government and related agencies. Their offerings include cloud-based software solutions such as Laserfiche and Municity, designed to enable virtual work environments and improve operational efficiency. The company is positioned as a niche player within the government technology sector, leveraging its affiliation with the International Code Council to establish credibility and market presence. The website reflects a professional and consistent brand image targeting government entities and community development professionals. Technically, the site is built on WordPress with modern plugins and themes, hosted via GoDaddy with DNS managed by Cloudflare. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and domain locks in place, but DNSSEC is not enabled and security headers are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR indicators. Contact information is clearly provided, including phone and physical address, with social media channels active on major platforms. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and privacy compliance are recommended.
L'Observatoire de l'Europelhivic.org
Media · France
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
L'Observatoire de l'Europe is a French-language media platform providing analysis and opinions on European political and social issues. It serves a niche audience interested in European affairs, offering news articles, opinion pieces, and a forum for debate. The website is built on WordPress with modern SEO and performance optimizations, including Yoast SEO and WP Rocket. It integrates Google Tag Manager and Adsense for analytics and advertising. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, lacking a visible cookie consent mechanism. The domain WHOIS data is unavailable, which raises some legitimacy concerns, but the active content and professional presentation mitigate these somewhat. Overall, the site is a credible source for European political discourse but would benefit from enhanced transparency and privacy compliance.
- R
Media · France
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Rezo.net is a French-language media portal established in 1996, focusing on social, political, and cultural news aggregation and commentary. It curates content from various reputable sources and targets French-speaking audiences interested in these topics. The website uses the SPIP CMS and is hosted by OVH sas, a reputable French hosting provider. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact and incident response information are not provided, limiting transparency. Overall, the website is accessible without WAF or blocking mechanisms and contains safe content suitable for general audiences.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at minirezo.net/lander is a minimal landing or parking page with very limited content. It primarily loads a Google Adsense script and static resources from wsimg.com, indicating it is used for advertising revenue rather than active business engagement. The domain is registered with GoDaddy.com, LLC since 2004, which suggests a long-standing registration, but the website itself does not reflect an active or professional business presence. There are no privacy policies, contact information, or business descriptions available on the page. Technically, the site uses basic JavaScript and CSS resources but lacks modern SEO, accessibility, and security features. There is no evidence of HTTPS enforcement or security headers, and DNSSEC is not enabled on the domain. The site is mobile responsive at a basic level but overall design and user experience are poor. From a security perspective, the absence of security headers, privacy policies, and contact information for incident response reduces trustworthiness. The domain registration is consistent and not privacy protected, but the lack of content and business information lowers legitimacy. No WAF or blocking mechanisms were detected, and the site is accessible but minimal. Overall, the website poses low risk but also offers minimal value or trust signals to visitors. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving content quality, and implementing security best practices to enhance trust and compliance.
Education · France
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ENSAT is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. It serves a medium-sized student body and maintains strong partnerships with regional and international institutions. The website reflects a professional educational institution with clear communication channels and certifications. Technically, the site uses a Java-based CMS (Ametys) with modern front-end libraries and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but this does not detract from the site's legitimacy. Overall, ENSAT presents a trustworthy and well-maintained digital presence.
L'Institut Agro Montpellierinstitut-agro-montpellier.fr
Education · France
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
L'Institut Agro Montpellier is a reputable French public higher education institution specializing in agriculture, food, and environmental sciences. It offers a range of engineering, master, and doctoral programs, alongside active research and innovation initiatives. The institution targets students, researchers, and professionals interested in sustainable agriculture and environmental management, positioning itself as a leading grande école with strong Mediterranean and international ties. Technically, the website is built on Drupal 11, leveraging modern frameworks and libraries such as Uikit and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with comprehensive structured data enhancing search visibility. Privacy compliance is well addressed with cookie consent mechanisms and a clear privacy policy. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies or incident response information, which could be improved to enhance trust. The absence of WHOIS data is noted but is common for French domains managed by AFNIC, and does not significantly detract from the site's legitimacy. Overall, the website reflects a mature digital presence suitable for an educational institution, with strong content quality and user experience. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing performance optimizations.
