Medium-risk security reports

Terre Vivante is a French organization focused on promoting organic gardening, permaculture, ecological housing, and healthy cooking. It operates a content-rich website offering advice, books, and a magazine called Les 4 Saisons. The organization targets environmentally conscious individuals and gardeners interested in sustainable living. The website uses WordPress with WooCommerce for e-commerce and integrates multiple marketing and analytics tools to support its business model. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate due to numerous third-party scripts. Security posture is good with HTTPS and captcha protections, but could be improved by adding explicit security headers and publishing a security policy. Privacy compliance is strong with cookie consent and GDPR-aligned policies. The absence of WHOIS registration data reduces domain trust slightly, but overall the site appears legitimate and professional.

Nature et Progrès is a well-established French non-profit association founded in 1964, dedicated to promoting agroecology and organic production through a participatory guarantee system. The website serves as an informational and community platform for producers, consumers, and local groups involved in sustainable agriculture and related sectors. The organization holds a credible market position within the organic certification space in France, supported by a domain registered since 2002 with a reputable registrar, OVH sas. Technically, the website is built on the YesWiki CMS platform, leveraging Bootstrap, jQuery, and Vue.js for a responsive and modern user experience. Hosting is provided by OVH, a known hosting provider. The site demonstrates good mobile optimization and accessibility, though SEO and privacy compliance could be improved. No major performance issues were detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. The absence of privacy and cookie policies indicates a gap in compliance with GDPR and related regulations. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

Incroyables Comestibles France is a French non-profit association dedicated to promoting urban shared gardens and participative agriculture to foster local, sustainable, and solidarity-based food systems. The organization acts as a national coordinator for local gardening groups, providing resources, organizing events, and encouraging community engagement. Their website reflects a strong community focus with testimonials, event announcements, and resource links. Technically, the site is built on modern frameworks such as Next.js and React, with WordPress used for blog content, and integrates Google Analytics for visitor insights. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and modern security headers in place, though the absence of a cookie consent mechanism and lack of visible incident response or vulnerability disclosure policies are areas for improvement. The domain WHOIS data is missing, which reduces trustworthiness and suggests the need for verification of domain registration status. Overall, the website is professional, trustworthy, and serves its community well but could enhance privacy compliance and transparency.

Brin de paille is a small French blog and community platform focused on ecology, permaculture, and sustainable living. The website provides articles, project sharing, and suggestions aimed at a general audience interested in sustainable practices. The site is built on WordPress and hosted by OVH sas, with a modern technical stack and good mobile optimization. However, it lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Social media presence is established on Facebook, Instagram, and Twitter/X, enhancing community engagement. Overall, the site is professional and trustworthy for its niche but should improve privacy and security practices.

The website reseau-amap.org serves as a national directory and informational resource for AMAPs (Associations pour le maintien d'une agriculture paysanne) in France. It aims to promote sustainable and organic farming by connecting consumers directly with farmers. The site provides educational content, a directory of AMAPs, and guidance on creating new associations. The business model is non-profit and community-focused, targeting consumers and farmers interested in local agriculture. The website is modest in scale and has been operational since 2007, indicating a stable presence in its niche. Technically, the site uses basic web technologies including JavaScript and CSS, with Google Analytics for visitor tracking. Hosting is provided by Infomaniak, a known European hosting provider. The site lacks modern CMS indicators and shows basic mobile optimization and accessibility. SEO practices are minimal but functional. No advanced frameworks or platforms are detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance concern especially under GDPR. The use of Google Analytics without a consent mechanism further impacts privacy compliance. No incident response or security policies are published. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the non-commercial, informational nature of the site and absence of sensitive data collection. However, compliance gaps and missing security headers should be addressed to enhance trust and legal adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility features.

Citoy’enR is a French cooperative (SCIC) focused on developing renewable energy production means, primarily photovoltaic solar panels, within the Toulouse urban area. The cooperative model emphasizes citizen participation, social economy values, and ecological responsibility. The business model involves collective citizen investment to finance installations, with electricity sold at guaranteed tariffs to fund new projects, educational initiatives, and member remuneration. The website presents a professional and consistent brand image, targeting local citizens and stakeholders interested in sustainable energy solutions.

