Medium-risk security reports

Eliwood is a Czech-based e-commerce retailer specializing in stylish wooden furniture, toys, and baby care products targeted at parents and caregivers of infants and children. The website offers a broad catalog of products including children's furniture, toys sorted by age and type, baby accessories, and maternity products. The business operates primarily online with a focus on quality and customer support, including a loyalty club and detailed product categories. Technically, the website is built on the Shoptet platform, utilizing modern JavaScript libraries and tracking tools such as Google Analytics, Facebook SDK, and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF protections on forms, though some security headers are not explicitly detected. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data for the domain reduces trustworthiness and suggests the need for further verification of domain registration legitimacy. Overall, Eliwood presents a professional and trustworthy online retail presence in the children's furniture and toy market in the Czech Republic.

Mincmistr.cz is a specialized e-commerce platform based in the Czech Republic, focusing on the sale of coins, banknotes, medals, and numismatic supplies. With over 15 years of experience, it serves collectors and investors by offering a wide range of historical and modern numismatic products, investment metals, and educational content including the largest numismatic encyclopedia in the country. The website demonstrates a strong market position within its niche, supported by customer trust signals such as high ratings and product certifications. Technically, the site is built on the Shoptet e-commerce platform, utilizing modern tracking and marketing tools while maintaining good mobile optimization and accessibility. Security posture is solid with HTTPS and consent-based cookie management, though improvements in security headers and library updates are recommended. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Yamaha Motorsports USA operates a professional and well-branded website focused on providing information about Yamaha motorsports products, dealer locations, pricing, and community engagement. The site targets motorsports enthusiasts and Yamaha product owners in the USA, positioning itself as a key player in the transportation sector with a long-established presence since 2001. The business model revolves around retail and brand experience enhancement through racing, training, and community programs. Technically, the website employs modern JavaScript libraries, video embedding, and accessibility tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain management best practices, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional, with extensive analytics and advertising integrations.

Together Outdoors is a small non-profit coalition dedicated to promoting equity and inclusion in outdoor recreation. The organization collaborates with outdoors-related entities and land management agencies to create a more welcoming environment for all. Their website reflects a professional and consistent brand presence, emphasizing advocacy, grant programs, and community engagement. The target audience includes outdoor enthusiasts and organizations focused on inclusivity. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization. However, the site lacks comprehensive privacy and cookie policies, which impacts privacy compliance scores. Security posture is adequate with HTTPS enabled but could be improved by adding security headers such as HSTS and CSP. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and social media presence suggest a legitimate operation. Overall, the site is safe, professional, and focused on non-profit advocacy but should address privacy and security best practices to enhance trust and compliance.

Lawyer Monthly is a UK-based legal news magazine providing comprehensive coverage of various legal sectors including personal injury, criminal law, employment, family law, and immigration. The website targets legal professionals and individuals seeking legal advice and news. It operates as an online publication with a focus on delivering expert insights, legal advice, and sector-specific news. The site maintains a consistent brand presence and offers multiple channels for user engagement including social media and newsletters. Technically, the website is built on WordPress using the Oxygen Builder framework, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and YouTube APIs. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent and privacy compliance are well implemented, reflecting GDPR adherence. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registrant data is a concern for domain transparency, though the website content and professional presentation suggest legitimate operations. Overall, Lawyer Monthly presents a professional and trustworthy online presence with good content quality and privacy compliance. However, domain registration transparency issues warrant further verification to fully establish trustworthiness.

Finance Monthly is a specialized online media platform delivering news, analysis, and insights focused on personal finance, money management, and investing. The site targets everyday consumers seeking to improve their financial literacy and investment strategies. It operates primarily as a content publisher with revenue streams from advertising and affiliate marketing, positioning itself as a niche player in the finance media sector. The website is professionally designed with clear navigation and a consistent brand identity, supported by active social media channels and contact information. Technically, the site is built on WordPress using the Oxygen Builder framework, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Moosend for email marketing. Performance and mobile optimization are good, though accessibility features are basic. The site uses HTTPS with a strong SSL configuration but lacks some advanced security headers and cookie consent mechanisms, which could be improved for better privacy compliance. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and a vulnerability disclosure policy indicates room for enhancement. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, although the active and professional nature of the website mitigates this risk somewhat. Overall, Finance Monthly presents a credible and useful resource for personal finance information, but it should address privacy compliance and security best practices to strengthen trust and regulatory adherence.

