Medium-risk security reports

Les AgroToulousains is a French non-profit association serving as a network for students and alumni of ENSAT. The website provides access to community events, career services, publications, and membership management. The organization positions itself as a niche educational and professional network with a strong community focus. Technically, the site uses a modern JavaScript stack with jQuery, Bootstrap, and various UI libraries, hosted by OVH sas. Security measures include HTTPS, CSRF tokens, and hCaptcha for form protection, alongside cookie consent management compliant with GDPR. The site is well-structured, mobile-optimized, and integrates social media channels effectively. No critical security vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the business profile, supporting legitimacy. Overall, the website demonstrates good digital maturity and trustworthiness for its target audience.

Agri Sud-Ouest Innovation is a regional innovation cluster based in France, focused on fostering agricultural innovation through networking, training, funding, and project acceleration. The organization supports startups, SMEs, research labs, and local authorities in the agricultural sector. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted under a reputable registrar OVH with DNS managed by Cloudflare. Security posture is good with HTTPS enabled and domain protection statuses, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong, featuring a detailed cookie consent mechanism and privacy policy in French. No critical security issues or blocking mechanisms were detected, allowing full content accessibility.

Midisup is a French educational organization specializing in higher education through alternance (work-study) contracts. Established since 2006, it offers a broad catalog of 93 training programs across 20 member institutions in the Occitanie region. The website targets students seeking apprenticeship or professionalization contracts and companies interested in hiring alternants. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted by OVH. It employs HTTPS and Google reCAPTCHA for security but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie notice and a quality policy page but no explicit GDPR or incident response policies. Overall, the site is professional, well-branded, and trustworthy, with good content quality and user experience.

L’Ecole Nationale Supérieure Agronomique de Toulouse (AgroToulouse) is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. The institution serves a diverse audience including students, apprentices, partner companies, and international students. It holds recognized certifications such as CTI, ISO 9001, and EUR-ACE, reinforcing its market position as a quality educational provider. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the Ametys CMS platform, leveraging common frontend libraries like jQuery, Bootstrap, and Owl Carousel. It demonstrates good mobile optimization and moderate performance. The site employs HTTPS with excellent SSL configuration and integrates a cookie consent mechanism compliant with GDPR using tarteaucitron.js. Analytics are handled via Matomo, indicating a moderate level of user tracking with privacy considerations. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data aligns well with the website’s claims, confirming legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable digital presence for AgroToulouse. Strategic improvements in security transparency and accessibility could further strengthen its position.

InfluenceWP is a recently established platform (founded in 2024) dedicated to helping WordPress product creators boost their presence and reach more customers. The platform differentiates itself by offering trusted, exclusive, and non-affiliated deals and giveaways, focusing on genuine relationships rather than affiliate commissions. Its target audience includes WordPress product creators, agencies, freelancers, DIYers, and consumers seeking reliable WordPress resources. The business model centers on providing value through free partner memberships and consumer memberships, supported by marketing services such as YouTube exposure and viral giveaway campaigns. Technically, the website is built on WordPress using Elementor and WooCommerce, leveraging modern web technologies including jQuery and Vue.js. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. From a security perspective, the site employs HTTPS with a strong SSL configuration and benefits from Cloudflare's CDN and DNS services. However, it lacks DNSSEC and some recommended security headers. No explicit security or incident response policies are published, and there is no cookie consent mechanism despite GDPR compliance indications. The WHOIS data is consistent with the business claims, showing a new domain registered publicly without privacy protection, appropriate for a startup. Overall, InfluenceWP presents a professional, trustworthy, and well-structured platform with a clear niche focus. Strategic improvements in security policies, cookie consent, and DNS security would enhance its compliance and trustworthiness further.

WP channel is a specialized business focused on providing expert services and content related to WordPress and WooCommerce platforms. Established in 2009 and based in France, it targets WordPress users, developers, and businesses seeking professional guidance and solutions. The website presents a professional design with good content relevance and user experience, catering well to its niche audience. Technically, the site is built on WordPress CMS, hosted by Scaleway SAS, and uses Cloudflare DNS services, indicating a modern and reliable infrastructure. Performance and mobile optimization are adequate, though there is room for improvement in accessibility and SEO features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is legitimate and trustworthy but would benefit from improvements in privacy compliance and security best practices.

