Medium-risk security reports

ZOL is a French digital agency specializing in custom web and mobile solutions, agile project management, consulting, UX/UI design, and data-driven digital transformation. Established since 2005 with a domain registered in 2008, the agency serves a diverse clientele including startups, SMEs, large groups, and communication agencies. Their market position is solid, supported by a portfolio of notable clients and a strong emphasis on bespoke digital craftsmanship. Technically, the website employs modern technologies such as PHP, Symfony, React, Docker, and integrates analytics tools like Google Tag Manager and Matomo. Hosting is provided by OVH, a reputable provider. The site is well-optimized for mobile and SEO, with a professional design and clear navigation, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy policy publication and security best practices. Strategic enhancements in these areas would strengthen compliance and security posture.

RightCapital is a financial planning software company offering an easy-to-use SaaS platform designed to simplify financial planning, enhance client engagement, and help financial advisors scale their practices efficiently. The company targets financial advisors and planners, providing advanced planning features, risk assessment tools, and workflow automation. The website is professionally designed, mobile-optimized, and demonstrates strong branding consistency. The technical infrastructure leverages modern web technologies including React and Gatsby, ensuring fast performance and good SEO. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the overall digital presence and content quality indicate a legitimate and professional business. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance trust and compliance.

Bitfortune is an established online crypto casino and sportsbook platform, founded in 2012, offering over 1,200 games including slots, live casino, and sports betting. The platform targets crypto gamblers and sports bettors, providing VIP rewards, promotions, and an affiliate program to enhance user engagement. The website demonstrates a consistent brand presence and a professional design tailored for adult users interested in crypto gambling. Technically, Bitfortune employs modern web technologies such as React and integrates multiple analytics and marketing tools including Google Tag Manager, Hotjar, and Microsoft Clarity. Hosting and DNS services are provided via Cloudflare, ensuring good performance and baseline security. However, DNSSEC is not enabled, and security headers are not visibly implemented, representing areas for security enhancement. Privacy compliance is weak, with no explicit privacy or cookie policies detected, which may pose regulatory risks. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, Bitfortune presents a moderate risk profile with opportunities to improve privacy compliance and security posture.

The Coding Machine is a French-based technology company specializing in custom web and mobile application development, serving entrepreneurs, startups, and large enterprises. Established in 2004, it has a mature market presence and offers a comprehensive suite of services including technical conception, UX/UI design, development, maintenance, audits, and generative AI solutions. The company emphasizes adherence to deadlines and budgets, positioning itself as a reliable partner in digital transformation projects. Technically, the website is built on WordPress with a modern tech stack including Laravel, Symfony, React, Vue.js, and various No Code and blockchain technologies, hosted on Amazon AWS. The site is well-optimized for SEO and mobile, with good performance and accessibility standards. Security posture is solid with HTTPS, domain locks, and CAPTCHA-protected forms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional, trustworthy, and technically competent organization with a strong digital presence.

MOJAM is a technology company specializing in developing game services and platforms, notably for CS2 gamers, with a global user base spanning 168 countries. The company collaborates with esports stars and sponsors tournaments, positioning itself as a significant player in the gaming industry. Their website reflects a mature digital presence with modern technologies such as WordPress CMS, Google Tag Manager, and Three.js for 3D content, ensuring a rich user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, MOJAM demonstrates a strong business credibility and technical maturity with a professional and trustworthy online presence.

The Foundation of the Consortium of Multiple Sclerosis Centers (CMSC Foundation) is a well-established non-profit organization dedicated to supporting healthcare providers, researchers, and medical students specializing in Multiple Sclerosis (MS). Founded in 2006, the foundation offers scholarships, awards, mentorship programs, and research funding to advance comprehensive MS care and professional development. The organization holds a strong market position within the North American MS healthcare community and maintains active engagement through social media and detailed program initiatives. Technically, the website is built on WordPress with common plugins and is hosted with Cloudflare DNS services, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and professional content.

