Medium-risk security reports

VÍTKOVICE STEEL, a.s. is a prominent European steel manufacturer specializing in rolled steel products. The website serves as a comprehensive career portal targeting job seekers, students, and graduates interested in joining the company. It highlights available positions, employee benefits, company culture, and educational cooperation, reflecting a strong employer brand and community engagement. The site is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress and Elementor, with embedded multimedia content and social media integration enhancing user engagement. Technically, the website employs secure HTTPS protocols, cookie consent management, and Google Tag Manager for analytics, indicating a mature digital infrastructure. The presence of security headers and absence of exposed sensitive data reflect a solid security posture. However, the lack of publicly available WHOIS data limits transparency, though this is common for corporate domains. Privacy policies and cookie management comply with GDPR standards, supporting user privacy and regulatory adherence. Overall, the site demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy platform for prospective employees and stakeholders. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security maturity.

Charita Opava is a well-established non-profit Catholic organization based in the Czech Republic, providing a broad range of social and health care services including protected housing, social rehabilitation, day care, therapeutic workshops, and senior care. The organization targets residents of the Opava region, donors, volunteers, and partners, positioning itself as a trusted regional social service provider with multiple governmental and community partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a custom CMS named HandMade, with standard web technologies including HTML5, CSS3, and JavaScript. It integrates multiple Google Analytics and Tag Manager scripts for user tracking and analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent to manage user privacy preferences. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, Charita Opava's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, accessibility, and explicit security policies would further enhance trust and resilience.

Jinak o.p.s. is a Czech non-profit organization dedicated to providing social services such as support for independent living, social therapeutic workshops, social rehabilitation, education, and counseling. The website targets individuals seeking social support within the Czech Republic and presents a clear, consistent brand with relevant content for its audience. The organization maintains an active presence with contact information and partner links, indicating a community-focused approach. Technically, the website uses older but functional technologies including jQuery 1.11 and integrates multimedia features like YouTube and text-to-speech services. However, the site lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details suggest a legitimate entity. Overall, the site is functional and professional but would benefit from technical and security improvements.

Základní škola a Praktická škola, Opava is a public educational institution located in Opava, Czech Republic, providing primary and practical school education. The website serves students, parents, and the local community with information about school events, projects, and contact details. The institution maintains a consistent brand presence and complies with GDPR regulations, reflecting a responsible approach to data privacy. Technically, the website uses a modern tech stack including jQuery, Mapy.cz API, and Owl Carousel, built on the AKTIVNÍ ŠKOLA CMS platform. It is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, supporting the institution's mission effectively.

Mateřská škola Eliška is a small, regionally funded preschool educational institution located in Opava, Czech Republic. It operates as a contributory organization under the Moravskoslezský kraj regional government, providing early childhood education and specialized support services such as rehabilitation and orthoptics. The website targets parents and guardians in the local community, offering information about classes, events, and organizational details. The business model is public sector focused, emphasizing community service rather than commercial revenue generation. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js for sliders, and Magnific Popup for image galleries, along with accessibility enhancements via ResponsiveVoice. The site is mobile optimized and features good navigation and content structure, though SEO and metadata completeness could be improved. No CMS or hosting provider details were identified. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS as implied by Open Graph URLs, but lacks visible security headers and cookie consent mechanisms. No forms or data collection points were found on the main page, reducing attack surface. The absence of WHOIS data and domain registration details is a concern for trust but does not directly impact the operational security posture. Privacy policy is present and appears GDPR compliant, but no explicit incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy for its intended audience, with moderate technical maturity and some room for security and compliance improvements. The lack of WHOIS data and cookie consent are the main gaps. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving metadata for SEO and social sharing.

Statutární město Opava operates an official municipal website serving as the primary digital platform for city residents, visitors, and local businesses. The site provides comprehensive information about city governance, public services, news, events, and contact details. It targets a broad audience including citizens, municipal employees, and tourists, positioning itself as a trusted source of local government information. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and mapping libraries like Leaflet.js. It uses WebJET CMS for content management and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain transparency, but the official branding and comprehensive contact information support its legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and trust.