Resilience.org is a non-profit program under the Post Carbon Institute focused on supporting community resilience in response to ecological and social challenges. The website offers editorial content, podcasts, events, and subscription-based deep dives to educate and engage its audience. The organization positions itself as a thought leader in sustainability and resilience, targeting a general audience interested in these topics. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy transparency and WHOIS data availability for improved domain trust.

ECOLISE is a European non-profit network dedicated to empowering community-led initiatives focused on climate change and sustainability. The organization provides participatory advocacy, funding through the Regenerative Communities Fund, project support, and a variety of resources including publications and activity reports. Their target audience includes communities and stakeholders engaged in environmental sustainability across Europe. The website positions ECOLISE as a key network in the European sustainability ecosystem, emphasizing collaboration and community empowerment. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO, Events Calendar Pro, and Groundhogg for marketing automation. The site is well-structured with good SEO practices, mobile optimization, and accessibility features. Google Analytics is used with consent mode configured to deny personalization and storage in certain regions, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements consent mechanisms for cookies. However, no explicit security headers were detected, and there is a lack of published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent and trustworthy, with no privacy protection masking registrant details. Overall, ECOLISE's website demonstrates a solid digital presence with good business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and terms of service policies, add security policy information, and consider a vulnerability disclosure mechanism. These steps will strengthen the site's privacy compliance and security posture, supporting its mission to empower communities for a sustainable future.

Rob Hopkins' website serves as a professional platform for his work as an author and advocate for sustainability and collective imagination. The site offers rich content including blog posts, podcasts, videos, and information about his books and trainings, targeting individuals interested in environmental and community-driven change. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and CleanTalk for anti-spam, and integrates Google Analytics and Jetpack for analytics and performance monitoring. The site is well-structured, mobile-optimized, and accessible, providing a positive user experience. Security-wise, the site enforces HTTPS and uses anti-spam measures but lacks some security headers and formal policies such as privacy and cookie notices, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active content of the site.

The website push-sdk.com currently presents an extremely minimal online presence, consisting solely of a page title and a timestamp. There is no substantive content describing the business, its services, or its market positioning. The domain is relatively new, registered in late 2022, and uses Cloudflare DNS services. The lack of metadata, structured data, or contact information suggests the site is either under development or abandoned. Technically, the site lacks HTTPS and security headers, which are critical for secure communications and user trust. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the website's security posture is weak, with no visible best practices implemented. The minimal content and lack of business information limit the ability to assess the company's credibility or market position. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and business information, and improving content quality to enhance trust and compliance.

Octopuce is a French technology company founded in 1999 specializing in custom server hosting and managed IT services since 2005. The company emphasizes high-quality service, security, and direct client engagement, managing Debian Linux infrastructures with a devops approach. Their service model includes contractual SLAs with 24/7 support and a commitment to free software and data protection values. Technically, the website is built on WordPress with the Divi theme and uses jQuery, reflecting a modern but standard web technology stack. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit policies. The absence of WHOIS data limits domain trust assessment, but the website content and business presentation are professional and consistent with a legitimate small technology service provider.

GoGoCarto is a French technology platform specializing in participatory mapping, enabling users to create and share community-driven map projects. The platform hosts thousands of projects, indicating a vibrant user base and active community engagement. The website is well-branded, consistent, and provides open source code and documentation links, reflecting transparency and openness. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics for privacy-conscious user tracking. The hosting is provided by Colibris outils libres, a known free software hosting provider, which aligns with the platform's open source ethos. Security posture is moderate with HTTPS enforced and sandboxed iframes, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Business credibility is supported by domain age, consistent WHOIS data, and active project hosting. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