La Fabrique - Orange Business is a professional digital agency and web hosting provider focused on delivering sustainable, innovative, and high-performance digital solutions tailored to business needs. Positioned under the reputable Orange Business brand, it offers a comprehensive range of services including digital marketing strategy, web and e-commerce development, cloud hosting, and managed services. The website reflects a strong market position with clear branding, certifications, and a focus on trust and security. Technically, the website employs modern JavaScript libraries, a custom CMS, and integrates privacy-conscious analytics via Matomo Tag Manager without setting cookies. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation and professional design. Cookie consent management is implemented using tarteaucitron.js, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling including CSRF tokens and CAPTCHA. However, explicit security headers are not evident, and no public security or incident response policies are published. WHOIS data for the subdomain is unavailable, but the domain is a subdomain of orange-business.com, supporting legitimacy. Overall, the website presents low risk with strong trust indicators, good privacy compliance, and professional business presentation. Strategic improvements include adding security headers, publishing a security policy, and providing direct contact information for incident response.

Even is a well-established agro-food cooperative group based in Brittany, France, with a long history dating back to 1997. The cooperative unites approximately 1,400 agricultural members and employs around 5,400 people, positioning itself as a significant player in the regional agro-food manufacturing sector. The website reflects a professional and consistent brand image, targeting agricultural producers, employees, and partners within the agro-food industry. The business model centers on cooperative principles, focusing on agricultural production, food processing, and brand management.

Assemble is a New Zealand-based SaaS company founded in 2008 that provides specialized software solutions for the film industry, focusing on audience building, website creation, and integrated marketing tools for filmmakers and distributors. The platform offers a CMS and CRM tailored for films, including features such as blogs, trailers, and online stores. The website reflects a niche market position with professional content and a clear value proposition targeting film professionals. Technically, the website uses a proprietary CMS with a tech stack including jQuery, Modernizr, Shadowbox.js, and integrates Google Analytics, Google Tag Manager, and New Relic for performance monitoring. Hosting and DNS are managed via Cloudflare, providing CDN and DNS services. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain, indicating some domain security awareness. However, DNSSEC is not enabled, and security headers are minimal, suggesting room for improvement. No privacy or cookie policies are present, which is a compliance gap. No contact information or incident response details are provided, limiting transparency. Overall, the website is professional and trustworthy with a solid business foundation but lacks in privacy compliance and advanced security practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

Rivières Sauvages is a French non-profit organization dedicated to protecting the last wild rivers in France and Europe through a conservation label and network. The website serves as an informational and engagement platform offering educational programs, scientific studies, publications, and multimedia content to support river conservation efforts. The organization targets environmental stakeholders, educators, and the general public interested in ecological preservation. Technically, the website is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and spam protection, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its mission, though improvements in security transparency and privacy mechanisms are recommended.

Emmaüs France is a well-established non-profit organization dedicated to social inclusion and fighting exclusion through community support, reemployment, and ecological alternatives. Founded over 70 years ago, it holds a strong market position in France with a large network and a clear mission to empower vulnerable populations. The website reflects this mission with comprehensive content, clear navigation, and multiple engagement channels for donors, volunteers, and partners. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses privacy-respecting analytics (Matomo). It is hosted behind Cloudflare DNS and enforces HTTPS, ensuring a secure browsing experience. Security practices are good, with cookie consent mechanisms and domain transfer protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable digital presence for the organization.

Canopée is a French non-profit organization dedicated to protecting forests through expert investigations, advocacy, and citizen mobilization. Founded in 2018, it has established itself as a reference in forest protection with a small but agile team. The website reflects a mature digital presence with a WordPress CMS, modern analytics tools like Matomo and Microsoft Clarity, and a strong emphasis on privacy compliance via cookie consent and GDPR-aligned policies. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data is mitigated by the professional and transparent nature of the site content and social proof. Overall, Canopée demonstrates a credible and trustworthy online presence aligned with its mission.

