Medium-risk security reports

The merci-ciocolata.ro website represents the official Romanian portal for the merci chocolate brand, part of the international Storck group. It provides product information, brand messaging, and options for personalized merci products. The site targets Romanian consumers interested in premium chocolate products and serves as a marketing and informational platform rather than direct e-commerce. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes Piwik PRO analytics with a GDPR-compliant cookie consent mechanism. The website is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and published security policies, which could be improved. WHOIS data is privacy protected as per ROTLD policy, which is typical for Romanian domains, and the domain aligns with the brand's legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

The website www.toffifee.nl is the official Dutch site for the Toffifee confectionery brand, owned by Storck Nederland B.V. It serves as a marketing and consumer engagement platform showcasing product information, recipes, and brand history. The site targets general consumers in the Netherlands with a focus on retail confectionery products. Technically, the site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, jQuery, and Lodash, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-branded, with no signs of malicious or suspicious activity.

Formation Animacoop is a French educational organization specializing in cooperative training across multiple cities in France. Established in 2010, it offers comprehensive training programs focused on animating and facilitating cooperative projects, collective intelligence, and collaborative digital tools. The organization targets professionals involved in project management, facilitation, coaching, and collective initiatives, providing blended learning with both in-person and remote sessions. The website reflects a mature digital presence with structured data, social media integration, and clear contact points. Technically, the site is built on WordPress with modern frameworks and includes GDPR-compliant cookie consent and privacy policies. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the site is professional, trustworthy, and well-positioned in its niche.

ADMvalue is a well-established French technology company founded in 2006, specializing in delivering customized customer relationship management and business process solutions that combine human intelligence, emotional intelligence, and artificial intelligence. The company positions itself as a leader in multishore and multilingual services, targeting B2B clients seeking digital transformation and enhanced customer experience. Their key services include front office customer service, technical assistance, sales, marketing consulting, and back office process management. The website reflects a professional and consistent brand image with excellent content quality and user experience.

The website www.vendee.fr is the official online presence of the Conseil départemental de la Vendée, a government entity serving the Vendée department in France. It provides comprehensive information and services related to social support, infrastructure, culture, and public administration targeted at residents and stakeholders of the region. The site is well-branded, professionally designed, and structured to facilitate user navigation and access to departmental resources. Technically, the site is built on TYPO3 CMS with Bootstrap and FontAwesome for frontend styling, and integrates Matomo analytics for user behavior tracking, including heatmaps and session recordings. The presence of cookie consent mechanisms and structured data indicates a mature digital infrastructure with attention to privacy and SEO best practices. Performance and mobile optimization are good, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes some security headers, though additional headers like Content-Security-Policy could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is unavailable, likely due to privacy protection, which is justified for a government domain. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility as a government portal. Strategic recommendations include enhancing security headers and publishing a clear privacy policy page to improve transparency and compliance.

The website jeromemettling.com currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily technical, showing a redirect countdown and browser integrity checks. The site appears to be running very outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. The WHOIS data is suspicious, showing a domain creation date in the future (2025), no registrant information, and no DNSSEC enabled, which raises concerns about the domain's legitimacy. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the site. Overall, the site lacks professional content and trust indicators, and the security posture is weak due to outdated software and missing security headers.

PortlandLabs, Inc. is a technology company specializing in delivering innovative, secure, and scalable digital solutions primarily targeting government agencies and large enterprises. The company emphasizes compliance with rigorous security frameworks such as ISO 27001, HIPAA, SOC2, and IL2/IL4, serving clients including the U.S. Department of Defense and Fortune 100 companies. Their service offerings span artificial intelligence, web content management, analytics, managed IT, application development, user experience design, and data privacy and protection. The website reflects a mature business with a professional online presence and strong trust indicators such as client logos and testimonials. Technically, the website is built on Concrete CMS and employs modern web technologies including jQuery, Google Tag Manager, Matomo Analytics, and Userback for feedback. The site is mobile optimized with good SEO and accessibility basics, though some improvements in accessibility and cookie consent mechanisms are recommended. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and claims compliance with multiple security standards. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure information is publicly available. The absence of WHOIS registration data is a notable anomaly that may warrant further investigation to confirm domain legitimacy. Overall, PortlandLabs presents a credible and professional digital presence with a strong security and compliance focus. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies and incident response contacts, and verifying domain registration details to strengthen trust and transparency.

