Medium-risk security reports

Plesenská Kafrárna is a small social enterprise café and wine bar based in Ostrava – Plesná, Czech Republic, focused on community support, sustainability, and employing socially disadvantaged individuals. The business offers coffee, homemade cakes, and event spaces, positioning itself as a local community hub with a strong social mission. The website is built on WordPress with common web technologies such as jQuery, Bootstrap, and FontAwesome, providing a generally good user experience with moderate mobile optimization and basic SEO. However, a visible PHP fatal error in the theme code indicates technical issues that could affect site stability and user experience. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional but requires technical and compliance improvements to enhance security and privacy standards.

Maso od Amose is a Czech Republic-based small retail business specializing in raw meat and complementary pet food products, primarily targeting dog owners seeking nutritionally balanced raw diets. The company operates an e-commerce platform built on the Shoptet system, offering regional delivery and parcel shipping options to customers. The website presents a professional and consistent brand image with clear product offerings and customer engagement features such as polls and contact forms. Technically, the site uses legacy jQuery libraries and standard Shoptet scripts, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CSRF protections but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. WHOIS data is unavailable, limiting domain trust assessment, but the site content and contact details appear legitimate. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and updated technical components.

Naaia is a French-based SaaS company specializing in AI compliance, risk management, and governance solutions. Founded in 2022, it positions itself as a European leader and the first AIMS® provider, offering a platform to operationalize AI governance and compliance with global regulations. The company holds ISO 27001 and ISO 42001 certifications, reinforcing its commitment to security and AI management standards. The website is professionally designed, content-rich, and targets organizations deploying AI systems that require regulatory compliance and risk oversight. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as HubSpot, Google Analytics, and Matomo. The hosting provider is Gandi SAS, and the domain registration details align well with the business identity. The site is mobile-optimized, accessible, and SEO-friendly, with a good performance profile. From a security perspective, the site enforces HTTPS, uses security headers, and demonstrates best practices through certifications and cookie consent mechanisms. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are provided. The absence of direct company emails or phone numbers on the site suggests reliance on contact forms for communication. Overall, Naaia presents a strong security posture and business credibility with minor areas for improvement in DNS security and transparency of incident response. The site content is safe for general audiences, with no adult or questionable material detected.

KaviAR Tech SAS operates KaviAR.app, a cloud-based augmented reality platform combined with a mobile app that enables users to create interactive AR experiences without technical expertise. The company targets businesses and individuals seeking to enhance printed materials with digital content, democratizing augmented reality usage. Their market position is that of a niche SaaS provider focusing on ease of use and accessibility, supported by tiered subscription plans and a free trial. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site does not contain adult or questionable content and maintains good privacy compliance.

Immoshoot is a small real estate service provider with a website built on the Wix platform. The site presents basic branding and marketing content focused on real estate but lacks detailed business information, contact details, and compliance policies. Technically, the site uses Wix's standard technology stack with modern JavaScript polyfills and is hosted securely with HTTPS. However, the absence of privacy, cookie, and terms of service policies, as well as missing WHOIS data, limits the trust and compliance posture. Security headers and incident response information are also not present, indicating room for improvement in security maturity. Overall, the website is functional but basic, with moderate technical implementation and security posture.

Naturhelp.cz is a Czech language informational website providing articles, reviews, and tips related to nature, gardening, ecology, and recipes. The site targets a general audience interested in environmental topics and sustainable living. It operates as a content publishing platform with monetization through Google AdSense. The website is built on WordPress, leveraging various plugins for SEO, multilingual support, and GDPR compliance. Hosting is provided by WEDOS, consistent with the domain registration data. The site demonstrates good digital maturity with responsive design, clear navigation, and structured data implementation. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR opt-in banner. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is professional, trustworthy, and safe for general audiences.