The website at kit-react.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents extraction of any meaningful business, technical, or security information from the site itself. The domain is registered with GoDaddy nameservers, but no registrant or organizational details are available to verify legitimacy or business claims. Due to the lack of accessible content, no privacy, cookie, or security policies are found, and no contact information is available. The site appears to be either restricted or misconfigured, resulting in a poor user experience and lack of trust signals. Technical infrastructure details are minimal, and no modern technologies or frameworks can be identified from the provided HTML.

The domain lesgarconsfaciles.com is registered since 2011 with IONOS SE and hosted on OVHcloud. However, the website is currently not installed and only displays a default OVHcloud placeholder page indicating no active content. There is no metadata, business information, or contact details available on the site. The technical infrastructure is minimal, with no CMS or frameworks detected, and no security headers or HTTPS status provided. The absence of privacy, cookie, and terms of service policies indicates non-compliance with common data protection regulations. Overall, the website lacks any meaningful content or business presence, resulting in a low trust and credibility score.

Kofi Kofi is a Czech Republic-based coffee business operating multiple mobile coffee trucks across various cities, complemented by a roasting facility and an e-commerce platform. The company targets general coffee consumers and emphasizes convenience and quality through its mobile retail model. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site is built on WordPress with common plugins and integrates Google Analytics, Facebook Pixel, and Mapy.cz for mapping services. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, though some security headers are missing. Privacy compliance is well addressed with GDPR-aligned policies and user consent options. Overall, the website is trustworthy, well-structured, and provides a good user experience without any detected malicious or adult content.

LevneiPhony.cz is an e-commerce business specializing in the sale of affordable used and refurbished Apple iPhones and related accessories, targeting consumers primarily in the Czech Republic. The website offers a variety of iPhone models in different conditions, including new, unpacked, nearly new, and used, with warranty and money-back guarantees, enhancing customer trust. The business model focuses on providing premium quality devices at significantly reduced prices, appealing to budget-conscious customers seeking Apple products. The site is well-structured with clear navigation and product categorization, supporting a positive user experience.

Eqvista is a specialized equity management and valuation service provider founded in 2018, targeting startups and private companies. The company offers a SaaS platform combined with expert advisory services, including cap table management, 409A valuations, financial modeling, and various valuation services such as software, IP, gift and estate tax, and portfolio valuations. Eqvista has established a strong market position with over 20,000 customers and significant assets under administration, supported by professional certifications and a robust digital presence. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and Cloudflare DNS. The site demonstrates good SEO practices, mobile optimization, and a professional design that supports a positive user experience. Analytics and marketing tools are extensively used, indicating a mature digital marketing strategy. From a security perspective, the site uses HTTPS with a good SSL configuration and Cloudflare DNS but lacks DNSSEC and some advanced security headers like Content Security Policy. There is no visible security policy or incident response contact, which could be improved. No critical vulnerabilities or blocking mechanisms were detected, and no sensitive data exposure was found. Overall, Eqvista presents a trustworthy and professional online presence with strong business credibility and a good security posture. Strategic improvements in DNS security and formal security policies would enhance their security maturity and compliance posture.

EastBiz.com, Inc., operating the IncParadise.net website, is a specialized service provider focused on business incorporation and registered agent services primarily in Nevada and Wyoming. The company offers a comprehensive suite of services including corporation and LLC formation, registered agent services, mail forwarding, and business account setup. With a domain age dating back to 2009 and clear business contact information, the company positions itself as a trusted and established player in the niche market of US business formation services. Technically, the website is built on WordPress and leverages a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, and other marketing and analytics tools. The site is well-structured with good SEO practices and mobile optimization, although some accessibility features could be enhanced. Hosting and DNS are managed through reputable providers including GoDaddy and Cloudflare. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks several important HTTP security headers and does not have DNSSEC enabled. There are no visible vulnerabilities or exposed sensitive data, but improvements in security headers and DNS security are recommended to strengthen the security posture. Overall, the website is professional, trustworthy, and provides clear business information and contact channels. The extensive use of tracking and marketing tools indicates active customer engagement and lead generation efforts. The risk profile is low with no signs of malicious activity or content safety concerns.