- EENFP GROUP
enfp.fr
Education · France
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ENFP Group is a French educational institution specializing in professional training and BTS diplomas across sectors such as real estate, tourism, banking, management, marketing, and IT. Established in 2014, it offers initial training, blended learning, and professional transition programs, targeting students and professionals in France. The website reflects a well-structured and professional digital presence with clear service offerings and contact channels. Technically, the site is built on WordPress with modern analytics and tracking tools, ensuring moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, though additional security headers and policies could enhance the posture. Privacy compliance is partial, lacking explicit cookie consent mechanisms. Overall, the site is trustworthy and credible with a strong business focus on education.
Programme SAFIRtelesanteautisme-safir.org
Education · France
66Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
The website telesanteautisme-safir.org serves as an educational platform for the SAFIR program, which focuses on training and support services related to autism and reciprocal interactions. It is affiliated with several academic and research institutions in France, indicating a credible and specialized educational offering. The platform is built on Moodle LMS, leveraging modern web technologies such as YUI, jQuery, and RequireJS, providing a functional and moderately optimized user experience. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site is safe, professional, and targeted at learners and professionals in the healthcare and education sectors.
Somfysomfypro.co.kr
Manufacturing · South Korea
74Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Somfypro.co.kr is a professional B2B website dedicated to Somfy's motorized solutions for solar shading and related products, targeting architects, installers, and interior professionals in South Korea. The site provides detailed product specifications, manuals, and educational resources such as Somfy School. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies and includes standard security headers and HTTPS encryption. Privacy and cookie policies are present with consent mechanisms, indicating a baseline compliance with GDPR. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which requires further investigation. Overall, the site presents a professional and trustworthy front for Somfy's Korean market operations.
Efty B.V.efty.com
Technology · Netherlands
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Efty B.V. operates a leading global domain name marketplace and portfolio management platform, offering services that simplify buying, selling, and managing domain names. Their product suite includes Efty Investor for portfolio management, Efty Pay for payment processing, and Efty Market as a marketplace platform. The company targets domain investors, businesses, and individuals seeking premium domain names, positioning itself as a trusted and efficient intermediary in the domain industry. The website is professionally designed with clear navigation and comprehensive content, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and Cloudflare services for DNS and security. Analytics are implemented via Google Analytics and Simple Analytics, with user tracking at a moderate level. The site is mobile-optimized and performs well, with fast loading times and good accessibility features. Security is robust with HTTPS enforced, Cloudflare protection, and use of Turnstile captcha on forms, though some security headers and DNSSEC are not enabled. From a security perspective, the site demonstrates good practices with secure transactions and client transfer protection on the domain. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit security policy or incident response contacts are areas for improvement. The WHOIS data aligns well with the business claims, showing a long domain age and consistent registration details, supporting legitimacy. Overall, Efty.com presents a trustworthy, professional, and secure platform for domain marketplace services. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing security policies, and enhancing security headers to further strengthen compliance and trust.
- Konica Minolta Business Solutions Europe GmbH
konicaminolta.eu
Technology · Germany
68Medium
NIS2 55 · GDPR 33
NIS2 55 · GDPR 33
Konica Minolta Business Solutions Europe GmbH operates as a leading provider of smart IT services, multifunctional devices, and professional printing solutions across Europe. The company targets business customers seeking advanced digital workplace, printing, and healthcare imaging technologies. As a subsidiary of the global Konica Minolta group, it holds a strong market position with a comprehensive portfolio of services including managed print, cloud, and imaging IoT solutions. The website reflects a mature digital presence with modern technologies such as Next.js and integration of Google Maps and Usercentrics for cookie consent. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, supporting the enterprise business model effectively.
- Konica Minolta Business Solutions Finland Oy
konicaminolta.fi
Technology · Finland
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Konica Minolta Business Solutions Finland Oy operates as a key regional branch of the global Konica Minolta group, providing advanced technology solutions focused on office and professional printing, data analytics, and healthcare imaging. The company targets business and organizational clients seeking modern, secure, and efficient digital and printing solutions. The website reflects a mature digital presence with a modern tech stack including Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response information are absent. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.