ZAZUMi.cz is a Czech Republic-based e-commerce retailer specializing in plants, gardening supplies, and pet products. The website offers a broad catalog of products for home and garden enthusiasts, including indoor plants, garden equipment, and pet accessories. The platform supports customer accounts with login and registration features and provides clear contact information for customer support. The site is professionally designed with good navigation and mobile optimization, targeting primarily Czech-speaking customers interested in gardening and home care. Technically, the website employs modern JavaScript libraries such as Algolia for search and Mailkit for email services, alongside Google Tag Manager for analytics. The site uses HTTPS, ensuring encrypted communication, but lacks visible security headers which could enhance protection against common web attacks. Performance is moderate with room for improvement in accessibility and SEO features. From a security perspective, the site demonstrates basic best practices such as secure login forms with CSRF tokens and encrypted connections. However, the absence of privacy and cookie policies, as well as no visible incident response or vulnerability disclosure mechanisms, indicates gaps in compliance and security maturity. The lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, ZAZUMi.cz presents a functional and user-friendly e-commerce platform with a solid business focus but requires improvements in transparency, privacy compliance, and security hardening to enhance trust and regulatory adherence.

Gardners operates a professional e-commerce platform specializing in indoor plants, stylish flower pots, substrates, and plant care products primarily targeting the Czech market. The website is well-structured, with clear navigation and a comprehensive product catalog, positioning itself as the largest online shop for indoor plants in the region. The business model focuses on retail sales with additional services such as workshops and educational content. Technically, the site leverages the Shoptet e-commerce platform, integrates multiple analytics and marketing tools including Google Analytics, Facebook SDK, and Microsoft Clarity, and uses modern web technologies with CDN support for performance. Security posture is solid with HTTPS enforced, CSRF protection on forms, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and business focus. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

Onlinezahradnictvi.cz is a Czech Republic-based small e-commerce business specializing in the sale and delivery of plants and gardening supplies. The company emphasizes sustainable packaging and supports local Czech growers, positioning itself as a niche leader in online plant retail. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, it leverages the Shoptet e-commerce platform with integrations for analytics and marketing, including Google Analytics, Microsoft Clarity, and Facebook SDK. Security posture is good with HTTPS and CSRF protections, though some legacy libraries like jQuery 1.11.3 could be updated to enhance security. Privacy compliance is strong with visible cookie consent and a comprehensive privacy policy in Czech language. No WHOIS data is available, likely due to privacy protection, which slightly reduces transparency but is common for small businesses. Overall, the website is trustworthy, safe, and well-positioned in its market niche.

Crowdtech is a technology company established in 2003, operating primarily in the Netherlands. The company appears to offer technology-related services or solutions, targeting a professional audience. The website is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics, Google Ads, and Facebook Pixel. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and domain transfer lock in place, but improvements are recommended such as enabling DNSSEC and implementing security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website presents a professional image but could enhance trust and compliance by publishing comprehensive policies and improving security configurations.

The website mest.com is currently a parked domain with minimal content, primarily serving as a placeholder indicating the domain may be for sale. There is no active business presence or descriptive content about services or products. The site embeds an external iframe from an unrelated domain and includes multiple advertising and tracking scripts. The technical infrastructure is basic, with no detected CMS or advanced frameworks, and the hosting appears to leverage AWS Cloudfront CDN for static assets. Mobile optimization and accessibility are minimal, and SEO practices are poor due to lack of meaningful content and metadata. Security posture is weak, with no HTTPS enforcement visible in the provided data, no security headers, and no privacy or cookie policies, which raises compliance concerns. The WHOIS data shows the domain is old (registered in 1999) but uses parking DNS servers, consistent with the parked domain status. Overall, the site lacks business credibility and trust indicators, and the security and privacy compliance posture is poor.

The University of Wisconsin–Madison is a prestigious public research university located in Madison, Wisconsin, founded in 1849. It offers comprehensive education opportunities to undergraduate, graduate, and professional students, and is recognized as one of the top-ranked research institutions in the United States. The university emphasizes public service through the Wisconsin Idea, aiming to improve lives beyond campus boundaries. Its website reflects a mature digital presence with extensive content, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Eloqua for marketing and analytics. The site is well-optimized for mobile and accessibility, with good SEO practices. Hosting appears to be managed via university infrastructure or a dedicated CDN. Performance is moderate, with room for improvement in security headers and explicit security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with user consent mechanisms. However, the absence of a published security policy or vulnerability disclosure program is noted. WHOIS data is unavailable, which is unusual but does not detract from the overall legitimacy given the institutional nature and external trust signals. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and public image effectively.