Media Experience is a niche educational website focused on teaching technology enthusiasts how to build and automate smart homes and home media systems. The site offers comprehensive guides, tutorials, and free courses primarily targeting smart home builders and HTPC enthusiasts. The business operates as a content resource with a long-established domain since 2003, positioning itself as a trusted source in the smart home technology niche. Technically, the website is built on WordPress using the Genesis Framework, optimized with SEO plugins like Yoast, and hosted on WPEngine. It employs Google Analytics for user tracking and enforces HTTPS for secure connections. However, it lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. The absence of direct contact information and security policies suggests limited transparency in incident response and security governance. Overall, the website is professional, content-rich, and technically sound but could enhance its security and privacy compliance to strengthen trust and regulatory adherence.

Streacom is a UK-based company specializing in the design and manufacture of premium fanless PC cases and silent computing solutions. Established in 2010, the company has positioned itself as a niche leader in the technology sector, focusing on high-quality aluminium PC cases, compact mini PC cases, and fanless power supplies. Their target audience includes PC enthusiasts and professionals seeking silent and efficient computing hardware. The website reflects a professional and consistent brand image with clear business information and contact channels. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for insights. Security posture is solid with HTTPS enforcement and standard security headers, though there is room for improvement in DNS security and formal security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence with good content quality and user experience.

Flirc Inc. is a small US-based technology company specializing in media center accessories and Raspberry Pi cases, operating an e-commerce store on Shopify. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms consistent with GDPR compliance. Security posture is good with HTTPS enforced and domain transfer protections, though some HTTP security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a trustworthy and professional front for a niche technology retailer.

Sportega.cz is a Czech Republic-based e-commerce platform specializing in the retail of sports equipment and accessories. The website offers a wide range of products across multiple sports categories including hockey, tennis, cycling, badminton, inline skating, outdoor activities, and fitness. It targets sports enthusiasts and customers primarily in the Czech market, providing a comprehensive online shopping experience with product advice and brand variety. The business model is focused on online retail with a medium-sized market presence and consistent branding across multiple country-specific domains.

The website www.futuregen.cz is hosted on the Wix platform and appears to be a small business or personal site with minimal visible content. The lack of WHOIS data and absence of privacy, cookie, or terms of service policies limit the ability to fully assess the business legitimacy and compliance posture. Technically, the site uses standard Wix scripts and polyfills, indicating a modern but basic technical infrastructure. Security posture is weak due to missing security headers and lack of explicit security policies. Overall, the site is accessible without WAF or blocking mechanisms but lacks critical business and compliance information, which impacts trust and credibility.

The website www.vifcyclingteam.cz appears to represent a cycling team or related sports entity, hosted on the Wix platform. The site content is minimal and primarily technical, with no visible business descriptions, contact information, or privacy and cookie policies. The technical infrastructure relies on Wix's standard scripts and polyfills, indicating a basic digital maturity level. Security posture is limited, with no detected security headers and no visible incident response or data protection information. The absence of WHOIS data suggests privacy protection or registry issues, which reduces trustworthiness. Overall, the site is accessible without WAF or blocking mechanisms but lacks comprehensive business and security information, resulting in a low risk assessment but with recommendations for improvement.

PHOTORAMA is an EU funded innovation project focused on improving photovoltaic panel recycling and raw material recovery, operating from 2021 to 2025 with a consortium of 12 organizations. The website presents comprehensive information about the project objectives, consortium members, and recent news, targeting stakeholders in renewable energy and sustainability sectors. Technically, the site is built on WordPress with common plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy, reflecting a legitimate EU research initiative.

Provide Support, LLC is a technology company specializing in live chat and customer support software solutions for websites. Established in 2004 and based in New York, USA, the company offers a SaaS model with a comprehensive live chat widget, cross-platform agent applications, and integrations with popular platforms such as WordPress, Shopify, and Joomla. Their market position is solid with over 10,000 sites using their service and a reputation for reliable, easy-to-integrate customer service tools. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager, ensuring good performance and mobile optimization. The presence of multi-language support and detailed integration options indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS, encrypts chat data, and implements cookie consent mechanisms, although it lacks a dedicated security policy or incident response page. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The business credibility is reinforced by clear contact information, customer testimonials, and a transparent pricing and refund policy. Strategic recommendations include publishing explicit security and incident response policies and enhancing security headers to further strengthen the security posture.

