Medium-risk security reports

Hudební divadlo Karlín is a musical theater company based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as a platform for event information, ticket sales, and e-commerce related to the theater's offerings. It targets a general audience interested in musical theater and cultural activities. The business model revolves around ticket sales, merchandise, and educational programs. The site is well-branded and consistent, reflecting a medium-sized cultural institution with a solid local presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various third-party libraries for UI components and tracking. It uses HTTPS and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event listings. From a security perspective, the site uses HTTPS but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk is moderate; the site appears legitimate and functional but would benefit from enhanced privacy disclosures, security headers, and verified domain registration information to increase trust and compliance.

The website event-zazitkovyvlak.cz represents a small Czech business specializing in the rental of train sets and motor vehicles for unique event experiences, alongside event agency services. The business targets clients looking for original party venues on rails, positioning itself as a niche provider in the transportation and event management sectors. The website is built on WordPress with Elementor, indicating a moderate level of digital maturity and ease of content management. The presence of Cookiebot and Google Tag Manager shows awareness of privacy and analytics needs, although no explicit privacy policy or terms of service pages were found, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and incident response information. Overall, the website is functional and professional but could improve in privacy and security transparency.

Rewora is a technology company specializing in customer experience tools designed to boost sales and build trust through authentic product and store reviews, Q&A forums, and business intelligence analytics. The company targets e-commerce businesses seeking to increase conversion rates and customer loyalty by leveraging social proof and advanced review management features. The website presents a professional and modern digital presence with clear branding and comprehensive service descriptions. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates analytics tools like Google Tag Manager and Hotjar, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent banner. However, the absence of a terms of service page and explicit security or incident response policies are gaps to address. Overall, the domain registration data aligns with the business profile, indicating a legitimate and consistent startup operation launched in 2023.

Kaira is a specialized provider of WordPress themes, WooCommerce plugins, and block tools aimed at creators and developers seeking to build fast, modern websites. Established with a domain registered since 2010 and business activity since 2013, Kaira holds a trusted position in the WordPress ecosystem. The website demonstrates a good level of technical maturity, leveraging WordPress 6.8.3, popular plugins, and integrations such as Google Analytics and MailerLite for marketing and analytics. Hosting is provided by HOSTINGER operations, UAB, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

PMB Community is a niche social network platform dedicated to users of the PMB library management software. It offers thematic spaces, forums, and collaborative tools such as wikis, shared calendars, and file sharing to facilitate knowledge exchange among librarians and documentalists. The platform is powered by the HumHub CMS and built on the Yii PHP framework, leveraging modern web technologies like jQuery and Bootstrap for a responsive and user-friendly experience. The website is secured with HTTPS and employs CSRF tokens to protect user interactions. However, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable due to TLD restrictions and privacy protections, limiting domain registration transparency. Overall, the site presents a professional and safe environment for its target audience but could improve in privacy compliance and transparency.

PMB Services is a French company specializing in the development and support of PMB, an open-source library management software designed for libraries, documentation centers, and educational institutions. The company offers a comprehensive suite of services including consulting, installation, hosting, training, and support, serving over 1800 clients with more than 10,000 users. Their market position is solid, supported by a professional website with good content quality and consistent branding. Technically, the website employs a mature technology stack including jQuery, UIkit, Dojo Toolkit, and FontAwesome, alongside analytics tools like Google Analytics and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance level. Privacy and cookie policies are well implemented, indicating GDPR compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but the Content-Security-Policy header is empty, representing a potential security weakness. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain www.sigb.net is a concern, suggesting the domain may be unregistered or expired, which could impact trustworthiness. Overall, the website presents a professional and trustworthy front for PMB Services, but the domain registration inconsistency should be addressed to ensure legitimacy and prevent potential security risks. Strategic recommendations include enhancing security headers, verifying domain registration status, and maintaining up-to-date software components.