NRK P3 is a well-established Norwegian public media channel focused on music, humor, and news, operating under the Norwegian Broadcasting Corporation (NRK). The website p3.no serves as a digital platform for their content, targeting Norwegian-speaking audiences interested in contemporary music and entertainment. The site demonstrates a mature technical infrastructure built on WordPress with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though visible privacy and cookie policies are lacking, indicating room for compliance improvement. Overall, the website is trustworthy and professionally managed, reflecting its status as a national broadcaster.

Kode24.no is a Norwegian online news portal dedicated to the developer community, providing news, opinions, guides, and reports related to programming and the Norwegian technology sector. The website serves a niche audience of Norwegian developers and tech professionals, positioning itself as a specialized media outlet within the technology and media industries. The business model revolves around content publication and job listings, supported by advertising partnerships. Technically, the site employs modern web technologies including responsive design, SVG graphics, and WebP images, ensuring a good user experience across devices. While the site uses HTTPS and modern scripts, explicit security headers and privacy policies are not found, indicating room for improvement in security and compliance. The WHOIS data is unavailable due to registry restrictions typical for .no domains, but the website content and structure indicate a legitimate and professional operation. Overall, the site demonstrates good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

kode24-dagen is a Norwegian developer conference focused on web developers, scheduled for March 27, 2025, in Oslo. The event offers keynote talks, networking, and evening entertainment, targeting the Norwegian web development community. The website is professionally designed, mobile-optimized, and uses modern web technologies including Next.js and Sanity CMS, hosted on Vercel. The presence of reputable sponsors such as Telenor and Gjensidige enhances its credibility. However, the site lacks visible privacy and cookie policies, and no WHOIS data is available due to privacy protection or registry restrictions. Security headers are not explicitly detected, suggesting room for improvement in security posture.

Mon espace santé is a French government-backed digital health platform designed to securely store and share personal and family health data. It serves over 20 million users and is positioned as a leading national health service. The platform offers key services including document storage, secure messaging with health professionals, and management of children's health profiles. Technically, the website uses modern JavaScript frameworks (Vue.js), is mobile optimized, and integrates privacy and cookie consent mechanisms. Security posture is strong with HTTPS, HDS certification for data hosting, and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable service for French residents.

Scoop.it is a technology-driven content curation platform that enables professionals and businesses to discover, curate, and distribute relevant content efficiently. Positioned as a trusted leader in content marketing and distribution, it serves a broad audience including marketers, business intelligence professionals, and individual content curators. The platform offers a SaaS business model with free signup options and premium services, supported by a parent company, Meltwater. Technically, the website employs modern web technologies including React, HubSpot marketing tools, and robust cookie consent management via tarteaucitron.js, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for mobile and SEO, with a moderate performance profile leveraging CDN hosting. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, making it a reliable platform in its sector.

The website represents the Direction de la Recherche Fondamentale (DRF) of the Commissariat à l’énergie atomique et aux énergies alternatives (CEA), a major French public research institution. It showcases extensive scientific research activities across multiple disciplines including physics, chemistry, biology, and health sciences, supported by a large community of over 6000 researchers. The site serves multiple audiences including researchers, institutional partners, journalists, and the general public, providing news, resources, and institutional information. The business model is focused on public research and innovation with strong ties to academic and industrial partners. Technically, the site is built on Microsoft SharePoint, leveraging standard web technologies and integrating Matomo analytics for user tracking and Google reCAPTCHA for bot protection. The infrastructure appears stable and professionally maintained, with moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site uses HTTPS and implements standard SharePoint security features such as form digest tokens. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, but lacks a visible cookie consent mechanism. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy, professional, and aligned with the institutional identity of CEA. It poses low risk from a security and privacy standpoint but could enhance transparency and user consent mechanisms to improve compliance and user trust.