Vercelvercel.live
Technology
72Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Vercel is a leading technology company providing a developer experience platform that enables teams to develop, preview, and ship web applications efficiently. Their platform is widely adopted by frontend developers and enterprises seeking fast iteration and deployment capabilities. The website reflects a mature digital presence with a focus on performance, usability, and developer-centric features. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Vercel's own platform, ensuring fast load times and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and client-side protections, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, supporting Vercel's market position as a premier web development platform.
Webintrek s.r.o.webintrek.cz
Other · Czech Republic
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Webintrek s.r.o. is a Czech advertising company established in 2005, offering a range of custom advertising services including graphic design, vehicle wraps, banners, promotional items, and online magazine advertising. The company has a long-standing market presence with over 10,000 completed projects, targeting general business clients in the Czech Republic. The website is built on WordPress with Bootstrap and jQuery, hosted on a Czech hosting provider, and demonstrates moderate technical maturity with basic mobile optimization and SEO. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. No explicit contact emails or phone numbers are provided on the homepage, which limits direct communication channels. Overall, the site is professional and trustworthy but could improve compliance and security practices.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at https://g9904216750.co/ presents extremely minimal content, consisting solely of the text 'Geo Targetly - Europe-West-6-Node' with no additional metadata, navigation, or business information. This suggests the site may be a placeholder, test node, or non-operational domain. The lack of any privacy, cookie, or terms of service policies, combined with no contact information or branding, indicates a very low level of digital maturity and business presence. Technically, no modern frameworks, CMS, or analytics tools are detected, and no security headers or HTTPS usage is evident, exposing the site to potential security risks. The WHOIS data is privacy protected, which limits transparency and trustworthiness assessment. Overall, the site has a very low security posture and minimal business credibility, with no visible vulnerabilities but also no safeguards or compliance measures in place. Strategic recommendations include implementing HTTPS, adding clear business and privacy information, and improving content and technical infrastructure to establish legitimacy and trust.
The Knowledge Onlinetheknowledgeonline.com
Media · United Kingdom
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Knowledge Online is a well-established media production directory serving the UK film, television, and commercials industry. It provides comprehensive contact information for crew and companies, available in both print and digital formats. The website reflects a professional and trusted resource with a long history dating back to 1986, positioning itself as a key industry directory. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Google Tag Manager, and various JavaScript libraries, ensuring a good user experience and moderate performance. Security-wise, the site employs HTTPS, security headers, and monitoring tools like New Relic, though there is room for improvement in CSP implementation and incident response transparency. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, though the lack of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security policies, improving accessibility, and publishing vulnerability disclosure information.
GROG®grog.eu
Retail · Italy
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
GROG® is a specialized manufacturer and retailer of high-quality handcrafted markers and inks, primarily targeting graffiti artists and street stylers. Founded in 2005 and based in Italy, the company has established a strong niche presence with a diverse product line including various paint and ink types. The website reflects a professional brand image with consistent design and clear navigation, supporting both retail and B2B distribution models. Technically, the site is built on WordPress using common frameworks such as Bootstrap and jQuery, with SEO optimization via Yoast and analytics through Google Analytics. Security posture is adequate with HTTPS and cookie consent implemented, though it lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable due to EURid privacy policies, but the domain and website content align with a legitimate business profile. Overall, the site is safe, well-maintained, and trustworthy for its target audience.
- BEST:TIME
best-time.cz
E-commerce · Czech Republic
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
BEST:TIME is a Czech e-commerce business specializing in sports clothing made from quality Italian materials with designs tailored by athletes and featuring Czech motifs. The website targets Czech consumers interested in sportswear for men, women, and children. The business operates primarily online, leveraging the Shoptet e-commerce platform to offer a range of sports apparel and accessories. The company positions itself as a niche brand focusing on quality and local design, serving a small to medium-sized market segment. Technically, the website employs a modern tech stack including Google Analytics, Facebook SDK, Hotjar, and uses HTTPS with appropriate security headers. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, WHOIS data is unavailable, which limits domain trust analysis. No explicit security policy or incident response information is published, and the site uses an outdated jQuery version, which could pose security risks. Overall, the website is professional, secure, and trustworthy, but could improve transparency and security posture by publishing security policies and updating libraries.