Urssaf.fr is the official website of the French social security contribution agency, providing personalized support and online services for employers, independent workers, and associations in France. The site offers comprehensive information, declaration services, and legal documentation, positioning itself as a key government resource in the social security sector. The website is professionally designed with consistent branding and good content quality, targeting a broad audience involved in social security contributions. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It is mobile-optimized, accessible, and includes privacy and cookie consent mechanisms compliant with GDPR. Performance is moderate, with a well-structured HTML and CSS foundation. Analytics and chatbot services are integrated for user engagement and data collection. From a security perspective, the site enforces HTTPS, includes CSRF protection, and follows best practices, although explicit security headers could be verified further. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is typical for AFNIC-managed .fr domains, and does not detract from the site's legitimacy. Overall, Urssaf.fr presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing visible security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to sustain security and trust.

LED is a French digital agency specializing in designing, developing, and optimizing digital products such as websites, e-commerce platforms, and applications. As a subsidiary of Groupe Les Enchanteurs, LED positions itself as a user-centric agency with expertise in digital strategy, UX/UI design, development, and project management. The website reflects a professional and consistent brand image targeting organizations and brands seeking digital transformation. Technically, the site is built on WordPress with integrations of modern frameworks like Laravel, React, and Next.js, hosted by OVH. It employs Google Tag Manager and Axeptio for analytics and cookie consent, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, well-structured, and compliant with GDPR, though it could improve by publishing detailed security policies and vulnerability disclosure information.

Limbus Studio is a French-based creative agency specializing in WordPress web design, development, and maintenance services. Established since 2005, the company offers a broad range of services including branding, digital design, motion design, print, packaging, SEO, and WooCommerce support. The agency positions itself as a trusted partner with a strong client base and positive reviews, emphasizing quality and long-term client relationships. Technically, the website is built on WordPress using the Enfold theme and WooCommerce platform, enhanced with performance optimization tools like WP Rocket and RocketCDN. The site is well-structured with comprehensive metadata, schema.org structured data, and social media integration, reflecting a mature digital presence. Mobile optimization and accessibility are well addressed. Security posture is solid with HTTPS enforced, anti-clickjacking measures, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like Content-Security-Policy are not detected, and no dedicated security or incident response pages are found. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages. Overall, the website demonstrates professionalism and reliability, though the absence of WHOIS data and explicit privacy documentation slightly reduce trust scores. Strategic improvements in privacy transparency and security header implementation are recommended to enhance compliance and trustworthiness.

Outseta operates as a SaaS membership operating system designed to help businesses and creators monetize and grow their membership offerings. The platform integrates payments, authentication, protected content, CRM, email marketing, and help desk tools into a unified solution. The website presents a professional and modern interface with good content relevance and user experience, targeting businesses seeking an all-in-one membership management solution. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, reCAPTCHA, and Plausible Analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and bot protection, but lacks explicit security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and technology usage suggest a legitimate business. Privacy and cookie policies are not clearly presented, indicating room for compliance improvement.

Cercle Communication is a small Canadian marketing and communication agency focused on providing personalized and multidisciplinary services to businesses. The website is built on the GoDaddy Website Builder platform, indicating a moderate level of digital maturity with basic technical infrastructure including HTTPS and service worker support. However, the site lacks comprehensive privacy and security policies, contact information, and advanced SEO or accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contacts. Overall, the website presents a basic but functional online presence suitable for a small agency, with room for improvement in privacy compliance and security best practices.

Visual Capitalist is a media company specializing in delivering rich, visually engaging content focused on investment trends, business opportunities, and economic data. Their market position is strong within the niche of visual data journalism, supported by a subscription model (VC+), licensing, and advertising revenue streams. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and high-quality content. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the site is trustworthy and well-maintained, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security transparency and accessibility features.

PNORS Technology Group is an Australian-owned enterprise comprising a group of companies that provide integrated and complementary technology-based solutions aimed at helping Australian businesses grow. The company positions itself as a medium-sized technology group with subsidiaries such as Pacific Commerce, WilldooIT, and Netway, focusing on improving business productivity and efficiency through technology. The website is professionally designed using the Odoo CMS platform and incorporates modern web technologies including Google Tag Manager for analytics and tracking. Privacy and cookie policies are implemented with consent mechanisms, reflecting a commitment to user privacy and compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness from a domain registration perspective. Overall, the website is safe, professional, and well-structured, targeting Australian businesses seeking technology solutions.