Energissime is a French informational website dedicated to providing practical guides and advice for successful energy renovation projects. The site targets individual homeowners and those interested in energy efficiency improvements, offering detailed articles on topics such as heating solutions, insulation, facade renovation, and regulatory information. The website positions itself as a niche resource within the energy renovation sector in France, leveraging WordPress as its CMS and employing SEO best practices through the Yoast SEO plugin and structured data markup. Hosting is provided by Hostinger operations UAB, and the site uses Google services for analytics and advertising, alongside a Landbot live chat for user engagement. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed with good content quality and moderate technical implementation, but privacy compliance and security best practices require enhancement.

The Fédération des Agences Locales de l’Énergie et du Climat (FLAME) is a French non-profit federation coordinating a network of local energy and climate agencies (ALEC) across France. It supports territorial energy transition through expertise in public territorial engineering, training, and resource provision. The website positions FLAME as a key reference in energy transition and climate action in France, targeting local authorities, energy operators, and community organizations. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted likely by WPServeur, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is professional, trustworthy, and compliant with GDPR, with moderate user tracking via Matomo analytics.

Paris Terres d’Envol is an official French regional government website serving the Paris Terres d’Envol territory. It provides residents and businesses with access to public services such as waste management, water and sanitation, urban planning, and local news and events. The site positions itself as a trusted source of regional information and services, targeting local citizens and enterprises. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Fonts. It employs a cookie consent mechanism compliant with GDPR and uses Matomo for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and accessibility compliance is currently below standards. The absence of WHOIS data limits domain trust analysis, but the official branding and content quality support legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its intended audience.

Advisio marketing s.r.o. is a well-established digital marketing agency based in the Czech Republic, operating since 2006. The company specializes in e-commerce marketing services including PPC advertising, SEO, data analytics, email marketing, consulting, and training. It serves multiple Central European markets and has a strong reputation supported by numerous industry certifications and client testimonials. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and client successes. Technically, the site uses WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and form protections, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the business presence and certifications. Overall, Advisio presents a credible, professional, and secure digital marketing service provider.

The website www.europeenauvergnerhonealpes.fr is the official digital presence of the Auvergne-Rhône-Alpes regional government in France, focusing on European funding and project support. It serves as a comprehensive resource for beneficiaries such as local authorities, associations, companies, and research entities seeking information and assistance with European funds and programs. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its target audience. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for analytics and lazy loading for performance optimization. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although the absence of certain security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies. However, the WHOIS data is unavailable, which slightly impacts trustworthiness but is mitigated by the official nature of the site and its consistent branding. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy, professional government portal with strong content quality and user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and monitoring third-party scripts for security risks.

The website webdomus.net currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is long-established, registered since 1999 with Server Plan Srl, which also appears to be the hosting provider. The visible content is minimal and outdated, referencing Joomla 1.5 and WordPress 2.5 CMS versions, both of which are obsolete and pose significant security risks. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business details available on the page. The site includes a security check powered by BitNinja, suggesting some level of security awareness but also indicating potential exposure to threats that require mitigation. Overall, the website's digital maturity is low, with poor content quality and minimal technical sophistication.

CyberGhost VPN is a well-established VPN service provider offering fast, secure, and private VPN solutions across multiple platforms including desktop, mobile, and smart TVs. The company targets consumers and businesses seeking enhanced online privacy and security. Their business model is subscription-based, with a strong market position supported by a comprehensive privacy policy and a 45-day money-back guarantee. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. From a technical perspective, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates third-party libraries like Font Awesome and Usercentrics for cookie consent management. The site is mobile-optimized, fast-loading, and SEO-friendly. Security headers and HTTPS enforcement indicate a strong security posture, although explicit security policies and incident response information are not publicly detailed. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data and direct company contact information slightly reduces trustworthiness. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, CyberGhost VPN presents a professional and trustworthy online presence with strong technical and security foundations. Strategic improvements include publishing detailed security policies, incident response contacts, and enhancing transparency around business registration and certifications.

