Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,181001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
24,851–24,900 of 99,068
- Diverto
diverto.tv
Media · France
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Diverto is a French media platform specializing in entertainment news, focusing on television, streaming platforms, and pop culture. The website provides TV program schedules and news related to streaming services, targeting a general audience interested in media and entertainment. The platform positions itself as a niche media outlet within the French market, offering curated content relevant to TV and streaming enthusiasts. Technically, Diverto employs a modern web stack including JavaScript frameworks like Stimulus and Symfony UX Live Component, along with Tailwind CSS for styling. It integrates multiple third-party services for analytics, advertising, and consent management, demonstrating a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses a consent management platform (Didomi) to comply with privacy regulations. However, explicit security headers and incident response policies are not clearly published, and WHOIS data is unavailable, which slightly impacts trust. Overall, Diverto presents a professional and functional media website with good privacy compliance but could improve transparency and security documentation.
Education · France
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Université de technologie de Compiègne (UTC) is a well-established French technological university focused on higher education, research, and innovation. The website reflects a professional and consistent brand image, targeting students, researchers, and industry partners. It offers comprehensive educational services and fosters technological advancement. The digital infrastructure is based on WordPress with modern frameworks and good mobile optimization, ensuring a positive user experience. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the domain and website appear legitimate and trustworthy, consistent with an educational institution of its stature.
Ticket for Changeticketforchange.org
Education · France
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Ticket for Change is a French non-profit organization focused on fostering social entrepreneurship and leadership development. Established in 2013, it offers educational programs, community support, and resources to entrepreneurs, young adults, and corporate leaders aiming to create positive social and environmental impact. The organization positions itself as a pioneering school for changemakers, leveraging innovative pedagogies and a strong community network. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted behind Cloudflare for performance and security. The site features comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and domain protections, though improvements in security headers and incident response transparency are recommended. Overall, the website reflects a professional, trustworthy, and well-established entity with a clear mission and audience.
- Krby a kamna
mojekrby.cz
Retail · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.mojekrby.cz is a Czech e-commerce platform specializing in the sale of fireplaces, stoves, and related accessories. It targets residential customers and craftsmen seeking heating solutions. The business operates a niche retail model with a clear product catalog and online shopping capabilities, including user registration and newsletter subscription. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Swiper.js, and Google Analytics for tracking and marketing. Technically, the site uses the K2 e-shop system and integrates several third-party services including Google Tag Manager and Packeta for logistics. Performance is moderate with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though no advanced security headers or explicit security policies are published. The absence of WHOIS registration data is a concern for domain legitimacy and trust. Overall, the site presents a professional and trustworthy front for its business, but the lack of publicly available domain registration details and direct contact information slightly reduces its credibility. There are no indications of malicious content or security vulnerabilities in the visible content. Strategic improvements in security transparency and contact information disclosure would enhance trust and compliance.
- RRefaglass s.r.o.
refaglass.cz
Manufacturing · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Refaglass s.r.o. is a Czech-based manufacturer specializing in foam glass insulation products made from 100% recycled glass. The company targets construction professionals and distributors, offering thermal insulation materials suitable for various building applications. Their market position is niche, focusing on sustainable and innovative building materials within the Czech and Slovak markets. The website reflects a professional presence with clear product information, contact details, and social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is fair with HTTPS enforced and cookie consent implemented; however, the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and establishing a vulnerability disclosure process to improve overall trust and compliance.
TELEKO digital, a.s.teleko.cz
Telecommunications · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TELEKO digital, a.s. is a Czech company specializing in digital and analog radio broadcasting services, operating a network of FM and DAB+ transmitters across the Czech Republic. The company is positioned as a regional leader in digital radio transmission, offering clean sound and a broad program selection to listeners in multiple regions. They also operate an e-commerce platform, PUREradio.cz, selling DAB+ receivers. The website reflects a mature digital presence with modern technologies and a clear focus on their core services. Technically, the site is built on Joomla CMS with Bootstrap and integrates Google Maps for coverage visualization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking published privacy and security policies. Overall, the site is professional and trustworthy, with room for improvement in compliance documentation and security transparency.
- OCRRUNNING.CZ
ocrrunning.cz
Retail · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
OCRRUNNING.CZ is a Czech Republic-based small e-commerce retailer specializing in running and outdoor sports footwear, clothing, and accessories. The website offers a broad catalog of products from well-known brands, targeting general consumers interested in running and outdoor activities. The business emphasizes real pricing without discount presentations and aims to provide optimal price-quality-performance balance along with customer advisory services. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics 4, Google Ads, and reCAPTCHA v3 for bot protection. The site is built on the Binargon EshopMaxi CMS platform and is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS enforced and bot protection in place, but lacks some security headers and visible privacy or cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and functional but could improve privacy compliance and security best practices.