Cairn.info is a leading digital publishing platform specializing in humanities and social sciences publications, primarily serving French-speaking researchers, academics, and institutions. The platform offers access to a wide range of academic journals, books, magazines, and dossiers, positioning itself as a key resource in its sector. The website is professionally designed, mobile-optimized, and provides advanced search and thematic browsing capabilities, enhancing user experience and accessibility. Technically, the site employs modern web technologies including Alpine.js and Laravel Livewire, with bot protection via Datadome and progressive loading indicators. The infrastructure supports a responsive and accessible user interface with good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes standard security headers, and protects user input forms with CSRF tokens. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policies and incident response contacts are not published. Overall, Cairn.info demonstrates a mature digital presence with strong content quality and security posture. The lack of public WHOIS data is consistent with privacy regulations and does not detract from the platform's legitimacy. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

The Association Française de Science Politique (AFSP) operates as a prominent non-profit academic association dedicated to political science in France. The website serves as a comprehensive portal offering information on congresses, research groups, professional activities, and resources for political science scholars and practitioners. The organization maintains a strong market position within the French academic community, providing key services such as event organization, publications, and professional networking. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating modern web technologies including Google Tag Manager and social media embeds. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which is justifiable for this type of non-profit entity. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, the AFSP website is a credible and professionally maintained platform with room for improvement in privacy transparency and security hardening to enhance trust and compliance.

SeenThis.net is a niche social blogging platform in beta phase, offering short-blogging without text limits, content curation, forums, and automatic thematisation. The platform targets general internet users interested in social media and content sharing. Technically, it uses the SPIP CMS with JavaScript libraries such as jQuery and Photoswipe, hosted by Infomaniak Network SA. The website is moderately optimized for mobile and performance, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and stable with a domain age consistent with its business history.

Élabore is a French cooperative specializing in the integration and deployment of open-source ERP and CRM solutions, primarily based on Odoo, targeting associations, small and medium enterprises, and organizations within the social, ecological, and cultural sectors. Their business model emphasizes digital transition with open-source tools, offering a suite of software, training modules, and maintenance services. The company holds a Qualiopi certification for its training activities, reinforcing its credibility in the education sector. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Security-wise, the site uses HTTPS with valid SSL certificates and includes CSRF tokens, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. The security posture is adequate but could be improved by implementing DNSSEC, security headers, and publishing formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Analytics are conducted via Plausible.io, a privacy-focused service, indicating moderate user tracking. Overall, Élabore presents a trustworthy and professional online presence consistent with its cooperative and open-source ethos. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

American Legal Publishing is a well-established company specializing in codification services for municipalities and local governments, with over 90 years of experience. Their website reflects a professional and trustworthy business with a clear focus on legal publishing and related services. The company is positioned as a trusted partner in the government sector, supported by its affiliation with the International Code Council. Technically, the website is built on modern web technologies including Webflow CMS, GSAP animations, and integrates analytics tools such as Google Tag Manager and Metricool. The site is fast, mobile-optimized, and accessible, providing a positive user experience. Security posture is generally good with HTTPS enforced and domain registration consistent with a legitimate business; however, some improvements are needed such as enabling DNSSEC and fixing the disabled reCAPTCHA on the contact form. Privacy compliance is basic, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is professional and credible but could enhance its security and privacy transparency to better align with best practices.

Dorik, Inc. operates an AI-powered website building platform designed to enable users without design or coding experience to create professional websites quickly and affordably. Positioned as a flexible and user-friendly SaaS solution, Dorik targets individuals and businesses seeking efficient website creation tools. The company was founded in 2020 and maintains a professional online presence with consistent branding and active social media channels. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Mixpanel, Microsoft Clarity, Facebook Pixel, and ProfitWell, indicating a mature digital infrastructure. Hosting and domain management are handled via Cloudflare, ensuring reliable performance and security. Security posture is generally good with HTTPS enabled and domain transfer protections in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is currently weak due to missing privacy and cookie policies, which poses a risk for GDPR and other regulations. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website cmsfly.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare error 525 page being displayed. This prevents any meaningful content or business information from being accessed or analyzed. The site lacks visible privacy policies, contact information, or any business-related content. Technically, the site is protected by Cloudflare but suffers from misconfigured SSL on the origin server, which critically impacts availability and trustworthiness. Security posture is weak due to this misconfiguration, and no compliance or incident response information is available. Overall, the site is not operational from a user perspective, and its digital maturity is very low.