Jihlavske-listy.cz is a regional news website operated by Parola spol. s r.o., serving the Vysočina region in the Czech Republic. The site offers a broad range of local news, cultural content, sports updates, and magazines, targeting residents and readers interested in regional affairs. The business model relies on advertising and subscription services, supported by a consistent brand presence and active social media engagement. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and CKEditor for content management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection, but lacks visible security headers which are recommended for enhanced protection. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site presents a professional and trustworthy regional news platform with moderate technical and security maturity. Strategic improvements in security headers, privacy policy presence, and WHOIS transparency would enhance trust and compliance.

Deník KNIHY is a Czech media platform focused on providing daily updated information about newly published books, authors, and literary events. It serves as a comprehensive resource for readers, publishers, distributors, and booksellers, offering a catalog of books with direct purchase options and editorial content including interviews and videos. The website is positioned as a key player in the Czech literary market, supporting both domestic and international authors with promotional services. Technically, the site is built on WordPress with common plugins for galleries and polls, integrates Google Analytics and Facebook SDK for tracking, and is hosted under a Czech registrar with appropriate domain age and consistency. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks formal privacy and cookie policies, which impacts its compliance posture. Security practices are basic with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy and professional but could improve in privacy compliance and security hardening.

TV Natura is a small Czech internet television platform focused on nature, environmental awareness, and community engagement. The website offers live streaming, archived videos, articles, and opportunities for user-generated content. The business operates as a small media entity with a non-profit or community-supported model, recently transitioning to a paid membership platform due to regulatory and financial challenges. Technically, the site uses modern web technologies including HTTPS, Bootstrap, and integrates Google Analytics and Facebook Pixel for tracking. The security posture is moderate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is found. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site provides a good user experience with relevant content for its target audience but would benefit from enhanced security and compliance measures.

The website www.mkz2021praha.cz serves as the official portal for the International Health Congress 2021 held in Prague, focusing on traditional, complementary, and integrative medicine (TCIM). It provides extensive information about the congress, including participant profiles, event recordings, publications, and a dedicated information platform called Platforma 2020 Praha. The site targets healthcare professionals, researchers, and the general public interested in TCIM, positioning itself as a niche but reputable organizer in the healthcare non-profit sector. Technically, the website employs a modern but straightforward tech stack including jQuery, bxSlider, simpleLightbox, Google reCAPTCHA, and Google Tag Manager for analytics. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site uses HTTPS and includes anti-bot measures on forms, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data reduces transparency and trust slightly. Privacy compliance is basic, with a privacy policy implied on the contact page but no dedicated cookie or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich, supporting its mission to disseminate TCIM knowledge. Strategic improvements in security headers, privacy transparency, and WHOIS data availability would enhance trust and compliance.

ProfiBeauty s.r.o. operates a specialized e-commerce website focused on hair extensions, hair care products, wigs, and related accessories primarily targeting the Czech market. Established in 2009, the company has a stable online presence with a well-structured website offering a variety of products and clear contact information. The site integrates modern web technologies including PrestaShop CMS, Google Analytics, Facebook Pixel, and reCAPTCHA, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and basic security measures implemented, though there is room for improvement in security headers and published policies. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy found. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

Frisör Klier správní s.r.o. operates the largest network of hair salons in the Czech Republic, catering to both men and women with professional hairdressing services and premium hair care products. The company maintains a strong market position as a leading retail service provider in the hair care industry, supported by an e-commerce platform for product sales. Their website reflects a professional and consistent brand image, targeting a broad audience seeking quality hair care solutions. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and the Nette Framework, ensuring a robust digital presence with moderate performance and good mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and an active cookie consent mechanism, demonstrating adherence to GDPR requirements. However, the absence of WHOIS registration data and visible security headers slightly detracts from the overall trustworthiness. No direct contact phone numbers or physical addresses were found on the homepage, though a professional contact email is provided. Overall, the website is secure, user-friendly, and business credible, with room for improvement in transparency and security hardening.