Happy Robots s.r.o.happy-robots.cz
Technology · Czech Republic
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Happy Robots s.r.o. is a small Czech technology company founded in 2020 specializing in chatbot and voicebot solutions aimed at automating customer support and e-commerce interactions. Their website presents a professional and consistent brand image, offering both custom chatbot development and a platform for chatbot management. The company targets businesses seeking to improve customer engagement and reduce operational costs through automation. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS and secure form handling but could be improved with additional headers and incident response information. Overall, the website is trustworthy and safe, with no adult or questionable content detected.
Com&Trombonescom-trombones.fr
Other · France
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Com&Trombones is a small independent administrative and communication assistance service based in France, targeting professionals, artisans, TPE/PME, and individuals. The company offers tailored administrative support including document management, invoicing, client follow-ups, and communication services such as social media management and content creation. The website is professionally designed using WordPress and Elementor, with a clear structure and good user experience. Technical infrastructure includes modern web technologies and hosting via Scaleway with DNS managed by o2switch.net. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published privacy policies. Overall, the site presents a trustworthy and professional image suitable for its niche market.
Contact’Mont-Blanccontact-montblanc.com
Other · France
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Contact’Mont-Blanc is a French local business networking platform launched in 2022, focused on connecting professionals and consumers in the Haute-Savoie region. It offers a directory of local artisans, merchants, and service providers, along with marketing and networking services to boost local visibility. The platform emphasizes community, collaboration, and local economic development. Technically, the website uses modern frameworks like Bootstrap and jQuery, with Google Tag Manager for analytics. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC and security headers are missing. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional, serving a niche local market effectively.
Accueil - virage-digital74.frvirage-digital74.fr
Technology · France
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Virage Digital 74 is a French digital marketing service provider specializing in impactful social media strategies, social media management, and creating effective showcase websites to enhance digital presence. The company appears to be a small, newly founded business (2024) targeting businesses and professionals seeking to improve their online visibility. The website is built on WordPress using the Divi theme and incorporates SEO optimization via Yoast SEO. Hosting is provided by o2switch, with domain registration through Scaleway, both consistent with the French market focus. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and formal privacy or security policies. Analytics usage includes Metricool tracking pixels, indicating moderate user tracking. Overall, the website is professionally designed with good user experience and mobile optimization, but would benefit from enhanced privacy compliance and security documentation.
Jérémie Bottollier Curtetbottweb.fr
Technology · France
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Jérémie Bottollier Curtet operates as a freelance web and mobile application developer based in Haute-Savoie, France. The business specializes in creating custom digital solutions including websites (One Page, Vitrine, E-commerce, and bespoke), web and mobile applications, SaaS and Micro-SaaS platforms, site redesign, maintenance, and training services. The company targets local businesses, startups, and independent professionals primarily in the Rhône-Alpes region. The website demonstrates a professional market position with clear service offerings and a strong local focus. Technically, the website is built on WordPress using Elementor, enhanced with modern web technologies and analytics tools such as Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, employs security headers, and includes cookie consent mechanisms, indicating a good security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. The WHOIS data is missing, which slightly impacts domain trustworthiness but does not detract significantly from the overall legitimacy. Overall, the website and business present a low-risk profile with professional digital presence and sound security practices. Strategic recommendations include enhancing transparency with dedicated security and privacy policy pages, implementing vulnerability disclosure, and maintaining regular security audits to sustain trust and compliance.
- Čarovné Česko
carovne-cesko.cz
Retail · Czech Republic
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Čarovné Česko is a Czech Republic-based e-commerce retailer specializing in books, maps, and map-themed clothing and gifts that celebrate the beauty and stories of Czech and Slovak regions. The website is professionally designed, featuring a clear product catalog and navigation tailored to regional interests. The business targets customers interested in regional culture, tourism, and unique map-related products. Technically, the site leverages the Shoptet e-commerce platform with integrations such as Google Analytics, Facebook SDK, and Doofinder for search and recommendations. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a concern for domain legitimacy but does not detract from the professional presentation and contact transparency of the site. Overall, the site is a well-structured niche e-commerce platform with moderate technical maturity and good privacy compliance.