BLOOM Association is a French non-profit organization dedicated to protecting the ocean, climate, and artisanal fishermen. Established in 2007, it operates as an advocacy NGO with a strong focus on scientific research, legal actions, citizen mobilization, and education. The website reflects a mature and professional digital presence with comprehensive content, including news, campaigns, events, and publications. The organization maintains active social media channels and provides donation and petition platforms through related domains. Technically, the site is built on WordPress with modern libraries and APIs, hosted by OVH sas, and optimized for SEO and mobile use. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with consent mechanisms present but no explicit privacy or cookie policy pages found. Overall, the site is trustworthy and well-positioned in its sector, with recommendations to enhance security headers, enable DNSSEC, and publish clear privacy and cookie policies.

ARTEMISIA AISBL is a small Belgian non-profit association dedicated to providing legal support and advocacy for civil society organizations engaged in environmental protection and human rights. The organization partners with a law firm to offer legal advice, assistance, representation, and legislative advocacy. The website is professionally designed using the Jimdo CMS platform, offering bilingual content in French and English. Technical infrastructure is moderate with basic security practices such as HTTPS but lacks advanced security headers. Privacy and cookie policies are present but basic, with no explicit GDPR compliance statements. WHOIS data is unavailable, limiting domain trust assessment, but the website content and legal references support legitimacy. Overall, the site is safe, professional, and targeted at non-profit organizations primarily in Europe.

TopRaut.cz is a small hospitality business specializing in catering services for events such as receptions, weddings, parties, seminars, and film production catering. Operating primarily in Prague, it manages the Kavárna DRBárna café and offers event space rental with audiovisual support. The company emphasizes customized menus and individual client approaches, serving a diverse clientele including cultural and film industry professionals. The website is built on WordPress with modern plugins and includes a contact form protected by Google reCAPTCHA. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the visible business information and partner references support legitimacy.

klub mladý divák.cz is a small non-profit cultural club based in Ostrava, Czech Republic, focused on engaging young people with theater and cultural events. Supported by regional institutions such as Národní divadlo Moravskoslezského and the city of Ostrava, it offers discounted access and organizes cultural outings. The website is built on WordPress with modern plugins like Yoast SEO and Elementor, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned in its local cultural niche.

Patriot Program is a regional Czech media platform focused on providing a calendar and search engine for cultural, sports, and social events primarily in the Moravskoslezský kraj region. The website offers event listings, articles, and downloadable magazines targeting a broad audience including families, seniors, and general public interested in local happenings. Technically, the site is built using modern web technologies such as React and Next.js, hosted on DigitalOcean Spaces for media content, and optimized for fast performance and mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy disclosures. The absence of WHOIS data limits transparency but the website content and social media presence support legitimacy. Overall, the platform serves as a useful regional event and cultural information resource with room for improvement in privacy and security compliance.

The website i-divadlo.cz serves as a comprehensive Czech-language portal dedicated to theater information, including news, reviews, program calendars, user and editorial ratings, blogs, and podcasts. It targets theater enthusiasts and professionals within the Czech Republic, offering a rich database of theaters and performances. The site demonstrates a solid market position as a well-established media platform in the cultural sector, supported by partnerships with recognized theaters and cultural institutions. Technically, the site employs legacy JavaScript libraries such as jQuery 1.12.4 and jQuery UI, alongside Google Analytics and Tag Manager for tracking. While the site is mobile-optimized and well-structured, some technical debt is evident due to outdated libraries and lack of modern security headers. Security posture is moderate, with HTTPS implied but no explicit security headers detected. The site implements a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service, which impacts privacy compliance. No WHOIS data is available, limiting domain legitimacy verification, but the professional content and active user engagement suggest a legitimate operation. Overall, the site is safe, culturally focused, and provides valuable services to its audience, though improvements in security and compliance documentation are recommended.

The website represents the Ústav filmové, televizní a rozhlasové tvorby (ÚFTaRT), an academic institute affiliated with the Silesian University in Opava, Czech Republic. It focuses on providing quality education in audiovisual creation, supporting students, and engaging in cultural and media projects including film festivals, exhibitions, and conferences. The site serves students, academics, and the cultural community with a professional and content-rich platform. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the university affiliation and professional presentation support legitimacy. Overall, the site is a credible academic and cultural resource with room for improvement in privacy and security compliance.