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

The website 'Trophées Industrie Grand Ouest' serves as a regional award platform recognizing top-performing industrial companies in Brittany, Normandy, and Pays de la Loire regions of France. It is positioned as a small-sized business focused on manufacturing sector awards and recognition. The site is built on the Wix platform, leveraging Wix Thunderbolt framework, and hosted by Wix, providing a moderate level of technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structure appear professional and business-oriented. Contact information is limited to a phone number and postal address embedded in structured data, with no email or contact forms present. Overall, the site is functional and relevant to its target audience but requires improvements in privacy, security, and domain legitimacy verification.

MVE Sarl operates a website focused on the sale of used construction and public works equipment, targeting businesses and professionals in the construction sector primarily in France. The company has a long-standing domain registered since 1999, indicating an established presence in the market. The website uses WordPress with WooCommerce for e-commerce functionality and integrates SEO and analytics tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is modern but lacks some advanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but no published security or incident response policies were found. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

The website nami.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any substantive content. The domain is long-established, registered since 1996 with Network Solutions, LLC, and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business, contact, or policy information is available for analysis. The technical infrastructure indicates use of modern security tools like Cloudflare's WAF and CAPTCHA to protect the site from automated threats. However, this also limits the ability to assess the website's content quality, security posture, and compliance status. Overall, the site appears legitimate based on domain age and registrar data, but the lack of accessible content restricts further evaluation.

The website thebls.com currently presents a security verification page employing Google reCAPTCHA v3, indicating a bot protection mechanism is in place. No actual business content, services, or company information is accessible on the provided page, limiting the ability to assess the business comprehensively. The domain is registered since 2007 with Tucows Domains Inc., showing a stable and legitimate registration history. However, the lack of visible content and policies suggests the site is either under maintenance, restricted, or protected by a security gateway. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for security verification. There is no evidence of DNSSEC, security headers, or HTTPS enforcement visible in the provided content, which are areas for improvement. The site’s mobile optimization and accessibility are basic, and SEO elements are minimal or absent. Security posture is moderate due to the presence of reCAPTCHA but lacks other best practices such as DNSSEC and security headers. No privacy, cookie, or terms of service policies are found, indicating poor privacy compliance. No contact or incident response information is available, which reduces trust and business credibility. Overall, the site is currently inaccessible beyond the security verification challenge, resulting in a low AI score and limited insights. Strategic recommendations include enabling DNSSEC, implementing HTTPS with security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

Madmoizelle is a French online magazine focused on feminist perspectives, culture, society, lifestyle, and pop culture. It targets French-speaking women interested in these topics and offers content through articles, podcasts, newsletters, and forums. The website is well-branded and maintains a consistent professional presence with active social media channels. Technically, the site is built on WordPress and integrates modern analytics and advertising technologies, including Google Tag Manager, Piano Analytics, and Didomi for consent management. The site is mobile-optimized and performs moderately well with good SEO practices. Security-wise, the site enforces HTTPS and uses security headers to some extent, but lacks explicit security policies or incident response information. Privacy compliance is strong with comprehensive cookie and privacy policies and a consent mechanism. However, the absence of WHOIS data for the domain reduces transparency and trust in domain registration details. Overall, the site is professional and trustworthy but could improve security transparency and domain registration clarity.

The website www.toffifee.hu is a professionally designed brand marketing site for Toffifee confectionery products targeted at the Hungarian market. It is owned and operated by Storck, a well-established confectionery company. The site provides product information, brand storytelling, and consumer engagement features, with clear navigation and mobile optimization. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, ensuring a moderate to good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is good, with accessible privacy and cookie policies in Hungarian. No direct contact emails or phone numbers are visible on the homepage, but a contact form is available on a dedicated page. WHOIS data confirms domain legitimacy and consistency with the brand identity. Overall, the site is trustworthy, safe, and professionally maintained.

Werther's Original Poland website represents a well-established confectionery brand under the parent company Storck. The site offers product information and brand storytelling focused on caramel sweets, targeting a general audience in Poland. The business model is retail-oriented, emphasizing product promotion and brand engagement. The website is professionally designed with consistent branding and good content quality, supporting a positive market position within the confectionery sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as RequireJS, jQuery, and Lodash. It includes responsive design elements and SEO-friendly metadata. The site performance is moderate, with good mobile optimization but basic accessibility features. Analytics are implemented via Piwik PRO with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS (implied by canonical URLs) and has implemented cookie consent banners. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is published. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this business type but slightly reduces transparency. Overall, the website presents a trustworthy and professional digital presence with moderate security posture and good privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's security and user trust further.