HashBang is a Lyon-based cooperative specializing in bespoke web and software engineering services, founded in 2013. The company emphasizes sustainable and responsible digital solutions, leveraging Python and Django technologies. Their market position is that of a trusted local cooperative with a strong commitment to social and ecological values. Technically, the website uses modern frameworks such as Bulma CSS and Wagtail CMS, hosted on Scaleway infrastructure, indicating a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is partial, with a privacy policy present only in the legal mentions page and no cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, targeting French-speaking business clients seeking custom IT solutions.

Ringhotels is a German hospitality business specializing in hotel bookings, wellness weekends, and conference hosting across Germany. The website targets travelers seeking authentic HeimatGenuss experiences and offers a professional platform for vacation planning. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and uses Cookiebot for cookie consent management. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

BWH Hotels operates as a hotel brand offering individual freedom and a strong worldwide network, targeting hotel owners and operators. The website is professionally designed using TYPO3 CMS and Bootstrap, with moderate performance and good mobile optimization. Consent management scripts indicate GDPR awareness, though explicit privacy and terms of service pages are not found. Security posture is adequate with HTTPS enabled but lacks explicit security headers and visible incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

Edunation is a specialized Czech company providing digital services tailored for educational institutions, including school website creation, graphic design, and virtual tours. The website reflects a focused business model targeting schools and school founders, with a strong presence in the Czech education sector. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette, and Google APIs, indicating a mature digital infrastructure. Security measures include HTTPS and Google reCAPTCHA, but the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the site is professional and trustworthy, though it lacks some compliance documentation and direct contact details. Strategic enhancements in privacy compliance and security policies would strengthen its market position and trustworthiness.

Domovy online is a Czech Republic based service provider specializing in enhancing the online presentation of social service organizations. Their offerings include modern website creation, virtual tours, graphic design, and premium digital tools aimed at improving communication and operational efficiency for social service providers and regional governments. The company positions itself as a trusted partner with multiple regional government clients and a focus on GDPR compliance and accessibility. Technically, the website employs a modern tech stack including jQuery, Nette Framework, Google reCAPTCHA, and Cookiebot for consent management, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, secure forms, and no visible vulnerabilities, though explicit privacy and security policies are not published. Overall, the website is professional, accessible, and well-structured, supporting the company's credibility and market position.

Seekube is a French-based technology platform specializing in event organization and facilitation, primarily targeting professional networking and recruitment events. The website presents a modern and professional interface built with React and Tailwind CSS, indicating a moderate level of digital maturity. However, the absence of explicit privacy, cookie, and terms of service policies suggests gaps in compliance and transparency. Security posture is limited due to missing security headers and lack of visible incident response or vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy. Strategic improvements in privacy compliance, security best practices, and contact transparency are recommended to enhance trust and regulatory adherence.

Bright by Rivacom is a newly established French marketing agency specializing in influencer marketing and talent management, primarily targeting businesses and e-commerce platforms. The company operates a professional website built on WordPress using the Divi theme, incorporating modern web technologies such as Google Fonts, Font Awesome, Yoast SEO, Cookiebot for cookie consent, and Google Tag Manager for analytics. The website demonstrates good design quality, mobile optimization, and SEO practices, although it lacks some compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enabled and cookie consent implemented, but could be improved by adding security headers and explicit contact information. The domain registration is recent and consistent with the business founding date, registered through a reputable registrar OVH, indicating legitimacy. Overall, the website presents a professional image suitable for its niche market but should address compliance and security gaps to enhance trust and regulatory adherence.