CleverMaps is a technology company specializing in location intelligence solutions designed to provide actionable insights for smarter business decisions. Their website positions them as a trusted provider serving industries worldwide, focusing on delivering data-driven analytics through a SaaS model. The company maintains a professional online presence with consistent branding and a clear value proposition centered on location analytics. Technically, the website is built using modern frameworks such as Framer and integrates popular analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Mailchimp. While the site is accessible and well-structured with good mobile optimization, it lacks visible privacy and cookie policies, which impacts its privacy compliance posture. Security headers are not evident, and SSL configuration details are not available from the provided data, suggesting room for improvement in security best practices. The WHOIS data is privacy protected, which is common for tech companies but limits transparency. Overall, the website demonstrates moderate digital maturity with a solid business focus but requires enhancements in privacy disclosures and security configurations to strengthen trust and compliance.

Talent Kompas is a Czech Republic based small business specializing in talent management, leadership, and personal development products and services. Their offerings include talent tests, personal readings, e-books, and corporate workshops aimed at individuals and companies seeking to identify and develop their natural talents and strengths. The website is professionally designed using WordPress and Elementor, with WooCommerce powering e-commerce functionalities. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Smartlook, and Ecomail, indicating a mature digital marketing approach. Security posture is good with HTTPS enforced and use of reCAPTCHA, though security headers and explicit policies are absent. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service in the provided content. Overall, the domain registration data is consistent and supports the legitimacy of the business.

MÁMA JOB rodičům, z.s. is a Czech non-profit organization dedicated to supporting parents, especially mothers, in returning to the workforce after parental leave. The organization offers educational courses, counseling, and unique tools such as the Inklumetr evaluation tool for employers to measure workplace inclusivity and flexibility. Their services include online courses like the Restart Akademie, free e-books, motivational podcasts, and employer-focused programs. The website is professionally designed, localized in Czech, and demonstrates a strong commitment to GDPR compliance and user privacy. Technically, the site is built on WordPress with WooCommerce and Sensei LMS plugins, integrating modern marketing and analytics tools. Security posture is good with HTTPS and consent-based script blocking, though additional security headers and DNSSEC could enhance protection. Overall, the site presents a trustworthy, well-established non-profit with a clear mission and active engagement with corporate partners and the community.

Cheqly is a fintech company founded in 2021 that offers US business banking solutions primarily targeting startups and small businesses. It operates as a neobank providing online US business accounts, venture debt, and partners with companies like IncParadise and Eqvista to offer company incorporation and equity management services. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a modern digital infrastructure built on WordPress with integrations such as Google Tag Manager and reCAPTCHA. Security posture is solid with HTTPS enforced and domain registration locked, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is partially addressed with a privacy and cookie policy present but lacking a consent mechanism. Overall, Cheqly presents a trustworthy and legitimate fintech service with room for improvement in security transparency and privacy controls.

Planet Express is a medium-sized logistics and package forwarding service provider established in 2001, offering US address provision and international package forwarding with consolidation services. The company targets international shoppers and businesses seeking to shop in US stores and ship globally. The website is built on WordPress with modern SEO and analytics integrations, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and domain registration protections, though it lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive policies and a cookie consent mechanism. Overall, the site is professional, trustworthy, and technically sound, supporting its business operations effectively.

Thrill.com operates as an online crypto casino and sports betting platform, offering a variety of casino games, premium slots, and crash games with seamless cryptocurrency transactions. The platform targets adult users interested in gambling and crypto-based betting, positioning itself as a future-forward service in the online gaming industry. The website is professionally designed with a modern UI, leveraging technologies such as SvelteKit and Cloudflare for hosting and security. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security measures include HTTPS and Cloudflare WAF protection, but there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates moderate technical maturity and business credibility but requires enhancements in privacy compliance and security posture to strengthen trust and regulatory adherence.

Salford Social Value is a community-focused non-profit organization aiming to foster a cultural shift in Salford by encouraging local organizations to contribute positively to social, environmental, and economic wellbeing. The website serves as a platform to showcase their initiatives, case studies, and ways to get involved, targeting local stakeholders and organizations. The digital infrastructure is built on WordPress with modern SEO and GDPR compliance plugins, ensuring a professional and accessible user experience. Security measures include HTTPS and Google reCAPTCHA integration, though explicit security policies and headers could be improved. The WHOIS data is unavailable due to domain naming rules issues, which raises some concerns about domain registration legitimacy, but the website content and design indicate a legitimate and trustworthy operation. Overall, the site is well-structured, informative, and compliant with privacy regulations, serving its community-oriented mission effectively.

