Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,182001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
26,451–26,500 of 99,067
Universo L.O.L. Surprise!universololsurprise.com
Retail · Spain
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Universo L.O.L. Surprise! is a Spanish retail website specializing in the sale and promotion of L.O.L. Surprise! toys and related products. The site targets a general audience, primarily children and their parents, offering product information and multimedia content such as video trailers. The business operates as a small-sized e-commerce retailer with a niche market focus. Technically, the website is built on WordPress using the Genesis Framework and integrates Google Tag Manager and Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. Security-wise, the website enforces HTTPS and has domain transfer protections but lacks DNSSEC and some security headers like Content-Security-Policy. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.
- DDentist Bellville
dentistbellville.com
Healthcare · South Africa
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Dentist Bellville is a small healthcare service provider specializing in dental services including dental implants, crowns, dentures, root canal treatments, and emergency dental care in Bellville and surrounding areas of South Africa. The website presents a professional and consistent brand image with relevant content targeting general audiences seeking dental care. The technical infrastructure is based on WordPress with Nexus Framework and Yoast SEO plugin, hosted behind Cloudflare DNS. The site is mobile optimized and SEO friendly but shows moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and uses an outdated jQuery version which may pose vulnerabilities. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and trustworthy but could improve security and compliance aspects.
Công ty cổ phần tập đoàn quốc tế Ecomphanthuocvisinh.com
Manufacturing · Vietnam
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Phanthuocvisinh.com is a Vietnamese e-commerce website specializing in biological fertilizers, biopesticides, and agricultural bio-products. Operated by Công ty cổ phần tập đoàn quốc tế Ecom, the site targets farmers and agricultural businesses seeking safe and effective biological solutions for crop protection and soil improvement. The website demonstrates a solid market position as a trusted provider in Vietnam's agricultural sector. Technically, the site is built on WordPress with WooCommerce and uses modern technologies including Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers are recommended. Security posture is generally good with HTTPS enforced, but domain WHOIS data shows inconsistencies that slightly reduce trust. Privacy compliance is basic, lacking explicit cookie consent despite tracking scripts. Overall, the site is professional and trustworthy for its business domain but should address domain registration transparency and privacy compliance to enhance credibility.
JapaneseUpjapaneseup.com
Education
52Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
JapaneseUp is a niche educational website dedicated to helping users learn the Japanese language through free games and resources focused on Hiragana, Katakana, and Kanji alphabets. The site targets language learners, especially beginners, offering interactive tools and phrase resources to facilitate learning without the need for in-person tutors. The business model appears to be primarily content-driven with potential paid coaching services. Technically, the website is built on WordPress with common plugins for analytics and marketing, including Google Analytics and Facebook Pixel. The site is moderately optimized for performance and mobile use, with a consistent and professional design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the domain registration is consistent with the business age and content, indicating legitimacy. The website is safe for general audiences with no adult or questionable content detected.
Tierra de Dronestierradedrones.com
Retail · Spain
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Tierra de Drones is a Spanish-language website specializing in drone reviews, comparisons, and affiliate marketing for drone products. The site targets consumers ranging from beginners to professionals interested in drones with cameras, offering detailed analyses, video content, and curated buying guides. The business operates primarily as a content-driven affiliate marketing platform, leveraging SEO and social media to attract drone enthusiasts. Technically, the site is built on WordPress with popular SEO and marketing plugins, hosted with NameCheap as registrar and using Cloudflare DNS services. The website demonstrates good digital maturity with structured data, responsive design, and integration of analytics and marketing tools. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced headers like CSP and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy for its niche, though it would benefit from enhanced privacy disclosures and security policies.
Dr. Edward G. Stephens DDSedstephensdds.com
Healthcare · United States
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Dr. Edward G. Stephens DDS operates a local dental practice based in Mexico, Missouri, providing general dentistry and orthodontic services to children, teens, and adults. The website positions the practice as a quality service provider in the local healthcare sector, targeting the general population in the Mexico, MO area. The business appears to be small and community-focused, founded around 2018, with a professional online presence that supports patient engagement and information dissemination. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site integrates Google Analytics and Tag Manager for visitor tracking but lacks advanced privacy compliance features such as cookie consent banners or detailed privacy policies. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security hardening to meet modern standards.