14SEPTEMBRE is an international communications and reputation management agency, part of the extreme Group, with offices in major European cities and partner firms globally. They specialize in consulting, brand content, visual design, social media, PR, and events, targeting clients in design, architecture, food, hospitality, and social/environmental initiatives. The website is professionally designed using modern technologies like SvelteKit and includes integrations for cookie consent and analytics. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy policy documentation. No WHOIS data was found, which limits domain trust verification but the business content and branding are consistent and professional. Overall, the site is well-structured, mobile-optimized, and trustworthy for its business domain.

DACTYLO communication design is a small Canadian agency specializing in web design, graphic design, and communication strategy services. The website is built on WordPress using the Salient theme and integrates common analytics and tracking tools such as Google Analytics, Google Tag Manager, Abralytics, and VisitorTracking. The site is primarily in French and targets businesses seeking professional communication design solutions. Technically, the website is moderately optimized with good mobile responsiveness and basic SEO features. Security posture is solid with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website presents a professional image but could improve transparency and security documentation.

The Association de l'aluminium du Canada (AAC) is a well-established industry association representing the Canadian primary aluminium sector, with a history spanning over 100 years. The organization focuses on promoting sustainable prosperity within the aluminium industry, advocating for decarbonization efforts in North America, and supporting member alumineries. The website is professionally designed, bilingual (French primary with English option), and targets industry stakeholders, government entities, and the general public interested in aluminium and sustainability topics. AAC's market position is strong as a key national industry association with a medium-sized organizational footprint.

VisitorTracking.com is a technology-focused SaaS platform specializing in website visitor tracking and conversion optimization analytics. The website is built on WordPress with Elementor and integrates third-party services such as Outseta for membership management and Rewardful for affiliate marketing. The platform targets website owners and marketers seeking detailed visitor insights to boost conversions. The site presents a professional design with good SEO optimization and structured data, although it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the website is functional and credible but requires improvements in privacy compliance and security transparency to enhance trustworthiness and regulatory adherence.

The website at cdn2l.ink is currently inaccessible, returning an XML error indicating a missing key for the main index.html page. This suggests either a misconfiguration or intentional blocking of content. Due to the lack of accessible content, no metadata, business information, or user-facing features are available for analysis. The domain uses privacy-protected WHOIS registration, limiting the ability to verify legitimacy or business claims. Technically, the site lacks detectable technologies, security headers, or compliance policies, indicating a very low digital maturity level. Security posture is poor with no visible HTTPS or security best practices. Overall, the site presents a high risk due to lack of transparency and accessibility, and no trust or compliance signals are present.

Event Online Registration operates a WordPress-based platform focused on listing and facilitating online registration for various events. The website showcases multiple upcoming events with detailed information including dates, titles, and images, targeting event attendees and organizers. The business model centers on providing an accessible online event registration service, positioning itself as a niche player in the event management space. Technically, the site leverages WordPress CMS with plugins such as Tickera for ticketing, integrates Google Analytics, HubSpot, and Permutive for marketing and analytics, and employs Google Tag Manager for tag management. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices.

Todon.eu operates as a small, volunteer-run Mastodon instance focused on radical leftist and anti-authoritarian communities, providing decentralized social media services. The platform supports multiple languages and offers enhanced Mastodon features such as increased character limits and custom themes. The website is well-branded and consistent with its community-driven mission, emphasizing privacy and anti-discrimination policies. Technically, the site runs Mastodon version 4.4.8 with a modern tech stack including Ruby on Rails and React. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and privacy-conscious defaults, but lacks formal security policies and some security headers. Overall, the site is trustworthy and safe, with no adult or explicit content. Contact information is limited but present via email. There are no signs of malicious activity or suspicious domains. Strategic improvements include adding a cookie consent mechanism, formalizing security policies, and enhancing accessibility. This positions Todon.eu as a niche but credible player in the decentralized social media space, serving a specific activist audience with a strong privacy and community focus.

