Medium-risk security reports

Váš Hosting s.r.o. is a Czech-based technology company specializing in providing virtual servers (VPS), dedicated servers, managed servers, webhosting, and domain registration services. With over 15 years of experience, the company manages a substantial infrastructure of more than 1,900 servers and 19,800 domains, serving a diverse clientele including notable businesses such as Rohlík.cz and Auto Palace. The website is professionally designed, offering clear navigation and comprehensive service information, including customer testimonials and case studies that reinforce its market credibility. Technically, the website employs modern technologies such as PHP 8+, Nginx, Apache, and Docker, alongside a custom VPS administration platform. It integrates Google Tag Manager for analytics and uses Bootstrap for responsive design, ensuring excellent performance and mobile optimization. Security practices include HTTPS enforcement, Anti-DDoS protection, 24/7 monitoring, and cookie consent mechanisms, although some security headers and incident response disclosures could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, although the business presence and content quality mitigate this concern. Overall, Váš Hosting presents a trustworthy and mature hosting service provider with a solid technical foundation and customer trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust further.

Your Hosting s.r.o. operates the website www.vas-hosting.com, providing a comprehensive range of hosting services including virtual private servers, dedicated servers, managed servers, web hosting, and domain registration. The company targets small to medium businesses and web professionals, emphasizing secure, high-performance hosting solutions with 15+ years of experience and a strong customer base. The website features extensive customer testimonials and references, reinforcing its market position as a trusted regional hosting provider. Technically, the website is well-constructed using modern web technologies such as Bootstrap, Google Tag Manager, and supports mobile responsiveness and accessibility. The site employs HTTPS and cookie consent mechanisms, indicating a good level of digital maturity and privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is generally strong with HTTPS and some security best practices observed, but the absence of security headers and vulnerability disclosure mechanisms suggests room for enhancement. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the website is professional, secure, and user-friendly, but the domain registration anomaly warrants further verification. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing security headers to strengthen trust and compliance.

Palác vína, operated by LOCASTE s. r. o., is a specialized retailer focused on offering high-quality wines and delicacies primarily from small family wineries and farms across Europe and Chile. The company also supports charitable causes such as foster families through partnerships with non-profit organizations. The website presents a professional and well-structured digital presence with clear business information, contact details, and e-commerce capabilities. Technically, the site is built on the ByznysWeb.cz CMS platform, uses modern web technologies, and enforces HTTPS with basic security measures including captcha protection on forms and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Privacy policies and cookie consent are well implemented and GDPR compliant. The site targets mature audiences due to alcohol sales but contains no explicit adult content.

Vergnano caffe is a specialized distributor of premium Vergnano coffee products and Electra coffee machines in the Czech Republic. The company operates as an authorized distributor since 2001, offering a wide range of coffee beans, capsules, grinders, bar equipment, and accessories targeting both professional and home users. Their market position is supported by certified distributor status and a portfolio of partner clients. Technically, the website is built on WordPress with common libraries such as jQuery and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, and no security headers are detected, indicating room for improvement in security and compliance. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and contact transparency on the site. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

I love Hummus s.r.o. operates the website ilovekimchi.de, an e-commerce platform specializing in Korean fermented foods such as Kimchi. The company targets both B2B partners and retail customers, emphasizing certified quality products under strict IFS and BIO standards. The website is professionally designed, multilingual, and offers a range of products with clear pricing and availability. The business maintains a niche market position with a focus on health-conscious consumers and wholesale partnerships. Technically, the website leverages modern e-commerce infrastructure provided by Upgates, integrates multiple analytics and marketing tools including Google Analytics 4, Microsoft Clarity, and Facebook Pixel, and uses standard web technologies such as Bootstrap and jQuery. Hosting is managed via Forpsi nameservers, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with proper cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is minimal but consistent with a small business profile. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and maintain regular audits of third-party scripts. The website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a positive user and business experience.