- LLas Empresas Verdes
lasempresasverdes.com
Other · Mexico
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Las Empresas Verdes is a Spanish-language media platform focused on sustainability, innovation, and corporate social responsibility topics. The website targets professionals and organizations interested in green business practices, providing news, articles, and insights to promote environmental awareness. The business appears to be a small-sized entity founded around 2019, with a niche market position in sustainability media. Technically, the website is built on WordPress using the Astra theme and several plugins including SureCart for e-commerce capabilities. The site shows good SEO practices with comprehensive metadata and structured data, and it is mobile optimized with moderate performance. Hosting and domain registration are managed through IONOS SE, a reputable registrar, with standard DNS parking services. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There are no published privacy, cookie, or security policies, nor incident response or vulnerability disclosure information, which indicates room for improvement in compliance and transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.
Energía Hoyenergiahoy.com
Energy · Mexico
51Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Energía Hoy is a specialized media platform delivering news and analysis focused on the energy sector in Mexico and Latin America. The website covers topics such as electricity, oil & gas, and renewable energies, targeting professionals, policymakers, and industry stakeholders. The platform operates on WordPress CMS with modern SEO and page builder plugins, hosted by Bluehost Inc. It maintains a professional design with good navigation and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. The site uses Google Analytics and Smartmediagroup ads for analytics and monetization. Social media presence is strong across major platforms. Overall, the site is a credible and professional energy news source with room for improvement in privacy and security transparency.
Oil & Gas Magazineenergymagazine.mx
Energy · Mexico
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Oil & Gas Magazine is a well-established Mexican media company specializing in news and information related to the energy and industrial sectors. Founded in 2014, it serves as a key information source for professionals and stakeholders in Mexico and Latin America, offering news articles, interviews, videos, podcasts, and webinars. The website demonstrates a professional design and consistent branding, with a clear focus on energy industry content. Technically, the site is built on WordPress with common plugins and integrates Google Analytics for user tracking. It is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy and cookie policies, indicating compliance gaps. The WHOIS data confirms legitimacy and consistency with the business claims. Overall, the site is credible and trustworthy but would benefit from enhanced privacy compliance and security best practices.
- MexicoIndustry
mexicoindustry.com
Manufacturing · Mexico
61Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
MexicoIndustry is a well-established digital media platform specializing in news and analysis for the Mexican manufacturing sector. Founded in 2013, it serves a professional audience including industry stakeholders, investors, and manufacturing professionals. The website offers sector-specific news, videos, technical documents, and event promotions, positioning itself as a key information source in the industrial media space in Mexico. The business model is primarily advertising-driven with partnerships to related industry sites. Technically, the website uses modern frontend technologies such as Bootstrap 5, Swiper carousels, and integrates Google Analytics and Facebook Pixel for tracking. It is hosted on Bluehost and employs HTTPS with a valid SSL certificate. The site is mobile optimized and has good SEO practices, though it lacks some advanced security headers and DNSSEC. From a security perspective, the site enforces HTTPS and has domain locks to prevent unauthorized changes. However, it lacks DNSSEC, security headers, and published security or incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, content-rich, and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its posture and user trust.
- Directorios Industriales
dirind.com
Manufacturing · Mexico
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Directorios Industriales operates as a specialized industrial directory service primarily targeting Mexican industrial sectors such as electrical, lighting, automation, metalworking, and food industries. Established since 1963 with an online presence dating back to 1998, the company offers directory listings, company registrations, and exposition information to industrial suppliers and professionals. The website is designed with a focus on clear sector segmentation and provides comprehensive contact information including multiple phone numbers and a physical address in Mexico City. Technically, the website uses a traditional tech stack including Bootstrap, jQuery, and several JavaScript plugins for UI enhancements. While the site is mobile responsive and has a moderate performance profile, it lacks modern CMS integration and advanced SEO or accessibility features. Google Analytics is used for tracking, but no cookie consent mechanism is implemented, indicating partial privacy compliance. From a security perspective, the domain is well-established with clientTransferProhibited status, but lacks DNSSEC and security headers such as Content-Security-Policy or HSTS. No HTTPS enforcement details were provided, and no explicit security or incident response policies are published. These gaps suggest a moderate security posture with room for improvement. Overall, the website is functional and professional with a moderate trust level. Strategic improvements in security hardening, privacy compliance, and technical modernization would enhance the business credibility and user trust significantly.
Other
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain boletinindustrial.com is registered since 2000 with a reputable registrar, indicating a potentially established business presence. However, the website is currently inaccessible, returning a standard HTTP 404 Not Found error with no content, metadata, or business information available. This lack of accessible content prevents any meaningful analysis of the company's operations, services, or market positioning. Technically, no technologies, scripts, or security headers are detected, and there is no evidence of HTTPS or modern web practices. The security posture is weak due to the absence of HTTPS and security headers, and no privacy or cookie policies are published, indicating non-compliance with common data protection regulations. Overall, the website is non-functional and does not provide any trust or credibility signals.
