Medium-risk security reports

Římskokatolická farnost sv. Filipa a Jakuba Zlín is a well-established Roman Catholic parish serving the Zlín community in the Czech Republic. The website provides comprehensive information about religious services, sacraments, educational programs, community events, and pastoral care. It targets local parishioners and those interested in Catholic faith activities. The parish operates as a non-profit organization with a clear focus on community engagement and spiritual support. The domain has been active since 2006, reflecting a stable presence in the region. Technically, the website uses a modern tech stack including jQuery, Bootstrap, FontAwesome, and Google Fonts, supported by a custom CMS platform (IS OMNIA) tailored for church management. Hosting and DNS services are provided by Wedos and Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and offers multimedia content including live streams and social media integration. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but lacks some advanced security headers and a cookie consent mechanism, which are important for GDPR compliance. No incident response or vulnerability disclosure information is published. Analytics are handled via Matomo, providing moderate user tracking with basic privacy compliance. Overall, the website is professional, trustworthy, and well-suited for its community role. However, improvements in privacy compliance and security policies are recommended to enhance user trust and regulatory adherence.

The International Chess Federation (FIDE) operates a comprehensive and professionally designed website serving as the official global hub for chess governance, ratings, tournaments, and news. The site leverages WordPress with Elementor and integrates multiple subdomains for specialized services such as ratings, calendar, and directory. The technical infrastructure is modern and supports good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. The WHOIS data for the main domain is unavailable, which is unusual for an international organization and may warrant further verification. Overall, the site is trustworthy and authoritative in its domain, with strong branding and social media presence.

The Network of National ITS Associations operates as a collaborative platform for national Intelligent Transport Systems organizations across the European Union. It focuses on promoting ITS knowledge dissemination, supporting cooperation among member states, and organizing events such as webinars and awards to recognize contributions in the ITS sector. The organization positions itself as a respected voice within the EU ITS community, targeting ITS professionals, associations, and stakeholders. Technically, the website is built on a modern WordPress platform with common plugins for event management and GDPR compliance, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-maintained, and trustworthy, but the lack of WHOIS data limits full domain trust assessment.

The website represents a professional and well-structured event platform for the 17th ITS European Congress 2026 in Istanbul, focusing on Intelligent Transport Systems and smart mobility. It targets industry professionals, exhibitors, speakers, and partners, providing comprehensive event information and participation opportunities. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and Matomo analytics, indicating a mature digital presence. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and branding suggest a legitimate business operation. Overall, the site is safe, professional, and well-optimized for users, but would benefit from enhanced transparency and security documentation.

The Deutscher Bibliotheksverband e.V. is a prominent non-profit association representing over 2,000 members and more than 9,000 libraries across Germany. The organization focuses on strengthening libraries to ensure free access to media and information for all citizens. Their website reflects a mature digital presence with comprehensive content, including news, events, thematic areas, and educational offerings. Technically, the site employs modern web technologies such as React, Drupal CMS, Matomo analytics, and Google reCAPTCHA for security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

OpenJDK.org serves as the official community site for the OpenJDK project, an open-source implementation of the Java Platform, Standard Edition. The site is maintained under the auspices of Oracle Corporation, which provides both free GPL-licensed JDK binaries and commercially licensed versions. The platform targets Java developers, open-source contributors, and the broader technology community interested in Java development and innovation. The website offers resources for downloading the JDK, learning about active projects, and contributing to the codebase, positioning itself as a central hub for Java platform collaboration. Technically, the website is built on a custom static site architecture using standard web technologies including HTML, CSS, and JavaScript. It leverages GitHub and Mercurial for source code hosting and integrates privacy-focused analytics via Fathom. Hosting is supported by Akamai CDN infrastructure, ensuring fast content delivery. The site demonstrates good SEO and basic mobile optimization, though accessibility features are moderate. No major CMS or frameworks are detected, indicating a lightweight and stable technical implementation. From a security perspective, the site enforces HTTPS and employs domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is strong with clear privacy and terms of use policies, though no cookie consent mechanism is present despite analytics usage. No direct contact information or incident response contacts are published, which could be enhanced to improve transparency and trust. Overall, OpenJDK.org is a professional, trustworthy, and well-maintained site supporting a critical open-source technology project. The security posture is solid but could benefit from additional hardening measures. Privacy practices are good but could be improved with cookie consent. The site is free of adult or questionable content and serves a general technology audience. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security.txt file, and implementing cookie consent to further strengthen compliance and security.