The website www.ilovekimchi.cz is an e-commerce platform operated by I love Hummus s.r.o., specializing in the sale of fermented food products, primarily Kimchi and related items. It targets health-conscious consumers interested in fermented foods and Korean cuisine. The site offers a range of products, recipes, and educational content, positioning itself as a niche player in the Czech Republic's healthy food market. The business model is retail e-commerce with subscription options and a focus on product quality and customer engagement. Technically, the website is built on the Upgates e-commerce platform and utilizes modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site is mobile-optimized, fast-loading, and employs standard web fonts and widgets to enhance user experience. Forms are validated using the Nette Framework, ensuring data integrity. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While some security headers are present, there is room for improvement by adding explicit Content-Security-Policy and other headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. Overall, the website presents a professional and trustworthy front for its business, with good content quality and technical implementation. The main risk lies in the lack of publicly available domain registration information, which could impact trust from a security and compliance standpoint. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency to bolster credibility.

Vosges Matin is a reputable regional news media organization serving the Vosges and Lorraine regions in France. The website offers continuous news coverage across various domains including local, national, and international news, sports, politics, economy, and environment. It operates on a subscription and advertising business model, supported by a professional digital presence including newsletters and mobile applications. The site is part of the EBRA Groupe, a known media group in France. Technically, the website employs modern web technologies such as Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with secure cookie practices. However, some security headers are not explicitly detected and could be improved. The site demonstrates good SEO practices and accessibility is basic but functional. From a security perspective, the site shows a mature approach to privacy compliance with GDPR-consistent cookie consent mechanisms and a clearly identified Data Protection Officer contact. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data limits domain registration verification, but the website content and business information strongly indicate legitimacy. Overall, Vosges Matin presents a trustworthy and professional digital news platform with solid privacy and security practices, though improvements in security headers and explicit security policies could enhance its posture further.

Le Progrès is a well-established French regional news media outlet focusing on national and regional news for the Rhône-Alpes and surrounding regions. The website serves a broad general audience with digital news content and advertising as its primary business model. It holds a strong market position as a leading regional news provider in Eastern France. Technically, the site employs modern web technologies including Google Tag Manager, Didomi for consent management, and Prebid.js for advertising, indicating a mature digital infrastructure. The site is mobile optimized and uses HTTPS with strong security headers, reflecting a good security posture. However, explicit privacy policies and terms of service pages are not evident in the provided content, which slightly impacts privacy compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

Le Républicain Lorrain is a prominent regional news media organization based in France, delivering continuous news coverage focused on Lorraine, France, and global events. The website offers a variety of services including news articles, videos, digital editions, and subscription models, targeting a general audience interested in regional and national news. It operates under the parent company EBRA Groupe, indicating a strong market position within the media sector. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, and a consent management platform (Didomi) to ensure compliance with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS, uses secure cookies, integrates Google reCAPTCHA for form protection, and manages user consent effectively. However, it lacks explicit security headers and a public security policy or vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and compliant with GDPR, with a solid security posture and a clear business model based on advertising and subscriptions.

L'Est Républicain is a well-established regional news media organization serving the Franche-Comté and Lorraine regions in France. The website offers continuous news updates, videos, digital editions, and subscription services, targeting a broad general audience interested in local and national news. It operates under the parent company EBRA Groupe, reflecting a strong market position in regional media. Technically, the website employs modern web technologies including Google Tag Manager, Didomi consent management, and Google reCAPTCHA to ensure user privacy and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and secure form handling, although some HTTP security headers could be improved. Privacy compliance is robust, with clear GDPR adherence and a visible Data Protection Officer contact. Overall, the website is trustworthy, professional, and safe for general audiences.

Les Dernières Nouvelles d'Alsace (DNA) is a prominent regional news media organization serving Strasbourg, Alsace, and broader France. The website provides continuous live news updates covering local, national, and international events including politics, sports, economy, and environment. It holds a strong market position as a leading regional news source with a large audience base. The business model centers on digital news publishing supported by advertising revenue and mobile app distribution. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The infrastructure supports mobile optimization and integrates multiple advertising and analytics services for monetization and user insights. Security posture is robust with HTTPS enforcement, security headers, and privacy policies in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good content quality and compliance, suitable for its media industry role.