RI OKNA is a well-established Czech manufacturer specializing in windows and doors, with nearly 30 years of experience and a strong market presence in the Czech Republic and EU. The company offers a wide range of products made from various materials including plastic, wood, aluminum, and composite materials, supported by customer service and installation offerings. The website reflects a mature digital presence with multilingual support and a professional design. Technically, the site is built on WordPress with modern frameworks and includes multiple marketing and analytics tools. Security posture is adequate with HTTPS and secure forms, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness. Overall, the site is professional and trustworthy, serving a broad general audience in the manufacturing sector.

Ferrino.cz is a professional e-commerce website specializing in the retail of outdoor equipment such as tents, sleeping bags, backpacks, and apparel, primarily targeting customers in the Czech Republic and Slovakia. The site serves as the exclusive importer and retailer of Ferrino brand products in these markets, offering a comprehensive product catalog, rental services, and customer support. The website demonstrates a solid market position with a focus on outdoor enthusiasts and professionals. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools, with good mobile optimization and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the website content and branding appear legitimate and professional. Overall, the site is well-structured, privacy compliant, and trustworthy for its business domain.

Bella Rose is a Czech Republic-based e-commerce retailer specializing in Scandinavian home decorations and lifestyle accessories. The website offers a wide range of products including seasonal collections, gifts, and home textiles, targeting consumers interested in stylish and cozy home atmospheres. The company positions itself as an expert in creating home ambiance with a focus on quality and design. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. It implements cookie consent mechanisms and HTTPS for secure browsing. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance documentation and security best practices.

AiVision, s.r.o. is a Czech Republic based technology company specializing in web development, e-commerce solutions, and IT services with over 21 years of market presence. The company offers a comprehensive portfolio including website creation, web design, database applications, SEO, hosting, and WordPress security services. Their market position is that of an established local provider focused primarily on Prague and surrounding regions. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for marketing and tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, though business legitimacy is supported by consistent contact information and client references. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in security transparency and WHOIS data availability.

SOMFY Group is a global leader in home and building automation, specializing in motorization and control solutions for openings and closures. The company operates in over 59 countries and emphasizes sustainability and digital innovation. Their website reflects a mature digital presence with comprehensive corporate content, including annual reports and sustainability initiatives. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and tracking tools, hosted likely via Akamai CDN. Security posture is good with HTTPS enforced and a dedicated cybersecurity reporting channel, though explicit security headers are not detected. Privacy compliance is strong with clear cookie consent and privacy policies in French, aligned with GDPR. The domain WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

SOMFY Connect is a digital platform focused on enabling users to activate and manage connected smart home products, primarily through the TaHoma app ecosystem. The website serves as a portal for downloading apps and accessing smart home systems, targeting end consumers interested in home automation. The brand is established and professional, with a clear focus on IoT and smart home technology. Technically, the site uses a mix of JavaScript libraries including jQuery and TagCommander for tracking and performance monitoring, hosted on a secure HTTPS platform. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and updated libraries. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is functional and moderately mature but requires improvements in privacy compliance and domain legitimacy verification.

Somfy PRO CZ&SK is a professional B2B web portal serving Somfy brand resellers, manufacturers, and distributors in the Czech and Slovak markets. The portal provides comprehensive product catalogs, technical specifications, pricing, manuals, and training information, positioning itself as a key resource for Somfy's professional partners. The website reflects a medium-sized manufacturing business with a consistent brand presence and a focus on B2B engagement. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and YUI, and implements responsive design for mobile users. The infrastructure supports good performance and SEO practices, although some accessibility features could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract significantly from the overall legitimacy of the business. Overall, Somfy PRO CZ&SK presents a trustworthy, professional, and well-maintained digital presence suitable for its B2B audience. Strategic improvements in security headers, incident response transparency, and direct contact information visibility would further enhance its security posture and business credibility.