Terciel is a digital platform associated with Terrena, a major French agricultural cooperative. The website serves primarily as a login portal for members to access their dashboards and related services. The platform is built on Drupal 10 and incorporates performance monitoring tools such as Boomerang. The site is designed with basic but consistent branding and provides clear contact information via phone for user support. However, it lacks visible privacy, cookie, or terms of service policies on the login page, which are important for compliance and user trust. From a technical perspective, the website uses modern CMS technology and includes some performance monitoring scripts. The site appears to be moderately optimized for mobile devices and accessibility but could benefit from enhanced SEO and accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers are detected, and no vulnerability disclosures or incident response information is provided. The WHOIS data for the domain is not publicly available, indicating privacy protection, which is common and justified for cooperative businesses. No suspicious patterns or legitimacy concerns are identified. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, providing incident response contacts, and enhancing accessibility and SEO to improve user experience and compliance.

Douce France is a French poultry brand specializing in the production and sale of poultry products sourced and prepared within French regions. The website positions itself as a regional brand emphasizing quality, local sourcing, and family enjoyment. The site offers product information, recipes, and a customer loyalty program, targeting French consumers interested in quality poultry. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, and uses Matomo for analytics, indicating a privacy-conscious approach. The site is well-structured, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not found. WHOIS data for the domain is missing from the AFNIC database, which is unusual and reduces trustworthiness somewhat. Overall, the site is professional and trustworthy but would benefit from improved transparency in domain registration and security policies.

Sourires de Campagne is a French brand specializing in organic French meat products, emphasizing quality, traceability, and availability in supermarkets. The website presents a professional and consistent brand image supported by official quality certifications such as Viandes de France. The target audience includes consumers who value organic and locally sourced meat. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Bootstrap, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and hCaptcha integration, though security headers and explicit security policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data for this .fr domain is a notable gap but does not detract significantly from the overall legitimacy given the professional presentation and social media presence.

Festival des Pains is a French artisan bakery brand that offers a wide range of bakery products including breads, baguettes, and specialty items. The company supports professional bakers through training programs, commercial opportunities, and partnerships with regional mills. The website is professionally designed, mobile-optimized, and provides rich content including multimedia and testimonials, targeting both professional bakers and general consumers interested in artisan bread. The business operates primarily in the retail and manufacturing sectors within France, positioning itself as a regional leader with a network of 26 mills.

Paysan Breton is a well-established French dairy brand specializing in traditional dairy products such as butter, whipped cheeses, fermented milks, and crepes, produced in Brittany. The website reflects a mature digital presence with a professional design, multilingual support, and rich content including recipes and news updates. The technical infrastructure is based on Drupal 10 CMS, leveraging modern web technologies and analytics tools like Google Tag Manager and Matomo. Security posture is solid with HTTPS and some security headers, though improvements are recommended. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, warranting further verification. Overall, the site is trustworthy, user-friendly, and well-positioned in the retail dairy sector.

Gastronome Professionnels is a French cooperative-backed brand specializing in poultry products and solutions for professionals in the food service and agro-food industries. Established in 2011, it offers a broad range of multi-species poultry products tailored to various professional needs, including ready-to-cook and custom-developed solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting B2B customers. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration transparency, slightly impacting trustworthiness. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from enhanced security disclosures and direct contact information.

Ackerman is a historic French wine house founded in 1811, specializing in fine sparkling wines from the Loire Valley, particularly Saumur and Crémant de Loire appellations. The company combines tradition with innovation to offer a range of wines for both gastronomic and casual consumption. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content about the brand, products, and visitor experiences. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Matomo for analytics and Axeptio for cookie consent, indicating a good level of digital maturity. Security posture is generally strong with HTTPS and CAPTCHA protections, though improvements in security headers and published security policies are recommended. Overall, the site is trustworthy and well-positioned in its niche, though the absence of WHOIS data slightly impacts domain trustworthiness.