CEA-Leti is a prominent French government research institute specializing in micro and nanotechnologies, focusing on applied research and innovation in wireless communication systems, biology and health, imaging, and micro-nano systems. The website reflects a well-established institution with a strong market position in technology research, supported by the Commissariat à l'Énergie Atomique et aux Énergies Alternatives (CEA). The site targets a broad audience including the general public, enterprises, journalists, and academic institutions. Technically, the website is built on Microsoft SharePoint, leveraging modern web technologies and analytics tools such as Matomo and Google reCAPTCHA for security. The security posture is solid with HTTPS enforced, though improvements could be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given its official nature and consistent branding. Overall, the site is professional, trustworthy, and serves as a comprehensive portal for CEA-Leti's research activities and partnerships.

Le Prisonnier quantique is an educational interactive game developed and hosted by the French public research organization CEA. It aims to promote scientific and technical culture through a free browser-based adventure game targeting a general audience including students and educators. The website is well-branded with official CEA logos and partnerships, providing a trustworthy platform for educational content. Technically, the site uses standard web technologies with responsive design and integrates Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are missing. Contact information is limited to official CEA email addresses, supporting legitimacy but lacking phone or physical address details. Overall, the site is professional, secure, and suitable for its educational mission.

Divadlo Kalich is a cultural venue based in Prague, Czech Republic, offering a variety of theatrical performances including comedies, musicals, concerts, and children's shows. The website serves as a platform for event listings and ticket sales, targeting a broad audience interested in live theater and cultural events. The site demonstrates a moderate level of digital maturity with the use of modern tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The technical infrastructure supports HTTPS and responsive design, ensuring accessibility and a good user experience across devices. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and registrant information. Security posture is adequate with HTTPS and cookie consent, but could be improved by implementing security headers and publishing clear privacy and security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

OLDstars is a Czech student theater group that organizes theatrical performances, festivals, and acting courses primarily in Prague and surrounding regions. Their website showcases a rich program of upcoming performances, news, and educational opportunities, targeting students and theater enthusiasts. The site is built on modern web technologies such as Next.js and React, providing a responsive and user-friendly experience. Security posture is good with HTTPS and some security best practices, though some HTTP security headers could be improved. Privacy and cookie policies are not clearly presented, which is a compliance gap. WHOIS data is unavailable, which reduces domain trust but the professional content and social media presence support legitimacy. Overall, the site is a well-maintained cultural platform with room for enhanced privacy and security transparency.

Dramox s.r.o. operates a leading online streaming platform specializing in theater performances, offering access to hundreds of shows from over 250 theaters. The service targets theater enthusiasts, families, and educational institutions, providing a subscription-based model with a free trial period. The platform supports cultural preservation by channeling a significant portion of subscription fees back to theaters and artists. Technically, Dramox employs a modern web stack including Next.js, React, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook. The website is optimized for various platforms including smart TVs and mobile devices, ensuring a seamless user experience. Security posture is strong with HTTPS enforcement and modern security headers, though the absence of WHOIS data introduces some trust concerns. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, Dramox presents a professional, secure, and user-friendly service with a clear cultural mission.

Galerie výtvarného umění v Ostravě, p. o. is the oldest regional art gallery in Ostrava, Czech Republic, established in 1952. It operates as a non-profit cultural institution under the Moravskoslezský kraj (Moravian-Silesian Region) and offers art exhibitions, educational programs, virtual tours, and an e-shop. The website reflects a well-established institution with a clear focus on art and culture, targeting the general public and educational sectors. The business model is centered on cultural enrichment and public engagement rather than commercial profit. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript libraries such as jQuery, Leaflet.js for maps, and Google Analytics for tracking. It uses the Shopnero CMS platform and is hosted by Active24. The site is mobile-optimized with good SEO practices and structured data enhancing search engine visibility. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong cultural and educational focus. Strategic improvements in security policies and accessibility could further enhance its posture and user trust.