McRAI s.r.o. is a Czech digital agency specializing in custom web development, e-commerce platforms, digital marketing campaigns, and AI integrations. With over 16 years of experience and more than 500 completed projects, they serve businesses primarily in the Czech Republic, focusing on helping brands grow their online presence. Their services include programming, marketing, and ongoing support, positioning them as a comprehensive digital partner. Technically, the website uses modern JavaScript libraries such as jQuery and Modernizr, integrates live chat via Smartsupp, and employs cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of WHOIS data and security headers suggests areas for improvement in transparency and security posture. Overall, the website is professional and trustworthy, but the lack of domain registration details and explicit security policies introduces some risk. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

The website 'Sedmnáct českých divů světa - České dědictví UNESCO' serves as the official portal for the Czech UNESCO heritage association, providing comprehensive information about UNESCO-listed cultural sites in the Czech Republic. It targets a general audience interested in cultural heritage and tourism, offering multimedia content, event calendars, virtual tours, and an e-shop. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach an international audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet for maps, and Matomo for analytics. It is mobile-optimized and demonstrates good SEO practices. However, some accessibility features could be improved. The site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the site shows a moderate posture with secure login forms and no exposed sensitive data. The absence of WHOIS data for the domain reduces trust slightly, though the official branding and government funding mention support legitimacy. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security transparency. Overall, the website is a credible, well-maintained informational portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving accessibility to strengthen trust and compliance.

Městské kulturní středisko Třebíč operates as a municipal cultural center providing comprehensive information on cultural events such as cinema, theater, concerts, and exhibitions in the city of Třebíč. The website serves as a centralized platform for residents and visitors to access event schedules, ticket sales, and cultural news, positioning itself as a key local cultural institution. The business model focuses on event promotion and community engagement through digital channels. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Fancybox, alongside Google Analytics and Tag Manager for tracking. Cookie consent is managed via CookieScript, ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, though the website content and external references suggest a legitimate municipal entity. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

Mobilize is a brand focused on providing electric mobility services in Spain, including 100% electric vehicles, charging solutions, and flexible mobility options such as rentals and subscriptions. The website is professionally designed, mobile-optimized, and leverages modern web technologies including React and CDN hosting by Renault Group. Privacy compliance is strong with integrated cookie consent mechanisms and clear privacy policies. Security posture is good with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are not published. WHOIS data for the domain is unavailable due to .es domain query restrictions, limiting full domain trust assessment. Overall, Mobilize presents a credible and professional digital presence aligned with Renault Group's branding.

Thibaut Caroli is a freelance digital designer and front-end developer specializing in website conception, design, and development, primarily serving environmental protection and climate change awareness associations. The website serves as a professional portfolio showcasing projects and providing contact information. The business model is focused on freelance services with a niche market position in non-profit environmental sectors. The technical infrastructure is based on WordPress CMS with custom themes, leveraging standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The website demonstrates good design quality, mobile optimization, and user experience, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy measures.

Profesionalni.info is a Czech Republic based small business specializing in custom web development, digital marketing, and graphic design services. Led by Radek Ahne with over 25 years of experience, the company offers a broad portfolio including website creation, SEO optimization, AI technology integration, and e-commerce solutions. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern web technologies such as Bootstrap, PHP, JavaScript libraries, Google reCAPTCHA, and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and anti-bot measures, though improvements could be made by adding security headers and explicit privacy policies. Overall, the business shows strong credibility with detailed contact information, client references, and social media presence. The WHOIS data is unavailable, likely due to privacy protection, but the website content and structure support legitimacy. Strategic recommendations include enhancing privacy compliance and security headers to further strengthen trust and compliance.

e-Chalupy.cz is an established online platform specializing in the rental of cottages, chalets, apartments, and pensions primarily in the Czech Republic and Slovakia. The platform emphasizes direct contact between renters and property owners, eliminating commission fees and intermediaries. It offers a comprehensive catalog of properties across various regions and thematic categories, targeting families, groups, and individuals seeking vacation rentals. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, it employs common web technologies such as jQuery, FontAwesome, Google Tag Manager, and Facebook Pixel, hosted likely behind Cloudflare for performance and security. Security posture is adequate with HTTPS enforced, though some security headers are missing and cookie consent mechanisms are not implemented, indicating room for improvement in privacy compliance. The absence of WHOIS data reduces domain trustworthiness, but the website's content and partner affiliations suggest a legitimate business. Overall, the site is safe, family-friendly, and well-positioned in the hospitality rental market.