OpenMapTiles is an open-source mapping project operated by MapTiler AG, providing vector tiles and map hosting solutions primarily for developers and GIS professionals seeking self-hosted map infrastructure. The website demonstrates a solid market position with trusted partnerships and a strong community presence on GitHub. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

Stamen Design LLC is a specialized data visualization and cartography studio with over 20 years of experience delivering award-winning visualizations and custom data products. The company serves organizations seeking sophisticated data storytelling and interactive mapping solutions, positioning itself as a niche leader in the technology and design space. Their website reflects a professional and consistent brand with clear service offerings including data storytelling, interactive experiences, workshops, and open-source tools. Technically, the site is built on WordPress with modern JavaScript libraries such as D3.js and Vue.js, and integrates analytics and marketing tools like Google Analytics, LinkedIn Insight, and Crazy Egg. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and privacy compliance evidenced by comprehensive privacy and cookie policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and well-maintained digital presence.

Stadia Maps, Inc. is a technology company specializing in providing location APIs including maps, geocoding, routing, and navigation services. Founded in 2016, the company targets developers and businesses requiring reliable and privacy-conscious location data solutions. Their market position is that of a niche provider offering transparent billing and strong privacy guarantees as an alternative to larger mapping providers. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on AWS infrastructure, and integrates MapLibre GL JS for mapping. The site is performant, mobile-optimized, and well-structured with good SEO and accessibility features. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism despite using Matomo analytics. Overall, the website is professional, trustworthy, and well-maintained, with clear business contact via email and active social media presence.

Oldyssey is a French media platform dedicated to bridging generations by sharing stories and knowledge from elderly individuals aged 70 and above. The platform offers video and audio content series that highlight the experiences and skills of older generations, aiming to foster intergenerational understanding and transmission. Supported by partnerships and donations, Oldyssey positions itself as a niche media outlet with a strong community focus. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as jQuery and Slick Carousel, and is hosted on Webflow's CDN. The site demonstrates good mobile optimization, SEO practices, and a professional design, providing a positive user experience. Security-wise, the site enforces HTTPS, uses a GDPR-compliant cookie consent mechanism via Axeptio, and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. Overall, Oldyssey presents a trustworthy and professional online presence with room for improvement in formal security and compliance documentation.

The Institut Européen de Coopération et de Développement (IECD) is a French non-profit organization established in 1988, focused on international solidarity and development projects across 18 countries. Their core mission involves supporting human, economic, and social development through education, entrepreneurship, and professional training. The organization holds public utility recognition and maintains a professional web presence with comprehensive content and clear navigation. IECD targets development partners, donors, and beneficiaries globally, positioning itself as a reputable NGO with a medium organizational size. Technically, the website is built on WordPress 6.8.3 using the Enfold theme and integrates modern plugins such as Yoast SEO and Complianz GDPR for compliance. The site employs Google Analytics and Tag Manager for analytics and tracking, with cookie consent mechanisms in place. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 on forms, alongside cookie consent management. However, explicit security headers like CSP and X-Frame-Options are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a strong compliance posture with GDPR and cookie regulations, a trustworthy business profile, and a solid technical foundation. Recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security and compliance posture.

Mutuelle Saint-Christophe assurances is a French mutual insurance company providing a broad range of insurance products including auto, moto, habitation, health, and specialized insurance for teaching professionals and religious institutions. The website targets individuals and collectivities, offering resources and client spaces tailored to different customer segments. The company maintains an active presence with regional committees and community engagement events. Technically, the website is built on Drupal 11, employs modern web technologies, and integrates a privacy consent management SDK, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the professional presentation and comprehensive privacy policies indicate a trustworthy entity. Overall, the website demonstrates good content quality, user experience, and privacy compliance, suitable for its business domain.

Kloovis is a French startup founded in 2020 that provides an innovative platform to help distribution and construction sector actors transform their surplus and unsold products into donations. The platform offers comprehensive services including material analysis, beneficiary identification, donation agreement drafting with electronic signature, logistics management, and donation tracking with official documentation. The company positions itself as a sustainability-focused solution reducing waste and costs while providing tax benefits. Technically, the website is built on WordPress with WooCommerce and uses modern plugins such as Yoast SEO and Slider Revolution. The site is well-structured, mobile-optimized, and includes SEO best practices. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Belle Main is a French non-profit foundation dedicated to the conservation of movable heritage and the preservation of artisanal craftsmanship. Founded in 2015 and affiliated with the Fondation du patrimoine, it provides financial support for restoration projects and artisan training. The website presents a professional and consistent brand image, targeting proprietors of antique furniture and artisans. Technically, the site is built on WordPress with a moderate performance profile, employing common plugins for SEO, forms, and cookie compliance. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and well-maintained, with no critical security or content safety issues detected.