L'Alsace is a regional news media organization providing continuous local, national, and international news coverage focused on the Alsace region in France. The website offers a broad range of news categories including society, sports, politics, economy, health, and environment, targeting a general audience interested in regional and national news. The site is well-branded and maintains consistent messaging aligned with its media focus. Technically, the website employs modern JavaScript frameworks and tracking technologies such as Google Tag Manager and Didomi for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, ensuring secure access for users. However, explicit privacy policies and contact information are not clearly presented, which may impact user trust and compliance. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and incident response details. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security best practices.

Groupe EBRA is the leading French regional daily press group, publishing multiple well-known regional newspapers and offering advertising, audiovisual, and event services. The website reflects a professional media company with a strong market position in France. The technical infrastructure uses modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms, indicating digital maturity. Security posture is good with HTTPS and security headers, but lacks explicit published security policies or incident response information. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trust. Overall, the website is well-designed, content-rich, and trustworthy for its audience.

Auchan is a major French retail and e-commerce company providing a wide range of products including groceries, household goods, electronics, and more. The website offers multiple shopping channels such as drive, click & collect, and home delivery, targeting general consumers in France. The site is professionally designed with clear navigation and strong branding consistency, reflecting its enterprise-level market position. Technically, Auchan.fr uses modern JavaScript libraries, asynchronous loading, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized and performs well with responsive design and lazy loading techniques. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website's content and external links support legitimacy. Overall, Auchan.fr is a high-quality, trustworthy retail website with good privacy and security practices.

Gîtes de France® is a well-established French vacation rental platform offering a variety of accommodations including gîtes, chambres d'hôtes, camping, and citybreaks. The website targets families, couples, and groups seeking quality vacation rentals across France, leveraging a recognized quality label to build trust. The platform provides booking services, thematic stay inspirations, and gift cards, positioning itself as a leader in the French hospitality sector. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security-wise, the site uses HTTPS and secure Drupal forms but lacks visible advanced security headers, suggesting room for improvement. The absence of WHOIS registration data is a concern but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly platform for vacation rental bookings in France.

The website www.carrefour.com is currently inaccessible due to a Cloudflare security challenge page, which prevents access to any meaningful content or metadata. The WHOIS lookup for the domain failed, returning no registration data, which is unusual for a major global retail brand. Due to these access restrictions, no business, contact, or compliance information could be extracted or verified. The lack of accessible content and metadata severely limits the ability to assess the website's technical infrastructure, security posture, or privacy compliance. The domain's legitimacy is questionable based on the absence of WHOIS data, although this may be due to privacy protection or registry issues. Overall, the website's risk profile is elevated due to the lack of transparency and accessibility.

SUEZ is a global enterprise specializing in water and waste management, offering circular economy solutions to local authorities and businesses. The company positions itself as an expert in environmental services, supporting sustainable development and resource management. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to a corporate audience. Technically, the site employs modern web standards, including HTTPS, security headers, and optimized fonts, ensuring a secure and performant user experience. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the website is trustworthy and well-maintained, but the lack of WHOIS data raises questions that warrant further registrar-level verification.

Musée d'Aquitaine is a prominent cultural institution in Bordeaux, France, dedicated to preserving and showcasing the history and heritage of Bordeaux and the Aquitaine region. The museum offers a variety of exhibitions, educational programs, and online resources targeting a broad audience including families, students, researchers, and tourists. It operates under the auspices of the City of Bordeaux, reflecting its important role in regional cultural preservation. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery, Bootstrap, and specialized tools like Piano Analytics for visitor tracking and Tarteaucitron for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a smooth user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is not publicly available, likely due to privacy protection, which is justified given the nature of the institution. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen the security posture and user trust.