The website www.nimm2.pl is the official Polish site for the nimm2 brand, a confectionery product line under the Storck company. It provides detailed product information, brand storytelling, and consumer engagement content targeted at families and general consumers interested in sweet treats with vitamins. The site is professionally designed with consistent branding and good navigation, supporting a positive user experience. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial .pl domains. Overall, the site is trustworthy, safe, and well-maintained.

The website www.toffifee.pl is a professionally designed brand site for Toffifee confectionery products in Poland, operated under the parent company Storck. It provides product information, promotional content, and brand engagement primarily targeting Polish consumers interested in sweets. The site uses TYPO3 CMS and modern JavaScript libraries, ensuring a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via a cookie notice. Security posture is moderate, with no visible security headers and no explicit incident response contacts, but no critical vulnerabilities or exposed sensitive data were found. The domain WHOIS data is not publicly available, typical for .pl domains, but the website's professional presentation and linkage to Storck indicate legitimacy. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security best practices and transparency.

Flexity is a specialized e-commerce retailer focusing on Pilates reformers, chairs, Cadillac units, and related fitness and body-mind care products. The website targets Pilates and fitness enthusiasts across multiple European markets with localized versions and multiple language support. The business model is retail e-commerce with a niche focus, supported by professional product presentation and customer engagement tools such as Trustpilot reviews and loyalty programs. Technically, the site is built on the Shoptet platform, leveraging common web technologies like jQuery, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS enforced and CSRF protection on forms, though some security headers could be improved. Privacy compliance is evident with a cookie consent mechanism and a privacy policy that aligns with GDPR requirements. No WHOIS registrant data is publicly available due to privacy protection, which is typical for commercial e-commerce sites. Overall, the site presents a trustworthy and professional front with moderate technical sophistication and good compliance practices.

pressrelations GmbH is a well-established media monitoring and intelligence company founded in 2001, offering AI-supported platforms and consulting services to marketing and PR professionals worldwide. Their flagship product, NewsRadar®, provides cross-media monitoring and analysis, supporting over 1000 clients globally with a team of 250 employees across 12 locations. The company emphasizes a blend of technology and human expertise to deliver comprehensive media insights in real time. Technically, the website is built on TYPO3 CMS and integrates modern analytics and tracking tools such as Google Tag Manager, Hotjar, and social media pixels, with a strong focus on user privacy and consent management. Security posture is good with HTTPS enforced and secure forms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a strong business credibility despite missing WHOIS data. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure mechanisms to further strengthen trust and security.

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

ABOUT YOU is a large online fashion retail platform operating in the Czech Republic, offering over 1500 brands with services including free delivery and a 30-day return policy. The website demonstrates a mature e-commerce business model with a strong market position in the regional fashion retail sector. Technically, the site employs modern JavaScript frameworks, integrates advanced consent management via Usercentrics, and uses Datadog for logging and monitoring, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and security best practices, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and no detected vulnerabilities or suspicious content.

20ecolesdechimie.com is the official website of the Fédération Gay-Lussac, a federation of 20 chemistry and process engineering schools in France. The site serves as an informational and promotional platform targeting prospective students, educators, and partners interested in chemistry engineering education. It provides detailed information on admissions, student life, international programs, and federation activities, positioning itself as a key resource in the French higher education sector for chemistry engineering. The federation is well-established, with a domain registered since 2015 and a consistent brand presence. Technically, the website is built on WordPress, utilizing common plugins such as Formidable Forms for contact and newsletter forms, Mailjet for email marketing, and Matomo for analytics. The site employs modern web technologies including lazy loading for images and SVG icons, ensuring good performance and mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags, structured data, and language alternates. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and some recommended security headers, which could be improved. The presence of a cookie consent mechanism and privacy policy indicates GDPR awareness, though no explicit security policy or incident response contact was found. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. It demonstrates a solid digital maturity level with room for security enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns.

