Medium-risk security reports

OnionShare is an open-source privacy-focused software project that enables anonymous peer-to-peer file sharing, chatting, and web hosting over the Tor network. The project is developed by Science & Design, Inc and partners with reputable privacy organizations such as The Calyx Institute, Guardian Project, and the Tor Project. The website serves a privacy-conscious audience including security specialists and users of privacy-centric operating systems like QubesOS and Tails. The business model is community-driven with donation support and open-source contributions. Technically, the website is well-built using modern web standards and hosted on DigitalOcean, with good mobile optimization and accessibility. Security practices include PGP signature verification for downloads and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial with a privacy policy present but no cookie consent or terms of service. Overall, the site is professional, trustworthy, and aligned with its privacy-centric mission.

Highbury Defense Group is a Service-Disabled Veteran-Owned Small Business specializing in systems engineering, cybersecurity, logistics, program management, and foreign military sales support services primarily for US Department of Defense and Department of State agencies, as well as select foreign nations. The company operates as a small business under the parent company Accelint, positioning itself as a niche provider in the government contracting sector. Their key services include technical/systems engineering, foreign military sales, integrated logistics support, and maritime surveillance. The website reflects a professional and consistent brand image with clear messaging targeted at government and defense-related clients, veterans, and industry professionals. Technically, the website is built on WordPress using the Genesis Framework and several plugins such as Yoast SEO, WP Rocket, and Pojo Accessibility, indicating a modern and maintainable infrastructure. Hosting appears to be through GoDaddy, with moderate performance and good mobile optimization. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies, which are areas for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is available primarily via email and physical address, with no phone numbers found. The domain registration is consistent and legitimate, with protective statuses set to prevent unauthorized changes. Overall, the website is professional, trustworthy, and suitable for its target audience, but could enhance its security posture and privacy compliance to better align with industry best practices and regulatory requirements.

Study in Germany is an educational information platform targeting international students interested in pursuing higher education in Germany. The website provides comprehensive resources including study programs, visa guidance, and cultural information, positioning itself as a key resource in the education sector focused on Germany. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience with good SEO and accessibility features. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact, which could be improved to enhance trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and security posture but could benefit from improved business credibility transparency and explicit security disclosures.

The website www.nbav.nl represents the Nederlandse Vereniging Beheer keurmerk Aangepaste Vakanties, a Dutch organization providing certification for entities focused on people with disabilities. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard JavaScript polyfills. The content is primarily in Dutch and targets organizations and stakeholders in the disability support sector. The business model revolves around certification and association management within a niche market in the Netherlands. Technical infrastructure is standard for Wix-hosted sites, with moderate performance and good mobile optimization but limited SEO due to meta robots noindex directive. Security posture is basic, lacking advanced security headers and policies, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but would benefit from enhanced security and privacy measures to improve trust and compliance.

Duurzaam Gastvrij is a Dutch sustainability certification organization focused on the leisure sector, operated by Stichting KMVK. The website serves as a comprehensive platform to promote sustainable business practices, certify companies, and provide resources and support for sustainability efforts. It holds a strong market position as a recognized sustainability mark endorsed by Green Key, targeting leisure businesses in the Netherlands. The site offers clear navigation, rich content, and multiple trust signals including partner logos and certifications. Technically, the website uses modern web technologies including jQuery, Swiper.js, and Google Analytics, hosted on a CMS platform (HMCMS). It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence with strong business credibility and privacy compliance.

ANWB is a well-established Dutch association focused on mobility, travel, insurance, and roadside assistance services. The website reflects a mature digital presence with comprehensive content aimed at Dutch residents and travelers. It offers a broad range of services including travel insurance, energy solutions, and retail products, positioning itself as a leading player in the Dutch transportation and travel sector. The technical infrastructure leverages modern web technologies such as React and Next.js, supported by a Bloomreach CMS platform, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

RECRON.nl is a well-established Dutch recreational platform offering a broad range of services including camping, holiday homes, holiday parks, day trips, and group activities. It targets consumers looking for leisure and vacation options within the Netherlands, positioning itself as a leading platform in this niche with extensive regional coverage and a professional online presence. The website demonstrates a mature technical infrastructure utilizing modern JavaScript libraries and frameworks such as jQuery, Leaflet.js for mapping, and integrates analytics and social media SDKs effectively. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and incident response disclosures. Overall, the site is professional, user-friendly, and compliant with GDPR requirements, making it a trustworthy platform for its audience.