Manufactura Latammanufactura-latam.com
Manufacturing · Mexico
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Manufactura Latam operates as a specialized online directory and content platform serving the manufacturing industry in Latin America, primarily Mexico. It offers a comprehensive supplier directory, product catalogs, industry news, articles, events, and a digital magazine, targeting manufacturing professionals and companies seeking industry information and business connections. The platform leverages modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack explicit security headers and published privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and functionality of the website.
- Cuatro Cero
cuatro-cero.com.mx
Media · Mexico
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Cuatro Cero is a Mexican digital media outlet specializing in the digital industry sector. The website serves as a niche media platform providing news and insights relevant to the digital industry, targeting a general Spanish-speaking audience primarily in Mexico. The business model centers on media publishing with advertising support, leveraging WordPress as its CMS and integrating Google Analytics for visitor tracking. The site maintains a consistent brand presence and uses modern web technologies to deliver content effectively.
Global Industriesglobalindustries.mx
Media · Mexico
53Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Global Industries is a Mexican business news publication targeting industry leaders and decision makers across sectors such as energy, manufacturing, construction, and transportation. The website provides industry news, analyses, and virtual editions to inform professionals and business executives. Technically, the site is built on WordPress with common SEO and advertising plugins, including Yoast SEO and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with good SSL configuration, but lacks visible privacy and terms of service policies. Security posture is adequate with no visible vulnerabilities, though security headers could be improved. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.
Global Energyglobalenergy.mx
Energy · Mexico
65Medium
NIS2 47 · GDPR 50
NIS2 47 · GDPR 50
Global Energy is a specialized media publication focused on delivering objective and reliable business information within the energy sector in Mexico. The website serves professionals and stakeholders by providing news, analysis, and virtual editions of their magazine. Their market position is that of a reputable energy sector media outlet with a consistent brand and good content quality. Technically, the site is built on WordPress using a modern Newspaper theme and several plugins for SEO, user engagement, and analytics. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced, security headers present, and no exposed sensitive data. Privacy compliance is demonstrated through a comprehensive privacy policy and cookie consent mechanism, though explicit terms of service and security policies are absent. Overall, the site is trustworthy and professional, with room for improvement in security transparency and accessibility.
- El Gran Bajío Network
elgranbajionetwork.com
Other · Mexico
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
El Gran Bajío Network is a business networking platform focused on connecting entrepreneurs, governments, and key organizations primarily in Mexico and internationally. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and polyfills to support modern browsers. The site presents a professional design and clear business-oriented content but lacks critical compliance and security features such as privacy policies, cookie consent, and security headers. The absence of WHOIS registration data for the domain raises concerns about the legitimacy and trustworthiness of the domain ownership, despite the active and accessible website. Overall, the security posture is moderate but requires improvements in policy disclosures and technical security configurations to enhance trust and compliance.
CCI France Méxicofranciamexico.com
Other · Mexico
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
CCI France México is a well-established bilateral chamber of commerce founded in 1884, serving French and Mexican businesses with a broad range of services including membership, networking, recruitment, business development, and event organization. The website is professionally designed using TYPO3 CMS, with modern technologies and integrations such as Google Tag Manager and reCAPTCHA, ensuring a good user experience and security posture. Privacy compliance is well addressed with clear cookie consent and privacy policies. However, the WHOIS data for the domain is missing, which raises questions about domain registration legitimacy despite the professional appearance and content quality. Overall, the site is a credible business platform with minor concerns regarding domain registration transparency.
Education · Mexico
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Centro de Investigación y de Estudios Avanzados del Instituto Politécnico Nacional (Cinvestav) is a prominent Mexican public research institution dedicated to advanced scientific research and postgraduate education. Established in 1961, it operates across 10 states in Mexico and offers a wide range of academic programs and research services. The website reflects its institutional stature with comprehensive academic content, news, and event information targeting students, researchers, and academic collaborators. The business model is focused on education and research, supported by government affiliation and public funding.