The website 'La viande plaisir D'ANVIAL' appears to be a French meat retail or food service business currently undergoing website maintenance. The site content is minimal, consisting solely of a maintenance placeholder page with no active business information, contact details, or policies. The domain WHOIS data indicates the domain is not registered or has expired, which raises significant concerns about the website's legitimacy and operational status. Technically, the site uses basic front-end libraries such as Bootstrap and Font Awesome but lacks modern security and privacy implementations. There is no HTTPS detected, no security headers, and no privacy or cookie policies, which collectively indicate a low security posture and poor compliance with data protection standards. Overall, the website is not currently functional for business purposes and presents a high risk from a security and trust perspective.

Tendre & Plus is a French brand specializing in quality meat products and providing consumers with easy and quick meal ideas. The brand operates under the Elivia group, itself a subsidiary of the Terrena cooperative, positioning it well within the regional meat retail sector. The website offers a variety of recipes, product information, and customer engagement through a club offering discounts. Technically, the site is built on Drupal 8 with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, while HTTPS and cookie consent are implemented, the absence of explicit security headers and incident response contacts suggests room for improvement. The missing WHOIS data for the domain is a concern for domain legitimacy but does not detract from the overall trustworthiness given the brand's established presence and parent company backing. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration status to improve trust and compliance.

Fermier d'Ancenis is a specialized group of poultry farmers based in the Pays de Loire region of France, focusing on high-quality Label Rouge certified poultry products. Their website showcases their commitment to animal welfare, environmental respect, and superior product quality, supported by recognized certifications and awards. The business targets consumers and professionals seeking premium poultry products, offering recipes and culinary advice to enhance customer engagement. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though some security policy documentation is absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data reduces domain trustworthiness, warranting further verification. Overall, the website is professional, trustworthy, and well-positioned in its niche.

La Nouvelle Agriculture is a French cooperative focused on sustainable agriculture and direct consumer engagement, offering poultry, eggs, beef, and pork products with traceability. The website is built on Drupal 10 and integrates multiple analytics and advertising tools with a consent-based approach, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and security headers, though privacy compliance is limited by the absence of explicit privacy and terms of service pages. Overall, the website presents a trustworthy and professional image aligned with its cooperative agricultural mission.

Père Dodu is a well-established French brand specializing in poultry and prepared food products, operating since 1965. The website serves as a consumer-facing platform providing product information, recipes, and promotional campaigns, targeting general family audiences. The brand maintains consistent and professional digital branding with a focus on facilitating home cooking. Technically, the site is built on WordPress with modern SEO and performance plugins, including Yoast SEO and WP Rocket, and uses Matomo for analytics. The site is mobile-optimized and provides a good user experience, although some broken images were detected which could impact perception. Security posture is solid with HTTPS and standard security headers, but could be improved with enhanced form protections and fixing broken assets. Privacy and cookie policies are present and GDPR compliant, but no explicit contact emails or phone numbers were found, limiting direct contact options. WHOIS data is not publicly available, typical for AFNIC domains, but the domain appears legitimate given the professional site and brand history. Overall, the site is trustworthy, secure, and well-maintained, suitable for its retail and consumer engagement purposes.

Vilmorin & Cie is a French international seed company affiliated with the Limagrain group, specializing in seed production and genetics. The company recently exited the stock market following a simplified public offer by Limagrain, indicating a strategic consolidation. Their website provides corporate information, financial publications, and press releases targeting agricultural professionals and investors. Technically, the site is built on modern web technologies including the Remix React framework, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is mostly addressed with a comprehensive privacy policy, but cookie consent mechanisms are lacking. Overall, the website reflects a professional and credible business presence with room for enhanced security and privacy features.

COBISS.net operates as a cooperative network of library and research information systems primarily serving multiple countries in the Balkan and Central European region. Managed by IZUM – Institute of information science, the platform provides shared bibliographic cataloguing, union catalogues, and current research information systems, supporting libraries and academic institutions. The network is well-established with a domain age of over 20 years and a strong institutional backing. Technically, the website uses a custom-built platform with Java and Oracle backend technologies, supported by modern front-end frameworks like Bootstrap and jQuery. The site is moderately performant and mobile-optimized, with good navigation and content relevance. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a privacy-related accessibility statement but no explicit cookie or privacy policies on the main site. Overall, the website is professional, trustworthy, and serves a specialized educational and research audience effectively.