The Fédération Française du Bâtiment (FFB) is a leading French federation representing artisans and entrepreneurs in the building and construction sector. The organization provides technical knowledge, business management support, regulatory guidance, and environmental performance advice to its members. The website reflects a professional and well-structured digital presence, targeting building professionals and stakeholders in France. The content is relevant and tailored to the industry, with clear navigation and comprehensive information about various building techniques and business management topics. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies such as jQuery, Bootstrap 4, and Google Tag Manager for analytics. The presence of OneTrust cookie consent demonstrates a mature approach to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong compliance and professional standards. Strategic improvements in security headers and accessibility would further enhance its posture.

The website www.saint-gobain.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that performs browser verification and CAPTCHA validation before granting access. This security mechanism prevents direct access to the site's content, resulting in a lack of available metadata, business information, or contact details for analysis. The WHOIS lookup for the domain failed to return any registration data, suggesting the domain is either privacy protected or unregistered in the .com registry, which is unusual for a major corporate entity. The site employs Google Tag Manager and Google Analytics 4 extensively across multiple related domains, indicating a mature digital marketing infrastructure. However, the inability to access actual content or security headers limits the assessment of the site's security posture and compliance status. Overall, the site appears to be a corporate/business site with no adult or explicit content, but the lack of accessible data and WHOIS information reduces confidence in its transparency and trustworthiness.

Les Compagnons du Devoir et du Tour de France is a well-established French educational organization specializing in vocational training and apprenticeship programs for skilled trades. The website reflects a professional and consistent brand presence, targeting individuals seeking training in various crafts and trades. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital presence with moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and explicit security policies, which impacts its overall security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe and appropriate for a general audience.

Les Bricos du Cœur is a French non-profit association founded in 2013 dedicated to supporting social aid organizations by organizing solidarity renovation projects, managing donations of materials, and operating a solidarity hardware store. The website reflects a well-established organization with a clear mission to improve the living and working environments of social structures such as associations, foundations, hospitals, and EHPADs. Their market position is strengthened by over 1200 completed projects and a network of engaged partners. Technically, the site is built on WordPress with modern libraries and performance optimizations, ensuring good user experience and mobile responsiveness. Security posture is strong with HTTPS, security headers, and anti-bot protections, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

CCCA-BTP is a French non-profit organization focused on accelerating innovation in training and apprenticeship for the building and public works sector. It serves as a key national coordinator providing resources, strategic support, and certification services to training organizations and industry stakeholders. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and active social media engagement. Technically, the site is built on Drupal 11, uses modern fonts and icons, and integrates Google Analytics and a cookie consent manager to comply with privacy regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. The lack of WHOIS data is a notable gap in domain legitimacy verification, but the overall site professionalism and content quality support trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust.

Fondation Bettencourt Schueller is a well-established French philanthropic foundation recognized as a public utility since 1987. It supports talents in life sciences, arts, and solidarity through prizes, donations, personalized support, and communication efforts. The foundation targets French-speaking audiences involved in cultural, scientific, and social projects. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support (French and English). Technically, it is built on Drupal CMS with integrated Matomo analytics and Axeptio for cookie consent management, ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the foundation demonstrates high business credibility and trustworthiness, with consistent branding and comprehensive content.

The Conseil de la protection sociale des indépendants (CPSTI) website serves as an official French government portal dedicated to providing social protection services for independent workers. It offers comprehensive information and services related to social contributions, health reimbursements, retirement planning, mediation for disputes, and social aid. The site is well-positioned as a trusted intermediary between independent workers and major social institutions such as Urssaf, Ameli, and Assurance Retraite. The target audience is clearly defined as independent workers in France, and the business model revolves around public service and support.