mPulse is a healthcare technology company specializing in digital health engagement solutions. Their product suite includes predictive analytics, omnichannel engagement, health portals, content management, and acquisition and payment tools, all designed to optimize consumer health journeys. The company positions itself as a leader in the Health Experience and Insights (HXI) category, serving over 400 healthcare organizations. The website reflects a professional and consistent brand image with a focus on delivering better health outcomes through technology. Technically, the site is built on WordPress with Elementor and uses modern web technologies including jQuery, HubSpot analytics, and Google Tag Manager. Hosting is inferred to be on AWS, providing a reliable infrastructure. Security posture is good with HTTPS enabled and HITRUST certification mentioned, but there are areas for improvement such as enabling DNSSEC and adding security headers. Privacy compliance is basic, with no explicit privacy or cookie policies detected on the homepage. Contact information is primarily via a contact form. Overall, the website is trustworthy, professional, and well-optimized for its target audience.

Obec Nespeky operates an official municipal website serving the local community of Nespeky in the Czech Republic. The site provides comprehensive information including news, official notices, event calendars, and contact details, positioning itself as a trusted local government resource. The website is well-structured, mobile-optimized, and includes accessibility certification, reflecting a commitment to inclusivity and compliance with local regulations such as GDPR. Technically, the site leverages modern JavaScript libraries like jQuery, Bootstrap, Swiper, and Leaflet for interactive maps, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though it lacks explicit security headers and incident response information, which are areas for improvement. The absence of WHOIS data transparency is a notable concern, slightly diminishing trust despite the professional presentation and official nature of the site. Overall, the website is reliable and serves its governmental function effectively, with recommendations to enhance security practices and WHOIS transparency.

Obec Kamenný Přívoz operates as the official municipal government website for the village of Kamenný Přívoz in the Czech Republic. The site provides residents and visitors with local government information, community news, event calendars, and administrative documents. It serves a small population with a focus on local services and community engagement. The website is built on WordPress using a specialized municipal theme, indicating a moderate level of digital maturity suitable for local government needs. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and responsive design, ensuring accessibility and usability across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. The absence of WHOIS data from the CZ.NIC registry is a notable anomaly but does not detract from the apparent legitimacy of the site based on content and structure. Overall, the website is functional, trustworthy, and serves its intended audience effectively, though improvements in security and privacy compliance would enhance its posture.

CHOPOS, s.o. is a voluntary association of municipalities in the Benešov district of the Central Bohemian Region, Czech Republic, focused on regional development and tourism. Founded in 1999, it serves 21 municipalities and operates an Information and Coordination Center to support regional management and advisory services. The website reflects a well-structured regional government/non-profit entity with clear community focus and government funding support. Technically, the site uses modern web technologies including Google Fonts, Swiper.js for sliders, and Google reCAPTCHA for form protection. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. No explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website content and business history, indicating a trustworthy and legitimate entity.

Obec Chocerady is the official municipal website for the village of Chocerady in the Czech Republic. It serves as a comprehensive information portal for residents and visitors, providing local government details, community news, event calendars, practical information, and contact details. The website is well-structured and targets local citizens and stakeholders interested in municipal affairs. Technically, the site employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity with mobile optimization and good navigation. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is limited, with no explicit privacy or terms of service pages found, but a cookie consent mechanism is present. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

The website www.ctyrkoly.cz serves as the official online presence for the municipality of Čtyřkoly in the Czech Republic. It provides residents and visitors with timely information about local news, events, municipal office activities, waste collection schedules, and community services. The site targets local citizens and stakeholders interested in municipal governance and community engagement. The business model is typical for a government entity, focusing on information dissemination and public service rather than commercial activities. Technically, the website employs a traditional web stack including jQuery, Bootstrap 4, and Swiper.js for UI components and interactivity. The CMS appears to be a custom or regional solution (GCM CMS). The site is mobile-optimized with responsive design and accessible navigation, though accessibility features are basic. Performance is moderate, with no evident critical technical issues. From a security perspective, HTTPS is used, and a cookie consent banner is implemented, indicating some privacy compliance efforts. However, no explicit privacy policy, terms of service, or security incident response information is found. WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. No security headers or advanced security practices are evident in the provided data. Overall, the website is a functional and professional municipal portal with good content quality and user experience. The main risks relate to incomplete privacy and security disclosures and the lack of domain registration transparency. Strategic improvements in these areas would enhance trust and compliance.