Eventival.com is a professional SaaS platform specializing in film festival and event management software. The company, Pro-idea s.r.o., founded in 2009 and based in the Czech Republic, offers a comprehensive and widely adopted solution for film festivals worldwide, boasting over 100 clients and extensive industry integrations. The website is well-designed, content-rich, and optimized for mobile, providing a positive user experience and clear business positioning as a market leader in its niche. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Maps API, with good performance and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Privacy compliance is partial, with a cookie policy present but no explicit privacy or terms of service pages detected. The WHOIS data is missing or unavailable, which reduces domain transparency and trustworthiness despite the professional appearance and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in its industry but would benefit from enhanced transparency and security documentation.

DAFilms.cz is a niche online streaming platform specializing in curated art-house, documentary, festival, and children's films primarily targeting Czech-speaking audiences. Founded in 2012, it offers a subscription-based model with a focus on unique and authorial film content not commonly found on mainstream platforms. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Cookiebot for GDPR compliance, and reCAPTCHA for bot protection. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and links to detailed privacy policies. However, explicit contact and security policies are not readily found on the homepage, which could be enhanced for trust and compliance. Overall, the site is secure, compliant, and well-positioned within its niche market.

RESPEKT.cz is a Czech independent weekly news magazine focusing on current domestic and international politics, economy, culture, and social issues. It offers a subscription-based business model with rich multimedia content including articles, podcasts, photo galleries, and newsletters. The website is professionally designed, mobile-optimized, and targets Czech-speaking audiences interested in in-depth news and commentary. Technically, the site uses modern frameworks such as React and Next.js, with good performance and SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not clearly found in the content. WHOIS data is unavailable, which slightly impacts trust but the overall presentation and content quality indicate a legitimate media entity. Strategic recommendations include publishing clear privacy and cookie policies, providing contact information for security incidents, and enhancing transparency on data protection.

Creative Europe MEDIA is a specialized platform providing comprehensive information on training and mentoring courses supported by Creative Europe MEDIA, targeting audiovisual professionals across Europe. The website serves as a central hub for accessing a wide range of educational programs, workshops, and industry networking opportunities, positioning itself as a key resource within the European media training ecosystem. The business operates primarily in the media sector, with a focus on animation, documentary, production, and related audiovisual disciplines, and is based in Belgium under the legal entity Cecoforma S.A. Technically, the website employs modern JavaScript technologies, integrates Google reCAPTCHA for form security, and uses Matomo and Google Analytics for user behavior tracking with privacy compliance mechanisms such as cookie consent banners. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in/out capabilities, and protects forms with reCAPTCHA. However, it lacks explicit security headers and a public vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong compliance to privacy regulations. The domain registration details align with the business claims, supporting legitimacy. Strategic recommendations include implementing additional security headers, publishing a vulnerability disclosure policy, and enhancing incident response transparency.

The website www.heidisevestre.com appears to be a portfolio or personal site built on the Wix platform, likely showcasing photography or art. The site uses standard Wix technologies and scripts, indicating a moderate level of technical infrastructure typical for Wix-hosted sites. However, the site lacks critical business and security information such as privacy policies, cookie consent mechanisms, contact details, and terms of service. The WHOIS data is unavailable or indicates the domain may not be registered, which raises concerns about the legitimacy and trustworthiness of the domain. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site is accessible without WAF or blocking mechanisms but provides minimal content and business credibility.

The website themepanthers.com currently serves as a minimal landing page promoting 'Steelthemes', which offers pixel perfect WordPress themes targeted at creative professionals. The business appears to be small and relatively new, founded around 2020, with a focus on theme sales and distribution. The site content is very limited, lacking detailed business information, contact details, or user engagement features. Technically, the site is hosted on servers indicated by the nameservers mysecurecloudhost.com and registered via GoDaddy.com, LLC. There is no evidence of modern web technologies, security headers, or HTTPS enforcement, which indicates a low level of digital maturity and security posture. Security-wise, the absence of HTTPS, security headers, and privacy policies presents significant risks and compliance gaps. No incident response or vulnerability disclosure information is available, and no tracking or analytics tools are detected. Overall, the site is low trust and low professionalism, with critical recommendations to improve security, privacy compliance, and content richness.