- KERAMOST, a.s.
keramost.cz
Manufacturing · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KERAMOST, a.s. is a Czech manufacturing company specializing in the mining and processing of natural mineral raw materials such as bentonites, cat litter products, metakaolin, and other industrial minerals. The company emphasizes sustainability, environmental protection, and quality assurance with certifications aligned to European standards. Their market position is that of an established regional player with a long history and significant raw material reserves. The website reflects a professional digital presence with modern technologies and user-friendly navigation. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security measures such as HTTPS and form validation are in place, but additional security headers and incident response information would strengthen their posture. Overall, the company presents a credible and trustworthy business profile with room to enhance privacy and security disclosures.
KOREJZOVA LEGAL s.r.o.korejzova.com
Other · Czech Republic
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
KOREJZOVA LEGAL s.r.o. is a Czech legal firm specializing in intellectual property law, with over 30 years of experience providing comprehensive services in industrial and intellectual property rights. The company targets businesses and individuals seeking protection and legal advice related to trademarks, patents, licensing, and anti-counterfeiting measures. Their market position is that of an established, trusted boutique law firm with international reach through partnerships and representation before European and international IP offices. Technically, the website employs modern web technologies including Bootstrap, Google Tag Manager, and Snowplow Analytics, hosted via a CDN for performance. The site is mobile-optimized and well-structured, offering a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. Overall, the site is safe, professional, and trustworthy, though WHOIS data is unavailable, which slightly impacts domain trust assessment.
Retail
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at nutribullet.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful analysis of the site's content, metadata, or security posture. The domain is registered since 2011 with CSC Corporate Domains, Inc., a reputable registrar, indicating a legitimate registration history. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance with privacy and security standards. The technical infrastructure cannot be evaluated due to the blocked content. Security posture is unknown, with no visible security headers or policies. Overall, the site appears to be blocked or restricted, which significantly impacts trust and usability.
- SPORTISIMO s. r. o.
sportisimo.cz
Retail · Czech Republic
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SPORTISIMO s. r. o. operates a leading Czech sports goods e-commerce platform and retail chain, offering over 10 million items including shoes, clothing, and sports equipment. The website targets general consumers interested in sports and leisure products, with a strong market presence in the Czech Republic supported by over 100 physical stores. The business model is primarily retail-focused, leveraging both online and offline channels to serve customers. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence.
FCC Environment CEEfcc-group.eu
Energy · Austria
66Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
FCC Environment CEE is a prominent waste management company operating in Central and South East Europe, offering a wide range of services including municipal, business, household, and environmental waste solutions. The company emphasizes sustainability and resource efficiency, supported by ISO certifications and a clear mission statement. The website demonstrates a mature digital presence with multimedia content, social media integration, and comprehensive cookie consent mechanisms. Technically, the site uses modern JavaScript libraries and tracking tools, though some security headers and explicit security policies are not publicly visible. The absence of WHOIS registrant data suggests privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and well-positioned in its market.
Škoda Groupskoda.cz
Other
63Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Škoda Group's website is accessible and presents basic corporate branding but lacks substantive business information, contact details, and legal disclosures. The absence of WHOIS registration data raises concerns about the domain's legitimacy. Technically, the site uses JavaScript and a cookie consent tool (CookieYes) but lacks advanced security headers and privacy policies. The security posture is weak due to missing HTTPS verification and security best practices. Overall, the site appears to be in an early or incomplete stage of deployment, with limited digital maturity and business credibility.