ECOncreteeconcretetech.com
Energy
70Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
ECOncrete is a specialized technology company focused on providing nature-inclusive design solutions for responsible marine construction. Their proprietary technology targets shoreline protection and infrastructure for waterfront and offshore environments, positioning them as an innovative niche player in the sustainable energy sector. The company appears to be small-sized, founded in 2012, with a consistent domain registration history and a professional online presence. Technically, the website is built on WordPress with modern libraries and plugins, offering good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and reCAPTCHA in use, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy page found. Overall, the website is professional and trustworthy but could improve in privacy and security policy transparency.
APPA Renovablesappa.es
Energy · Spain
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
APPA Renovables is a well-established national association representing companies in the renewable energy sector in Spain. With over 30 years of experience, it advocates for renewable technologies including wind, photovoltaic, biomass, and hydraulic energy. The website reflects a professional and consistent brand presence, targeting industry professionals and companies involved in renewable energy. The business model is non-profit and focused on sector representation, advocacy, and member services. Technically, the site is built on WordPress with a modern plugin ecosystem including WooCommerce, Yoast SEO, and event management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly detailed. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact channels. The lack of WHOIS data is due to query restrictions but does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation and publishing a vulnerability disclosure policy.
GECV: Grupo Español para el Crecimiento Verdegrupocrecimientoverde.org
Non-profit · Spain
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The Grupo Español para el Crecimiento Verde (GECV) is a Spanish non-profit association established in 2016, dedicated to fostering public-private collaboration to address environmental challenges and promote sustainable, circular, and efficient economic growth. The website serves as a platform to share news, documents, working groups, and member information, targeting stakeholders interested in green growth and sustainability in Spain. The organization holds a solid market position as a recognized environmental non-profit with a medium-sized membership base. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Webempresa, and integrates modern web technologies including jQuery, Swiper.js, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and advanced security headers are not explicitly detected, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie policies are comprehensive and clearly accessible, supporting strong privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, with no signs of adult or questionable content. The domain registration is consistent with the business history and shows legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen the security posture.
- Fundación Conama
fundacionconama.org
Non-profit · Spain
51Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Fundación Conama is a Spanish non-profit foundation dedicated to promoting sustainable development through knowledge exchange, events, reports, and collaborative projects. It holds a leading position in Spain and Iberoamerica as an organizer of major environmental congresses and networking platforms. The website is professionally designed using WordPress and Elementor, with strong SEO and accessibility features. It integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, while providing clear privacy and cookie policies with consent management. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. WHOIS data is privacy protected, which is justified for this type of organization. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.
Hospitality · Spain
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Asociación Empresarial Hotelera de Madrid (AEHM) is a prominent industry association representing over 300 hospitality establishments in the Madrid region, encompassing hotels, hostels, and apartments with more than 75,000 accommodation places. The organization serves as a key advocate and promoter of the hotel sector, providing services such as employment facilitation, event management, and sector representation. Their website is professionally designed using WordPress and Elementor, featuring comprehensive content and clear navigation tailored to industry stakeholders and professionals. Technically, the site employs modern web technologies and plugins, including Yoast SEO for search optimization and Complianz for GDPR cookie compliance. The presence of Google Analytics and Metricool tracking indicates moderate user behavior tracking, balanced with visible cookie consent mechanisms ensuring privacy compliance. Mobile optimization and accessibility are adequately addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to registry restrictions limits domain trust verification, though the website's professional presentation and consistent branding support its legitimacy. Overall, AEHM's digital presence reflects a mature and credible organization within the hospitality sector, with room for improvement in security transparency and WHOIS data availability to enhance trust and compliance posture.
AEDIVEaedive.es
Energy · Spain
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
AEDIVE is a Spanish business association dedicated to the development and promotion of electric mobility, representing a broad industrial, technological, service, and institutional value chain. The organization holds a strong market position in Spain, supported by institutional partners and a diverse membership base. Their services include advocacy, networking, events, consultancy, and legislative influence, positioning them as a key player in the electric vehicle ecosystem. Technically, the website employs a modern technology stack including jQuery, Handlebars, RequireJS, Bootstrap 5, and Swiper.js, with good mobile optimization and performance. The site integrates analytics and marketing tools with a GDPR-compliant cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to .es domain query restrictions, but the website's professional presentation and institutional backing support its legitimacy. Overall, AEDIVE's website is professional, secure, and compliant, with strong business credibility and user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.
Das WeltAuto®dasweltauto.cz
Transportation · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Das WeltAuto® is a well-established brand specializing in the sale of certified pre-owned vehicles, primarily targeting consumers in the Czech Republic. The website reflects a professional automotive business model under the Volkswagen Group umbrella, offering quality assurance and dealer network support for used car buyers. The digital infrastructure leverages modern frontend technologies such as Angular and Swiper.js, complemented by cookie consent mechanisms to address privacy requirements. While the website is accessible and well-structured, the absence of WHOIS data and explicit privacy and terms of service policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and published security policies. Overall, the site presents a trustworthy and professional image consistent with a large automotive brand.