SVČ Lužánky is a well-established educational and leisure center based in Brno, Czech Republic, offering a wide range of activities including clubs, courses, camps, and events targeted primarily at children, youth, families, and schools. The organization operates as a non-profit entity focused on providing quality extracurricular and educational experiences. The website reflects a professional and modern digital presence, built using Next.js and React technologies, optimized for mobile devices and accessibility. It features comprehensive content, clear navigation, and integration with social media platforms, enhancing user engagement and outreach. Security posture is solid with HTTPS enforced and secure form handling, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, but the overall site professionalism and transparency in contact information support legitimacy. Strategic recommendations include enhancing security headers, adding explicit cookie consent, and publishing incident response policies to strengthen trust and compliance.

Zámecké návrší z. ú. is a cultural and hospitality organization based in Litomyšl, Czech Republic, managing the Zámecké návrší area, a UNESCO heritage site. The organization offers accommodation, event space rental, cultural activities, and visitor experiences, targeting tourists, families, and event organizers. The website reflects a medium-sized non-profit entity with a strong regional presence and official partnerships with local government and tourism bodies. Technically, the website uses modern web technologies including Google Analytics, Google Tag Manager, and a custom CMS likely based on the Nette Framework. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are missing and no explicit incident response information is provided. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting further verification is needed. Overall, the website is professional, trustworthy, and well-suited for its cultural and hospitality mission.

Okultura.cz is a small-scale cultural media website focused on publishing essays about magical aspects of modern history and contemporary art. The website appears to be a content publication platform with a niche audience interested in culture and art. The domain is well-established, registered since 2002, which supports the legitimacy of the site. Technically, the site uses WordPress as its CMS and integrates Google Analytics for visitor tracking. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided on the homepage. Security posture is weak with no HTTPS enforcement or security headers detected in the provided HTML snippet. Overall, the site has basic content quality and technical implementation but falls short in privacy compliance and security best practices.

Radio Čas s.r.o. is a well-established regional radio broadcaster in the Czech Republic, founded in 1998 and operating primarily in the Moravia and Silesia regions. The company offers radio broadcasting, online streaming, podcasts, event ticket sales, and promotional competitions. The website reflects a professional and modern digital presence built on WordPress, with a focus on user experience and content delivery. The technical infrastructure includes modern JavaScript libraries and performance optimizations, hosted likely by Active24, a reputable provider. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are needed in security headers and privacy compliance. Contact information is clearly presented, and social media integration is active. Overall, the site is trustworthy and professionally managed, but lacks explicit privacy and cookie policies, which are important for GDPR compliance.

Galerie Bijoux Nemesis is a small Czech artisan jewelry business specializing in handmade and original jewelry pieces, including tin jewelry, Swarovski elements, and polymer clay creations. The company also offers jewelry making courses and gift vouchers. Their physical store in Prague is permanently closed, with an emphasis on online sales through their e-shop and social media channels. The website is built on a WebCzech e-shop platform using common JavaScript libraries and Bootstrap for responsive design. While the site is content-rich and user-friendly, it lacks advanced security headers and comprehensive privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the business presence and contact information suggest a legitimate small enterprise.

Kvalitní ŽIVOT.com is a Czech Republic based e-commerce business specializing in natural health products, primarily focusing on Moringa supplements sourced from Tenerife. The company positions itself as a niche leader offering unique, patented probiotic and telomerase activation products, targeting health-conscious consumers including vegans and vegetarians. The website is professionally designed, with clear navigation, comprehensive product information, and multiple trust indicators such as EU organic certifications and GDPR compliance. Technically, the site runs on the Shoptet e-commerce platform, uses standard analytics and marketing tools, and enforces HTTPS with CSRF protection on forms. However, the WHOIS data for the domain is missing, which raises concerns about domain legitimacy despite the active and professional web presence. Overall, the site demonstrates a good security posture but could improve by updating outdated libraries and adding explicit security headers and incident response contacts.

Pražský Patriot s.r.o. operates an established Czech-language online news portal focused on Prague's local news, politics, culture, transport, and community events. The website serves residents and interested parties in Prague, providing timely news articles, event calendars, and newsletters. It maintains a consistent brand presence and leverages official news agency content, enhancing its credibility in the local media market. Technically, the site employs modern web technologies including JavaScript, Google Analytics, Google Adsense, and Gemius tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and explicit incident response information. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and legitimate. Overall, the site is a reliable local media source with moderate technical and security maturity.