Non-profit · Mexico
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The American Society Of Mexico AC (AmSoc) is a well-established non-profit organization with over 80 years of history, dedicated to uniting the American community in Mexico with businesses, civil organizations, and communities to foster prosperity and social development. The organization operates through strategic business linkages, social inclusivity, community participation, and integration initiatives, supported by a network of prominent corporate sponsors and partners. Their website reflects a professional and consistent brand image, targeting American companies and communities in Mexico. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution, with Google Analytics and Tag Manager integrated for tracking. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit cookie consent mechanisms. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent banner and security policy pages indicates room for compliance improvement. The WHOIS data aligns well with the website's claims, showing consistent registration information and domain age appropriate for the organization's history. Overall, the site is trustworthy and professional, with recommendations to enhance privacy compliance, security headers, and incident response transparency to further strengthen its security and compliance posture.
- Gobierno de México
gob.mx
Government · Mexico
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Gob.mx is the official digital portal of the Mexican federal government, providing citizens with access to federal procedures, social programs, and government services. It serves as a centralized platform to facilitate government-citizen interactions, offering key services such as procedure lookup, social program information, and secure authentication via LLave MX. The portal targets Mexican citizens and residents seeking government services online, positioning itself as the authoritative government digital gateway. Technically, the website employs modern web technologies including JavaServer Faces with PrimeFaces, jQuery, and Swiper.js for UI components. It leverages Google Fonts and Google Tag Manager for typography and analytics respectively. Hosting appears to be supported by Akamai CDN, ensuring performance and availability. The site is mobile optimized with responsive design and basic accessibility features. From a security perspective, the site uses HTTPS with strong SSL configuration and includes several security headers. However, it lacks explicit cookie consent mechanisms and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data confirms the site is legitimately registered to the Mexican government, reinforcing trust. Overall, gob.mx demonstrates a mature digital government presence with good technical and security posture. To enhance compliance and user trust, it should implement explicit cookie consent, publish security and privacy policies more prominently, and provide clear contact information for data protection and incident response.
Government · Germany
67Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
The Konrad-Adenauer-Stiftung e.V. is a well-established German political foundation focused on promoting political education, democracy, and social market economy principles both nationally and internationally. The website reflects a professional and consistent brand presence with comprehensive content aimed at a general audience interested in political and social topics. The foundation maintains an active presence on multiple social media platforms, enhancing its outreach and engagement. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies including jQuery, React, and Alloy UI. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance characteristics. Analytics are handled via Matomo with a consent mechanism in place, indicating a respect for user privacy. From a security perspective, the site enforces HTTPS, employs Content Security Policy with nonce, and uses secure form submissions. However, explicit privacy policies, terms of service, and vulnerability disclosure mechanisms are not detected in the provided content, representing areas for improvement. WHOIS data is minimal but does not raise immediate concerns, though more transparency would enhance trust. Overall, the website presents a low-risk profile with strong business credibility and a good security posture, but could benefit from enhanced privacy compliance documentation and clearer contact information for security and general inquiries.
- VPInstruments
vpinstruments.com
Energy · Netherlands
66Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
VPInstruments is a well-established company specializing in industrial energy management solutions, focusing on compressed air monitoring, leakage management, and efficiency optimization. With a domain age dating back to 1998 and a consistent brand presence, the company targets industrial clients seeking to improve energy efficiency through advanced metering and software solutions. The website reflects a mature digital infrastructure built on WordPress with WooCommerce and incorporates multilingual support via Weglot, indicating a global outreach strategy. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements such as enabling DNSSEC and implementing Content-Security-Policy headers are recommended. The site integrates marketing and analytics tools like Zoho SalesIQ and Google Optimize, supporting moderate user tracking aligned with business goals. Overall, the website is professional, trustworthy, and business-focused, with clear contact channels and good SEO practices.
Mitsubishi Electric Corporationmitsubishielectric.com
Manufacturing · Japan
70Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Mitsubishi Electric Corporation operates a comprehensive global website showcasing its leadership in manufacturing electrical and electronic products across diverse sectors including energy, transportation, and technology. The company targets a global industrial and commercial audience with a broad portfolio of products and solutions. The website reflects a mature digital presence with multiple regional domains and language options, indicating a well-established multinational operation. Technically, the site leverages modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, and is built on Adobe Experience Manager, ensuring a robust content management framework. Security posture is strong with HTTPS enforcement and consent management, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable, which slightly impacts transparency but the overall site content and branding strongly support legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and improving contact information visibility for security and privacy inquiries.
- SSchneider Electric
se.com
Energy
75Medium
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
Schneider Electric is a global leader specializing in energy management and automation, operating in over 100 countries. The company offers integrated energy solutions across multiple market segments, targeting industrial, commercial, and residential customers. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for a global audience. The technical infrastructure leverages modern web technologies including Google Tag Manager, OneTrust for cookie consent, and performance monitoring tools, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and published security policies, although the absence of a security.txt file suggests room for improvement in vulnerability disclosure transparency. Privacy compliance is robust, featuring detailed privacy and cookie policies with GDPR adherence and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness consistent with a large multinational enterprise.