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The website serves as a hub for educational resources, campaigns, and community engagement, targeting a general audience interested in social and environmental issues. Ritimo maintains a consistent brand presence and offers multiple channels for user interaction, including social media and contact forms. Technically, the site is built on the SPIP CMS platform, employs Matomo analytics for privacy-conscious tracking, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present, indicating room for improvement in privacy compliance. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations but slightly reduces trust scoring. Overall, Ritimo presents a professional, trustworthy, and content-rich platform with moderate technical sophistication and a strong focus on its mission.

Citego is a small non-profit platform established in 2015, focused on providing resources and tools related to cities, territories, and governance with an emphasis on sustainable societal transitions. The website offers a document library, relational atlas, and distance learning opportunities (MOOCs), targeting researchers, policymakers, and territorial actors. The platform is supported by donations and participates in the Coredem network, reinforcing its community and resource-sharing approach. Technically, the website is built on the SPIP CMS with a tech stack including jQuery and Mediabox for media display. It uses HTTPS with a good SSL configuration and is hosted via Gandi SAS. The site performance is moderate with good mobile optimization and basic accessibility features. Analytics are implemented using Piwik/Matomo, but no cookie consent mechanism is present, which is a privacy compliance gap. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No incident response or vulnerability disclosure policies are published, and no contact emails or phone numbers are openly listed, relying instead on contact forms. The WHOIS data is consistent and transparent, supporting the site's legitimacy. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance, improved security headers, and explicit security policies to strengthen its security posture and user trust.

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The organization operates a network of 75 locations to inform and engage the public. Their services include information dissemination, documentation resources, advocacy campaigns, and educational training. The website is well-structured, professionally designed, and targets a general audience interested in social and environmental issues. Technically, the site uses the SPIP CMS platform and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled, though some security headers are missing and no explicit cookie consent mechanism is present. WHOIS data is unavailable, which slightly reduces domain trust but does not detract significantly from the legitimacy of the organization given their clear contact information and social media presence. Overall, the site is trustworthy, safe, and professionally maintained.

Fenopix is a small technology company specializing in providing an HTML5 and JavaScript charting library called CanvasJS. The website positions itself as a niche provider of responsive, high-performance charting solutions suitable for developers and businesses requiring interactive data visualization. The business model revolves around software product offerings, with additional promotion of a Twitter extension called HashPlug. The site demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Bootstrap framework, and integrating Google Analytics and social media for marketing. The technical infrastructure is stable with Cloudflare DNS and GoDaddy domain registration, but lacks advanced security configurations such as DNSSEC and security headers. Security posture is basic with HTTPS enabled but missing explicit security policies or incident response information. Overall, the website is professional and safe, but lacks comprehensive privacy and cookie policies, which impacts compliance. Strategic improvements in security and privacy transparency are recommended to enhance trust and compliance.

OnlineStar is a Czech-based technology company offering a suite of AI-powered digital marketing tools designed to enhance local SEO, reputation management, social media management, and website development. Launched in 2021 as a new brand under the experienced Mediatel group, OnlineStar targets small and medium businesses seeking to automate and optimize their marketing efforts through innovative AI solutions. Their platform includes AI chat assistants, local data management, review monitoring, social media content planning, and comprehensive reporting tools. The company maintains a professional web presence with consistent branding and active social media engagement.

Divadlo bez zábradlí is a Czech theatre company with a website that provides information about its theatrical performances and cultural events. The domain is well-established since 2001, indicating a stable presence in the local cultural scene. The website design is professional and user-friendly, optimized for mobile devices, and includes a cookie consent mechanism, reflecting some level of privacy awareness. However, the absence of a privacy policy, terms of service, and explicit contact information limits the site's compliance and user trust. Technically, the site uses modern web standards and Mapbox for map integration but lacks advanced security headers and detailed security policies. Overall, the security posture is moderate but could be improved with better security practices and transparency. The site content is safe for general audiences with no adult or questionable material detected.