Fathers Coffee Roastery is a small specialty coffee roasting business based in the Czech Republic, established in 2017. The company operates an e-commerce website built on WordPress with Elementor and WooCommerce, targeting coffee enthusiasts and consumers interested in premium coffee products. The website presents a professional design with good mobile optimization and clear navigation, supporting a positive user experience. Technically, the site uses modern web technologies and is hosted by cesky-hosting.eu, with SSL properly configured and security headers in place, indicating a good security posture. However, the absence of a published privacy policy and contact information reduces privacy compliance and business transparency. No WAF or content blocking mechanisms were detected, and the site does not contain any adult or questionable content, making it safe for general audiences. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

The Commissariat à l'Énergie Atomique et aux Énergies Alternatives (CEA) is a major French governmental research organization focused on scientific and technological innovation in energy, defense, digital technologies, and health. The website reflects a well-established institution with a broad scope of research and innovation activities, targeting government, industry partners, researchers, and the general public. The site is professionally designed using Microsoft SharePoint, featuring multimedia content, clear navigation, and official branding. Technically, the site employs modern web technologies including HTTPS, Matomo analytics for privacy-conscious tracking, and Google reCAPTCHA for bot protection. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. The WHOIS data is unavailable, likely due to AFNIC policies or privacy protection, but the domain and content strongly support legitimacy. Overall, the website is a trustworthy and authoritative source for information about CEA's research and innovation activities.

BRGM is the French national geological survey and a public institution specializing in geological research and management of soil and subsoil resources and risks. It holds a prominent position as the national reference in its sector, providing scientific and technical expertise to public and private stakeholders. The website reflects a mature digital presence built on Drupal 10, with privacy-conscious analytics via Matomo and a professional design optimized for accessibility and mobile devices. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data is a limitation but the domain and content align with a legitimate public entity. Overall, the site is trustworthy and serves its audience well.

Unicancer is a prominent French healthcare federation specializing exclusively in oncology, uniting 18 cancer treatment centers and affiliated establishments. The organization focuses on delivering comprehensive cancer care, patient support, and advancing clinical and translational research. Their market position is strong as the unique dedicated hospital network in France for cancer treatment, supported by a large workforce of over 25,600 professionals. The website reflects a mature digital presence with extensive content targeting patients, healthcare professionals, and researchers, emphasizing innovation and excellence in care. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which slightly impacts trust but is likely due to privacy protection. The website maintains comprehensive privacy and cookie policies compliant with GDPR. Social media presence on major platforms supports engagement and transparency. Overall, the site is professional, trustworthy, and well-aligned with its healthcare mission.

The Centre Hospitalier Universitaire de Nîmes (CHU de Nîmes) is a major public university hospital serving the Gard region and neighboring departments in France. It provides comprehensive healthcare services including emergency care, consultations, hospitalizations, medical research, and professional training. The institution is large, with nearly 7,400 staff including medical and non-medical personnel, and operates across multiple sites. The website reflects a mature digital presence with a professional design, clear navigation, and accessibility features, targeting patients, healthcare professionals, researchers, and students. Technically, the website is built on the Drupal CMS platform, hosted by OVH, and incorporates modern web technologies such as Bootstrap and Swiper.js. It includes a cookie consent mechanism compliant with GDPR and uses Google Analytics for audience measurement. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, supporting the trustworthiness of the institution. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further improve security transparency.

The École Nationale Supérieure de Chimie de Montpellier (ENSCM) is a reputable French public engineering school specializing in chemistry education and research. The website presents a professional and well-structured digital presence, targeting prospective students, researchers, and industry partners. It highlights the institution's long history since 1889, its international partnerships, and its position as the second leading chemistry engineering school in France. Technically, the site is built on WordPress, uses modern web technologies including jQuery and TinyMCE, and integrates Matomo analytics for user tracking. Security best practices such as HTTPS and security headers are implemented, though privacy and cookie policies are not clearly presented, indicating room for compliance improvement. Overall, the site is trustworthy, content-rich, and professionally maintained, supporting the institution's credibility and market position.