The website casopiskvalitnizivot.cz is currently a parked domain with minimal content, primarily displaying a message that the domain is for sale. There is no active business presence, no contact information, and no privacy or cookie policies. The technical infrastructure is basic, relying on standard JavaScript and XMLHttpRequest calls to third-party ad and tracking domains. No CMS or advanced frameworks are detected. Security posture is weak due to lack of HTTPS information and absence of security headers or policies. Overall, the site lacks professionalism and trust indicators, making it unsuitable for business or user engagement in its current state.

Časopis Regenerace is a Czech media publication specializing in natural health, herbal medicine, and holistic wellness. The website offers a variety of articles, special editions, and subscription services targeting Czech-speaking audiences interested in natural healing. The domain is well-established since 1998, supporting the publication's credibility and market presence. Technically, the site is built on WordPress using the GeneratePress theme, with integrations for Google Analytics and advertising via Advanced Ads. The site is HTTPS secured and includes user tracking with opt-out capabilities. However, it lacks visible privacy and cookie policies, security headers, and direct contact information, which are areas for improvement. Overall, the website presents good content quality and user experience but requires enhancements in privacy compliance and security best practices.

The website suenee.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. The domain is registered since 2009 and uses Cloudflare for DNS and security services. Due to the block, no business information, contact details, or policies are available for analysis. The technical infrastructure relies on Cloudflare's security and CDN services, but no CMS or other technologies are detectable from the blocked page. The security posture cannot be fully assessed, but the presence of a WAF indicates some level of protection. However, the lack of accessible content and policies results in a low overall trust and compliance score. Strategic recommendations include resolving the WAF block to allow content access, publishing privacy and cookie policies, and providing clear contact and security information.

Arammagnus s.r.o. operates an e-commerce website specializing in magical gifts, spiritual, and esoteric products such as oils, candles, incense, herbs, powders, runes, and ritual statues. The company targets customers interested in spiritual and magical goods primarily in the Czech Republic. The website is well-structured with clear navigation and product categorization, offering a good user experience and professional design. Technically, the site uses a custom e-commerce platform likely provided by ByznysWeb.cz, with modern web technologies including lazy loading and responsive design. Security posture is adequate with HTTPS and some security headers, but lacks advanced protections and published security policies. Privacy compliance is basic with a cookie consent mechanism but no dedicated privacy or terms pages. WHOIS data is missing, which raises concerns about domain registration transparency but does not directly impact the current operational status. Overall, the site is functional, safe, and serves a niche market effectively.

Technické služby města Litoměřice is a municipal contributory organization established to provide essential technical and communal services to the city of Litoměřice, Czech Republic. Founded in 1995, the organization focuses on maintaining city cleanliness, public green spaces, infrastructure repairs, and other city maintenance tasks. The website reflects a well-established local government service provider with a clear mission and target audience consisting primarily of city residents and local stakeholders. The digital presence is professional, with good content quality and clear navigation, supporting the organization's public service role. From a technical perspective, the website employs a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager for analytics. While the site is mobile-optimized and performs moderately well, the use of an outdated jQuery version suggests some technical debt and potential security risks. The hosting is managed through WEDOS, a Czech hosting provider, consistent with the domain registration data. Security posture is moderate; the site uses HTTPS and has implemented cookie consent mechanisms in compliance with GDPR. However, no explicit security headers or vulnerability disclosure policies are present, and the older JavaScript libraries could expose the site to known vulnerabilities. Contact information and a data protection officer are clearly provided, indicating some compliance with data protection regulations. Overall, the site is trustworthy but could benefit from enhanced security measures and updated technical components. The overall risk assessment is low to moderate, with no critical security issues detected. Strategic recommendations include updating JavaScript libraries, implementing security headers, formalizing security policies, and enhancing privacy documentation to improve compliance and trust. These steps will strengthen the organization's digital security posture and better protect user data while maintaining a professional and accessible web presence.

TAS Holešov, s.r.o. is a municipal services company formed in 2024 by merging two local entities, providing energy, waste management, property management, and recreational services primarily for the Holešov region in the Czech Republic. The website reflects a well-structured local government service portal with clear navigation and relevant content for residents and businesses. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response contact details. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

The website www.parkovanicb.cz appears to be related to parking services, as indicated by its title 'Parkování ČB'. However, the site lacks substantive business description, contact information, and privacy or cookie policies. The technical infrastructure is based on an older CMS (InizioCMS) and Bootstrap 3.3.7a framework, with analytics tools such as Google Tag Manager and Hotjar implemented. Security posture is weak due to the absence of HTTPS, security headers, and no visible incident response or security policies. The domain WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible but minimal in content and security features, indicating a need for significant improvements in compliance, security, and business transparency.