The website www.mijnhiswarecron.nl is a specialized login portal designed for members of the HISWA-RECRON Businessclub and other registered users to access HISWARECRON services and knowledge base articles. The portal leverages AWS Cognito for user authentication, providing a secure and modern login experience with password strength enforcement and multi-step password recovery processes. The site is primarily targeted at Dutch users, as indicated by the language and contact email domain. The business model revolves around membership access to exclusive content and services related to HISWARECRON. Technically, the site uses a combination of Foundation Framework, jQuery, Modernizr, and AWS Cognito SDKs. The password meter scripts enforce strong password policies, enhancing security. The site appears moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider details are explicitly identified from the content. From a security perspective, the use of AWS Cognito is a strong positive, ensuring robust authentication mechanisms. However, the absence of HTTP security headers such as CSP, HSTS, and X-Frame-Options is a notable gap. The site does not display privacy or cookie policies, which impacts GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. Overall, the security posture is moderate but could be improved with better header configurations and compliance documentation. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic improvements in privacy compliance, security headers, and accessibility would enhance trust and reduce potential risks. The site is safe for general audiences with no adult or questionable content detected.

ZetaOffice is a technology-focused company offering a LibreOffice-based office suite accessible via web browsers, desktop, and soon mobile platforms. The company operates under allotropia software GmbH, based in Hamburg, Germany, and positions itself as a niche provider enabling businesses to leverage LibreOffice with options for self-hosting or CDN deployment. Their business model combines open source software with paid professional support and CDN services. Technically, the website employs modern web technologies and integrates privacy-friendly analytics, but lacks some advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business goals.

Muuuz is a leading French online media platform dedicated to architecture, design, and related arts, established in 2008 and operated under Groupe Ficade. It serves a professional and enthusiast audience with news, inspiration, event coverage, and multimedia content. The website is built on Joomla! CMS with modern web technologies and integrates multiple third-party services for analytics and advertising. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy policies. WHOIS data is unavailable, which slightly impacts trust but the site’s professional presentation and active content mitigate concerns. Overall, Muuuz presents a credible and authoritative presence in its niche.

Groupe Ficade is a French media and communication group operating across multiple countries, offering services including B2B media, audiovisual content, rating agency activities, events, training, and consulting. The company targets professional communities and businesses, positioning itself as a key player in media and communication with an international footprint. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on Joomla CMS with the Helix Ultimate framework, leveraging modern libraries such as Bootstrap 5 and jQuery. The site is mobile-optimized and uses standard web technologies for sliders and popups. Performance is moderate, with room for improvement in accessibility and SEO. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens but lacks explicit security headers and incident response information. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the professional web presence and compliance with privacy regulations mitigate this concern. Overall, the site is secure, compliant, and professionally maintained, suitable for its business audience.

StatusPal UG operates a professional SaaS platform specializing in hosted status pages and incident communication solutions targeted primarily at CTOs, DevOps/SRE teams, and support engineers. The company positions itself as a reliable and trusted provider with a focus on automating incident reporting, multi-language support, and seamless integrations. The website demonstrates a strong market presence with endorsements from notable customers and a comprehensive feature set including monitoring, notifications, and a powerful API. Technically, the site is built on modern frameworks such as Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though privacy and terms of service pages are missing, representing compliance gaps. Overall, the site is trustworthy and professionally maintained, with a moderate risk profile primarily due to limited WHOIS transparency and missing legal pages.

Sekirothegame.com is the official website for the video game Sekiro™ Shadows Die Twice, published by Activision Publishing. The site serves as a marketing and e-commerce platform targeting gamers interested in this action-adventure title developed by FromSoftware. It features rich multimedia content including videos, images, and interactive elements to engage visitors and promote game sales globally. The website is part of a larger ecosystem of Activision game sites, reflecting a strong brand presence in the gaming industry. Technically, the site is built on Adobe Experience Manager CMS, uses modern JavaScript libraries such as jQuery, and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforcement, secure cookies, and CSRF protections, but lacks visible security policies or incident response contacts. Overall, the site is professional, trustworthy, and well-aligned with the business goals of promoting and selling the game.

The website www.tonyhawkthegame.com is a professionally designed digital platform promoting the Tony Hawk’s Pro Skater 3 + 4 video game collection. It is operated by Activision Publishing, a major player in the video game industry, with consistent branding and comprehensive content targeting gamers and fans of the franchise. The site offers detailed game information, media galleries, news updates, and purchase options across multiple platforms. Technically, the site leverages modern web technologies including Adobe Experience Manager CMS, jQuery, Google Tag Manager, and OneTrust for privacy compliance. Security practices are robust with HTTPS enforcement, SSO integration, and cookie consent mechanisms. Legal and privacy policies are clearly linked and comprehensive, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence with high trustworthiness and user experience quality.