Del Monte Foodservice is a well-established B2B foodservice supplier offering a wide range of produce, broths, and snacks to professional foodservice customers. The company leverages its long history and brand recognition to maintain a strong market position. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to its target audience. Technically, the site is built on Drupal 9 with integrations of HubSpot forms and Google Analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence, though WHOIS data absence warrants further verification.

Parlamento2030 is a specialized platform developed and supported by Political Watch and the Spanish Ministry of Foreign Affairs to provide transparent, accessible information on parliamentary activities related to the Sustainable Development Goals (SDGs) in Spain. The platform leverages advanced automatic tagging technology to classify and present parliamentary data, enabling researchers, policymakers, journalists, and the public to monitor progress on the Agenda 2030. The website is well-structured, professionally designed, and offers multilingual support, enhancing accessibility and user engagement. Technically, the site is built using modern frontend technologies such as Vue.js and Vite, ensuring a responsive and performant user experience. While no explicit CMS or hosting provider information is available, the site demonstrates good SEO practices and mobile optimization. Security-wise, HTTPS is enforced, but the absence of visible security headers and vulnerability disclosure mechanisms suggests room for improvement in hardening the platform against potential threats. The security posture is moderate with no evident vulnerabilities or exposed sensitive data, but the lack of detailed WHOIS information due to registrar restrictions limits full trust verification. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Business credibility is supported by government affiliation, open source transparency, and clear contact information. Overall, Parlamento2030 presents a trustworthy, well-maintained platform with a clear mission and target audience. Strategic recommendations include enhancing security headers, adding a security.txt file, improving accessibility features, and maintaining regular audits of third-party components to sustain and improve the security and compliance posture.

YEET.com operates as an online crypto casino platform offering a variety of gambling games including classic slots, live casino, blackjack, roulette, baccarat, and original game shows. The platform targets adult users interested in crypto-based gambling, providing instant deposits and a smooth gaming experience. The business appears to be established with a domain age dating back to 2003, indicating maturity in the online gambling market. YEET.com positions itself as a niche crypto casino operator with a focus on provably fair gaming and regulatory compliance as evidenced by the ANJ Seal displayed on the site. Technically, the website leverages modern web technologies including React and Material UI for frontend development, with integrations for customer support (Intercom), payment facilitation (Moonpay), and marketing/analytics (Twitter tracking). The site is hosted with infrastructure linked to Amazon Registrar and AWS DNS services, ensuring reliable availability. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, which could be improved. The presence of a provably fair gaming page and regulatory seal indicates some level of compliance and trustworthiness. No direct contact information or security policies were found, suggesting room for improvement in transparency and incident response readiness. Overall, YEET.com presents a professional and functional crypto casino platform with moderate security posture and good business credibility. The site is suitable for adult users interested in crypto gambling but should enhance security headers and publish clearer security and incident response policies to strengthen trust and compliance.

MojeTehotenstvi.cz is a Czech-language community website focused on pregnancy, childbirth, parenting, and related health topics. It offers forums, pregnancy diaries, articles, multimedia content, and clubs for mothers and parents. The site is built on Drupal 8 and integrates Google Analytics and Adsense for tracking and monetization. However, the site suffers from spammy user-generated posts promoting online pharmacies, which undermines content quality and trust. No privacy or cookie policies are clearly presented, and WHOIS data is unavailable, indicating privacy protection or registration issues. The technical infrastructure is moderate with responsive design but lacks visible security headers and comprehensive privacy compliance. Overall, the site serves a niche audience but requires improvements in security, content moderation, and compliance to enhance trust and user safety.

The website represents the National eTwinning Support Service Spain, an official educational platform under the Erasmus+ program of the European Union. It facilitates collaboration among teachers and students across Europe through project-based learning and resource sharing. The platform is positioned as a trusted national service with a clear educational mission and a medium-sized operational scale. Technically, the site is built on WordPress with Elementor and JetEngine plugins, employing modern web technologies and privacy-conscious analytics via Matomo. The site enforces HTTPS and includes accessibility features, contributing to a good user experience. However, explicit privacy and cookie policies are not found, and contact information is not prominently displayed, which slightly impacts privacy compliance and user trust. Security posture is good but could be improved by adding security headers and formal incident response documentation. Overall, the domain registration and WHOIS data align well with the business purpose, indicating legitimacy and trustworthiness.