Centario, s.r.o. is a small Czech Republic-based company specializing in the development of web applications and projects. The website serves as a basic informational portal presenting company contact details, legal identifiers, and a brief description of services. The business appears to target local clients seeking web development services, positioning itself as a small but established player in the technology sector since 2011. The company provides clear contact information and legal registration data, supporting its legitimacy and trustworthiness. Technically, the website employs basic modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a Google font for styling. Hosting and domain registration are managed by WEDOS, a known Czech hosting provider. The site is simple with minimal content and no interactive forms, which reduces complexity but also limits user engagement. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal, indicating room for improvement in digital maturity. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. The use of Google Analytics is configured to deny ad and analytics storage by default, showing some privacy consideration. No forms or user input fields reduce attack surface, but the absence of incident response contacts or vulnerability disclosure policies indicates limited security maturity. WHOIS data is consistent and transparent, reinforcing the domain's legitimacy. Overall, the website is safe and professional but basic, with moderate risk due to missing compliance documentation and security best practices. Strategic improvements in privacy compliance, security headers, and digital maturity would enhance trust and reduce potential vulnerabilities.

VC4A is a well-established platform founded in 2010 that supports entrepreneurs, investors, mentors, and organizations primarily in Africa and Latin America. It serves as a comprehensive ecosystem for startup acceleration, offering services such as venture promotion, investor networking, mentorship, and program management. The platform is recognized and trusted by prominent global partners, enhancing its market credibility and reach. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses domain locking mechanisms but lacks DNSSEC and some advanced security headers. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, VC4A presents a professional, trustworthy, and secure online presence aligned with its business objectives.

ABOUT YOU is a large online fashion retail platform operating in Finland, offering over 1500 brands with fast delivery and a 30-day return policy. The website demonstrates a professional design with good content quality and consistent branding, targeting general consumers interested in fashion e-commerce. Technically, the site uses modern JavaScript libraries, asynchronous script loading, and integrates Usercentrics for consent management and Datadog for logging, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and logging mechanisms in place, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partially addressed via cookie consent mechanisms, but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy and safe for general audiences, with a moderate to good AI-assessed quality and security score.

SNCF Group is a leading global player in low-carbon mobility, specializing in passenger transport and freight logistics. The company operates internationally with a large workforce and a diversified portfolio of subsidiaries including SNCF SA, Keolis, and GEODIS. Their business model focuses on sustainable transportation solutions and mass transit services, positioning them as a world leader in their sector. The website reflects a mature digital presence with comprehensive content targeting various stakeholders such as job seekers, investors, journalists, suppliers, and travelers. Technically, the site leverages modern frameworks like Next.js and React, integrates advanced consent management and bot protection, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS and bot mitigation, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability for trust enhancement.

ENGIE France is a major energy company focused on accelerating the transition to a carbon-neutral world through renewable electricity and gas production, distribution, and infrastructure services. The website reflects a strong market position as a leader in solar, wind, and biomethane production in France, targeting individuals, professionals, enterprises, and public entities. The digital infrastructure uses modern technologies such as Tailwind CSS, GSAP, and Matomo analytics, with a custom ENGIE design system ensuring consistent branding and good user experience. Security posture is moderate with cookie consent implemented and no obvious vulnerabilities detected, though explicit security policies and headers are not evident. WHOIS data is unavailable likely due to privacy protection, but the website's professional presentation and linkage to official ENGIE domains support legitimacy. Overall, the site is well-designed, compliant with privacy regulations, and trustworthy, though improvements in security transparency and contact information availability are recommended.