The website www.crashbandicoot.com serves as the official hub for the Crash Bandicoot video game franchise, operated by Activision Publishing Inc., a major player in the media and entertainment industry. It provides comprehensive information about the franchise's games, including Crash Team Rumble™, Crash Bandicoot™ 4: It's About Time, and others, targeting gamers and fans worldwide. The site supports multiple languages and regions, reflecting a global audience. The business model focuses on digital game marketing and direct sales, leveraging strong brand recognition and partnerships with game development studios.

Activision Publishing operates the Call of Duty franchise, a leading global video game brand with a strong presence in digital entertainment and esports. The website serves as a hub for game promotion, community engagement, and esports event information, targeting gamers worldwide. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, advanced tracking and consent management tools, and secure SSO authentication. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement, secure cookies, and privacy compliance via OneTrust, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, professional, and aligned with industry standards.

swissbib.ch was an academic library search portal affiliated with Universität Basel, Switzerland, providing access to Swiss university library collections. The service was discontinued in April 2021, with users directed to successor platforms such as swisscovery. The website serves primarily as an archival and informational resource, reflecting the transition of swissbib's knowledge and data into new projects managed by the University of Basel's Digital Services division. The site is built on VuFind 7.0.1 and Bootstrap 3, indicating a moderately modern technical infrastructure but with basic mobile and accessibility features. Security posture is limited, with no visible security headers or explicit policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. Contact information is limited but includes a university domain email and social media links to Twitter and a blog. Overall, the site is trustworthy and legitimate but lacks modern security and privacy best practices.

The website dev.events is a curated platform dedicated to listing developer conferences, meetups, and hackathons for the years 2025 and 2026. It targets software developers, tech leads, and IT professionals globally, providing detailed event information, filtering options, and calendar integration. The platform positions itself as an ad-free, community-curated resource, emphasizing quality and relevance in the technology event space. Technically, the site employs modern frontend technologies such as htmx, Alpine.js, Flatpickr, and Choices.js, ensuring a fast, mobile-optimized, and accessible user experience. Structured data in JSON-LD format enhances SEO and event discoverability. Security-wise, the site uses HTTPS and loads scripts from trusted CDNs, but lacks explicit security headers and documented security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which presents a compliance gap. Overall, the site is professional, trustworthy, and focused on delivering valuable content to its audience.

MiXiT is a specialized technology conference based in Lyon, France, focusing on ethics, diversity, and social responsibility within the tech industry. Founded in 2017, it hosts annual events featuring speakers, workshops, and sessions that engage developers, designers, and product managers. The conference emphasizes accessibility, safe environments, and eco-friendly practices, supported by a community-driven approach and sponsorships from notable companies. The website serves as an information hub for event details, ticketing, and multimedia content including podcasts and videos. Technically, the site uses modern web standards with Bootstrap and JavaScript, hosted by OVH sas, a reputable French provider. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance its security posture and compliance transparency.

Candidats.fr is a French non-profit advocacy platform operated by the April association, focused on promoting free software and digital freedoms within the political landscape. The website provides resources, campaigns, and information encouraging political candidates to commit to free software principles through the Pacte du Logiciel Libre. The platform targets political candidates, free software advocates, and citizens interested in digital rights, positioning itself as a niche but trusted voice in the French technology and government sectors. Technically, the website is built on the Dotclear CMS and uses legacy JavaScript libraries such as jQuery 1.6.2 and jQuery UI 1.8.16. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, it lacks modern security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The absence of security headers and formal privacy compliance documentation reduces its security posture score. WHOIS data is unavailable, limiting domain legitimacy verification, but the association with April provides moderate trustworthiness. Overall, Candidats.fr is a credible and focused advocacy site with good content quality and user experience but would benefit from enhanced security practices and privacy compliance to strengthen trust and protect user data.