The website cercany.cz serves as the official online presence for the municipal government of Čerčany, Czech Republic. It provides residents and visitors with timely news, event calendars, public service information, and contact details for the local government office. The site is well-structured and targets the local community, offering essential services and information relevant to municipal governance and community engagement. The business model is governmental, focusing on public service rather than commercial activities. Technically, the website employs modern web technologies including Vue.js and Mustache.js, integrated within the Vismo CMS platform. It uses HTTPS with Google reCAPTCHA v3 to secure forms and prevent spam. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are present but could be enhanced. From a security perspective, the site benefits from HTTPS and anti-bot measures but lacks explicit security headers and documented security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, cercany.cz is a trustworthy and professional municipal website with a solid foundation in content quality, technical implementation, and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

Město Trhový Štěpánov operates an official municipal website providing comprehensive information and services to residents and visitors of the city. The site includes sections on local government, cultural events, public notices, and community resources, positioning itself as a trusted source for local administration. The website targets local citizens and stakeholders interested in municipal affairs and community engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Swiper.js, and Leaflet for mapping, indicating a moderate level of digital maturity and mobile optimization. Security posture is adequate with HTTPS assumed and cookie consent implemented, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is supported by a visible privacy policy and cookie banner, reflecting GDPR awareness. Overall, the site is professional, trustworthy, and well-maintained, though WHOIS data absence limits domain trust verification.

Město Bystřice operates an official municipal website serving the local community of Bystřice in the Czech Republic. The site provides extensive information about the town's governance, public services, events, and administrative procedures. It targets residents and stakeholders seeking municipal resources and updates. The website employs a modern technology stack including jQuery, Bootstrap, and Swiper, ensuring a responsive and user-friendly experience across devices. However, some technical aspects such as security headers and privacy policies are lacking or not publicly visible, which could be improved to enhance trust and compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the content and structure strongly indicate a legitimate government entity. Overall, the site is professionally maintained with good content quality and navigation clarity.

Redistats is a specialized web statistics tracking service founded in 2013 and operated by Codalex AB. It offers unbranded, real-time analytics for websites, blogs, and other digital properties with a focus on privacy and performance. The company targets webmasters, content platforms, and website creators, providing tiered subscription plans including a free option. The service is trusted by notable clients such as Microsoft Israel and the website builder N.nu. Technically, Redistats employs a modern stack including NGINX, Redis, PHP-FPM, and MySQL, hosted on a dedicated server in Germany with Cloudflare DNS. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content.

The website staticjw.com currently presents no accessible content, with an empty HTML body and no metadata, forms, or scripts. The domain is registered since 2010 with Tucows Domains Inc. and uses Cloudflare nameservers, indicating a mature domain but the website itself appears inactive or blocked by a Cloudflare WAF or security mechanism. There are no privacy, cookie, or terms of service policies, nor any contact information or business details visible on the site. The lack of content and security features results in a very low digital maturity and security posture assessment.

iPoradna.cz is a Czech non-profit organization providing social rehabilitation and counseling services primarily for people with mental illnesses and those in adverse social situations. Established in 2006, it offers a range of services including debt counseling, psychological support, telephone crisis help, chat, and email counseling. The organization emphasizes anonymity and free access to its services, supported by a team of professional advisors, social workers, and psychologists. The website reflects a mature digital presence with modern WordPress infrastructure, SEO optimization, and GDPR-compliant cookie consent mechanisms. Technical infrastructure includes Elementor CMS, event calendar plugins, and integration with Google Analytics and PixelYourSite for analytics and marketing purposes. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. The absence of a privacy policy and terms of service pages is a notable compliance gap. Overall, the domain registration data aligns well with the website content, indicating a legitimate and trustworthy entity. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving accessibility compliance.