- HHome – Half Moon
halfmoonwear.com
—
72Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Lu'nivers Productionluniversproduction.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Lu'nivers Production is a small photography and video service provider specializing in ceremonies, corporate events, and sports events. The website is professionally designed using the Wix platform, offering a good user experience and clear navigation. However, the technical infrastructure is basic, relying on Wix's standard technologies without advanced customizations. Security posture is moderate but lacks important security headers and documented policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the website serves its business purpose but requires improvements in security, privacy, and legitimacy transparency to enhance trust and compliance.
DRILL ITdrill-it.com
Education
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
DRILL IT is a newly launched online education platform specializing in Brazilian Jiu-Jitsu training, offering video modules and courses for all skill levels. The platform targets individuals interested in learning martial arts online, primarily French-speaking users. The business operates on a small scale with a niche focus in the education sector. Technically, the website is built on the Bubble.io platform, integrating Stripe for payment processing and using modern JavaScript libraries such as Howler.js. The site demonstrates basic mobile optimization and SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy and compliance policies are absent, representing a significant gap in GDPR adherence and user trust. No contact information or incident response channels are provided, limiting transparency and user support. Overall, the website is functional and relevant but requires enhancements in security, privacy compliance, and business credibility to improve trust and regulatory adherence.
Tenacetenacesports.com
E-commerce · Spain
75Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Tenace is a small, Spain-based e-commerce retailer specializing in martial arts accessories such as MMA gloves, knee pads, rashguards, and ear protectors. The website is built on the Shopify platform using the Dawn theme and integrates several third-party marketing and review tools including Trustpilot and Pinterest tracking. The site supports multiple languages and offers worldwide shipping. Technically, the site is well-structured with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy in Spanish, indicating GDPR awareness. Overall, the site is professional and trustworthy for its niche market, though improvements in security transparency and DNS security are recommended.
BJJ Systembjjsystem.fr
Education · France
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BJJ System is a French-language online platform specializing in Brazilian Jiu-Jitsu educational videos. It offers a categorized and leveled video library, targeting practitioners from beginners to advanced levels. The platform is subscription-based with free content samples and is led by a highly qualified instructor. Technically, the site is built on WordPress with modern plugins such as Elementor, Yoast SEO, and tracking tools including Google Analytics and Facebook Pixel. The hosting provider is OVH, a reputable French hosting company. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies are missing. Privacy compliance is partial, lacking explicit privacy and cookie policies. Business credibility is strong with clear contact information and professional content. The domain is newly registered but consistent with the business claims.
moskova-europemoskova-europe.com
E-commerce · France
70Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Moskova Europe operates as a niche e-commerce retailer specializing in surf and action sports apparel, targeting European surfers and enthusiasts. The company offers a range of products including underwear, clothing, Jiu-Jitsu gear, and surf accessories, with a focus on comfort and quality validated by the action sports community. The business leverages Shopify as its e-commerce platform, integrating marketing and analytics tools such as Klaviyo and Yotpo to enhance customer engagement and sales performance. The website is professionally designed, mobile-optimized, and supports multiple languages, primarily French, English, and Spanish.
- STRAP BJJ
strap-bjj.com
Other
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Strap BJJ is a small business focused on providing a Brazilian Jiu-Jitsu mobile application available on both iOS and Android platforms. The website serves primarily as a landing page to promote app downloads and partnership opportunities. The business targets BJJ practitioners and enthusiasts, positioning itself in a niche sports app market. The website content is minimal but functional, with basic branding and contact information limited to an email address. Technically, the website is built using modern web technologies including Next.js and React, indicating a contemporary development approach. The site is mobile-optimized and loads with moderate performance, though SEO and accessibility features are basic. There is no detected CMS or hosting provider information. The absence of security headers and lack of HTTPS configuration details suggest room for improvement in security hardening. From a security perspective, the site lacks visible security policies, incident response information, and cookie consent mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No forms or data collection mechanisms are present, reducing immediate data exposure risks. Overall, the security posture is basic with recommendations to implement HTTPS, security headers, and privacy compliance measures. The overall risk is moderate due to the lack of domain registration transparency and minimal security controls. Strategic improvements in domain registration verification, security best practices, and privacy compliance would enhance trust and reduce risk.