Libre Association is a small non-profit working group under the April organization, dedicated to bridging the associative sector and free software. The website provides educational content, community resources, and practical guides to promote free software usage among associations, primarily targeting French-speaking users. The site is professionally designed with consistent branding and clear navigation, leveraging SPIP CMS and Bootstrap frameworks. It uses Matomo analytics configured with privacy considerations, reflecting a moderate digital maturity. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. No contact information or incident response channels are provided, limiting transparency. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

Expolibre.org is a website operated by APRIL, a French non-profit organization dedicated to promoting free and open-source software. The site hosts LibreExpo, a travelling exhibit designed to educate the general public about free software philosophy and its social implications. The business model is educational and non-commercial, focusing on awareness and advocacy through downloadable and rentable exhibit panels. The website targets a general audience interested in technology and free software, positioning itself as a niche educational resource within the free software community. Technically, the website uses a modern but simple tech stack including jQuery, Foundation CSS framework, and Modernizr, likely running on the SPIP CMS platform. The site is mobile-optimized with good navigation and content structure, though performance is moderate and accessibility is basic. No advanced analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred from domain and common practice though not explicitly stated), but lacks security headers and DNSSEC is not enabled. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. The WHOIS data is consistent and trustworthy, with the domain registered to APRIL since 2006, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is a trustworthy, well-maintained educational resource with room for improvement in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.

NyaCasinonUtanSvenskLicens.com operates as a Swedish language affiliate and informational website specializing in guiding players to online casinos without a Swedish license. The site provides comprehensive content on casino bonuses, payment methods, legal considerations, and the differences between licensed and unlicensed casinos, targeting Swedish players seeking alternatives outside the regulated Swedish market. The business model is primarily affiliate-based, offering curated lists and recommendations to its audience. Technically, the site is built on WordPress with modern plugins and themes, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policies, terms of service, and security headers, which are recommended for improvement. The domain is relatively new, registered in 2021, with privacy protection typical for this industry. Overall, the website is professional, content-rich, and serves a niche market effectively, though it would benefit from enhanced compliance and security disclosures.

Makthavare.se is a Swedish online media site specializing in comparing and reviewing online casinos without a Swedish license, focusing on casinos that operate outside the Swedish Spelpaus system. The site targets Swedish adult players seeking alternatives to licensed Swedish casinos, offering detailed guides, top lists, and AI-driven market analysis. Technically, the site is built on WordPress with modern SEO and performance optimizations, hosted behind Cloudflare DNS and nameservers. Security posture is adequate with HTTPS but lacks explicit security headers and formal privacy or security policies. The site uses advertising and affiliate marketing, primarily through Adform and a brand management plugin. Overall, the domain is very new but consistent with the business claims and content. The site is professionally designed with good content quality but needs improvements in privacy compliance and security transparency.

CasinoSpot.de is a German online casino guide established in 2018, offering detailed comparisons, reviews, and exclusive bonuses for online casinos. The website targets German-speaking adults interested in online gambling and positions itself as a leading casino guide in Germany. Technically, the site is built on WordPress, uses Cloudflare for DNS and CDN services, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with a professional design and clear navigation. Security-wise, the site enforces HTTPS and uses Cloudflare, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is legitimate and trustworthy but could improve transparency on privacy and security policies.

CasinoSpotFR is a newly launched French-language website dedicated to providing online casino reviews, gambling guides, and bonus information to French-speaking users interested in online gambling. The site operates on a WordPress CMS platform, leveraging Cloudflare for DNS services, and is registered through NameCheap, Inc. The website's technical infrastructure is moderate in performance with basic mobile optimization and SEO features. However, it lacks advanced security configurations such as DNSSEC and security headers, which are recommended for improved protection. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance with GDPR and other privacy regulations. No explicit contact or incident response information is provided, limiting user trust and security transparency. Overall, the site targets a mature audience interested in gambling content but requires significant improvements in privacy, security, and business credibility to enhance trustworthiness and compliance.

OnlineKasyno.nl is a niche affiliate and review website focused on providing Polish players in the Netherlands with information about the best online casinos, bonuses, and trustworthy reviews. The website positions itself as a resource for Polish-speaking gamblers interested in Dutch online gambling platforms. Technically, the site is built on WordPress and uses common web technologies including JavaScript, Google Tag Manager for analytics, and Trustpilot widgets to enhance trust. The site is accessible over HTTPS, indicating a basic level of security, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. The absence of contact information and formal policies reduces transparency and may impact user confidence. Overall, the site is functional and professionally designed but could improve its privacy compliance and security posture to better serve its audience and meet regulatory requirements.