- Porsche Česká republika s.r.o.
cupraofficial.cz
Transportation · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
CUPRA Česká republika operates as a premium automotive brand website focused on high-performance sports and electric vehicles. The site is professionally designed, featuring rich multimedia content, detailed product offerings including plug-in hybrids and electric models, and integrated configurator and stock vehicle listings. The brand is affiliated with Porsche Česká republika s.r.o., indicating strong market positioning in the Czech automotive sector. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence with minor areas for improvement in security transparency.
Audi Česká republikaaudi.cz
Transportation · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Audi Česká republika operates as the official regional website for the Audi brand in the Czech Republic, providing comprehensive information about Audi's vehicle models, electric vehicles, financing options, servicing, and promotional offers. The site targets consumers interested in premium automotive products and services, supporting Audi's market position as a leading luxury car manufacturer. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Next.js and Google Tag Manager, and incorporates cookie consent management via OneTrust. Security posture is generally strong with HTTPS enforced, though some security headers and explicit privacy policies are not detected in the provided content. The absence of WHOIS data limits domain registration trust verification, but the website's branding and content strongly indicate legitimacy. Overall, the site offers a professional, user-friendly experience with rich multimedia content and clear navigation.
- Ville de Lyon
lyon.fr
Government · France
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.lyon.fr is the official digital portal for the City of Lyon, France, providing comprehensive information on administrative procedures, cultural events, practical life, and urban projects. It serves residents and visitors with a well-structured, content-rich platform that reflects the city's public service mission. The site leverages Drupal 9 CMS and employs privacy-focused analytics (Matomo) with a robust cookie consent mechanism, demonstrating a strong commitment to user privacy and GDPR compliance. Technically, the site is modern, mobile-optimized, and accessible, though it could benefit from enhanced security headers and a published security policy. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the site presents a high level of professionalism, trustworthiness, and compliance, suitable for a large government entity.
Métropole de Lyongrandlyon.com
Government · France
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Métropole de Lyon website serves as the official digital presence of the metropolitan government authority for Lyon, France. It provides comprehensive information and services to residents and professionals across 58 communes and a population of 1.4 million. The site focuses on public services such as waste management, housing, transportation, citizen engagement, and economic development, positioning itself as a key regional government resource. The website is well-branded, professionally designed, and consistent with government standards, targeting a broad audience within the metropolitan area. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap 5 and Popper.js, ensuring responsive design and good accessibility. It employs privacy-respecting analytics via Matomo and uses a robust cookie consent management system (Tarteaucitron.js), reflecting a mature digital infrastructure with strong privacy compliance. The site is performant with good SEO and accessibility features. From a security perspective, HTTPS is enforced, and privacy best practices are observed, including cookie consent and minimal tracking. However, the absence of visible security headers and a published security policy or incident response contact suggests room for improvement in security transparency and defense-in-depth. No vulnerabilities or suspicious content were detected. Overall, the website is a trustworthy, professional government portal with excellent content quality and privacy compliance. The lack of WHOIS data is a minor concern but likely due to querying limitations or privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen trust and security posture.
Windcoop SCIC SAwind.coop
Transportation · France
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Windcoop SCIC SA is a French maritime cooperative based in Lorient specializing in low-carbon cargo transport using sail-powered container ships. The company operates an innovative business model focused on sustainability and cooperative ownership, targeting individuals, businesses, and communities interested in ethical and ecological maritime transport. Their flagship project is a 90-meter sail cargo ship designed to reduce CO2 emissions by 60% compared to conventional vessels, with operations planned between Marseille and Madagascar starting in 2027. The website reflects a professional and modern digital presence built on WordPress, featuring comprehensive content, multimedia, and clear calls to action for investment and membership. Technical infrastructure includes Matomo analytics and Google Tag Manager, with a strong emphasis on privacy and cookie consent compliance. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Overall, Windcoop presents a credible, transparent, and innovative player in the sustainable transportation sector.
- Ééthi'Kdo
ethikdo.co
Retail · France
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
éthi'Kdo is a French e-commerce platform specializing in eco-responsible gift cards that promote ethical gifting for individuals, businesses, and employee committees. The website presents a well-structured and professionally designed interface with a focus on sustainability and social responsibility. The technical infrastructure leverages modern JavaScript, CSS, and HTML5 technologies, integrating third-party services such as Sentry for error monitoring, Google Analytics for user behavior tracking with IP anonymization, and Crisp Chat for customer support. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the website demonstrates a high level of business credibility and technical maturity, with no detected vulnerabilities or suspicious activity.