Filmana.cz is a Czech-Slovak streaming platform specializing in Christian films, series, and documentaries. Founded in 2023 and based in Zlín, Czech Republic, it operates under Elevup s.r.o. The platform targets audiences interested in faith-based media content, positioning itself as the first in the region with this niche focus. The business model is subscription-based streaming, supported by an independent foundation promoting Christian messages through film art. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure. It integrates standard analytics and marketing tools including Google Analytics, Microsoft Clarity, Google Tag Manager, and Facebook Pixel. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance in user tracking and data collection. From a security perspective, the site enforces HTTPS and uses cookie consent controls to manage user privacy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain registration consistency and legitimacy, matching the business's founding date and location. Overall, Filmana.cz presents a professional and trustworthy online presence with good content quality and technical implementation. To enhance security posture and compliance, it is recommended to publish detailed privacy and security policies, implement security.txt, and regularly audit third-party scripts. The platform is safe for general audiences with no adult or questionable content detected.

The website webly3d.net is currently inaccessible, serving only a 502 Bad Gateway error page generated by nginx 1.6.2. This indicates a server-side issue preventing access to any meaningful content or business information. The domain is registered since 2017 with Tucows Domains Inc., showing a consistent registration history but no DNSSEC enabled. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, nor any contact or security information. The technical infrastructure appears minimal and outdated based on the nginx version and lack of visible technologies. Security posture is weak due to missing HTTPS and security headers information, and the site does not demonstrate compliance with GDPR or other privacy frameworks. Overall, the site is currently non-functional and provides no business or security insights.

Adrex.com is a well-established international media portal specializing in adrenaline, extreme, and outdoor sports content. It offers a wide range of articles, videos, and a unique application database catering to extreme sports enthusiasts globally. The website is professionally designed with consistent branding and a clear focus on its niche audience. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the site's professional appearance and content richness.

Able. is a Czech-based digital product development company specializing in creating sophisticated digital products for experienced managers and entrepreneurs. With over 12 years of experience and a team of more than 40 members, Able. positions itself as a medium-sized, reputable player in the technology sector. Their services encompass analysis, branding, UX/UI design, mobile and web app development, custom development, DevOps, integrations, and quality assurance. The company has a strong portfolio featuring notable clients such as AAA Auto, BMW, and Avast, and has received media coverage from respected outlets like Forbes and CzechCrunch. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager, Snitcher Radar, and cookie consent mechanisms to ensure compliance and analytics. Hosting is provided by websupport.cz, a Czech hosting provider, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with a professional and consistent branding approach. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent with granular categories. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, showing a legitimate and trustworthy online presence. Overall, Able. presents a professional, secure, and privacy-conscious digital presence suitable for its target audience. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance trust and compliance.

The website glips.eu serves as an informational resource focused on web design principles and tips, primarily targeting a general audience interested in creating quality websites. The content is presented in Czech and includes educational text, images, and embedded video content. The site appears to be a small-scale informational platform without commercial transactions or direct contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, Google Fonts, and embedded YouTube videos. It includes a third-party tracking script from redistats.com but lacks privacy or cookie consent mechanisms, which may raise compliance concerns. Security posture is minimal with no evident security headers or HTTPS status visible from the data provided. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains, and no suspicious patterns were detected. Overall, the site is functional and informative but lacks key compliance and security features.

YMCA Czech Republic is a well-established non-profit organization focused on providing diverse youth and family activities, including clubs, camps, social services, and creative programs. The website reflects a mature digital presence with comprehensive content tailored to its target audience of young people, families, and volunteers. Technically, the site is built on WordPress with a modern theme and uses common libraries and Google Tag Manager for analytics. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for users.