The Eurométropole de Metz website serves as the official digital presence of the metropolitan government entity responsible for the Metz region in France. It provides comprehensive information about the territory, administrative structures, public services, urban development projects, ecological commitments, cultural activities, tourism, and economic development. The site targets residents, businesses, students, and visitors, offering a broad range of resources and service information. The business model is that of a public sector government authority focused on regional governance and service delivery. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, SoundManager2, OpenLayers for mapping, and the Foundation CSS framework. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. Privacy compliance is strong, featuring a GDPR-compliant cookie consent mechanism and a detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent respecting Do Not Track signals. However, no explicit security headers were detected in the provided data, and no published security policy or incident response contacts were found. No vulnerabilities or exposed sensitive data were identified. The WHOIS data is unavailable due to privacy protection, which is typical and justified for a government entity. External links are primarily to related government or regional partner domains, and analytics are handled via Matomo with transparent user consent. Overall, the website presents a trustworthy, professional, and well-maintained digital presence for the Eurométropole de Metz. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen security posture and user trust.

The École Supérieure d'Art et Design de Saint-Étienne (ESADSE) is a French higher education institution specializing in art and design. The website serves as an informational portal for students, educators, researchers, and partners, providing access to academic programs, research activities, alumni networks, and partnerships. The site also integrates with the Cité du design platform, which consolidates new content and news. The business model is focused on education and cultural development within the art and design sector, targeting a regional and international audience interested in these fields. Technically, the website employs a legacy jQuery-based stack with additional libraries such as Font Awesome and highlight.js. Cookie consent is managed via tarteaucitron.js, indicating awareness of privacy regulations. The site is hosted by OVH, a reputable French hosting provider. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern web standards. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers and incident response information. No security.txt or vulnerability disclosure mechanisms are present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is adequate but could benefit from enhancements in headers, policies, and transparency. The overall risk is low given the educational nature of the site and absence of suspicious elements. Strategic recommendations include improving security headers, publishing privacy and security policies, enhancing mobile and accessibility features, and formalizing incident response procedures to strengthen trust and compliance.

École supérieure d’art et de design des Pyrénées is a French higher education institution specializing in art and design education, serving students primarily in the Pyrénées region. The website presents a professional and well-structured platform offering information on admissions, courses, diplomas, international programs, and public workshops. The institution maintains an active presence with regular updates on events and exhibitions, supported by partnerships with cultural and governmental organizations. Technically, the website employs modern JavaScript libraries and external services such as Mapbox for mapping, Plausible for analytics, and Sendinblue for newsletter management, hosted on OVH infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms, which are important for GDPR compliance. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

éditions B42 is a specialized French publishing company focusing on books and journals related to design, typography, and contemporary cultural studies. The company operates a professional e-commerce website built on WordPress and WooCommerce, offering a wide catalog of publications and related objects. The website targets readers, designers, academics, and students interested in these niche fields. The domain is well-established since 2008, registered with a reputable registrar, and the website content aligns with the business profile, indicating a legitimate and credible operation. Technically, the site uses modern web technologies and supports multilingual content via WPML, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

Alliance Digitale is a French non-profit industry association dedicated to structuring and defending the digital marketing sector in France. It brings together experts, advertisers, agencies, and technology providers to promote innovative and responsible solutions, ensuring a reliable and high-performing industry. The organization offers certifications such as the Privacy Protection Pact and Drive to Trust, publishes reports and guides, and hosts events and webinars to foster collaboration and knowledge sharing. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement with its members and the broader industry. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is good with HTTPS and no obvious vulnerabilities, though some security headers and incident response policies are not explicitly published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, though improvements in transparency and compliance would enhance its security and privacy posture.