The website razed.com is currently inaccessible due to a Cloudflare security challenge page that blocks access to any actual content. The domain is long-registered since 2004 with a stable registration status, indicating legitimacy. However, no business information, contact details, or policies are visible on the page. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, but no further technologies or CMS are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the use of Cloudflare suggests a baseline security layer. Overall, the site cannot be properly evaluated for content quality, privacy compliance, or business credibility due to the blocking mechanism.

JUDr. Tomáš Philippi operates a specialized legal practice in the Czech Republic focusing on real estate, civil, commercial, family, and copyright law. The firm is well-established since 2006 and holds a reputable position in the market, notably through contributions to real estate legislation and education. The website serves as a professional portal presenting the firm's services, contact information, and related real estate educational resources. Technically, the website is basic but functional, with minimal modern enhancements and limited mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and there are no published privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

The website 'Votre annuaire ETP Maladies Rares' serves as an educational and directory platform focused on Therapeutic Patient Education (ETP) for rare diseases. It provides patients, families, and healthcare professionals with resources, videos, and guides to better manage chronic illnesses. The site is positioned as a niche healthcare education resource in France, founded in 2017 and hosted on WordPress.com. The content is well-structured, relevant, and consistent with healthcare education standards, referencing authoritative organizations such as the WHO and French health authorities. Technically, the site leverages WordPress CMS with standard plugins and Google Fonts, hosted by Automattic Inc. Performance and mobile optimization are moderate to good, though accessibility and SEO are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with a legal mentions page but no explicit cookie consent mechanism or detailed privacy policy. Security evaluation shows no critical vulnerabilities or malicious indicators, but improvements are recommended in security headers and privacy transparency. The absence of direct contact emails or phone numbers limits business credibility slightly, though the site maintains moderate trustworthiness through authoritative content and consistent branding. Overall, the website is a functional, safe, and informative resource for its target audience but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and compliance posture.

Transition Maladies Rares is a specialized healthcare resource website dedicated to supporting the transition of patients with rare and chronic diseases from pediatric to adult care. The site offers a comprehensive collection of information, tools, projects, and professional resources to facilitate this critical healthcare transition. It is supported by the NeuroSphinx initiative and associated with recognized healthcare institutions in France. The website targets patients, families, and healthcare professionals involved in rare disease management. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and FontAwesome, and integrates Google reCAPTCHA for form security. The site is well-structured, mobile-optimized, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and spam protection, though some security headers are missing and privacy compliance could be enhanced with explicit consent mechanisms. Overall, the domain registration and WHOIS data align well with the website's content and business history, indicating legitimacy and trustworthiness.

Maladies Rares Infos Services is a French national non-profit organization providing information, orientation, and support services related to rare diseases. The website serves patients, caregivers, and healthcare professionals with comprehensive resources, including general information, treatment options, expert networks, and a community forum. Supported by the French Ministry of Health and notable non-profit partners such as AFM Téléthon and Fondation Groupama, the organization holds a reputable position in the healthcare sector in France. Technically, the website employs modern web technologies including Bootstrap 5, Masonry layout, Google Tag Manager for analytics, and Calendly for appointment scheduling. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trust slightly, but the strong branding, government backing, and transparent content mitigate concerns. Overall, the site is safe, professional, and trustworthy with room for security enhancements. Strategically, the organization should focus on improving privacy compliance by implementing cookie consent, publishing security policies, and enhancing WHOIS transparency to strengthen trust and compliance posture.