- Région Ile-de-France
iledefrance.fr
Government · France
74Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.iledefrance.fr is the official digital presence of the Région Île-de-France, the regional government authority for the Île-de-France area in France. It provides comprehensive information and services tailored to residents, professionals, associations, and local authorities. The site offers access to regional aids, news, events, and digital services, positioning itself as a key public service platform for the region. The business model is that of a government entity focused on public service and regional development. Technically, the website is built on Drupal 10, leveraging modern web technologies such as lazy loading images, Matomo analytics for privacy-respecting user tracking, and Clustaar webchat for user support. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the site shows good security hygiene with no exposed sensitive data or vulnerable libraries detected. The absence of WHOIS data is typical for French government domains and does not detract from the site's legitimacy. Overall, the site presents a low risk profile with strong trust indicators, professional design, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and ensuring robust form security to maintain and improve the security posture.
- Dojomania
dojomania.com
Retail · France
73Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Dojomania is a French-based e-commerce retailer specializing in combat sports equipment such as judo, karate, taekwondo, boxing, and MMA gear. The website offers a wide range of products including kimonos, belts, gloves, bags, and personalized embroidery services. It targets martial arts practitioners and clubs, positioning itself as a specialist retailer with a professional online presence. The site is built on the PrestaShop platform, leveraging modern web technologies and providing multilingual support. Security posture is good with HTTPS and security headers implemented, though there is no visible security policy or incident response information. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a concern for domain legitimacy but the website content and contact information suggest a legitimate business. Overall, the site is well designed, functional, and trustworthy for its target audience.
ICODIAicodia.com
Technology · France
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ICODIA is a French technology company specializing in secure, high availability hosting solutions including shared, dedicated, and virtual servers. With over 25 years of experience and ISO 27001 certification, ICODIA positions itself as a reliable regional hosting provider focused on quality service and personalized support. Their offerings include cloud hosting, email services, backup, and IT management, targeting businesses and developers seeking robust infrastructure. Technically, the website is well-structured with moderate performance and basic mobile optimization, hosted on their own datacenter in Brittany, France. Security posture is strong with ISO 27001 certification and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused with clear contact information and social media presence.
- SFR
sfr.fr
Telecommunications · France
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
SFR is a major French telecommunications company offering a wide range of services including fiber and ADSL internet, 5G mobile plans, smartphones, TV packages, and home security solutions. The website reflects a mature digital presence with comprehensive product information, customer reviews, and clear navigation tailored to both consumers and business clients. Technically, the site uses modern web technologies including Django, asynchronous JavaScript, and optimized media formats, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be enhanced and a security.txt file added. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data is unavailable due to AFNIC restrictions, which slightly impacts trust but is typical for French domains. Overall, the site is professional, trustworthy, and well-optimized for its market.
SFRs-sfr.fr
Telecommunications · France
55Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The domain s-sfr.fr is registered to SFR, a major telecommunications company in France, with a domain age consistent with a well-established business. However, the website content is inaccessible, returning a 403 Forbidden error page with minimal HTML content and no metadata, scripts, or visible business information. This indicates the site is either restricted, under maintenance, or protected by access controls. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are detectable, and no contact or social media information is available. The technical infrastructure appears to use nginx as the web server, but no further technology stack details can be extracted. The security posture cannot be fully assessed, but the absence of security headers and policies suggests room for improvement. Overall, the website's business credibility is supported by consistent WHOIS data, but the lack of accessible content severely limits the ability to evaluate the site’s digital maturity or security compliance.
- EEurobags
eurobags.cz
Manufacturing · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Eurobags is a Czech Republic-based manufacturing company specializing in plastic packaging and industrial plastic films. The company offers a range of products including plastic bags, industrial films, and custom packaging solutions tailored to various industries such as construction, agriculture, and manufacturing. Their website reflects a medium-sized enterprise with a focus on sustainability and innovation, supported by partnerships with related industry players. The digital presence is professional with clear contact information and multilingual support, targeting industrial and commercial customers. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and various UI enhancement libraries, ensuring good mobile responsiveness and user experience. However, there is room for improvement in accessibility and SEO optimization. The site lacks visible analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks important security headers and explicit security policies. No incident response or vulnerability disclosure information is published. Privacy and cookie policies exist but do not include active consent mechanisms. The absence of WHOIS data limits domain trust assessment, though the website content and contact details appear legitimate. Overall, Eurobags presents a credible business with a solid web presence but would benefit from enhanced security practices, improved privacy compliance, and transparency in domain registration to strengthen trust and compliance posture.