Joker Kazino is an established online casino platform operating primarily in Latvia, offering a variety of popular slot games, jackpots, and bonuses targeted at adult gamblers. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries such as jQuery and Moment.js, Bootstrap for styling, and Google Tag Manager for analytics and marketing integration. Cookie consent is managed through Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages suggests gaps in full regulatory compliance. Security posture is adequate with HTTPS enforced and no WAF blocking detected, but could be improved by adding security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

AFM-Téléthon is a prominent French non-profit organization dedicated to combating rare diseases through fundraising, research support, and patient assistance. The website reflects a mature digital presence with comprehensive content targeting families affected by rare diseases, donors, researchers, and healthcare professionals. It offers donation mechanisms, educational resources, and extensive information about its activities and subsidiaries. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and headers could be enhanced. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, the site is professional, trustworthy, and well-aligned with its mission.

NeuroEros is a small French health and wellness blog launched in 2023, focusing on sexuality, mental health, slimming, and beauty. The site provides educational content, product reviews, and guides aimed at a general adult audience interested in improving their well-being and sexual health. The business model appears to rely on content publishing with affiliate marketing. Technically, the website is built on WordPress using Elementor, hosted with Cloudflare DNS, and employs HTTPS with good SSL configuration. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response policies. Privacy compliance is good with GDPR-aligned policies and cookie consent. No suspicious or malicious content or domains were detected. Overall, the website is professional and trustworthy, though improvements in security practices and explicit contact information could enhance credibility and safety.

Onestar Press is a niche e-commerce business specializing in the sale of artists' books, prints, and multiples, operating since 2000. The website is professionally designed using Shopify and React technologies, providing a good user experience with clear navigation and mobile optimization. The business targets collectors and enthusiasts of contemporary art publications, offering a curated selection of unique and special edition works. Despite the professional presentation, the WHOIS data for the domain is missing, indicating either a recent registration or privacy protection, which conflicts with the claimed business history. The website includes comprehensive legal pages and contact information, supporting business credibility. Technically, the site uses modern frameworks and is hosted on Shopify, ensuring reliable infrastructure and moderate performance.

Offline Online is a niche online journal affiliated with ECAL, focusing on art, design, and cultural content. The website offers interviews, portfolios, workshops, exhibitions, and travel reports primarily in French, targeting a general audience interested in creative fields. The business model centers on content publishing and cultural journalism with a small-scale operation linked to an educational institution. Technically, the site is built on WordPress with a modern tech stack including jQuery, FullPage.js, Bootstrap, and performance optimizations via WP Rocket. It is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is solid with HTTPS and local Matomo analytics, but missing security headers and explicit policies reduce compliance maturity. No privacy or cookie policies are found, and contact information is not clearly provided, which impacts trust and privacy compliance scores. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

ECAL Typefaces is a digital platform operated by the Ecole cantonale d’art de Lausanne (ECAL), showcasing typefaces created by students and alumni. The website serves as a resource for designers and educators, offering previews, licensing information, and stories related to typography. The platform leverages WordPress with WooCommerce for e-commerce functionality, supported by SEO and performance optimization plugins. The site is well-structured, mobile-optimized, and uses HTTPS with a cookie consent mechanism, reflecting a mature digital presence. Security measures include Google reCAPTCHA and Matomo analytics, though some improvements in security headers and plugin dependencies are recommended. Overall, the website is trustworthy, professionally maintained, and aligned with the educational mission of ECAL.

BetBolt.io is a website associated with Hi Steaks Entertainment Limited, a company registered in Comoros in 2022. The site appears to be related to online gambling or betting services, as suggested by the domain name and logo. However, direct access to the website content is blocked by a Cloudflare Turnstile captcha challenge, preventing detailed content analysis. The site uses Cloudflare for security and performance, and Google Fonts for typography. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available on the accessible page. The domain registration data is transparent and consistent with a small entertainment business, but the lack of accessible content and policies limits trust and compliance assessment.

Nomorewords is a small Amsterdam-based label services company specializing in music production, promotion, and distribution services including vinyl, CD, cassette manufacturing, webshop and Bandcamp management, order fulfilment, and licensing administration. The company targets musicians, bands, and record labels seeking comprehensive label support. Technically, the website employs a modern JavaScript stack with jQuery, Bootstrap, and media playback libraries, providing a responsive and user-friendly experience. However, some accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enforced and secure login forms, but lacks published privacy and cookie policies, security headers, and terms of service, which are critical for compliance and trust. WHOIS data is unavailable, which reduces domain trustworthiness despite professional site content. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency.