- MMary Kay Czech Republic s. r. o.
marykay.cz
Retail · Czech Republic
58Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Mary Kay Czech Republic s. r. o. operates as the official authorized seller of Mary Kay cosmetics in the Czech Republic, leveraging a network of independent beauty consultants to deliver personalized beauty products and services. The website reflects a mature digital presence with comprehensive product offerings, interactive tools, and strong brand consistency aligned with the global Mary Kay brand. The business model focuses on direct sales and personalized customer engagement, positioning Mary Kay as a market leader in the Czech cosmetics retail sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Brightcove for video content, hosted on a Sitecore CMS platform. The site is mobile optimized with good SEO practices and a professional design, although accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data reduces trust slightly but is likely due to registry policies rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, accessibility, and incident response transparency would further enhance the security posture and user trust.
- WWelcome to nginx!
lopataa.site
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website lopataa.site currently serves only a default nginx welcome page, indicating that no active business website content is deployed. The domain is registered with Cloudflare, which also provides hosting and WAF services, suggesting the site is protected but content is either not published or blocked by security mechanisms. There is no visible business information, contact details, or policies on the site, limiting the ability to assess the business or its market position. Technically, the site uses nginx and Cloudflare infrastructure but lacks modern web features, SEO, or accessibility optimizations. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance indicators. Overall, the site appears to be in an initial or placeholder state with significant gaps in content, security, and compliance.
- XX-plose BVBA
hostbots.be
Technology · Belgium
56Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
X-plose BVBA is a Belgium-based small technology company specializing in fully managed Linux web hosting services, including managed VPS and shared hosting. Established in 2004, the company targets B2B clients such as agencies, government authorities, software companies, and startups, emphasizing quality, personalized service, and strong SLAs. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site uses modern frontend technologies like Alpine.js and Tailwind CSS, integrates Google Tag Manager and TruConversion for analytics and marketing, and is built on the Statamic CMS platform. The website is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented; however, explicit security headers and formal privacy and terms policies are missing. WHOIS data confirms the legitimacy and consistency of the business identity and domain age. Overall, the website is professional and trustworthy but could improve privacy compliance and security header implementation.
- Belfius
belfius.com
Finance · Belgium
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Belfius is a major Belgian bank-insurer offering a wide range of financial services including retail, private banking, business, corporate, and public & social banking. The website serves as a corporate information portal targeting investors, customers, and the general public interested in Belfius' corporate governance, news, and community involvement. Technically, the site is built on Adobe Experience Manager CMS and integrates Adobe DTM for tag management and OneTrust for cookie consent, reflecting a mature digital infrastructure. The site is mobile optimized and well-structured with good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies or vulnerability disclosures. WHOIS data is unavailable due to registry restrictions, but the site shows strong legitimacy through branding and content. Overall, the site is professional, trustworthy, and compliant with privacy norms, though it could improve transparency on security policies and incident response.
Hortim-International, spol. s r.o.hortim-kariera.sk
Transportation · Czech Republic
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hortim-International, spol. s r.o. operates a professional career portal focused on transportation and logistics job opportunities primarily in the Czech Republic and Slovakia. The website serves as a recruitment platform for Hortim Group companies, listing active job positions with detailed descriptions and locations. The company appears to be a medium-sized regional employer with a stable workforce and a clear focus on employee satisfaction and retention. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Slick Carousel, and SimpleLightbox. It employs Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing search engine visibility. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Privacy compliance is strong, with clear user consent and data protection information. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. The lack of WHOIS data due to privacy protection does not detract significantly from legitimacy, given the consistent business information and domain usage. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining transparency in data retention practices.
- KOSTKA footbike
kostkakolobezky.cz
Retail · Czech Republic
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, seniors, and specialized uses such as mushing and racing. The company boasts over 25 years of tradition and operates a professional e-commerce platform with multilingual support. Their business model focuses on direct sales, custom configurations, and community engagement through blogs and events. Technically, the website is built on Prestashop CMS, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly reduces trust but does not outweigh the strong brand presence and content quality. Overall, the website is professional, secure, and compliant with GDPR, serving a broad audience interested in scooters and outdoor mobility.