AIA7 is a French online community platform dedicated to members of ENSIACET, including students, alumni, teachers, and recruiters. It offers networking, career services, event management, and news updates to foster engagement within the academic and professional community. The platform supports multiple OAuth login providers and integrates social media for broader connectivity. Technically, the site uses modern web technologies such as Vue.js, Google Analytics, Google Maps API, and Leaflet.js, providing a responsive and user-friendly experience. Security is reasonably well implemented with HTTPS and OAuth authentication, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies, including GDPR considerations. The absence of WHOIS data reduces domain trust slightly, but the website content and structure indicate a legitimate and professional organization.

The Heinrich-Böll-Stiftung website represents a well-established German political foundation focused on green politics, ecology, democracy, gender justice, and human rights. The site offers extensive content including dossiers, publications, events, and livestreams, targeting politically engaged audiences and the general public interested in these themes. Technically, the site is built on Drupal 10, hosted on Colt infrastructure, and employs modern web technologies with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent mechanisms for embedded content, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the website is professional, trustworthy, and content-rich, reflecting the foundation's mission and stature.

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants ranging from small businesses to enterprises. The company operates under the parent company Block, Inc., with subsidiaries including Weebly and Afterpay, enhancing its market reach and service offerings. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive service information. Technically, the site leverages modern web technologies such as React and is hosted on AWS, ensuring scalability and performance. Security is robust, with HTTPS enforced, multiple security headers, and compliance with PCI DSS standards. Privacy policies and cookie consent mechanisms are clearly presented, indicating good GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Amorino is a premium artisanal Italian gelato brand offering a wide range of products including gelato flavors, waffles, crepes, hot drinks, gelato macarons, and cakes. The company operates through retail shops and franchises, targeting general consumers and franchise/job seekers. The website is professionally designed using modern web technologies such as Nuxt.js and integrates analytics and consent management tools. Security posture is moderate with no visible security headers and no explicit privacy policy, but the site uses HTTPS and cookie consent mechanisms. WHOIS data is unavailable from the provided raw output, which slightly impacts trust but the overall digital presence is consistent and professional. Recommendations include publishing clear privacy and security policies and enhancing security headers.

The website garden-gourmet.com is currently a parked domain with no active business content or services. The domain is registered since 2019 with InterNetX GmbH and is set to expire in 2026. The site primarily serves as a landing page advertising the domain for sale, containing no privacy policies, contact information, or business details. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes pointing to third-party ad and tracking domains. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site lacks GDPR compliance indicators and does not provide cookie consent mechanisms. Overall, the site has low trustworthiness and poor content quality, reflecting its status as a parked domain rather than an active business website.

Somfy Digital operates a specialized B2B product catalog platform focused on Somfy products, primarily targeting the Polish market. The website provides a structured catalog with product categories and filtering options, supporting business customers in discovering and ordering Somfy smart home and automation products. The platform demonstrates moderate digital maturity with a modern tech stack including Google Tag Manager and Elastic Behavioral Analytics for user tracking and analytics. The website is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information and incident response details are not publicly available, limiting transparency and trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security best practices.

YMAG is a French company specializing in innovative and scalable software solutions designed to simplify and digitalize administrative and operational management for training organizations such as CFA, OFA, and OF. Their key offerings include the ORYZEA SaaS software and the modular ERP YPAREO, targeting complex organizational needs. The website demonstrates a professional digital presence with a focus on education sector clients in France. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot marketing and analytics tools, and a GDPR-compliant cookie consent mechanism. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are missing. The absence of WHOIS data from the AFNIC server is a concern but the website content and branding suggest a legitimate business. Strategic recommendations include adding explicit privacy and security policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

Dendreo is a French SaaS company providing a comprehensive management software solution tailored for professional training centers. The platform covers administrative, commercial, financial, pedagogical, and quality management aspects, including compliance with the Qualiopi certification. The website demonstrates a mature digital presence with detailed product features, client testimonials, and integration of modern web technologies such as Webflow, Google Tag Manager, and HubSpot. The inclusion of an AI assistant and e-learning integrations highlights a focus on innovation and user experience. Security posture is generally good with HTTPS and deferred script loading, but lacks explicit security headers and visible privacy policies. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and client references suggest a legitimate and established business. Overall, the site is professional, well-branded, and targeted at training organizations in France.