Freie Universität Berlin is a leading German excellence university established in 1948, offering over 150 academic programs across twelve faculties and three central institutes. The website serves a diverse audience including students, researchers, staff, and international partners, providing comprehensive information on study programs, research, international cooperation, and campus services. The site is well-structured, professionally designed, and supports accessibility and mobile optimization. Technically, it is built on a Ruby on Rails framework with Infopark CMS Fiona, leveraging modern web standards and security best practices such as HTTPS and security headers. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website demonstrates a strong security posture with no detected vulnerabilities or suspicious content, reflecting the institution's credibility and trustworthiness.

webDOMU.cz is a Czech Republic based SaaS platform specializing in providing web solutions for housing cooperatives (bytová družstva) and homeowners associations (SVJ). Founded in 2014, the company offers a comprehensive portal that enables easy creation and management of websites tailored to the needs of these communities. Their services include online voting, document sharing, automated notifications via email and SMS, and additional financial and insurance services. The platform targets a niche market with a strong local presence and a loyal customer base of over 20,000 users. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, integrates multiple analytics tools including Google Analytics and Matomo, and uses HTTPS to secure data transmission. However, the backend CMS appears custom-built with no explicit mention of security frameworks or certifications. Security posture is solid with encrypted data transmission and secure login forms, but lacks published security policies or incident response contacts. Privacy compliance is basic with cookie consent mechanisms and terms of service available, but no dedicated privacy policy or GDPR compliance statements were found. Overall, the website is professional, trustworthy, and well-positioned in its market segment, though improvements in security transparency and accessibility could enhance its maturity.

The International Fiscal Association (IFA) is a well-established non-governmental and non-sectoral international organization focused on the study and advancement of international and comparative fiscal law. Founded in 1938 and based in the Netherlands, IFA serves a global audience of tax professionals, academics, government officials, and judiciary members. The website reflects a professional and authoritative presence with comprehensive content about its congresses, research, awards, and membership services. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, and it is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.

ImperialMedia s.r.o. is a Czech advertising and digital agency offering comprehensive services including graphic design, web development, online marketing, photography, and advertising production. The company targets businesses across the Czech Republic, positioning itself as a professional and certified agency with national reach. Their website demonstrates a high level of digital maturity, utilizing WordPress CMS with modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well optimized for SEO, mobile responsiveness, and accessibility, providing a positive user experience. Security posture is solid with HTTPS and secure forms, though some HTTP security headers are missing and no explicit security policy or incident response information is published. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a trustworthy and professional small business agency, though the absence of WHOIS data slightly reduces domain trustworthiness.

GALFER is a medium-sized manufacturing company specializing in high-end braking systems for the automotive aftermarket, operating primarily in Spain with international partner sites. The website reflects a professional business presence with good content quality and clear navigation, targeting automotive commercial partners and customers. Technically, the site uses Umbraco CMS, integrates Google Tag Manager and reCAPTCHA for analytics and security, and implements cookie consent mechanisms aligned with GDPR. However, a visible server-side error message indicates backend issues that could expose sensitive information. Security posture is moderate with some best practices observed but lacks explicit security policies and incident response information. Overall, the website is functional and trustworthy but would benefit from backend fixes and enhanced security transparency.

GALFER is a specialized supplier of high-quality brake components, targeting both B2B and B2C customers primarily in Poland and supported by an international partner network. The website presents a professional and consistent brand image with clear navigation and relevant content focused on brake pads and dealer services. The technical infrastructure leverages modern tools such as Google Tag Manager and reCAPTCHA Enterprise, and is built on Umbraco CMS, indicating a mature digital presence. Security measures include HTTPS usage and CSRF protection, though explicit security headers are not detected, suggesting room for improvement. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, supporting GDPR adherence. Overall, the site is trustworthy and well-positioned in its market segment.