VC4A is a well-established technology platform founded in 2010 that supports startups, investors, mentors, and organizations primarily in Africa and Latin America. It offers a comprehensive ecosystem including startup acceleration, investor deal flow, mentorship, and program management services. The platform is recognized and trusted by reputable global partners, enhancing its market position as a leading startup support platform in emerging markets. Technically, the website is built on WordPress with modern JavaScript libraries and uses Cloudflare for DNS and CDN services. It implements HTTPS with a good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, DNSSEC is not enabled, and no explicit security policy or incident response contact information is published, which are areas for improvement. Overall, the site is professional, secure, and privacy-conscious, with a high trustworthiness rating.

Mister Mix Dog is a well-established family business specializing in premium cold-pressed dog food produced in Tuscany, Italy. With over 30 years of tradition and 40 years of experience in zootechnics, the company targets dog owners, breeders, and sports dog handlers primarily in Slovakia and neighboring countries. Their product range includes specialized dog foods tailored to various life stages and health needs, complemented by natural vitamins and supplements. The website is professionally designed, leveraging the Shoptet e-commerce platform, and provides clear contact information and social media presence.

The website provides detailed information about POMBILITI® (cipaglucosidase alfa-atga) + OPFOLDA® (miglustat), an FDA-approved two-component therapy for adults with Pompe disease. It serves as an educational and support platform targeting patients and healthcare providers, offering clinical trial results and resources. The site is built using modern web technologies including React and Gatsby, with a focus on accessibility and mobile responsiveness. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and aligned with healthcare industry standards.

CAE 29 is a French cooperative organization under the legal entity CHRYSALIDE, founded in 2014, providing shared enterprise and employment cooperative services primarily in the Finistère region. The website serves as an informational and engagement platform for entrepreneurs and project holders seeking cooperative business support, administrative delegation, and training. The business model focuses on collective entrepreneurship and professional autonomy within a cooperative framework, positioning CAE 29 as a regional leader in this niche. Technically, the website is built on the SPIP CMS platform, hosted by Gandi SAS, and uses standard web technologies including JavaScript and CSS. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, there is room for improvement in accessibility and modern security practices. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no cookie consent mechanism or detailed privacy policy, which may pose compliance risks under GDPR. No incident response or security policy information is published, and no analytics or tracking services are detected, indicating minimal user tracking. Overall, CAE 29 presents a trustworthy and professional online presence with a solid business foundation. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

The website www.hledejpramenvody.cz represents Ostravské vodárny a kanalizace a.s., a regional company focused on water supply and ecological education in Ostrava, Czech Republic. The site promotes an educational ecological project targeting 4th and 5th grade students in local schools, emphasizing environmental awareness and water knowledge. The project is supported by the city of Ostrava and offers awards and recognition to participants. Technically, the website uses modern web technologies including HTML5, CSS, JavaScript, and Swiper.js for interactive content. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is limited, with no dedicated privacy or terms pages and minimal cookie consent mechanisms. WHOIS data is unavailable, which reduces trustworthiness but the website content and contact information indicate a legitimate educational initiative. Overall, the site is professional and trustworthy for its target audience but could improve in privacy and security transparency.

Hellowork operates as a leading online job board and recruitment platform in France, offering a wide range of employment opportunities, CV management, job alerts, and recruitment services. The website targets job seekers and recruiters, positioning itself as a premier resource in the French employment market. The platform is well-branded and maintains a consistent professional image with strong social media integration and mobile app availability. Technically, the website employs modern web technologies including Turbo Frames, Tailwind CSS, and integrates multiple analytics and marketing tools such as Google Tag Manager, Piano Analytics, and Microsoft Clarity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and lack of published security policies or incident response information indicate areas for improvement. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not necessarily indicate illegitimacy given the site's professional presence. Overall, Hellowork presents a mature digital presence with strong business credibility and user engagement, though it would benefit from enhanced security transparency and domain registration clarity.

La Théorie du Boxeur is a French documentary film project focusing on the impact of climate change on agriculture, particularly in the Drôme valley. The website serves as a platform to present the film and its investigative content about agricultural resilience and adaptation. The project appears to be a small-scale media initiative with a clear thematic focus on environmental and agricultural issues. The site is professionally designed using WordPress and the Divi theme, with good content relevance and user experience. However, the absence of WHOIS registrant data and lack of visible privacy or cookie policies limit the overall trust and compliance posture. Technically, the site uses modern web fonts and caching plugins but lacks visible security headers and detailed security configurations. No forms or direct contact information are present, which may hinder user engagement and trust. Overall, the site is safe for general audiences and provides valuable documentary content but would benefit from enhanced security and compliance features.