CHARM-EU is a European university alliance focused on delivering challenge-driven, accessible, research-based, and mobile education primarily in sustainability and global challenges. The website presents a well-structured educational platform offering master's programs, micro-credentials, mobility opportunities, and research hubs. The technical infrastructure is built on a modern WordPress CMS with Elementor, enhanced by SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit cookie consent and security policies are not prominently published. The site demonstrates good design quality, navigation, and content relevance, targeting learners, academics, researchers, and institutional partners. Overall, the domain registration and WHOIS data align with the website's educational mission, indicating legitimacy and trustworthiness.

Campus France is the official French government agency dedicated to promoting higher education and research opportunities in France to international students and researchers. The website serves as a comprehensive portal offering detailed information on study programs, research initiatives, scholarships, visa procedures, and student life in France. It targets international students, researchers, and institutional partners, positioning itself as a key facilitator of academic mobility and cooperation. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery UI and cookie consent management via tarteaucitron. The site is well-structured, mobile-optimized, and incorporates accessibility and SEO best practices. It integrates multimedia content including videos and interactive maps, enhancing user engagement. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and shows indications of standard security headers, although some headers could be explicitly verified or enhanced. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and user consent management. Overall, Campus France's website demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting its mission as a government-backed educational promotion entity. The lack of WHOIS registrant details is typical for such domains and does not detract from its legitimacy. Strategic recommendations include enhancing explicit security headers and continuous monitoring of third-party scripts.

The Institut de Recherche pour le Développement (IRD) is a prominent French public research institute focused on sustainable development and scientific partnerships with countries in the Global South. The website reflects a mature digital presence with multilingual support, comprehensive content on research activities, and a strong emphasis on innovation and capacity building. The organization positions itself as a key player in international scientific cooperation and sustainable development research. Technically, the site is built on Drupal 10, leveraging modern analytics (Matomo) and cookie management tools (Tarteaucitron.js), ensuring compliance with privacy regulations such as GDPR. The website is mobile-optimized and exhibits good SEO and accessibility practices, though some improvements in accessibility compliance and security headers are recommended. Security-wise, the site uses HTTPS and cookie consent mechanisms effectively, but lacks explicit security policy documentation and incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. WHOIS data is not publicly available, consistent with French domain registration norms, and does not raise legitimacy concerns. Overall, the IRD website demonstrates a strong security posture, professional content quality, and good privacy compliance, making it a trustworthy and authoritative source in its domain.

Inserm is the French National Institute of Health and Medical Research, a leading public biomedical research organization dedicated exclusively to human health. It operates as a government-affiliated entity with a strong focus on advancing scientific knowledge, innovation in treatments, and public health research. The website reflects a mature digital presence with comprehensive content targeting both the general public and research professionals. The technical infrastructure is modern, leveraging WordPress CMS, CDN hosting, and privacy-respecting analytics. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be explicitly confirmed or enhanced. Privacy compliance is robust with clear policies and consent mechanisms. Overall, Inserm's website demonstrates high professionalism, trustworthiness, and alignment with its public mission.

Inria is a well-established French national research institution specializing in computer science and applied mathematics. The website reflects a professional and consistent brand identity, targeting researchers, academics, and industry partners. The technical infrastructure is modern, leveraging Drupal 10 CMS and privacy-conscious Matomo analytics, with a cookie consent mechanism implemented via tarteaucitron.js. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and publishing explicit security policies. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

Ifremer is the French national institute dedicated to oceanographic research, focusing on marine ecosystem protection, sustainable resource management, and marine data sharing. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a government research entity. Technically, the site uses Drupal CMS with modern JavaScript libraries and SVG graphics, optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional, serving a broad audience including scientists, policymakers, and the public.