Septeo Belgium operates as a specialized technology provider delivering software solutions tailored for legal professionals such as lawyers and notaries. Their offerings focus on simplifying legal practice management through cloud-based, AI-enhanced tools that improve productivity and data security. The website reflects a mature digital presence with modern technologies and compliance with GDPR through clear privacy and cookie policies. Security posture is strong with HTTPS and consent management, though some security headers could be improved. The WHOIS data is restricted, which is common for privacy protection and does not detract from the site's legitimacy given the professional branding and content. Overall, Septeo presents as a credible and established player in the Belgian legal tech market.

Farrows Ltd is a well-established creative marketing and digital agency based in Norwich, UK, with over 40 years of experience. The company holds prestigious trust indicators such as the Royal Warrant, underscoring its market position as a reputable and award-winning agency. Their business model focuses on providing comprehensive creative and digital marketing services to a diverse client base worldwide. The website reflects a professional and consistent brand image, showcasing a strong portfolio and client partnerships. Technically, the site is built on WordPress and leverages modern web technologies including jQuery and Isotope for layout management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data indicate a legitimate, trustworthy business with a strong digital presence.

Proparco is a French development finance institution affiliated with the Agence Française de Développement (AFD) group. It focuses on financing and supporting private sector enterprises and financial institutions across Africa, Asia, Latin America, Eurasia, and the Middle East, aiming to contribute to the Sustainable Development Goals (SDGs). The website presents a professional and comprehensive overview of its mission, services, and impact, targeting businesses, investors, and development stakeholders. The content is rich, well-structured, and available in French and English, reflecting a mature digital presence. Technically, the website is built on Drupal CMS with integration of French government design system DSFR, and uses modern JavaScript libraries and consent management tools. It is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data is noted but likely due to privacy protection common for government-affiliated domains. The site is not blocked by any WAF or security challenge, allowing full content access and analysis.

Expertise France is a French public agency specializing in international technical cooperation, operating as a subsidiary of the Agence française de développement. The agency holds a strong market position as the second largest technical cooperation entity in Europe, delivering projects across governance, security, climate, health, education, and cultural sectors in over 140 countries. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it leverages Drupal CMS, the French government design system (DSFR), and integrates modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and consent mechanisms, though some security headers could be explicitly confirmed. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable, which slightly impacts domain legitimacy assessment.

First Spark Media is a small US-based documentary film production company founded by award-winning director Keegan Kuhn. The company focuses on creating socially conscious, justice-focused documentaries and offers full production consulting services. Their market position is niche but notable due to collaborations with high-profile executive producers and impactful films. Technically, the website is built on Squarespace, leveraging modern web technologies and multimedia content to engage visitors. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is adequate with HTTPS enabled but lacks some best practices such as HSTS and CAPTCHA on forms. Privacy and cookie policies are missing, which impacts compliance. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and social media presence support authenticity. Overall, the site is professional and trustworthy but would benefit from improved security and compliance documentation.

AUM Films & Media is a small non-profit media organization specializing in producing award-winning documentary films focused on social and environmental issues. Their website showcases their films, filmmakers, and educational resources, targeting a general audience interested in impactful media. The organization maintains a professional online presence with consistent branding and active social media channels. Technically, the website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and multimedia content. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data due to privacy protection is common for such organizations but slightly reduces transparency. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and contact transparency.