Utiq S.A.utiq.com
Technology · Belgium
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Utiq S.A. is a Belgian-based European AdTech company specializing in privacy-first digital marketing solutions. Their core offering is the Authentic Consent Service, which empowers consumers with control over their data via the Consenthub platform and enables brands and publishers to address consented audiences securely using encrypted identifiers. The company positions itself as a catalyst for responsible digital marketing, emphasizing compliance with privacy regulations and user empowerment. The website reflects a mature digital presence built on WordPress with modern technologies such as Plyr video player and Lottie animations, supported by SEO tools like Rank Math and privacy-respecting analytics via Plausible. Security posture is good with HTTPS and encrypted data handling, though improvements like DNSSEC and security headers could enhance it further. Overall, Utiq demonstrates a strong alignment between its domain registration, business claims, and digital footprint, indicating a trustworthy and professional operation.
Fédération de MMA Françaisfmmaf.fr
Other · France
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The Fédération de MMA Français (FMMAF) is the national governing body for Mixed Martial Arts in France, providing licensing, club affiliation, training, and event organization services. The website positions FMMAF as a professional federation affiliated with the International Mixed Martial Arts Federation (IMMAF), targeting MMA practitioners, clubs, and enthusiasts across France. The business model focuses on regulatory oversight, athlete development, and promotion of MMA as a sport within the country. Technically, the website is built on WordPress using the Divi theme and several specialized plugins such as EventON for event management and Matomo for analytics. The site is well-structured with good SEO practices including JSON-LD structured data and Open Graph metadata. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. However, the absence of explicit privacy policy and terms of service documents, as well as no visible incident response or vulnerability disclosure information, suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and professional, though the lack of WHOIS registrant data and some compliance documents slightly reduce the trust score. Strategic recommendations include publishing comprehensive privacy and security policies, implementing a vulnerability disclosure program, and enhancing accessibility and compliance features.
Other
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website lavieimmo.com is currently inaccessible due to a security mechanism that blocks content, returning only an 'Access Denied' message. This prevents any direct analysis of the website's content, metadata, or business information. The domain is registered since 2006 with SafeBrands SAS and uses Amazon AWS DNS services, indicating a stable and legitimate registration. However, no visible security headers, privacy policies, or contact information are available due to the content block. The security posture cannot be fully assessed, but the lack of DNSSEC and visible security headers suggests room for improvement. Overall, the site appears to be protected by a generic WAF or security filter, limiting external analysis.
Cofidis GROUPcofidis-group.com
Finance · France
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Cofidis Group is a large European financial services company operating in 9 countries with a focus on credit, insurance, digital banking, and payment solutions. The group is majority-owned by Crédit Mutuel Alliance Fédérale, reinforcing its market position and financial stability. The website presents a professional and comprehensive digital presence, showcasing subsidiaries, corporate values, and CSR initiatives. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are not visible. The absence of WHOIS registration data is a concern but may be due to privacy protection or proxy registration. Overall, the website is trustworthy and well-maintained, serving a general audience with no adult or NSFW content.
Other
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website sportal365images.com currently presents an empty HTML page with no visible content, metadata, or business information. The domain is registered since 2021 via GoDaddy and uses Cloudflare nameservers, indicating a stable registration but minimal digital presence. There are no privacy policies, contact details, or security policies published on the site, which limits trust and compliance posture. Technically, the site lacks any detectable technologies, scripts, or SEO optimizations, and no security headers are implemented beyond basic SSL. Overall, the website appears inactive or under development, with very limited business or security maturity.
Media · Slovakia
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Pokec.sk is the largest Slovak online social networking and chat community platform operated by Ringier Slovakia Communities s. r. o., a subsidiary of Ringier Axel Springer Slovakia. The platform serves over 500,000 daily users, offering chat rooms, user profiles, photo sharing, and mobile app access. It targets a broad Slovak and neighboring country audience seeking social interaction and entertainment. Technically, the site leverages modern web technologies including React and Next.js, with integrated analytics and advertising platforms managed under GDPR-compliant consent mechanisms. Security posture is strong with HTTPS and secure login forms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professionally designed, well-branded, and trustworthy, with safe content suitable for general audiences.