Kalis Media is a small Poland-based IT company specializing in custom web development services primarily targeting the Norwegian market. They focus on programming advanced WordPress themes and Shopify stores with interactive animations and custom functionalities. Their business model revolves around delivering tailored web solutions, including SaaS applications and website redesigns, emphasizing usability and maintainability. The company has a strong portfolio and positive client testimonials, positioning them as a niche expert in their field. Technically, the website employs a modern technology stack including PHP, JavaScript, GSAP animations, and popular frameworks like Laravel and CodeIgniter. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. They use Google Tag Manager and Elfsight widgets for analytics and social media integration. However, there is room for improvement in security headers and privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of security headers and privacy/cookie policies are notable gaps. No WAF or blocking mechanisms were detected, allowing full content access. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

The website autoketing.org is currently inaccessible, serving a standard 404 error page with no business content, contact information, or policies. The domain is registered since 2018 via Name.com, Inc. and uses Cloudflare nameservers, indicating some level of infrastructure setup. However, the absence of any accessible content or metadata prevents meaningful analysis of the business, its services, or its market position. Technically, the site lacks SEO, accessibility, and security best practices, and no privacy or cookie policies are present, which raises compliance concerns. The security posture is minimal but benefits from HTTPS and Cloudflare hosting. Overall, the site is not operational or publicly available, resulting in a low trust and credibility score.

Postscript is a specialized SaaS company providing SMS marketing and sales solutions primarily targeting Shopify ecommerce merchants. Their platform leverages AI to enhance customer engagement and drive revenue through conversational SMS and RCS messaging. The company positions itself as a leader in ecommerce SMS marketing with a strong focus on delivering measurable ROI and innovative features such as AI-powered message testing and a 1:1 AI shopping assistant. Technically, the website is built on a modern React/Next.js stack, hosted on AWS, and integrates multiple third-party analytics and marketing tools, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses domain locking statuses, and implements cookie consent mechanisms, but lacks explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, with no signs of blocking or malicious activity.

Planetárium Ostrava is an educational and cultural institution affiliated with the Mining-Geological Faculty of the Technical University of Ostrava. It provides a wide range of astronomy and natural science educational programs, cultural events, and interactive exhibits targeting visitors of all ages, including schools and the general public. The website reflects a professional and consistent brand image with clear navigation and rich content focused on its mission. Technically, the website is built on the MySUITU CMS platform and leverages modern web technologies such as YouTube IFrame API, jQuery, Swiper.js, and Google Tag Manager. The site is hosted likely by Active24, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards, though it would benefit from enhanced security policies and accessibility improvements.

MOVE Fest Ostrava is a cultural festival focused on contemporary dance, new circus, and physical theatre, serving the Moravian-Silesian region of the Czech Republic. The website presents the festival as a regional cultural event with over 10 years of history, targeting a general audience interested in performing arts. The business model centers on event organization and cultural promotion. Technically, the website is built on the Wix platform, utilizing standard Wix technologies and scripts, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. The absence of WHOIS data reduces trust and transparency, though the website content appears legitimate and professional. Overall, the site is functional and well-designed but requires improvements in security, privacy, and business credibility to enhance trust and compliance.

Vítkovické slévárny, spol. s r.o. is a traditional Czech manufacturing company specializing in castings and working rollers, with a history dating back to 1828. The company holds a strong market position as a leading European producer of working rollers for hot rolling mills, offering a broad range of products and services including centrifugal cast rollers, non-ferrous castings, heavy machining, and consultancy. The website reflects a professional corporate presence with clear contact information and a modern design, supporting both Czech and English languages. The company also owns subsidiaries INPROMA and ME-Metal, expanding its industrial footprint. Technically, the website is built on WordPress 6.4.3, utilizing Bootstrap 4, jQuery, FontAwesome, and Google Fonts. It employs Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR principles. The site is hosted with a Czech registrar and uses secure HTTPS connections. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and published security policies. No forms or sensitive data exposures were detected, and no vulnerabilities were apparent in the analyzed content. However, the absence of a privacy policy and terms of service pages represents compliance gaps. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history. Overall, the website is a solid corporate platform with good technical and business credibility but would benefit from enhanced privacy and security documentation to improve compliance and trust.

PORG is a reputable educational institution operating gymnasium and primary schools in Prague, Ostrava, and Brno, Czech Republic. The website reflects a well-established brand focused on delivering high-quality education with a unique curriculum and strong university counseling services. The digital infrastructure is modern, leveraging WordPress with Elementor, Google Tag Manager, and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment but the website content and structure indicate legitimacy. Overall, PORG presents a professional and trustworthy online presence aligned with its educational mission.