Igor Mikula Photography is a small-scale professional photography business specializing in wildlife and nature photography. The website serves as a portfolio showcasing galleries and films related to the photographer's work. The business targets photography enthusiasts and nature lovers, offering visual art products and services. The market position is niche, focusing on artistic and nature photography rather than commercial mass-market offerings. Technically, the website is built on WordPress using the Vantage theme and common plugins such as Contact Form 7 and SiteOrigin Panels. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy compliance documentation. No WHOIS data is available for the domain, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but minimal in content and security best practices, with room for improvement in privacy, contact transparency, and security hardening.

Kulturní centrum Labuť is a local cultural center based in Říčany, Czech Republic, offering a variety of cultural events, courses, and ticket sales. The website serves as an official portal for event information, ticket purchasing, and community engagement. It targets local residents and visitors interested in cultural activities. The business model revolves around event hosting, ticket sales, and community cultural promotion, positioning itself as a key local cultural institution with several partnerships and sponsors.

Orbisius is a small technology company specializing in WordPress development services, custom plugin development, and SaaS applications. The website positions itself as a niche provider targeting WordPress users and businesses seeking tailored digital solutions. The business has been established since 2012, with a consistent domain registration and a professional online presence. Technically, the website is built on WordPress CMS using popular plugins and themes, integrating Google APIs and live chat for user engagement. SEO optimization is evident through the use of Yoast SEO and structured data. However, the website lacks explicit privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. The domain is registered transparently without privacy protection, indicating legitimacy. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security posture.

Vorwerk is a well-established manufacturing company specializing in household appliances, notably the Thermomix and Kobold brands. The website www.vorwerk.com functions primarily as a country selector landing page, directing users to localized versions of Vorwerk and Thermomix websites across multiple countries. This indicates a global market presence and a business model focused on direct sales and regional customer engagement. The website's content is minimal, focusing on navigation rather than detailed product or corporate information. From a technical perspective, the site uses standard web technologies such as HTML5, CSS3, and JavaScript, but lacks advanced frameworks or CMS indicators. The performance and mobile optimization are basic, with no detected analytics or tracking scripts in the provided content. Security features such as HTTPS enforcement, security headers, and privacy policies are not evident in the analyzed content, which suggests room for improvement in digital maturity and compliance. Security posture evaluation reveals a lack of visible security headers and no SSL configuration details, which are critical for protecting user data and ensuring trust. The absence of privacy and cookie policies further highlights compliance gaps, particularly concerning GDPR and other data protection regulations. The WHOIS data for the domain is unavailable or protected, which is common for large enterprises but reduces transparency and trustworthiness from a domain registration perspective. Overall, the website presents a moderate risk profile primarily due to limited security and privacy disclosures. Strategic recommendations include implementing robust HTTPS configurations, adding comprehensive privacy and cookie policies, enhancing security headers, and improving transparency around domain registration. These steps will strengthen trust, compliance, and security posture, aligning the digital presence with the company's global brand stature.

The website tmecosys.com currently presents only a minimal 404 default backend page, indicating that the site content is inaccessible or missing. There is no visible business information, metadata, or structured data to analyze. The domain is registered since 2013 with a reputable registrar and hosted on AWS infrastructure, but the lack of accessible content severely limits the ability to assess the company's business model, services, or market position. Technically, the site lacks HTTPS enforcement, security headers, and DNSSEC, which are critical for a secure web presence. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the site is not currently functional or professionally maintained, resulting in a low trust and security posture.

The website www.bescheinigung-forschungszulage.de serves as the official digital platform for the Bescheinigungsstelle Forschungszulage (BSFZ), a German government entity responsible for certifying research and development projects eligible for tax incentives under the Forschungszulagengesetz. It targets companies with tax residence in Germany engaged in R&D activities, providing them with information, application procedures, and digital access to submit certification requests. The site is well-branded with official logos and links to the Bundesministerium für Bildung und Forschung (BMBF), reinforcing its authoritative position. Technically, the website is built on TYPO3 CMS, hosted on German infrastructure (SGX Leipzig), and employs modern web standards with responsive design and accessibility considerations. The site lacks advanced tracking or advertising technologies, focusing on privacy and minimal data collection. However, no explicit cookie consent mechanism was detected despite anonymized data collection disclosures. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data aligns with the website's official nature, showing consistent domain registration and hosting details. Overall, the website demonstrates a solid business credibility and technical foundation suitable for its government service role. Strategic improvements include implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to enhance trust and compliance.