Svět IT s.r.o. is a Czech-based technology service provider specializing in network administration and development of online projects such as mobile applications, portals, and information systems. The company emphasizes personalized and reliable IT solutions with 24-hour customer support in Czech language. Their website reflects a professional business presence with clear service offerings and client references, positioning them as an experienced player in the IT services market with a focus on cost reduction and quality service delivery. Technically, the website uses modern web technologies including Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a cookie consent mechanism, though lacks visible privacy and security policy documentation. Security posture is moderate with HTTPS implied but no explicit security headers detected, and no WHOIS data available to verify domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

Společná voda d.s.o. is a voluntary association of municipalities in the Czech Republic focused on managing water supply, wastewater treatment, and related infrastructure. Founded in 2022, it serves 22 member municipalities primarily in Central Bohemia and holds a significant stake in Vodohospodářská společnost Benešov a.s., a regional water company. The website provides public information, documentation, and contact details relevant to its members and stakeholders. Technically, the site is built on Joomla CMS with modern libraries and frameworks, offering a good user experience and mobile optimization. However, it lacks explicit privacy and cookie policies, as well as security headers and incident response information, which are areas for improvement. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website is professional and functional but could enhance its security posture and compliance to better serve its audience and meet regulatory requirements.

Brněnské vodárny a kanalizace, a.s. is a large regional water utility company based in Brno, Czech Republic, providing essential water supply and wastewater management services to approximately 435,000 residents and businesses. The company emphasizes water quality, innovation, and customer service, offering a range of services including water meter management, leak detection, and emergency response. Their website is professionally designed, mobile-optimized, and built on TYPO3 CMS with modern technologies such as Bootstrap and jQuery. Privacy and cookie policies are clearly presented with a consent mechanism, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the overall digital presence and business information indicate a legitimate and established entity.

FGP Solutions is a small digital agency based in Alsace, France, specializing in web design, SEO, SEA, marketing, and hosting services. The company positions itself as a reliable and experienced Google Partner agency, focused on helping local SMEs succeed through professional digital solutions. Their website reflects a strong regional presence with a comprehensive service portfolio tailored to local businesses. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes standard marketing and analytics tools such as Google Analytics and Facebook Ads, integrated with privacy compliance mechanisms like cookie consent and Google Consent Mode. Security-wise, the site uses HTTPS and reCAPTCHA but lacks explicit security headers and published security policies, which could be improved. Overall, the website is professional, trustworthy, and well-structured, with no signs of malicious activity or content blocking.

ESTIEM is a well-established non-profit organization dedicated to connecting European students in Industrial Engineering and Management. The website serves as a hub for educational resources, event organization, career development, and community building. It targets students across Europe, providing them with opportunities to grow academically, culturally, and professionally. The organization has a strong market position with a history dating back to 1990 and a domain registered since 1998, reflecting its longevity and credibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. The security posture is stable but could be improved by implementing DNSSEC, security headers, and publishing incident response and data protection policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency. Strategically, ESTIEM should focus on improving privacy compliance and security best practices to align with GDPR and modern security standards, enhancing trust and legal compliance for its members and visitors.

The website represents the engineering bureau VWI, now part of the big. bechtold-gruppe since July 2021. It specializes in electrical engineering and building technology services, targeting business clients primarily in Germany. The site positions itself as a subsidiary within a larger engineering group, providing consultancy and technical services. The content is professional, primarily in German, and includes clear contact information and links to the parent company and related associations. Technically, the site uses a modern but basic tech stack including jQuery, Mapbox, and Snowplow analytics, hosted on 1&1 IONOS infrastructure. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, though it could improve in terms of security best practices and transparency.

DKM Stellenmarkt operates as a specialized online job board serving the Catholic Church and Caritas organizations in Germany. It offers a comprehensive platform for job seekers and employers within this niche, featuring over 1500 active job listings, candidate profile management, and employer registration. The platform integrates with major external job boards such as indeed.de and the German Federal Employment Agency, enhancing its market reach and visibility. The website is professionally designed with consistent branding aligned to its parent organization, DKM Darlehnskasse Münster eG, and targets a specific audience of church and charitable sector professionals in Germany. Technically, the website is built on Joomla CMS with UIkit framework and uses modern web technologies including jQuery and Google reCAPTCHA v2 for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and spam protection on forms, but lacks some advanced security headers and publicly disclosed security policies. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence with clear business credibility and a focused service offering. Security practices are adequate but could be enhanced with additional headers and incident response transparency. The domain registration data aligns well with the website content and hosting, indicating legitimacy and consistency. There are no indications of malicious or suspicious activity, and content safety is rated as safe for general audiences.