České modelky s.r.o. operates a specialized website feetmodels.eu offering professional advertising and product photography services focused on feet modeling for e-commerce clients, primarily in the footwear and foot care product sectors. Established since 2006, the company targets e-shops and businesses requiring high-quality visual content to enhance product presentation. The website also supports a community of feet models and offers opportunities for paid modeling work, including remote selfie photography. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, hosted by a reputable Czech provider, ensuring a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, although advanced security headers and incident response policies are not explicitly published. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The domain registration aligns with the business claims, enhancing trustworthiness. The website content is safe for general audiences, with no adult or explicit material detected.

The website womtp.com is currently inaccessible, returning a 403 Forbidden error page served by nginx. This prevents any direct analysis of the site's content, business model, or security posture. The domain is registered since 2012 with CSC Corporate Domains, Inc., indicating a stable registration history but no visible active web presence. The lack of accessible content means no privacy, cookie, or terms of service policies are available, nor any contact or social media information. Technically, the domain uses Amazon AWS DNS services but does not have DNSSEC enabled, and no security headers or HTTPS status could be verified. Overall, the site appears to be either restricted or under maintenance, limiting any meaningful security or business analysis.

Iberdrola is a leading global energy company specializing in electricity generation, renewable energy, and electrification services. The company positions itself as a pioneer in the transition to a sustainable and electrified economy, targeting a broad audience including consumers, investors, and partners. The website reflects a mature enterprise with a professional digital presence, leveraging modern web technologies and compliance frameworks. Technically, the site is built on the Liferay CMS platform, incorporates widely used libraries such as jQuery and Bootstrap, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although no explicit public security or incident response policies were found. Overall, the website is trustworthy, well-structured, and compliant with GDPR and cookie regulations.

Trackingplan is a SaaS company specializing in automated digital analytics quality assurance and monitoring. Their platform provides real-time detection of issues in analytics implementations, marketing pixels, campaigns, and data privacy compliance. Trusted by over 200 tech leaders, Trackingplan integrates with major analytics and marketing tools to deliver actionable alerts and root cause analysis, helping teams maintain data integrity and optimize marketing ROI. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern frameworks and third-party services, ensuring fast performance and good SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data is missing or unavailable, which slightly impacts trust but does not detract from the overall professional presentation. No WAF or blocking mechanisms were detected, and the site contains no adult or questionable content.

booked4.us is a Hungarian-developed online appointment booking system operated by Danubius Expert Zrt., established in 2013. The platform offers a customizable, automated booking solution tailored for various industries including fitness, healthcare, coaching, beauty, massage, education, and veterinary services. It supports features such as 24/7 booking management, personalized notifications, online payments, and calendar synchronization. The website demonstrates a mature digital presence with modern technologies, mobile optimization, and comprehensive content including FAQs, customer testimonials, and demo calendars. Security posture is strong with HTTPS, GDPR compliance, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The domain registration data aligns well with the business identity, enhancing trustworthiness.

Mravenci.cz is a Czech marketing agency specializing in online advertising, website development, and e-commerce solutions tailored for small businesses and entrepreneurs. The company positions itself as a strategic yet affordable partner for smaller firms, including restaurants and manufacturers, with a focus on delivering measurable marketing results. The website reflects a professional and consistent brand image, supported by client references and transparent consultation offers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data slightly impacts trust but does not detract significantly from the overall credibility. Strategic recommendations include improving security headers and adding incident response contacts to strengthen security readiness.

České modelky s.r.o. operates a well-established modeling and hostess agency website primarily serving Slovakia and the Czech Republic. The company offers a wide range of services including hostesses, photo modeling, fashion shows, casting organization, and advertising services. The website targets models, event organizers, and advertisers, positioning itself as a regional leader with a large database of models and extensive service offerings. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Fresco.js, and Google Analytics for tracking. Hosting is provided by Wedos, a reputable provider. Security posture is moderate with HTTPS enabled but lacking several important security headers. Privacy compliance is limited due to missing explicit privacy and terms of service pages, though a cookie consent mechanism is present. Contact information is clearly provided, and social media presence is active on Facebook, LinkedIn, and YouTube. Overall, the website is professional and functional but could improve in security and compliance areas.