Produktbewertungen.org is a German-based product review aggregation platform operated by Trustami GmbH. It consolidates over 10 million product reviews from various e-commerce and marketplace websites, providing consumers with a comprehensive overview and unified rating to facilitate informed purchasing decisions. The platform targets online shoppers seeking to save time by accessing all relevant product feedback in one place. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics with IP anonymization, and uses a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and presents a professional, consistent brand experience aligned with Trustami's corporate identity. Security-wise, the site enforces HTTPS and anonymizes analytics data but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data limits domain trust verification, though the presence of company contact details and social media links supports legitimacy. Overall, the website demonstrates a solid digital maturity level with room for improvement in security transparency and WHOIS data availability.

Srovnejto.cz operates as an online energy price comparison platform primarily targeting consumers in the Czech Republic. The website facilitates comparison of electricity and gas tariffs, helping users find competitive energy prices. The business model likely revolves around affiliate partnerships or lead generation within the energy sector. The site presents a professional and consistent brand image with good content quality and user experience.

Pujcky.cz is a Czech Republic-based loan comparison platform operated by Elephant Orchestra, a.s. The website aggregates loan offers from various bank and non-bank lenders, providing consumers with an easy way to compare and apply for loans. The platform leverages affiliate partnerships to redirect users to loan providers, facilitating lead generation. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, though lacks visible security headers and comprehensive privacy documentation. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and partner links. Strategic improvements include publishing clear privacy and terms policies, enhancing security headers, and adding vulnerability disclosure mechanisms.

Úspory.cz is a Czech financial comparison portal operated by Elephant Orchestra s.r.o., part of the Srovnejto.cz group. The website offers comprehensive comparison services for loans, insurance, mortgages, energy providers, and mobile tariffs, targeting Czech consumers seeking to save money and time. The platform is well-established with over 1.5 million households served since 2010, indicating a strong market presence. Technically, the site uses a modern JavaScript stack with analytics and marketing tools integrated, including Google Analytics, Facebook Pixel, Hotjar, and Inspectlet, all managed with user consent mechanisms. Security is robust with HTTPS and 256-bit SSL encryption, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant. However, WHOIS data is unavailable, limiting domain registration trust verification. Overall, the site is professional, trustworthy, and safe for general audiences.

The website www.toffifee.com represents the Toffifee confectionery brand, part of the Storck group. It provides product information, brand history, and country-specific site links targeting a general family audience. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy despite the professional appearance and brand association. Security posture is good with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response contacts. Overall, the site is trustworthy and well-maintained but would benefit from improved transparency in domain registration and security disclosures.

Bendicks is a well-established British chocolatier specializing in premium dark mint chocolates with a heritage spanning over 90 years. The company holds a Royal Warrant by appointment to King Charles III, underscoring its reputation for quality. The website serves as a brand and product showcase, targeting consumers seeking luxury chocolate gifts and after-dinner treats. The business model focuses on retail distribution through national retailers and online presence. Technically, the website is built on WordPress with UKit framework and uses standard web technologies including jQuery and lazy loading for images. The site is mobile optimized and SEO friendly, though some libraries like jQuery are outdated. Performance is moderate with good mobile responsiveness and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Contact information is limited to forms without explicit emails or phone numbers. Overall, the website presents a low risk profile with strong business credibility and good privacy practices. Recommendations include updating JavaScript libraries, adding security headers, and publishing security and incident response policies to enhance trust and compliance.

STORCK SVERIGE AB operates as the Swedish branch of the global confectionery manufacturer August Storck KG, offering well-known brands such as Werther's Original, Toffifee, and Riesen. The website serves as a corporate and brand information portal targeting Swedish consumers and business partners, providing product information, company news, and career opportunities. The site is professionally designed, localized in Swedish, and integrates modern web technologies including TYPO3 CMS and JavaScript libraries for enhanced user experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR requirements. Security posture is generally strong with HTTPS enforced, though explicit security headers and incident response contacts are not evident. The WHOIS data for the subdomain www.storck.se is unavailable, likely due to it being a subdomain rather than a registered domain, but the overall brand legitimacy is supported by consistent branding and related domains. Recommendations include enhancing security headers, providing clearer security contact information, and auditing third-party scripts for vulnerabilities.