Regiontourist.cz is a Czech Republic-based online tourism platform established in 2009, offering curated accommodation listings, travel experiences, and regional travel tips. The platform targets tourists and service providers in the hospitality sector, providing a marketplace and content hub for travel planning within the Czech Republic. The website demonstrates a good level of content quality, with clear navigation, structured data for SEO, and active social media integration. Technically, it uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

ORGREZ Group, a.s. is a well-established private holding company specializing in the energy sector and environmental protection, operating since 1957. The company unites multiple subsidiaries focused on diagnostics, energy optimization, flue gas cleaning, heat production, and consulting services related to energy planning and decarbonization. Their market position is solid within Central and Eastern Europe, targeting businesses and organizations seeking sustainable energy solutions. The website reflects a professional corporate presence with clear branding and comprehensive service descriptions. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could enhance the technical posture. Performance is moderate, consistent with Webflow-hosted sites. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security policies, incident response information, and vulnerability disclosure reduces transparency. The WHOIS data is unavailable, limiting domain trust analysis, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate technical maturity. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to strengthen compliance and trust.

Le Relais des Fermes is a specialized mountain restaurant located at 1300 meters altitude in Megève, France, offering authentic Alpine cuisine and a warm, family-friendly atmosphere. The business operates primarily during the winter season and offers event privatization services for groups up to 100 people. The website is professionally designed, multilingual, and integrates modern web technologies including Google Tag Manager and Weglot for translation. Security measures such as HTTPS and Google reCAPTCHA are implemented, and privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data raises some concerns about domain transparency, although the website content and branding strongly indicate a legitimate hospitality business affiliated with Maison & Hotels Sibuet.

Palais de Tokyo is a prominent cultural institution based in Paris, France, dedicated to contemporary art. It is recognized as the largest center for contemporary art in Europe, offering exhibitions, performances, educational workshops, and a retail boutique. The website reflects a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, and incorporates privacy compliance tools such as tarteaucitron for cookie consent and Sibforms for newsletter subscriptions. The site is well-designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and publishing a security policy could enhance trust further. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a general audience interested in art and culture.

The Washington DC Calligraphers Guild is a non-profit organization established in 1976 that promotes the appreciation and practice of calligraphy. The website serves as an informational portal for beginners, skilled calligraphers, and those interested in hiring calligraphy services. The organization targets a niche audience passionate about calligraphy and related arts. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the site is professionally designed and mobile-optimized, it lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and incident response information are not evident, indicating room for improvement in security posture. The absence of WHOIS data limits the ability to fully assess domain legitimacy, but the website content and branding suggest a legitimate entity. Overall, the site provides good content quality and user experience but requires enhancements in privacy, security, and transparency to improve trust and compliance.

Unlock Book Fair is a niche cultural event organizer specializing in graffiti books and zines, hosting international exhibitors and collaborating with cultural institutions in Germany. The website is built on WordPress with a modern tech stack including Yoast SEO and UIkit, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security practices.

The Tag Conference website serves as a platform for an international cultural conference series focused on tagging and graffiti culture. It operates under the umbrella of Unlock Bureau, organizing events in various global cities and publishing related academic content. The site targets academics, artists, and cultural professionals interested in graffiti and tagging history and culture. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, hosted by Dinahosting s.l. It employs modern web technologies and marketing automation tools like Brevo (Sendinblue). Security posture is moderate with HTTPS enabled and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is minimal, limited to a generic email address. Overall, the site is professional and trustworthy within its niche but could improve compliance and security practices.