PKS servis spol. s r. o. is a Czech-based company specializing in the development, production, sale, and servicing of hydraulic and electro systems, including custom-built special purpose machines and reconstruction of hydraulic devices. With approximately 28 years of market presence, the company serves primarily the Czech Republic, Poland, and Slovakia, targeting industrial clients requiring tailored hydraulic solutions. The website reflects a well-structured and professional digital presence, leveraging modern web technologies such as Bootstrap and jQuery, and integrating analytics and marketing tools like Google Tag Manager and Facebook Pixel. Privacy and cookie policies are clearly implemented with user consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits domain registration transparency but does not detract from the overall legitimacy indicated by certifications and contact information.

Ostravské vodárny a kanalizace a. s. is a regional utility company providing water supply and sewage services primarily in the Ostrava region of the Czech Republic. The company offers a range of services including water network management, sewage infrastructure, smart metering, and laboratory testing. Their website reflects a professional and well-structured digital presence with clear navigation and relevant content targeted at residents and businesses in their service area. Technically, the site uses modern JavaScript libraries, Google Analytics with privacy-conscious consent settings, and is mobile optimized. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which limits transparency but the overall site and business information support legitimacy. Strategic improvements in privacy compliance and security best practices are recommended.

Richie.education is an open source content management system designed to help educators and educational institutions create rich, multilingual online learning portals and course catalogs. The platform integrates with multiple LMS systems such as Open edX and Moodle, providing a centralized portal for course discovery and management. The website demonstrates a clear focus on education technology with a modern technical stack including Django CMS, Django, and React. The site is well-structured, mobile-optimized, and provides comprehensive documentation and community engagement channels, including GitHub and Slack. However, the website lacks published privacy, cookie, and security policies, and does not provide direct contact information, which impacts its privacy compliance and trustworthiness scores. No forms or data collection mechanisms are present, reducing immediate security risks but also limiting user engagement options. Overall, Richie.education presents a credible and professional open source educational platform with room for improvement in privacy and security transparency.

Domorrow is a family philanthropic endowment fund established in 2020 by the family of Bruno Rousset, operating under the parent company Evolem. The fund supports projects focused on ecological transition and sustainable agriculture, targeting non-profit organizations and project leaders in these sectors. The website is professionally designed using WordPress with modern SEO and privacy-compliant features, including a cookie consent mechanism and a comprehensive privacy policy. The technical infrastructure is robust, hosted by Hosteur SARL, and employs privacy-respecting analytics via Matomo. Security posture is good with HTTPS enforced, though some security headers and explicit policies are missing. No contact emails or phone numbers are directly listed, with contact primarily via a support form. Overall, the site is trustworthy, well-branded, and aligned with its stated mission.

ENOWE is a French family investment structure founded in 2013, focused on supporting entrepreneurial projects with a strong commitment to positive social and environmental impact. The company positions itself as a responsible investor emphasizing innovation, growth, and excellence. The website reflects a professional and consistent brand image, targeting entrepreneurs and investors interested in sustainable and impactful ventures. The business model revolves around providing investment and support to projects aligned with their values of audacity, trust, benevolence, and rigor. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and lazy loading. It uses Yoast SEO for search engine optimization and includes structured data for enhanced search presence. The site is mobile optimized and loads quickly, providing a good user experience. Hosting is provided by OVH sas, a reputable provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. No cookie consent mechanism or detailed privacy compliance statements are present, which may pose compliance risks under GDPR. No incident response or vulnerability disclosure information is publicly available. The WHOIS data is consistent with the business history, showing no privacy protection and a domain age appropriate for the company. Overall, the website is professional and trustworthy but could improve in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, enabling DNSSEC, and adding security headers to enhance trust and compliance.

Arcom is the French independent regulatory authority overseeing audiovisual and digital communication, formed by merging CSA and Hadopi. It serves as a government entity ensuring pluralism, protecting rights, and regulating online platforms. The website is professionally designed using Drupal 10, featuring comprehensive content, multimedia resources, and strong privacy and cookie management. Social media integration and official branding reinforce its authoritative presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. WHOIS data is unavailable, likely due to AFNIC policies, which slightly impacts domain trust but is offset by the official nature of the site. Overall, the site is a reliable source of regulatory information for the general public and professionals in France.