Werther's Original is a well-established confectionery brand specializing in caramel products such as bonbons, soft toffees, caramel popcorn, and sugar-free variants. The website reflects a mature digital presence with a focus on product variety and brand heritage, targeting general consumers interested in quality caramel confectionery. The site is part of the larger Storck group, a recognized player in the retail confectionery sector. Technically, the website is built on TYPO3 CMS and uses modern JavaScript frameworks, ensuring a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given the brand's reputation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and contact information transparency.

merci is a European chocolate brand marketed in the United States by Storck. The website serves as a brand and e-commerce platform offering a variety of chocolate products including personalized chocolate covers. The brand positions itself as a premium gift option for heartfelt moments of appreciation. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS and modern JavaScript libraries, with integration of SmartCart for e-commerce functionality. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the strong brand presence and consistent content. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

The website www.merci.sk is the official Slovak regional site for the merci chocolate brand, operated under the parent company August Storck KG. It serves as a product showcase and marketing platform offering detailed product information, personalized chocolate creation options, and downloadable content such as ringtones and wallpapers. The site targets general consumers in Slovakia interested in confectionery products. Technically, the site is built on TYPO3 CMS with a modern JavaScript stack including RequireJS and Piwik PRO for analytics. The site is mobile optimized with good navigation and professional design, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Privacy compliance is supported by a clear privacy policy and cookie banner consistent with GDPR requirements. Overall, the site is trustworthy and professionally maintained with no signs of suspicious or adult content.

Knoppers is a well-established confectionery brand specializing in breakfast bars and wafers, operating under the parent company Storck. The website serves primarily as a brand marketing and product information platform targeting general consumers in Slovakia and surrounding regions. It features a modern design with good navigation and multimedia content to engage visitors. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Piwik analytics, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, but lacks some advanced security disclosures and terms of service documentation.

The website www.edarling.cz is currently inaccessible due to a bot protection mechanism implemented via captcha-delivery.com, which blocks direct access to the content. The lack of WHOIS registration data further complicates trust and legitimacy assessments. The site appears to be related to dating services, but no business or contact information is available to confirm this. The technical infrastructure is minimal, with no visible CMS, security headers, or privacy policies, indicating a low level of digital maturity and security posture. Overall, the site presents significant risks due to its inaccessibility, lack of transparency, and missing compliance documentation.

CloudMagic is a specialized consultancy focused on delivering Google Cloud Platform solutions including cloud migration, data analytics, AI/ML, DevOps automation, security, and cost optimization. The company positions itself as a Google Cloud Premier Partner with multiple professional certifications and a strong track record of client satisfaction and project delivery. The website reflects a mature business with a professional and modern digital presence, optimized for performance and mobile use. Security posture is good with HTTPS and Cloudflare DNS, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the risk is moderate with recommendations to improve compliance and security transparency.

Plná Peněženka is a leading cashback portal based in the Czech Republic, offering users cashback rewards, discounts, and coupons from over 1100 partner shops domestically and internationally. The platform boasts over one million registered users and has paid out more than 246 million CZK in cashback, positioning itself as the largest cashback service in the Czech market. The business model revolves around affiliate partnerships, sharing commissions with users to incentivize online shopping through their platform. Technically, the website employs modern JavaScript libraries and OAuth integrations for social logins, ensuring a seamless user experience across web and mobile platforms. Security measures include HTTPS enforcement, use of Google reCAPTCHA, and cookie consent mechanisms, although explicit security headers could be further verified. The absence of WHOIS data limits domain registration trust verification, but the professional site presence and comprehensive policies indicate a legitimate and mature operation.