Réseau Citizcitiz.coop
Transportation · France
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Réseau Citiz operates as a cooperative carsharing network in France, providing flexible vehicle rental services across more than 80 cities. The website presents a professional and consistent brand image, targeting both individual and professional users seeking shared mobility solutions. Technically, the site employs modern tracking and consent management tools, including Google Analytics, Facebook Pixel, and tarteaucitron.js for cookie consent, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the site is trustworthy and well-positioned in its market niche.
laNeflanef.com
Finance · France
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
La Nef is a French cooperative ethical bank established in 1988, focusing on financing projects with ecological, social, and cultural impact. It serves both individuals and professionals, offering savings products, loans, and cooperative membership opportunities. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries and analytics tools, ensuring good performance and SEO. Security posture is strong with HTTPS and security headers, though it lacks a public vulnerability disclosure and incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the site demonstrates high trustworthiness and professionalism, suitable for its target audience.
- Commown
commown.coop
Technology · France
65Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Commown is a French cooperative specializing in ethical and sustainable electronics, offering eco-designed devices primarily through a long-term rental model without purchase options. The cooperative model (SCIC) ensures governance transparency and aligns with their mission to combat planned obsolescence. Their market position is that of a responsible technology provider targeting both individual consumers and professionals who value sustainability and ethical practices. Technically, the website is built using the Hugo static site generator, hosted on Infomaniak servers, and employs modern web standards with good mobile optimization and accessibility. Security posture is solid with HTTPS and hCaptcha integration, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business goals.
- MMobicoop
mobicoop.fr
Transportation · France
55Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Mobicoop.fr is a French-based free and commission-free carpooling platform established in 2017. The website offers a service aimed at facilitating daily and occasional ride sharing as a common good, targeting a general audience interested in sustainable and economical transportation options. The platform positions itself as a niche player in the transportation sector, emphasizing openness and community values. Technically, the website is hosted by OVH and uses HTTPS with a moderate performance profile. It employs Matomo analytics with a consent-based tracking mechanism, reflecting a privacy-conscious approach. The site uses modern web fonts and icons but does not appear to rely on a major CMS or framework. Mobile optimization and SEO are adequately addressed, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and respects user consent for analytics. However, it lacks explicit security headers and formal security policies such as a privacy policy, terms of service, or vulnerability disclosure. No contact information or incident response channels are clearly provided, which could be improved to enhance trust and compliance. Overall, Mobicoop.fr presents a trustworthy and professional online presence for its business model but would benefit from enhanced transparency in privacy and security policies, as well as improved contact and incident response information to strengthen its security posture and compliance with regulations.
- TeleCoop
telecoop.fr
Telecommunications · France
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
TeleCoop is a French cooperative telecommunications operator founded in 2012, offering transparent, no-contract mobile plans with a strong focus on ecological and social responsibility. Positioned as the first cooperative telecom operator in France, it targets consumers who value sustainability and democratic governance in telecom services. The company provides a variety of mobile plans including options for children and teenagers, leveraging the 4G network of Orange, France's leading mobile network. TeleCoop emphasizes customer service based in France and promotes digital sobriety and ecological impact reduction among its subscribers. Technically, the website is built on the Kirby CMS platform and employs modern web technologies such as Matomo for analytics, Google Tag Manager, and Axeptio for cookie consent management. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search engine visibility. Hosting and domain registration are managed by GANDI, a reputable registrar, with consistent WHOIS data supporting the legitimacy of the business. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. The business credibility is reinforced by clear contact information, verified customer reviews, and social proof. Overall, TeleCoop presents a professional, trustworthy, and well-maintained online presence aligned with its cooperative and ecological mission. Strategic improvements could include publishing a security policy, adding security headers, and establishing a vulnerability disclosure channel to further enhance trust and security posture.
Enercoopenercoop.fr
Energy · France
68Medium
NIS2 7 · GDPR 40
NIS2 7 · GDPR 40
Enercoop is a French cooperative network providing 100% renewable electricity sourced from a broad network of citizen and local authority-owned production sites. The company positions itself as a key player in the energy transition with a cooperative and citizen-focused business model. Their services include electricity supply, energy efficiency consulting, and support for renewable energy producers. The website is professionally designed, mobile-optimized, and uses modern technologies including Prismic CMS, Matomo analytics, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not detected in the provided content. Overall, Enercoop demonstrates a mature digital presence aligned with its cooperative values and market positioning.