The website modelingovekurzy.eu is operated by České modelky s.r.o., a Czech company specializing in modeling courses and workshops for aspiring and experienced models. The company has been active since 2006 and offers a variety of services including modeling walk training, professional photo shoots, TV camera moderation courses, and individual coaching sessions with pageant judges. The site targets women and girls interested in pursuing a modeling career and positions itself as a trusted, long-standing provider in the Czech modeling education market. Technically, the website uses modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google reCAPTCHA for bot protection, and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the provided data, which is a potential area for improvement. The WHOIS data is privacy protected by EURid, which is common for .eu domains, limiting transparency but not raising immediate concerns. Overall, the site is professional, content-rich, and well-structured, with clear contact information and social media presence.

České modelky s.r.o. operates the website ceskehostesky.cz, a professional agency providing hostesses and promotional staff for business, social, and cultural events across the Czech Republic and Slovakia. With a large database of over 22,000 hostesses and more than 20 years of experience, the company positions itself as a market leader in event staffing services. Their offerings include product presentations, conferences, road shows, market research, and additional event-related services such as costume rental and photography. The target audience primarily consists of businesses and event organizers in the Czech and Slovak markets. Technically, the website uses a custom PHP backend with a frontend built on Bootstrap and jQuery, integrating Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and includes cookie consent mechanisms, reflecting GDPR compliance awareness. Security posture is moderate, with HTTPS usage and reCAPTCHA implemented, but the presence of outdated jQuery and lack of explicit security headers present areas for improvement. Overall, the website is professional, trustworthy, and well-structured, though it could benefit from enhanced security practices and more comprehensive policy disclosures.

Historic Hotels of Europe operates a niche hospitality website focused on promoting and facilitating bookings for historic hotels across Europe. The business targets culturally interested travelers seeking unique accommodations in historic houses. The website is built on WordPress using the Elementor page builder, hosted by a reputable Irish hosting provider, and has been operational since 2003, indicating a mature digital presence. Technically, the site employs modern web technologies and includes cookie consent mechanisms via Cookiebot, reflecting basic privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits full compliance and user trust. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response details. Overall, the site is professionally designed with good SEO and mobile optimization but would benefit from enhanced transparency and security practices.

Zámek Liblice operates as a historic hospitality and conference center affiliated with the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers accommodation, conference facilities, wellness services, restaurant dining, and event hosting including weddings. The venue leverages its cultural heritage and baroque architecture to attract visitors seeking a unique experience. The business targets general audiences including tourists, corporate clients, and event organizers. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized operation with a niche market position in the hospitality sector.

Bistro Národní operates as a hospitality and catering service located within the main building of the Academy of Sciences of the Czech Republic in Prague. It provides daily lunch menus, coffee, snacks, catering for events, and conference room rentals. The website is professionally designed, targeting institutional clients and visitors to the Academy. The business model focuses on serving a niche market within a government/non-profit research environment, leveraging its association with the Academy for trust and credibility. Technically, the website uses OpenCms CMS with modern JavaScript libraries such as jQuery and Slick Carousel. It employs Google Fonts and Font Awesome for styling and icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Analytics are implemented via Plausible, indicating a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for compliance with EU regulations. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the website's content and institutional affiliation strongly indicate legitimacy. Overall, the website presents a trustworthy and professional digital presence for Bistro Národní, with room for improvement in security headers and privacy compliance to enhance user trust and regulatory adherence.

Zámek Třešť is a historic castle hotel and conference center operated under the auspices of the Czech Academy of Sciences. The website presents a well-structured hospitality business offering accommodation, dining, wellness, weddings, conferences, and an e-commerce shop. The business targets tourists, corporate clients, and wellness seekers, positioning itself as a niche cultural and historic venue with institutional backing. Technically, the site uses a modern CMS (OpenCms) and integrates popular JavaScript libraries and analytics tools, with good mobile optimization and user experience. Security posture is moderate with cookie consent and privacy policies implemented, but lacks visible advanced security headers. WHOIS data is unavailable, which slightly reduces trust but the institutional affiliation and professional presentation mitigate concerns. Overall, the site is professional, compliant with GDPR, and trustworthy for its audience.