Superprof is a leading French online platform that connects students with private tutors across a wide range of subjects, offering both in-person and online lessons. The website is professionally designed, mobile-optimized, and provides comprehensive content including tutor profiles, reviews, and educational resources. The platform targets learners in France and positions itself as a major player in the private tutoring market. Technically, the website employs modern web technologies such as Vue.js, integrates multiple analytics and advertising tools including TikTok Analytics, Bing Ads, and Google Tag Manager, and uses security measures like HTTPS and Google reCAPTCHA to protect against bots. The site demonstrates good SEO and accessibility practices, ensuring a positive user experience. From a security perspective, the site has a solid posture with appropriate security headers and encrypted connections. However, it lacks explicit security policies and incident response contact information, which could be improved to enhance transparency and trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the professional web presence and social media links support its credibility. Overall, Superprof presents a trustworthy and well-maintained educational service platform with room for improvement in security transparency and domain registration visibility.

Srovnejto.cz is a Czech-based online comparison platform specializing in insurance, energy, and loan products. It serves consumers in the Czech Republic by providing a user-friendly interface to compare financial and utility offerings, helping users make informed decisions. The website demonstrates a professional design and clear service focus, positioning itself as a significant player in the local comparison market. Technically, the site leverages modern frontend technologies such as Nuxt.js and Font Awesome, ensuring a responsive and visually appealing user experience. However, performance is moderate and could benefit from optimization. Security posture is average; while HTTPS is presumably enabled, no explicit security headers or policies are detected, and privacy compliance is weak due to missing privacy and cookie policies. The absence of WHOIS data limits domain legitimacy assessment, but the website's professional appearance and content relevance suggest a legitimate business. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

The domain eoit.cz is registered since 2015 and hosted on Amazon AWS infrastructure, but the website is currently inaccessible beyond a standard HTTP 404 Not Found error page. There is no visible content, metadata, or business information available on the site. This lack of content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site does not provide evidence of modern web technologies, security headers, or privacy compliance mechanisms. The absence of HTTPS information and security policies indicates a weak security posture. Overall, the website is non-functional and does not present any trust or credibility signals, resulting in a very low AI score and high risk from a security and compliance perspective.

Zoan is a French communication agency founded in 2007, specializing in graphic design, advertising, and web services. The agency serves a regional clientele including SMEs, industrial companies, associations, and local authorities primarily in the Loire-Atlantique and Ille-et-Vilaine regions. Their business model focuses on providing strategic communication consulting and creative production services such as branding, website creation, and video content. The company maintains a professional online presence with consistent branding and a clear market position as a local creative partner. Technically, the website is built on WordPress with Yoast SEO and Matomo analytics configured for privacy. The site is well-optimized for mobile and SEO, with fast loading times and modern web technologies including GSAP for animations. Hosting is provided by OVH, a reputable provider, and the domain is long-established, supporting credibility. From a security perspective, the site uses HTTPS and privacy-conscious analytics settings but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response information, which represents an area for improvement. No vulnerabilities or suspicious indicators were detected in the content or WHOIS data. Overall, Zoan presents a trustworthy and professional digital footprint with strong business credibility and good technical implementation. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and compliance.

The website www.annabrandejs.cz operates as a professional e-commerce platform specializing in cosmetic and health products, particularly focused on anti-aging, skincare, and hair care solutions. The business has a strong market presence in the Czech Republic with over two decades of experience, positioning itself as a trusted distributor of multiple well-known brands. The site offers a comprehensive product catalog, customer support via online chat, and clear contact information, enhancing customer trust and engagement. Technically, the website is built using modern web technologies including React and Google Tag Manager, with good mobile optimization and SEO practices. The site enforces HTTPS and includes cookie consent mechanisms, reflecting a good level of privacy compliance. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces the domain trustworthiness score, but the professional presentation and verified customer reviews mitigate some concerns. Overall, the website demonstrates a solid security and privacy foundation suitable for its business model. Strategically, the company should focus on enhancing transparency by publishing explicit security policies and incident response procedures, improving WHOIS data availability, and implementing additional security headers. These steps will strengthen customer confidence and regulatory compliance, supporting sustainable growth in the competitive e-commerce cosmetics market.