- CCoachCopro
coachcopro.com
Energy · France
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CoachCopro is a French public service platform dedicated to supporting co-ownerships in their energy renovation projects. It operates as part of the national energy renovation service, France Rénov'. The website provides informational resources and accompaniment services tailored to co-ownership renovation needs. Technically, the site is built using modern JavaScript frameworks such as Nuxt.js and Vue.js, with integration of the TinyMCE editor for content management. The site demonstrates good design quality and user experience, optimized for mobile devices, but lacks comprehensive privacy and cookie policies, which are critical for compliance. Security posture is moderate due to absence of visible security headers and unknown SSL configuration. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the platform appears legitimate and focused on its public service mission but would benefit from enhanced compliance and security measures.
- 5503 Service Temporarily Unavailable
leadexplorer.com
Other
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website leadexplorer.com is currently inaccessible, returning a 503 Service Temporarily Unavailable error with minimal HTML content. Due to this, no business content, metadata, or contact information could be extracted or analyzed. The domain is registered with Amazon Registrar, Inc. since 2015, indicating a potentially established business presence, but the lack of accessible content prevents validation of business operations or services. Technically, the site lacks visible security headers, privacy policies, or any compliance indicators. The security posture cannot be fully assessed, but the absence of HTTPS and security best practices is a concern. Overall, the site is currently non-functional from a user and security perspective, resulting in a low AI score and limited insights.
DOMIREST, s. r. o.hoteltrebic.cz
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hotel Alfa, operated by DOMIREST, s. r. o., is a small hospitality business located in Třebíč, Czech Republic, offering accommodation and restaurant services. The hotel is positioned as a convenient and comfortable lodging option near the city center and UNESCO heritage sites, targeting tourists and business travelers. The website is professionally designed, bilingual (Czech and English), and integrates modern booking and analytics technologies. The technical infrastructure is based on WordPress with common libraries and external services such as Google Analytics and Previo booking. Security posture is adequate with HTTPS and secure forms, though security headers and explicit policies could be improved. The domain registration data aligns well with the business information, supporting legitimacy. Overall, the website provides a trustworthy and user-friendly experience with clear contact and business details.
HZ Vinařství s.r.o.valtickepodzemi.cz
Hospitality · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Valtické Podzemí is a hospitality and wine tourism business based in the Czech Republic, specializing in historic wine cellar tours, wine tastings, and cultural events. The company operates a unique project connecting 13 historic wine cellars dating back to the 13th century, offering individual visits, group programs, and private events. The business holds a prestigious award, CHAMPION TOP VINAŘSKÝ CÍL ČR, underscoring its quality and reputation in the local market. The website is professionally designed, mobile-optimized, and rich in relevant content targeting wine enthusiasts, tourists, and corporate clients. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and AOS for animations. It employs performance optimization tools like WP Rocket and SEO enhancements via Yoast SEO. The site uses Google Tag Manager and Microsoft Clarity for analytics and tracking, with a GDPR-compliant cookie consent mechanism in place. Social media integration and partner links further enhance its digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and business details supports legitimacy. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. Strategically, the business should focus on publishing a security policy, establishing incident response contacts, and enhancing domain registration transparency to improve trust. Continued monitoring of third-party scripts and regular security audits will help maintain a robust security posture. The website's excellent content quality and user experience position it well for growth in the wine tourism sector.
Peak Advisory Consulting s.r.o.peakconsulting.cz
Other · Czech Republic
54Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Peak Advisory Consulting s.r.o., operating under the brand Peak Consulting, is a professional HR services provider based in the Czech Republic. The company offers a comprehensive range of HR solutions including recruitment, HR advisory, training and e-learning, HR legal services, and GDPR compliance. Their market position is that of an independent, trusted HR partner focused on delivering tailored HR outsourcing and consultancy services to businesses of various sizes. The website reflects a professional and consistent brand image with detailed service descriptions and client references, targeting businesses seeking flexible and expert HR support.
Svatební centrum Caxa Brnocaxabrno.cz
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Svatební centrum Caxa Brno is a well-established wedding and formal wear rental and sales business located in Brno, Czech Republic. The company offers a wide range of wedding dresses, formal dresses, men's suits, and accessories, complemented by wedding coordination services. The website reflects a professional and comprehensive digital presence with rich content, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and tracking tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by consistent branding and detailed service offerings. Privacy compliance is strong with clear policies and consent management. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining up-to-date software to mitigate vulnerabilities.
studio AMMIammi.cz
Retail · Czech Republic
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Studio AMMI is a small, established florist business based in Brno, Czech Republic, specializing in fresh flower arrangements, delivery services, wedding flowers, funeral wreaths, and houseplants. The company has a strong local market presence supported by a professional website that offers e-commerce capabilities and detailed product galleries. The business emphasizes quality and customer satisfaction, as evidenced by testimonials and references to awards. Technically, the website is built on WordPress with the MioWeb theme and uses modern tracking and consent management tools such as Google Tag Manager and Cookiebot. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information are lacking. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.