Stadtwerke Böhmetal is a regional utility company based in Germany, providing essential energy services including electricity, gas, and water supply to residential and commercial customers in the Böhmetal region. The company positions itself as a reliable local energy provider with a focus on customer service and regional presence. Their website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and compliance with privacy regulations.

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, and data protection management. With over 25 years of experience, the company offers modular software suites that enable enterprises to manage contracts, compliance workflows, risk, and data governance efficiently and securely. Their solutions are available as SaaS hosted in Germany or on-premises, integrating seamlessly with existing IT infrastructures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting medium to large enterprises. Technically, the site is built on WordPress with modern performance and privacy tools such as WP Rocket and Borlabs Cookie for GDPR compliance. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, otris software AG presents a trustworthy and professional digital footprint aligned with its business objectives.

Seek Thermal operates an e-commerce website offering affordable infrared thermal imaging cameras targeting consumers and businesses interested in thermal imaging technology. The website is professionally designed with good content quality and consistent branding, focusing on product sales and applications in automotive and OEM markets. The technical infrastructure is based on the Weebly/EDITMYSITE platform, utilizing common web technologies and multiple third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and ZoomInfo. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and no visible security or privacy policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and compliance.

Schuberth is a well-established manufacturer specializing in high-quality helmets for motorsports, industrial safety, and military applications. The company targets consumers and professionals requiring protective headgear, operating primarily in the manufacturing sector with a medium-sized business footprint based in Germany. The website uses modern web technologies including Nuxt.js and integrates marketing and bot protection tools such as Google reCAPTCHA and Facebook Pixel. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is long-standing and registered with a reputable hosting provider, indicating legitimacy. Overall, the website is professional but could improve in privacy compliance and security best practices.

Icam is a well-established French engineering school with multiple campuses across France and internationally. It offers a broad range of engineering education programs including initial engineering cycles, professional training, and specialized master's degrees. The institution maintains strong partnerships with industry and international universities, enhancing its market position and educational quality. Technically, the website is built on WordPress with modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some HTTP security headers could be improved. Overall, the domain appears legitimate despite lack of public WHOIS data, consistent with privacy norms for .fr domains. The website is professional, accessible, and compliant with GDPR, supporting a high trust level.

Artefact is a well-established French technology group founded in 1991, operating primarily in digital agency services, datacenter hosting, and network operations. The company serves businesses and public sector clients, offering a comprehensive suite of IT and digital solutions through its three main subsidiaries: Artefact (digital agency), ArteOne (datacenter and IT services), and ArteWan (network operator). The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern frameworks like Yootheme and Uikit, and privacy-respecting analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional and transparent website content. Overall, Artefact presents as a credible and established player in the regional technology market.

The website artewan.fr currently displays only a 404 error page, indicating that the requested content is not found or the site is inactive. The domain is registered since 2006 with SCALEWAY as the registrar, showing a long registration period and active status. However, the website lacks any meaningful content, metadata, or business information, which severely limits its utility and trustworthiness. Technically, the site does not present any modern technologies, scripts, or security headers, and no SSL/HTTPS information is available from the provided data. From a security perspective, the absence of privacy policies, cookie consent mechanisms, and contact information indicates poor compliance and security posture. Overall, the site is currently non-functional or under maintenance, resulting in a very low AI score and poor business credibility.

Arteone is a regional datacenter and IT services provider based in Brive, France, operating under the Artefact Groupe umbrella. The company offers a comprehensive suite of IT infrastructure services including private cloud hosting, backup solutions, disaster recovery (PRA/PCA), and managed IT services. Arteone positions itself as a trusted regional leader with a strong focus on data security and proximity to its clients. The website reflects a mature digital presence with professional design, clear navigation, and detailed service descriptions. Technically, the site leverages WordPress CMS, UKit framework, and privacy-focused analytics via Matomo, indicating a modern and privacy-conscious infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though the absence of explicit security headers and lack of published security policies or incident response contacts suggest areas for improvement. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional and consistent business presentation. Overall, Arteone demonstrates a solid business and technical foundation with room to enhance security transparency and WHOIS data availability.