- Nenávist na sítích
nenavistnasitich.cz
Non-profit · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website 'Nenávist na sítích' is a Czech research project focused on analyzing hate speech, particularly gender-based hate directed at women politicians on social media platforms like Facebook. It is affiliated with reputable organizations such as Multikulturní centrum Praha, Fórum 50 %, Transparency International, ČVUT, and EEA Grants, indicating a credible non-profit research initiative. The site provides detailed visual data and analysis on the prevalence and impact of hateful comments, aiming to raise awareness and inform policy or social interventions. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, ensuring a responsive and visually appealing user experience. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS but lacks several security headers that could enhance protection against common web threats. No forms or data collection mechanisms were detected, reducing exposure to input-based vulnerabilities. However, the absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. Overall, the domain WHOIS data is unavailable, which limits trust assessment from a registration standpoint. Despite this, the website content and affiliations suggest legitimacy. The site does not contain adult or NSFW content and targets a general audience interested in social research and human rights. Strategic recommendations include adding comprehensive privacy and cookie policies, improving security headers, and providing clear contact and incident response information to enhance transparency and compliance.
Transparency International – Česká republika o.p.s.ruzovypatnik.cz
Non-profit · Czech Republic
70Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Transparency International – Česká republika o.p.s. is a well-established non-profit organization dedicated to fighting corruption and promoting transparency in the Czech Republic. With a small but effective team, they focus on advocacy, legal expertise, public education, and free legal counseling. Their website reflects their mission with professional content, clear messaging, and a focus on public awareness. The organization has been active for over 20 years, positioning itself as a trusted entity in the anti-corruption space. Technically, the website is built on Webflow and uses modern web technologies including Google Tag Manager and CookieScript for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. Security-wise, while HTTPS is assumed, explicit security headers and policies are not evident. No security.txt or incident response information is published, which could be improved. The WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency somewhat. Overall, the website is professional, trustworthy, and aligned with its mission. The main risks relate to limited publicly available security policies and lack of WHOIS transparency. Strategic improvements in security posture and transparency would enhance trust further.
- MEDIA ENERGY s.r.o.
mediaenergy.cz
Technology · Czech Republic
63Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
MEDIA ENERGY s.r.o. is a Czech-based small technology company specializing in custom web projects and online marketing services. Their offerings include responsive websites, e-commerce platforms with integration to inventory and accounting systems, online marketing including SEO and PPC, custom IT systems, web hosting, and corporate identity services. The company positions itself as a personalized service provider with a strong client retention rate and Google Professional certifications, indicating a credible market presence in the Czech Republic. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS and reCAPTCHA integration, though additional security headers could enhance protection. Privacy compliance is well addressed with GDPR and cookie policies and consent mechanisms in place. However, the absence of WHOIS data reduces domain transparency and trustworthiness, which is a notable risk factor. Overall, the website is professional, well-structured, and trustworthy for its business domain.
- SSite offline
elith.cz
Other
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.elith.cz is currently offline and not published, presenting only a minimal placeholder page indicating the site has not been published yet. Due to the lack of accessible content, metadata, or structured data, it is not possible to determine the company's business activities, market position, or key services. The absence of WHOIS registration data further complicates trust and legitimacy assessments. Technically, the site lacks modern infrastructure indicators, security headers, or privacy compliance mechanisms, reflecting a very low digital maturity level. Security posture is minimal with no visible protections or policies, and the domain's registration status is unclear, suggesting potential domain inactivity or misconfiguration. Overall, the site presents a high risk for users and stakeholders due to its offline status and lack of transparency.
ÇA NE TIENT PLUS ! Le 11 octobre, les associations se mobilisentcanetientplus.org
Other
65Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website www.canetientplus.org is a minimal content site built on the Wix platform. It lacks substantive business information, contact details, privacy policies, and security disclosures. The technical infrastructure relies on Wix hosting and standard Wix scripts, including Sentry for error monitoring. The site is accessible without any detected WAF or security challenge, but the absence of WHOIS data and registrant information raises concerns about domain legitimacy. Overall, the website demonstrates poor content quality, limited technical sophistication, and weak security posture, making it unsuitable for trust-dependent business operations.
Azimutazimut.net
Technology · France
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Azimut is a French technology company specializing in custom digital solutions including interactive kiosks, software platforms, and dynamic digital signage. With over 30 years of experience, they serve a diverse clientele including enterprises, public sector entities, and cultural ticketing points of sale. Their website reflects a mature digital presence with professional design, client testimonials, and certifications that support their market credibility. Technically, the site employs modern web technologies and includes a cookie consent mechanism, indicating awareness of privacy compliance, though explicit privacy and terms policies are not found. Security posture is generally good with HTTPS and tracking tools in place, but lacks some security headers and incident response disclosures. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, Azimut presents as a credible and established digital solutions provider in the French market.