- Hudební agentura Arte per tutti
artepertutti.cz
Hospitality · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hudební agentura Arte per tutti is a small Czech music agency specializing in live music performances for weddings, concerts, corporate events, and other celebrations. Founded in 2017 by Jitka Břízová, who also acts as manager and violinist, the agency emphasizes quality, originality, and personalized service. Their offerings include tailored musical ensembles and guaranteed substitutes for musicians in case of illness. The website presents a professional image with testimonials and clear contact information, targeting clients seeking live music experiences in the Czech Republic. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and uses Amazon Cloudfront CDN for content delivery. It integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and features a cookie consent mechanism, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement common security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data and privacy policy reduces trustworthiness. There is no visible incident response or vulnerability disclosure information. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.
- Artyp
artyp.cz
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Artyp is a small artisanal e-commerce business based in the Czech Republic specializing in handcrafted, hand-painted wedding invitations, birthday and christening invitations, and related paper goods. The company emphasizes originality, quality, and eco-friendly packaging, targeting individuals planning special events. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It uses a modern technology stack including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, supporting a mature digital presence. Security posture is solid with HTTPS and CAPTCHA protections, though lacking some HTTP security headers and formal security policies. Privacy compliance is partial with a cookie consent mechanism but no dedicated privacy policy page found. Contact information is clear and trustworthy, supported by customer testimonials and social media presence. However, the absence of WHOIS registration data limits domain trust assessment, which is a notable risk factor.
RIKI.TO SUSHIriki-to-sushi.com
Hospitality · Czech Republic
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
RIKI.TO SUSHI is a small hospitality business based in the Czech Republic specializing in sushi lessons, catering, and professional sushi training. The company holds prestigious awards such as the WORLD SUSHI SKILL INSTITUTE TOKYO and advisory titles from the Japanese Sushi Association, positioning it as a recognized expert in its niche market. The website is built on the Wix platform, leveraging Wix's proprietary technologies and hosting services. While the site presents professional content and clear contact information, it lacks key compliance documents such as privacy and terms of service pages. Security posture is adequate with HTTPS enabled and error monitoring via Sentry, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.
WeiserStudioweiserstudio.cz
Media · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
WeiserStudio is a small videoproduction company based in Brno, Czech Republic, specializing in creating professional videos tailored to client needs, including weddings, advertising, events, and custom projects. The company emphasizes emotional storytelling and high-quality production values. The website is built on WordPress using modern page builders and plugins, hosted via a Czech registrar with Cloudflare DNS. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a professional image with moderate trustworthiness but would benefit from enhanced privacy compliance and security best practices.
Catering Brno Slunečnicecateringbrnoslunecnice.cz
Hospitality · Czech Republic
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Catering Brno Slunečnice is a small hospitality business specializing in comprehensive catering services for events such as weddings, corporate parties, and family celebrations in Brno and surrounding areas. The company operates under the Slunečnice Food network with multiple related venues, emphasizing quality and customer service. The website is professionally designed using the Webnode CMS platform, leveraging modern CDN and analytics technologies to deliver content efficiently. However, the absence of privacy and cookie policies and lack of visible contact information limit its compliance and trustworthiness. The security posture is generally good with HTTPS enforced, but missing security headers and incident response details are areas for improvement. The domain WHOIS data is unavailable, which raises concerns about registration transparency and business legitimacy. Overall, the site is safe, well-structured, and suitable for its target audience but requires enhancements in privacy compliance and business transparency to improve trust and security.
- AAylo Premium Ltd.
realitydudes.com
Media
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
RealityDudes.com is an adult entertainment website specializing in streaming high-quality amateur gay pornographic videos featuring nude male models. The platform operates under Aylo Premium Ltd., a company known for managing adult content brands. The site targets an adults-only audience and offers subscription-based access to a wide variety of categorized video content. It maintains a professional market position within the niche of amateur gay adult entertainment. Technically, the website leverages modern web technologies including React, JavaScript ES modules, and integrates with multiple Project1content.com services for navigation, media delivery, and user management. It uses Google Fonts and Flickity for UI components and carousels. Payment processing is handled via trusted third-party services such as Probiller and Vend-o, ensuring secure transactions. The site is mobile optimized and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and implements several security best practices such as hiding the X-Powered-By header and enabling HTTP Parameter Pollution protection. However, the Content-Security-Policy header is disabled, representing a potential security gap. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and prominently linked, supporting compliance and user trust. Overall, the website presents a moderate to good security posture and technical maturity. The absence of publicly available WHOIS data for the domain is a notable transparency concern but does not necessarily indicate illegitimacy given the professional presentation and trusted payment integrations. Strategic recommendations include enabling CSP headers, improving accessibility features, and publishing a security.txt file for vulnerability disclosures.