CustomGPT.ai is a technology startup founded in 2023 specializing in creating custom GPT models tailored from user content for business applications. The company targets businesses and professionals seeking AI-powered solutions to enhance their operations. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CookieYes for cookie consent management. Hosting is provided via Amazon AWS infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though it lacks visible contact information and formal privacy or terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and published security policies. The domain is privacy protected, consistent with a small tech startup, and shows no suspicious registration patterns.

CYMEDICA is a well-established veterinary partner operating since 1995, serving the Czech Republic and Central and Eastern Europe markets. The company specializes in veterinary product distribution, professional education, and expert consulting, positioning itself as a market leader with a strong regional presence. Their website reflects a mature digital infrastructure with multilingual support, e-commerce capabilities, and active engagement through social media and newsletters. Technically, the site is built on WordPress with WooCommerce and employs modern libraries and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is a transparency concern but does not detract from the overall legitimacy indicated by certifications and professional content. Strategic recommendations include improving security headers, publishing vulnerability disclosure information, and enhancing incident response contacts.

RUSCONA.cz is a professional e-commerce platform specializing in gel nail modeling products and accessories, targeting both professional nail technicians and consumers in the Czech Republic. The website offers a wide range of UV gels, gel polishes, polygels, and related tools, supported by educational courses and a strong brand presence. The site is built on the Shoptet e-commerce platform and integrates modern analytics and marketing technologies such as Google Analytics, TikTok Pixel, Facebook SDK, and Hotjar, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust assessment, but the professional presentation and comprehensive content suggest a legitimate and established business. Overall, the site demonstrates good technical implementation, privacy compliance, and business credibility.

GoldPC.cz is a Czech Republic-based e-commerce retailer specializing in affordable and quality computers, including notebooks, desktops, components, and accessories. The company offers a 24-month warranty and customer support via phone and email, targeting both consumers and businesses. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are present, indicating GDPR compliance awareness. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies and vulnerability disclosure mechanisms.

KeZdraví.cz is a Czech Republic-based e-commerce platform specializing in natural health products including Schüssler salts, homeopathic remedies, and Bach flower essences. The website offers a broad catalog of products alongside educational content such as a homeopathic manual, targeting consumers interested in alternative medicine and natural wellness. The business operates primarily in the healthcare retail sector with a small company size profile. Technically, the site is built on the Shoptet e-commerce platform, utilizing common web technologies like jQuery, Google Fonts, and tracking tools such as Google Analytics and Facebook SDK. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks some advanced security headers and uses an outdated jQuery version. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy trust. Overall, the site is professional and trustworthy from a user perspective but would benefit from enhanced security practices and domain registration transparency.

Mladý-vedec.sk is a Slovak e-commerce retailer specializing in educational and scientific toys designed for children who enjoy playful learning. The website offers a broad range of didactic products including experiment kits, building sets, and educational games. Positioned as a niche player in the Slovak market, it targets parents and educators seeking quality educational toys. The business model is primarily online retail with additional wholesale cooperation and affiliate partnerships. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

Zidlestoly.cz is a Czech Republic-based e-commerce retailer specializing in chairs, tables, and furniture for various interiors. The company emphasizes quality products with a 30-year market presence and offers fast shipping within 48 hours. The website is built on the Shoptet platform and integrates multiple analytics and marketing tools, including Google Analytics 4, Microsoft Clarity, and Facebook Pixel, with a clear cookie consent mechanism. Security posture is generally good with HTTPS and CSRF protections, though some outdated libraries like jQuery 1.11.3 present potential vulnerabilities. The absence of WHOIS data limits domain trust assessment, but the website content and business claims appear professional and credible.