Finby is a European-focused payment solutions provider specializing in secure, scalable cross-border payment services tailored for e-commerce businesses. Their offerings include card payments, local payment methods, business accounts, and a merchant portal, positioning them as a niche player in the European payment processing market. The company was founded in 2012 and maintains a professional online presence with a modern, well-structured website optimized for mobile and SEO. Technically, the site is built on WordPress with common plugins and hosted on infrastructure using Microsoft Azure DNS. Security posture is strong with HTTPS enforced and PCI DSS certification evident, though some security headers and DNSSEC are not implemented. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Contact is primarily via web forms, with social media presence on LinkedIn and Instagram. Overall, Finby demonstrates a mature digital infrastructure and credible business model with a high trustworthiness rating.

Access-me.software presents itself as a provider of web accessibility tools, targeting primarily web developers and website owners interested in compliance with accessibility standards such as WCAG and ADA. The website content is minimal, with no visible main content on the homepage beyond branding and navigation placeholders. The technical infrastructure relies on common frontend libraries including Bootstrap, jQuery, and Font Awesome, indicating a modern but basic web stack. However, the absence of backend or CMS indicators suggests a simple or early-stage deployment. From a security perspective, the website lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or terms of service policies are present, which raises compliance concerns especially under GDPR for a UK-based entity. The WHOIS data is limited due to the unsupported TLD and privacy protections, providing no clear domain creation or expiry dates, which impacts trustworthiness assessment. Overall, the site demonstrates a low maturity level in both content and security posture. The lack of contact information and compliance documentation further reduces business credibility. Strategic improvements in security configuration, privacy compliance, and content enrichment are recommended to enhance trust and user engagement.

The Mighty is a well-established online community platform dedicated to supporting individuals facing various health challenges including mental health, chronic illness, disability, and rare diseases. Founded in 2001, it serves a niche audience seeking peer support and health-related content. The platform leverages modern web technologies including Nuxt.js for server-side rendering and integrates analytics tools such as Google Analytics and Segment for user behavior tracking. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain status locks in place, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website demonstrates good professionalism and trustworthiness but would benefit from enhanced privacy disclosures and security policies.

Orkidées Studio is a small French graphic and digital studio specializing in visual identity, packaging, web design, motion design, and editorial services. The website presents a professional and creative image targeting businesses and individuals seeking high-quality design solutions. The technical infrastructure is based on WordPress with Elementor and Borlabs Cookie for cookie consent management, hosted by Infomaniak Network SA, a reputable provider. The site is mobile-optimized and uses modern web technologies, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional, with room for improvement in privacy and security documentation.

Air Attitude is a French environmental platform founded in 2020 that encourages citizens and organizations to participate in actions aimed at improving air quality, combating climate change, and reducing energy consumption. The website serves as a community engagement tool, showcasing contributors and mapping their impact. Technically, the site is built on WordPress with Elementor and uses modern technologies including Google Maps API, Mapbox, and Matomo analytics, hosted on OVH with Cloudflare DNS. Security posture is solid with HTTPS enabled and privacy-respecting analytics, though it lacks explicit privacy and cookie policies and contact information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

Atmo France operates as the national federation coordinating regional associations responsible for monitoring air quality across France and its overseas territories. The organization provides comprehensive data, alerts, and educational resources to the general public, local authorities, businesses, and educational institutions. Their market position is that of an authoritative, government-aligned non-profit entity focused on environmental health and air quality surveillance. Technically, the website is built on Drupal 9, leveraging modern web technologies such as Bootstrap, Google Fonts, and FontAwesome for styling and responsiveness. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and accessible, with clear navigation and interactive features such as maps and indices for air quality and pollen. From a security perspective, the site uses HTTPS and includes some anti-bot measures, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website presents a trustworthy and professional front for a public-interest environmental organization. The lack of WHOIS data due to privacy protection is typical for such entities and does not detract from legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing clear contact and incident response information to strengthen trust and compliance.

Coucou de France is a specialized online travel guide focused on the Mont-Blanc region, offering curated hiking trails, local events, and activities to both local actors and visitors. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and mobile optimization. Technically, it leverages modern frameworks such as Next.js and React, integrates analytics tools like PostHog and Google Tag Manager, and employs Facebook Pixel for marketing and retargeting purposes. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website's content and technical setup suggest a legitimate and trustworthy service. Overall, the site is well-positioned as a niche regional guide with room for improvement in privacy compliance and security transparency.