Fonjep is a well-established French non-profit organization founded in 1964, dedicated to supporting youth and popular education projects. The website clearly communicates its mission, services, and regional presence, targeting associations, public institutions, and youth engaged in educational and solidarity initiatives. The digital infrastructure is built on Drupal 10 with modern front-end technologies, ensuring good mobile optimization, accessibility, and user experience. The site employs a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature privacy posture. Security-wise, the site uses HTTPS and cookie management best practices but lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant, with room for improvement in security transparency and direct contact information.

The Czech Fintech Association (Fintech asociace) is a professional organization dedicated to uniting entrepreneurs and innovation enthusiasts in the financial technology sector within the Czech Republic. Their mission is to elevate the Czech fintech ecosystem to a leading global position. The website serves as a hub for promoting fintech events, projects, and membership opportunities, targeting fintech professionals and stakeholders in the region. The association positions itself as a key player in the national fintech landscape, fostering collaboration and innovation. Technically, the website is built on WordPress using the Divi theme framework, enhanced with multilingual support via WPML and SEO optimization through Rank Math. The site integrates event management via the Tribe Events Calendar plugin, indicating a focus on community engagement and event promotion. The technical infrastructure is modern and moderately performant, with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs deferred script loading, but lacks explicit security headers and published security policies. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy with a clear business focus, but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily targeting European crypto traders and investors. Founded in 2014, it positions itself as the largest Czech crypto exchange with a focus on fair fees and customer trust. The platform offers services for buying and selling cryptocurrencies safely and easily. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern web technologies including Angular framework, Google Tag Manager, Cookiebot for consent management, and Microsoft Clarity for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response details are not published. WHOIS data confirms the legitimacy of the business with consistent registration details matching the website claims. Overall, the site is safe, professional, and trustworthy, with room for improvement in privacy and security transparency.

The website pms.gov.cz is the official portal for the Probační a mediační služba (Probation and Mediation Service) of the Czech Republic, a government agency under the Ministry of Justice. It provides a wide range of services including probation supervision, mediation between victims and offenders, juvenile justice, electronic monitoring, parole, community service, and victim support. The site targets the general public, legal professionals, victims, and offenders, positioning itself as a key national public service entity in the justice sector. The content is comprehensive, professionally presented, and consistent with government standards.

Obec Šilheřovice operates an official municipal website serving the local community and visitors with comprehensive information about local governance, events, public services, and tourism. The site is well-positioned as a trusted source for residents, providing timely updates and access to official documents. The website leverages modern web technologies including jQuery, Bootstrap, and Leaflet for maps, ensuring a responsive and user-friendly experience across devices. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence appropriate for a small municipal government entity.

Meta4 is a small graphic design and signmaking business based in the Czech Republic, offering a range of visual branding and advertising services including logo design, corporate identity, web design, 3D graphics, and advertising production. The website content is minimal and indicates the site is closed, but it still presents a portfolio and service descriptions targeting businesses seeking creative visual solutions. Technically, the site uses common frontend technologies such as Bootstrap, FontAwesome, and jQuery plugins, with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency and legitimacy. Overall, the site shows basic professionalism but lacks critical compliance and security features.

The website at kr-moravskoslezsky.cz is currently inaccessible, returning a minimal HTML page with a 'Http/1.1 Service Unavailable' message. This indicates a server-side issue or content blocking, preventing any meaningful content or metadata extraction. Due to this, no business information, contact details, or security policies are available for analysis. The lack of accessible content severely limits the ability to assess the company's market position, services, or technical infrastructure. The website's digital maturity appears very low given the absence of accessible content and security features. Security posture cannot be properly evaluated due to lack of data, but the absence of HTTPS and security headers is a critical concern. Overall, the site presents a high risk of poor user trust and compliance issues until accessibility and security are improved.

Sírius, příspěvková organizace, is a Czech non-profit social service provider focused on supporting people with disabilities who cannot live in their natural environment and require assistance. The organization operates primarily in the Moravskoslezský region, offering services such as residential homes for disabled persons, protected housing, respite care, and social-health care. The website reflects a stable regional presence with clear contact information, social media engagement, and partnership with local government entities. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and responsive design principles, ensuring good user experience and accessibility. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy page. Overall, the site is professional, trustworthy, and well-suited to its audience.