Sport 2000 Alsace operates as a regional sports retail and e-commerce platform focused on serving sports clubs in the Alsace region of France. The company offers exclusive club equipment deals, personalized services such as flocage and embroidery, and maintains a communication platform for partner clubs. The business is supported by physical retail stores in Illkirch and Sélestat, reinforcing its local presence and customer engagement. The website is built on PrestaShop, leveraging modern web technologies and providing a responsive user experience tailored for its target audience of sports clubs and team managers. From a technical perspective, the website demonstrates a solid infrastructure with HTTPS enabled and integration of common e-commerce technologies. However, there is room for improvement in security hardening, such as implementing security headers and enhancing privacy compliance with explicit policies and consent mechanisms. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the business. Social media links and contact information further support the company's credibility. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the lack of security headers and privacy policies represents compliance and security gaps. The website does not appear to track users extensively, indicating a privacy-conscious approach, though formal policies are missing. Overall, the risk level is moderate with recommendations to improve transparency and security controls. Strategically, Sport 2000 Alsace should focus on enhancing privacy compliance, implementing security best practices, and maintaining clear communication channels to strengthen trust and regulatory adherence. These steps will support sustainable growth and reinforce its position as a trusted regional sports retail partner.

mPulse is a well-established digital health engagement solutions provider founded in 1998, specializing in consumer-centric health experience and insights products. The company targets healthcare organizations such as health plans, providers, and related stakeholders, offering a comprehensive suite of products including predictive analytics, omnichannel engagement, health portals, and a HITRUST-certified platform. Their market position is strong as a leader in healthcare technology with a focus on improving health outcomes through innovative digital solutions. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as HubSpot and Google Tag Manager. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, the platform benefits from HITRUST certification and enforces HTTPS, although some security headers could be enhanced. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and business exhibit high professionalism, trustworthiness, and maturity, supported by consistent WHOIS data and domain longevity.

mPulse is a healthcare technology company specializing in digital health engagement solutions that create consumer-centric journeys to improve health outcomes. The company offers a suite of products including predictive analytics, omnichannel engagement, health portals, content management, and a HITRUST-certified Health Experience and Insights Platform. Their target audience includes healthcare organizations, health plans, and providers. The website demonstrates a strong market position with professional branding and comprehensive product offerings. Technically, the website is built on WordPress using Elementor and integrates modern technologies such as jQuery, Swiper.js, and HubSpot analytics. Hosting appears to be on Amazon AWS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site uses HTTPS and domain registration protections but lacks visible security headers and published security policies or incident response contacts. The mention of HITRUST certification indicates a commitment to healthcare security standards. No vulnerabilities or suspicious patterns were detected in the analysis. Overall, the website is professional, trustworthy, and well-positioned in the healthcare technology market. However, improvements in privacy compliance documentation, security header implementation, and vulnerability disclosure would enhance the security posture and user trust.

Cyber Création is a small French business specializing in website creation and web server hosting services, primarily targeting local clients near Reims. The website is minimalistic, with basic content and limited technical sophistication. It uses Bootstrap and jQuery for frontend styling but lacks modern CMS or advanced platform integration. The absence of privacy policies, contact information, and security features such as HTTPS indicates a low level of digital maturity and security posture. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website presents a low-risk profile content-wise but requires significant improvements in security, compliance, and professionalism to enhance credibility and user trust.

La Maison d'Oléron is a small hospitality business specializing in vacation home rentals on the Ile d'Oléron in France. The website provides detailed information about the property, including interior, exterior, equipment, and location, targeting tourists seeking holiday accommodations. The business model relies on direct information presentation and third-party booking platforms for reservations. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and metadata suggest a legitimate small business. Overall, the site is professional and functional with room for security and compliance improvements.