Loopi is a French company specializing in sustainable and innovative tourism solutions. Their website positions them as a partner for accelerating the transition to sustainable tourism by offering unique circuits and enhancing user experience. The company targets tourism professionals and eco-conscious travelers, emphasizing heritage valorization and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, with integrations such as Yoast SEO, Contact Form 7, Matomo analytics, and Google reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and anti-bot measures, but lacks explicit security headers and formal privacy or cookie policies. The absence of public WHOIS data suggests privacy protection, which is common for small businesses but slightly reduces trust. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

We Are ILL is a nonprofit patient advocacy organization dedicated to redefining perceptions of illness for Black women living with multiple sclerosis. The website serves as a hub for educational resources, community programs, events, and advocacy efforts, positioning itself as a niche leader in the MS nonprofit space. The organization leverages digital platforms including social media and podcasts to engage its target audience effectively. Technically, the website is built on Squarespace, ensuring a modern and responsive design with moderate performance. Security posture is solid with HTTPS and HSTS enabled, though some security headers and formal policies are missing. Privacy compliance is partially addressed with a cookie consent banner but lacks comprehensive privacy and terms of service documentation. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and external media references support its credibility. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

The website tafcares.org is currently inaccessible due to geographic blocking enforced by an Amazon CloudFront distribution, resulting in a 403 error page. This prevents any meaningful content or metadata extraction, limiting the ability to assess the business, technical infrastructure, or security posture. The domain is registered with GoDaddy.com, LLC since 2016, indicating a potentially established entity, but no public website content is available to verify business operations or services. The lack of DNSSEC and security headers is noted but cannot be fully confirmed due to blocked access. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.

The website stiffperson.org serves as a support group platform dedicated to Stiff Person Syndrome, a rare neurological disorder. It provides informational resources and community support primarily targeting patients, their families, and caregivers. The site is built on the Wix platform, leveraging Wix's hosting and content management system, which offers moderate performance and good mobile optimization. However, the content quality and design are basic, reflecting a small non-profit organization's typical digital presence. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. No contact information or incident response details are provided, limiting transparency and responsiveness to security or privacy concerns. The site employs minimal tracking via Metricool analytics, indicating a low level of user tracking. Overall, the domain WHOIS data is unavailable or privacy protected, which is common for small non-profits but limits trust verification. The website content and structure do not raise suspicion and align with a legitimate support group. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's trustworthiness and security posture.

The Siegel Rare Neuroimmune Association (SRNA) is an international nonprofit organization dedicated to advocating for individuals affected by rare neuroimmune disorders such as ADEM, AFM, MOGAD, NMOSD, ON, and TM. The organization focuses on education, advocacy, and accelerating research to find cures. Their website reflects a professional and consistent brand presence with multilingual support and active social media engagement. The target audience includes patients, families, healthcare professionals, and researchers. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Hotjar, and New Relic for monitoring. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks some security headers and explicit incident response information. Privacy compliance is partial, with cookie consent mechanisms but no explicit privacy policy found in the provided content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

PAN Foundation is a well-established non-profit organization dedicated to providing financial assistance, advocacy, and education to patients with life-threatening, chronic, and rare diseases. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization leverages modern web technologies including WordPress CMS, Google Tag Manager, Facebook Pixel, and Fundraise Up for fundraising, indicating a robust technical infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be enhanced for improved protection. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR considerations. Overall, the website demonstrates high professionalism and trustworthiness, supporting the organization's mission effectively.

NMO Brasil is a small Brazilian non-profit association dedicated to supporting patients with Neuromyelitis Optica and related diseases. Founded in 2014, it provides educational resources, awareness campaigns, and community engagement primarily targeting patients, families, and the medical community. The website reflects this mission with clear informational content and links to related partner organizations. Technically, the site uses a standard Bootstrap-based stack with common JavaScript libraries, hosted likely on AWS infrastructure. While the site is mobile-optimized and well-structured, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. No forms collecting personal data are evident on the main page, and no social media links are present, limiting direct engagement channels. The WHOIS data is consistent with the organization's profile and domain age aligns with the founding date, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance features.