ENSV-FVI is a specialized educational institution focused on training Veterinary Public Health Inspectors and providing continuing education and degree programs in veterinary public health. Affiliated with VetAgro Sup and hosting the One Health Institute, it serves a national and international audience of veterinary and government professionals. The website is built on a modern WordPress platform using Elementor and includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and GDPR compliance, though some security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-branded, supporting the institution's authoritative position in its niche.

Město Borovany operates an official municipal website serving the residents and visitors of Borovany, Czech Republic. The site provides comprehensive local government information including news, official notices, contact details, event calendars, and public services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is a government service portal with no commercial intent. The website maintains a consistent brand identity and good content quality, supporting its role as a trusted local government resource. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It is built on the Ocelot CMS platform and demonstrates good mobile optimization and accessibility compliance, including an accessibility certification. Performance is moderate, with no major technical issues detected. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks a published privacy policy and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the official nature of the content and contact information supports legitimacy. Overall, the website is a well-maintained municipal portal with good usability and security posture, though improvements in privacy compliance and domain transparency are recommended to enhance trust and regulatory adherence.

Mary's Meals Česká republika z.s. is a Czech affiliate of the international non-profit organization Mary's Meals, dedicated to providing nutritious school meals to children in impoverished communities worldwide. The website clearly communicates its mission, programs, and ways to get involved, targeting donors, volunteers, and schools within the Czech Republic. The organization maintains a strong market position as a reputable charity with a consistent brand and transparent communication. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager for analytics and CookieFirst for consent management. The site is mobile-optimized, accessible, and performs moderately well, with good SEO practices and structured content. Security measures such as HTTPS and security headers are properly implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trustworthiness. Overall, the site is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing transparency by publishing a security policy and vulnerability disclosure, improving incident response visibility, and maintaining regular audits of third-party scripts to mitigate risks. These steps will strengthen the organization's security posture and stakeholder trust.

Gorilla Café is a small hospitality business based in the Czech Republic, specializing in serving high-quality specialty coffee and tea with an emphasis on exotic blends sourced from Uganda and sustainable fair trade practices. The café positions itself as a calm oasis for customers seeking a relaxing environment and cultural experiences such as travel talks. The business model focuses on onsite café services, event hosting, and promoting sustainability through donations to conservation efforts. Technically, the website is built on the Webnode platform and utilizes AWS Cloudfront CDN for content delivery. The site is moderately optimized for performance and mobile devices, with a clean design and clear navigation. However, it lacks advanced security headers and comprehensive privacy documentation, which are areas for improvement. Google Tag Manager is used for analytics, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, but it lacks visible security headers and a privacy policy, which impacts its compliance posture. The absence of WHOIS data reduces trust in domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website scores moderately well in content quality and business credibility but should address privacy and security gaps to enhance trust and compliance. Verifying domain registration details and adding comprehensive privacy and security policies are recommended to improve the site's security posture and user confidence.

Réseau Canopé is a French public operator under the Ministry of National Education, Higher Education and Research, dedicated to the training of teachers and educational staff. It holds a strong market position as the national network for teacher training, offering a wide range of services including online courses, workshops, and digital educational resources. The website reflects a mature digital infrastructure using TYPO3 CMS and integrates advanced analytics tools such as Matomo and Piwik PRO for user engagement tracking. The site is well-designed, accessible, and optimized for mobile devices, providing a professional user experience. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit security policies and vulnerability disclosure. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility with official government affiliation, certifications, and active social media presence.

La Rochelle Université is a public higher education institution based in France, offering a broad range of academic programs, research initiatives, and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. The institution emphasizes personalized student support and sustainable development in its strategic vision. Technically, the website is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security measures include HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency of contact information.