The website betbolt.com is currently inaccessible beyond a Cloudflare Turnstile CAPTCHA verification page, which blocks access to any substantive content. The domain is registered since 2014 with a long-term expiry and uses Cloudflare for DNS and security services. Due to the access restriction, no business descriptions, contact information, or policy documents are available for analysis. The site appears to rely on Cloudflare's security mechanisms to prevent automated traffic, but this also limits visibility into the site's actual offerings and trustworthiness. Technically, the site uses modern security tools such as Cloudflare Turnstile CAPTCHA and Cloudflare Insights for analytics, but lacks DNSSEC and visible security headers. The absence of privacy and cookie policies, as well as contact details, indicates poor privacy compliance and business transparency. The site's design and content quality cannot be assessed beyond the CAPTCHA page, which is minimal and functional but not user-friendly. Security posture is moderate due to the use of Cloudflare protections, but the lack of visible security headers and DNSSEC reduces overall security maturity. The domain registration is consistent and legitimate, but the lack of accessible content and policies limits trust. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the blocking mechanism and missing information. Strategic recommendations include enabling DNSSEC, publishing clear privacy and cookie policies, providing contact information, and improving site accessibility beyond the CAPTCHA challenge to enhance user experience and trust.

The École cantonale d'art de Lausanne (ECAL) is a prestigious Swiss higher education institution specializing in art and design, with a history dating back to 1821. The website serves as a comprehensive portal for prospective and current students, showcasing detailed program offerings, events, projects, and institutional information. The institution holds a strong market position in art and design education within Switzerland and internationally. Technically, the website employs modern tracking and analytics tools such as Google Analytics and Hotjar, integrates multimedia content via Vimeo, and uses responsive design principles to ensure accessibility across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though explicit security headers and published security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but lacking a dedicated privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's reputation.

Book Machine is a niche website focused on typography and publishing resources, powered by Onestar Press. It offers downloadable font and typography PDFs, targeting designers and publishing professionals. The website is hosted on the Cargo Collective platform and uses modern web technologies including HTTPS and YouTube embeds. However, it lacks comprehensive privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers are absent, though no critical vulnerabilities were detected. The WHOIS data is privacy protected, which is common for small businesses, and the domain appears legitimate based on website content and contact information. Overall, the site is functional but could improve in privacy compliance and security best practices.

Werken bij Belsimpel is a professionally maintained recruitment and employer branding website for Belsimpel, a well-established Dutch telecom e-commerce platform. The site offers comprehensive information about career opportunities, company culture, and featured vacancies, targeting job seekers interested in telecom and technology sectors. The business is positioned as a large player in the Dutch market with a focus on simplifying telecom product access and services. Technically, the website is built on WordPress with Elementor and several Jet plugins, optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

EdgeNext is a technology company specializing in cloud services, content delivery networks (CDN), security, and edge computing solutions tailored for emerging markets. The company positions itself as a leading provider with a strong global network and partnerships with major industry players. Their website demonstrates a mature digital presence with comprehensive product offerings and a focus on AI-powered edge solutions. Technically, the site uses modern JavaScript frameworks, integrates HubSpot marketing and analytics tools, and is optimized for performance and mobile devices. Security-wise, the site enforces HTTPS and advertises security features but lacks publicly disclosed incident response or vulnerability disclosure policies. The absence of WHOIS data is a notable anomaly that impacts domain trustworthiness. Overall, the website is professional, secure, and business-focused, suitable for enterprise clients seeking edge and CDN services.

Crisp.nl is an established online supermarket based in the Netherlands, founded in 2018 and operated by Fresh Food Ventures Group BV. The company offers a digital grocery shopping platform with a focus on fresh, quality products sourced directly from producers, providing next-day delivery across the country. Their market position is strong, having been recognized as the best online supermarket for three consecutive years, supported by a well-rated mobile app and a clear value proposition targeting consumers seeking convenience and quality. Technically, the website is modern, mobile-optimized, and uses Google Tag Manager for analytics and marketing, with a clean and professional design. Security posture is good with HTTPS enforced and a robust cookie consent mechanism, though no explicit security policy or incident response contacts are published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, supported by B Corporation certification. Recommendations include publishing a security policy, incident response contacts, and enhancing security headers to further strengthen security posture.