Science Feedback is a reputable non-profit organization dedicated to scientific fact-checking and combating misinformation in areas such as climate, health, and energy. The website serves as a reliable reference for the public to discern trustworthy scientific information, supported by a network of scientists and recognized media coverage. The platform offers reviews, insights, newsletters, and investigations to empower readers with accurate knowledge. Technically, the website is built on WordPress using the Fractal theme, leveraging modern web technologies including Google Tag Manager, Google Analytics, Matomo, and MailerLite for marketing and analytics. It implements a cookie consent mechanism compliant with GDPR and provides a responsive, accessible, and SEO-optimized user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, vulnerability disclosure, and incident response contacts, which are recommended for further strengthening its security posture. Overall, the website demonstrates a strong trustworthiness profile with excellent content quality and professional presentation. The absence of WHOIS data due to privacy protection is justified given the organization's non-profit nature. Strategic recommendations include enhancing security transparency and incident response readiness to maintain and improve stakeholder trust.

Agora CE, o.p.s. operates the website participativni-rozpocet.cz, providing expert assistance and methodological support for participatory budgeting in Czech municipalities. The organization targets local governments, politicians, and active citizens, offering practical tools and consultancy to foster community involvement in budget decisions. The website is well-structured, professionally designed, and supported by the Czech Ministry of Regional Development, indicating a strong market position within the non-profit government sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring modern infrastructure and good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility and user trust.

Mary's Meals USA is a well-established non-profit organization dedicated to providing nutritious school meals to children in impoverished communities. The website reflects a strong market position with over 3 million children served daily and a clear mission to expand their impact. The organization targets donors, volunteers, and supporters with a comprehensive set of services including fundraising, ambassador programs, and school sponsorships. The site is professionally designed with consistent branding and clear calls to action, enhancing trust and engagement. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Google Tag Manager and Visual Website Optimizer for analytics and optimization. The site demonstrates good mobile responsiveness, accessibility, and SEO practices, although some security headers are not visibly present in the HTML source. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating a mature approach to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy. Despite this, the presence of official charity information, tax ID, and consistent content supports the site's credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing an incident response policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and transparency.

Mary's Meals Slovensko is a small non-profit organization focused on addressing child hunger by providing meals to children throughout the school year at a low cost. It operates as a localized branch of the international Mary's Meals charity, targeting supporters and donors interested in charitable feeding programs. The website presents clear branding and messaging consistent with its mission and uses modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management. The hosting is managed via Microsoft Online services, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The website integrates multiple third-party tracking and marketing services, including Google and Facebook, with a comprehensive cookie consent dialog that complies with GDPR requirements. Overall, the site is professional, trustworthy, and safe for general audiences.

Mary's Meals Slovenija is a small non-profit organization dedicated to providing nutritious school meals to children in impoverished regions, aiming to improve education and reduce hunger. The website serves as a local chapter platform for fundraising, awareness, and donor engagement, aligned with the global Mary's Meals movement. Technically, the site is built on the Shopify platform, leveraging its e-commerce and content management capabilities, with good mobile optimization and accessibility. Security posture is solid with HTTPS, hCaptcha protection, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned to support its charitable mission.

Fundación Mary's Meals Spain is a well-established non-profit organization dedicated to combating chronic child hunger by providing daily nutritious school meals in 16 countries. The organization operates as part of the global Mary's Meals network, recognized internationally and awarded the prestigious Premio Princesa de Asturias de la Concordia 2023. Their business model relies on donations, sponsorships, and volunteer engagement to sustain impactful feeding programs that encourage education and offer hope to impoverished children. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Typekit fonts. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. Privacy and cookie policies are robust, with active consent mechanisms ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks publicly available security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query restrictions, but the website's trust signals and transparent contact information support its legitimacy. Overall, the site demonstrates a strong security posture, excellent content quality, and high business credibility. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and considering a vulnerability disclosure program to further strengthen trust and compliance.