The website www.toffifee.cz represents the Toffifee confectionery brand, a product line under the larger Storck company. It targets a general audience with family-friendly content promoting its unique chocolate and caramel treats. The site is built on TYPO3 CMS and uses modern JavaScript libraries to deliver a responsive and visually appealing user experience. Privacy compliance is addressed with a cookie consent banner and a linked privacy policy in Czech. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is moderate with no detected security headers and unknown SSL configuration. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professional and trustworthy but could improve transparency and security practices.

The website www.merci-cokolada.cz represents the official Czech Republic presence of the merci chocolate brand, owned by Storck. It provides detailed product information, brand promotion, and downloadable content for consumers. The site targets a general audience interested in confectionery products and offers a user-friendly experience with clear navigation and mobile optimization. The technical infrastructure is based on TYPO3 CMS with modern JavaScript frameworks and includes Piwik PRO for analytics, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The lack of WHOIS data limits domain trust assessment but the branding and content strongly suggest legitimacy. Overall, the site is professional, compliant with GDPR, and well-positioned in the retail confectionery market.

Knoppers.cz is the official Czech website for the Knoppers brand, a well-known confectionery product line specializing in wafers and bars. The site is part of the larger Storck group ecosystem, as indicated by multiple references and linked domains. The website targets general consumers interested in confectionery products, providing product information and brand engagement. The business model focuses on brand marketing and consumer interaction rather than direct e-commerce. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as RequireJS and Swiper.js, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. WHOIS data is unavailable, which limits domain trust assessment, but the website’s branding and content align with the known Storck confectionery brand, mitigating concerns. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

STORCK SVERIGE AB operates the website storck.se as its Swedish corporate presence, showcasing its confectionery brands such as Riesen, merci, Toffifee, and Werther's Original. The website targets Swedish consumers and business partners, providing product information, company vision, career opportunities, and consumer service. The site is built on TYPO3 CMS with a modern JavaScript stack and includes cookie consent mechanisms aligned with GDPR requirements. However, no direct contact emails or phone numbers are visible on the homepage, and WHOIS data for the domain www.storck.se is not found, suggesting it is a subdomain or alias rather than a separately registered domain.

Storck Croatia d. o. o. is a medium-sized confectionery manufacturer operating in Croatia, part of the global Storck group. The website serves as an official corporate and brand presence, showcasing well-known confectionery brands such as merci, Toffifee, and Werther's Original. The site targets general consumers and provides information about products, company vision, and services. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and aligned with the business's market position.

STORCK B.V.B.A. operates as a confectionery company with a strong international presence and a localized Belgian website. The site provides detailed brand and corporate information, targeting French-speaking Belgian consumers. The company emphasizes sustainability, career opportunities, and consumer services. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and modules, and is optimized for mobile devices with a good user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is restricted, limiting domain transparency but the website content and branding suggest legitimacy. Overall, the site is professional, compliant with GDPR, and trustworthy for general users.

Storck Ibérica, S.L.U. operates as a confectionery company with a corporate website targeting general consumers interested in confectionery products. The company presents multiple well-known confectionery brands and maintains a consistent and professional online presence. The website is built on TYPO3 CMS and uses modern JavaScript libraries, indicating a moderate level of digital maturity. The site is mobile optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is restricted due to registry policies, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Storck France operates as a regional branch of the established confectionery manufacturer STORCK S.P.R.L., offering a portfolio of well-known brands such as Werther's Original, Toffifee, and Knoppers. The website targets French consumers and business partners, providing corporate information, brand details, and consumer service contact options. The company positions itself as a reputable player in the confectionery retail and manufacturing sector with a strong brand presence. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries including RequireJS, Lodash, and jQuery. It demonstrates good mobile optimization and SEO practices, with a moderate performance profile. The site uses HTTPS exclusively and implements cookie consent mechanisms aligned with GDPR requirements, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain ownership verification but does not detract from the site's professional presentation and trust signals. Overall, the website presents a low-risk profile with good compliance and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

STORCK ADRIA, d.o.o. operates as the Slovenian subsidiary of the global confectionery company Storck, offering well-known brands such as merci, Toffifee, and Knoppers. The website serves as a corporate and consumer-facing platform providing brand information, news, and career opportunities, targeting Slovenian consumers and business partners. The company maintains a consistent brand presence with a medium-sized business profile founded in 2003. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and employs HTTPS with cookie consent mechanisms, reflecting a moderate to good digital maturity level. Security posture is adequate with room for improvement in security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks direct contact details and vulnerability disclosure information.