What The Health is a documentary film project operated by A.U.M. Films and Media, a US-based non-profit organization focused on health, sustainability, and animal rights. The website serves as a platform to distribute the documentary, offer related merchandise, and provide a meal planner service to support plant-based diets. The site is built on Squarespace, leveraging embedded Vimeo videos and standard e-commerce features. Social media integration and tracking tools like Google Analytics and Facebook Pixel are used for marketing and audience engagement. However, the absence of a privacy policy and cookie consent mechanisms indicates compliance gaps. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency but does not necessarily indicate malicious intent given the professional content and social presence. Overall, the website is functional, professionally designed, and moderately secure but would benefit from enhanced privacy compliance and domain registration transparency.

L214 is a French non-profit organization dedicated to animal ethics and welfare, focusing on exposing conditions of animal life, transport, and slaughter through filmed investigations and sourced information. The organization advocates for ethical questions and proposes political and individual solutions. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern web technologies and analytics tools such as Google Tag Manager. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. The WHOIS data is unavailable, which slightly reduces trust but is common for privacy reasons. Overall, the site is trustworthy, content-rich, and serves a general audience interested in animal rights and veganism.

Permacultuur Magazine is a niche Dutch media publication focused on permaculture and sustainable living. It operated as a quarterly print magazine from 2015 to 2023 and now publishes monthly free articles online, supported by a webshop for back issues. The website is built on WordPress using the GeneratePress theme and includes standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile and SEO, with good content relevance for its target audience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible privacy compliance mechanisms. Contact is available via a contact form but no direct emails or phone numbers are published. Overall, the site is legitimate and consistent with a small media business but would benefit from improved privacy and security practices.

The website www.eventscalendar.co offers a feature-rich embeddable events calendar solution designed for integration with multiple platforms such as Shopify, Wix, Webflow, Wordpress, and others. It targets website owners and event organizers seeking to manage and display events seamlessly, with syncing capabilities to popular services like Eventbrite, Zoom, Google Calendar, and Outlook. The business operates as a small SaaS provider within the technology sector, focusing on event management tools. Technically, the site is built on Webflow CMS and leverages modern analytics and tracking technologies including Google Tag Manager, Mixpanel, and FullStory, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with good user experience, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. No direct contact or incident response information is provided, which limits trust and transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

La Tribune is a prominent French economic and financial news media outlet providing comprehensive coverage of economic, financial, and business news both in France and internationally. The website targets French-speaking professionals and the general public interested in economic affairs, offering news, analysis, and exclusive information. The business model is primarily based on media publishing with revenue streams from subscriptions and advertising. The site demonstrates a strong market position as an established media brand in France. Technically, the website is built on modern web technologies including Next.js and React, with integration of advanced consent management tools like Didomi and analytics platforms such as Piano Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website employs HTTPS with strong SSL configurations and security headers, alongside GDPR-compliant consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, La Tribune presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing transparency around security policies and providing clear contact channels for security and privacy concerns to further strengthen trust and compliance.

Le Média is an independent French media outlet focused on providing socially and ecologically engaged news and analysis. It operates on a citizen-funded model, ensuring independence from state or billionaire ownership. The website offers a rich variety of content including articles, investigative reports, podcasts, and video programs, targeting French-speaking audiences interested in alternative media perspectives. Technically, the site uses modern web technologies such as React and privacy-conscious analytics like Matomo, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the active and professional content suggests a legitimate operation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

Maville.com is a well-established French regional news portal founded in 1998, owned by Additi Multimédia and associated with the parent company Ouest-France. It provides localized news, sports, entertainment, restaurant guides, classifieds, and deals across numerous French cities and regions. The website targets residents and visitors seeking local information and lifestyle content. Technically, the site employs a modern JavaScript stack with jQuery, Google Tag Manager, Facebook Pixel, and a GDPR-compliant consent management platform (Didomi). The site is mobile-optimized and uses HTTPS with a good security posture, though DNSSEC is not enabled and some security headers like CSP are missing. Privacy compliance is strong with clear cookie and privacy policies and active consent mechanisms. No direct contact information or security incident response details are published, which is a minor gap. Overall, the site is professional, trustworthy, and serves its audience well.