Le Triporteur is a small, local mobile seafood restaurant operating in Reims, France. It offers a unique dining experience by serving fish, seafood, and crustaceans from a Piaggio vehicle, catering to street diners, events, and private functions. The business is positioned as a niche hospitality service with a focus on fresh seafood and convivial experiences. The website is professionally designed, mobile responsive, and provides clear contact information and social media presence, enhancing customer engagement. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, and FontAwesome, with good SEO and mobile optimization. The site enforces HTTPS and includes a cookie consent mechanism, indicating attention to privacy compliance. However, no explicit security headers were detected, and no WHOIS data is available, which impacts domain transparency and trust. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were found in the provided content. The absence of WHOIS data is a concern for legitimacy verification but does not necessarily indicate malicious intent. Overall, the website is a credible and professional digital presence for a small hospitality business, with recommendations to improve domain transparency and security headers to enhance trust and compliance.

WebMD Ignite is a healthcare-focused digital marketing and engagement platform launched in 2023 as a part of the WebMD brand. It offers a suite of solutions including marketing, platform, analytics, clinical, and content services aimed at healthcare organizations such as health systems, plans, and associations. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. The technical infrastructure leverages Drupal CMS, Cloudflare DNS, and integrates multiple analytics and tracking services including Google Analytics, 6sense, and ContentSquare. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site lacks explicit privacy and terms of service pages, which impacts privacy compliance scoring.

Contractor Jobs is a UK-based online job board specializing in contract employment opportunities across various industries. Powered by CV-Library Ltd, it offers job seekers the ability to search thousands of contract roles, register CVs, and receive job alerts. The platform also supports recruiters with access to a CV database for hiring contractors. The website demonstrates a professional and user-friendly design with good mobile optimization and clear navigation, targeting contractors and recruiters within the UK market. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and Bing UET for analytics and tracking, alongside autocomplete and lazy loading scripts to enhance user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. The WHOIS lookup failed due to a domain registration error, but the website's content and branding strongly indicate legitimacy and a well-established presence. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy platform for its target audience.

JobsGraduate is a UK-focused graduate job search platform operated under the CV-Library Ltd brand. It offers a comprehensive service for graduates to search thousands of jobs, register CVs, and receive job alerts. The platform targets recent graduates and entry-level job seekers across various academic disciplines and industries within the UK. The website is professionally designed with good navigation and mobile optimization, providing a positive user experience. Technically, it employs modern JavaScript libraries, Google Analytics, Bing UET, and custom clickstream analytics to track user behavior and optimize marketing efforts. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security policies. The WHOIS data for the domain is unavailable due to domain naming rules, but the strong association with CV-Library Ltd supports legitimacy. Overall, the site demonstrates a mature digital presence with room for security enhancements.

Marketing Jobs is a UK-focused online job board specializing in marketing sector roles, powered by CV-Library Ltd. The platform offers job search, alerts, CV registration, and recruiter services, targeting marketing professionals and recruiters. The website is professionally designed with good mobile optimization and accessibility, providing a user-friendly experience. Technically, it employs modern JavaScript libraries, Google Analytics, Bing UET, and clickstream analytics, with cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit security policies. WHOIS data for the domain is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias, which slightly impacts trust but does not detract from the site's legitimacy given its association with CV-Library Ltd.

Sales Jobs is a UK-focused online job board specializing in sales roles across multiple sectors. The platform offers job search capabilities, CV registration, job alerts, and recruitment advertising services, targeting both job seekers and recruiters within the sales industry. The website is powered by CV-Library Ltd, a recognized recruitment platform, which enhances its market credibility and reach. The site demonstrates a professional and consistent brand presence with a clear focus on the UK sales job market. From a technical perspective, the website employs modern web technologies including Google Analytics, Bing UET, and Clickstream Analytics for user tracking and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. The use of HTTPS and cookie consent mechanisms indicates a commitment to user privacy and security, although explicit security headers and incident response policies are not publicly documented. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies and vulnerability disclosure mechanisms suggests room for improvement in transparency and incident readiness. The WHOIS lookup for the domain 'www.sales-jobs.co.uk' failed due to domain naming rules, indicating the queried domain is a subdomain rather than a registered domain. This does not detract from the site's legitimacy, as the main domain 'sales-jobs.co.uk' is presumably registered and operated by CV-Library Ltd. Overall, the website presents a trustworthy and professional platform for sales job seekers and recruiters in the UK, with a mature technical infrastructure and good privacy compliance. Strategic enhancements in security transparency and direct contact information could further strengthen user trust and compliance posture.