- GGitoyen
gitoyen.net
Telecommunications · France
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Gitoyen is a French non-profit association established in 2000, dedicated to maintaining a decentralized and neutral Internet by supporting small network operators. It operates as a local Internet registry (LIR) and provides Internet transit, routing, switching, and equipment hosting services primarily to its members. The organization positions itself as a niche player in the telecommunications sector with a strong community and non-profit ethos. Technically, the website uses legacy JavaScript libraries and basic web technologies, hosted under Scaleway SAS, with moderate performance and basic mobile optimization. Security posture is moderate with notable gaps such as lack of DNSSEC, outdated libraries, and missing security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in security and compliance aspects.
- Sshop.fotokino.com
shop-fotokino.com
E-commerce · France
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
shop.fotokino.com is a niche e-commerce platform specializing in artist books, prints, and limited editions, collaborating closely with artists and designers. The website is professionally designed using the Shopify platform, offering a curated selection of art publications and related products. It targets art collectors, enthusiasts, and the general public interested in artist projects on paper. The business operates primarily in France with distribution partnerships extending internationally. Technically, the site leverages modern web technologies, including Shopify's Dawn theme, JavaScript ES modules, and secure payment integrations such as Apple Pay and PayPal. The site is mobile-optimized, accessible, and performs well with fast loading times. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though explicit security headers and privacy policies are missing. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the site is a credible, well-maintained e-commerce platform with room for improvement in privacy and security transparency.
- FFaire du streaming avec un VPN
petitesimmensites.org
Technology
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website petitesimmensites.org is a small French-language informational platform focused on educating users about the benefits and usage of VPNs for accessing geo-restricted streaming content. It provides detailed explanations of VPN technology, usage instructions, and recommends Surfshark VPN as a preferred service. The site targets French-speaking internet users interested in streaming and privacy technologies. Technically, the site is built with basic HTML, CSS, and jQuery, hosted behind Cloudflare DNS but lacks DNSSEC and advanced security headers. The site is mobile responsive at a basic level and has moderate performance. Security posture is minimal with no visible security policies or incident response information. Privacy compliance is lacking as no privacy or cookie policies are present. Business credibility is low due to absence of contact or company information. Overall, the site is safe for general audiences and does not contain adult or explicit content.
- FFrac Aquitaine
fracnouvelleaquitaine-meca.fr
Other · France
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Frac Nouvelle-Aquitaine MÉCA is a regional public art fund based in France, managing a public collection of approximately 1200 artworks. The institution focuses on exhibitions, cultural events, educational collaborations, and publishing editions related to contemporary art. The website serves as an information portal for visitors, collaborators, and the general public interested in the cultural offerings of the Nouvelle-Aquitaine region. Technically, the site is built on WordPress with modern front-end technologies such as Swiper.js and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is hosted by IONOS SE and secured with HTTPS, providing a safe browsing experience. However, some security headers are not visibly present, and Google Analytics is installed but not configured, indicating room for improvement in analytics and security monitoring. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no explicit GDPR compliance statements or data protection officer contacts are found. Overall, the site is professional, trustworthy, and well-maintained, serving its cultural mission effectively.
Stereotaxisroboticheartcare.com
Healthcare
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Robotic Heart Care, operated under the Stereotaxis brand, is a healthcare technology website focused on promoting and educating about robotic magnetic navigation (RMN) technology for cardiac ablation procedures. The site targets patients and physicians interested in advanced cardiac care solutions, emphasizing safety, precision, and clinical efficacy. The company positions itself as a global provider with adoption in over 100 hospitals and over 150,000 patients treated, supported by extensive clinical data and peer-reviewed publications. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Yoast SEO, with embedded Vimeo videos and Google Analytics for tracking. The site demonstrates good mobile optimization, clear navigation, and professional design, although some accessibility features could be improved. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and privacy and cookie policies are absent, indicating gaps in compliance and user data protection. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance and branding consistency. Overall, the website is informative and professionally presented but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trustworthiness and regulatory adherence.