Kwantic is a French web development agency founded in 2020, specializing in custom web solutions including ERP, CRM, application development, and e-commerce platforms. The company operates multiple offices across major French cities, indicating a regional presence and a focus on serving businesses seeking digital transformation. The website is professionally designed using WordPress with modern technologies such as jQuery, Bootstrap, and various analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks published privacy policies and security headers, which are important for compliance and protection. Overall, the website presents a credible business with room for improvement in privacy and security transparency.

The Groupe Caisse des Dépôts is a major French public financial institution dedicated to serving the public interest through investment and management of public funds. The website reflects a well-established entity with a clear mission to support social, territorial, and economic development in France. The site is built on a modern Drupal 10 CMS platform, incorporating accessibility features, GDPR-compliant consent management, and Matomo analytics for user tracking. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional and trustworthy digital presence aligned with its public institution status.

The website masteos.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare error 525 page being displayed. This indicates a misconfiguration or incompatibility in the SSL/TLS setup on the origin server side. The domain is registered since 2018 with Gandi SAS and uses Cloudflare nameservers, but no further business or contact information is publicly available on the site. The lack of accessible content, privacy policies, cookie consent mechanisms, or terms of service severely limits the ability to assess the business or compliance posture. Technically, the site relies on Cloudflare for DNS and CDN services but fails to establish a secure connection to the backend server, which is a critical security and availability issue.

Průvodce Koloběhem operates as a specialized content platform providing the largest database of scooter routes primarily focused on the Czech Republic and Europe. The website offers detailed trip descriptions and navigation aids for mobile users, targeting outdoor enthusiasts and scooter riders. The business model centers on content provision and partnerships with related companies such as Kostka Koloběžky and Kudyznudy.cz, enhancing its market position as a leading resource in its niche. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is managed via Webflow's CDN and Amazon S3 for static assets, ensuring moderate performance and good mobile optimization. However, accessibility features are basic and there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. It integrates common tracking and retargeting services but lacks explicit cookie consent banners and security policies. The WHOIS data is privacy protected, which is reasonable for this business type, though it reduces transparency. No critical vulnerabilities or security incidents are evident from the analysis. Overall, the website presents a professional and trustworthy front with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance its security posture and user trust.

UNOS (United Network for Organ Sharing) is a well-established nonprofit organization dedicated to managing the organ transplantation system in the United States. The organization provides critical services including organ donor registration, organ matching, data analytics, advocacy, and education. Their website reflects a mature digital presence with comprehensive content targeting donors, patients, healthcare professionals, and advocates. The site is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is solid with HTTPS enforcement and clientTransferProhibited domain status, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

UNOS (United Network for Organ Sharing) operates a comprehensive website providing patient resources related to organ transplantation. The organization is a well-established non-profit entity in the healthcare sector, with a domain registered since 1993, reflecting its longstanding presence. The website targets patients, transplant candidates, and their families, offering educational brochures and transplant-related information. Technically, the site is built on WordPress with the Divi theme, leveraging modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Bing Ads. The site is mobile-optimized and uses HTTPS, ensuring secure data transmission. However, explicit privacy and cookie policies are not found on the analyzed page, which impacts privacy compliance scoring. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks visible security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

Bioracer is a premium sportswear company specializing in custom bike clothing and accessories, targeting cyclists, triathletes, and athletes across multiple sports disciplines including skating and skiing. The company emphasizes performance, aerodynamics, and comfort, leveraging real-world racing data and wind tunnel testing. Their market position is strong within the niche of high-performance sports apparel, supported by endorsements and medals from professional athletes. The website is multilingual, professionally designed, and integrates e-commerce capabilities with a dedicated webshop and design-your-own apparel service. Technically, the website is built on WordPress using modern themes and plugins, with integrations for marketing and analytics tools such as HubSpot, Mailchimp, Google Tag Manager, and Facebook Pixel. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence with comprehensive content and strong branding. The lack of WHOIS data for the subdomain is expected and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

Vendée U Pays de la Loire is a regional French cycling team competing in Division Nationale 1, focusing on sports promotion and fan engagement. The website is professionally designed using the Wix platform, featuring modern JavaScript technologies and polyfills to ensure compatibility across browsers. The site provides relevant content about the team, news, and programs, targeting cycling enthusiasts and regional supporters. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears legitimate and consistent with the business identity. Security posture is moderate with HTTPS implied and use of Sentry for error monitoring, but lacks explicit security headers and privacy policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.