Kongebonus is a Norwegian-focused online platform specializing in providing comprehensive information, reviews, and bonus offers related to online casinos and sports betting. Established around 2022, it positions itself as Norway's largest community for iGaming enthusiasts, offering detailed guides, betting tips, and payment method advice. The website is well-structured, professionally designed, and optimized for SEO, targeting adult Norwegian users interested in gambling and betting. Technically, the site is built on WordPress with modern performance optimizations including lazy loading and deferred scripts, and integrates Google Tag Manager for analytics. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though some security headers and explicit policies are missing. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency, which impacts business credibility. Overall, the site is a professional and trusted resource within its niche but would benefit from enhanced transparency and security disclosures.

The website spelpausad.com is currently inaccessible beyond a Cloudflare security challenge page that verifies visitors are human before granting access. This indicates the site is protected by Cloudflare's Turnstile captcha service, which blocks automated access and bots. Due to this, no actual business content, contact information, or policies are visible for analysis. The domain is relatively new, registered in April 2022, and uses Cloudflare for DNS and security services. There is no evidence of privacy or cookie policies, terms of service, or any business-related disclosures on the accessible page. The lack of visible content and business information limits the ability to assess the company's market position, services, or compliance posture. The site appears to be in a pre-access state, likely to mitigate abuse or attacks.

CasinoDoc is a French-language online casino comparison website launched in 2023, offering users information on casino bonuses, reviews, and game guides to enhance their gambling experience. The site targets French-speaking online casino players and operates primarily as an affiliate marketing platform. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, Google Tag Manager, and Microsoft Clarity for analytics. The site uses Cloudflare DNS but does not have DNSSEC enabled. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks visible security policies or headers. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate with consistent branding and social media presence but no direct contact information. Overall, the site is professionally designed and functional but would benefit from enhanced privacy and security disclosures.

Snellecasinos.com operates as a specialized affiliate and informational portal focused on online casinos that offer fast payouts, primarily targeting Dutch-speaking players in the Netherlands and EU. The website provides comprehensive reviews, listings, and educational content about fast payout casinos, emphasizing convenience and speed enabled by payment processors like Trustly. Technically, the site is built on WordPress with modern SEO and performance optimizations, hosted behind Cloudflare DNS, and uses HTTPS with Google Analytics for visitor tracking. Security posture is adequate with room for improvement in security headers and DNSSEC. Privacy compliance is addressed with a cookie consent mechanism and a basic privacy policy. Business credibility is supported by trust signals such as DMCA protection and responsible gambling badges. Overall, the site is professional, user-friendly, and trustworthy for its niche audience.

Uusimmatkasinot.com is a Finnish-focused online media platform specializing in providing comprehensive reviews, listings, and guides for new online casinos in 2025. The site targets Finnish players seeking trustworthy and up-to-date information on casino bonuses, payment methods, and trusted operators. The business model is primarily affiliate marketing, leveraging detailed editorial content and expert reviews to drive user engagement and conversions. The site maintains a professional editorial team with named authors and contact emails, enhancing credibility. Technically, the website is built using the Astro static site generator, employs modern web fonts, structured data (JSON-LD), and is served over HTTPS with Cloudflare DNS. The site demonstrates good performance, mobile optimization, and SEO practices, including rich metadata and Open Graph tags. Tracking is implemented via Google Analytics and Cloudflare Zaraz, with moderate user tracking levels. From a security perspective, the site uses HTTPS and domain locking (clientTransferProhibited) to protect domain integrity. However, DNSSEC is not enabled, and explicit security headers beyond basic domain status are not evident. No privacy or cookie policies were found in the provided content, indicating a gap in GDPR compliance. Contact information is limited to email addresses in author bios, with no phone or physical address provided. No incident response or vulnerability disclosure policies are visible. Overall, Uusimmatkasinot.com presents a trustworthy and professional online presence for Finnish online casino players, with solid technical infrastructure and good content quality. To enhance security and compliance, the site should implement DNSSEC, publish clear privacy and cookie policies, and add additional security headers. These improvements will strengthen user trust and regulatory adherence.

CritiqueJeu.info is a French-language online guide specializing in online casinos, betting, and gambling games. It serves as a trusted resource for French-speaking players by providing detailed casino reviews, exclusive bonuses, game demos, and a blacklist of unreliable gambling sites. The site positions itself as a leading authority in the Francophone online gambling niche, targeting a broad audience from beginners to experienced gamblers. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to privacy protection or query failure, a common practice in gambling affiliate sites but one that slightly reduces transparency. Overall, CritiqueJeu.info presents a professional and trustworthy front with room to enhance privacy compliance and security posture.

Captain-caz.net is a French-language online casino review and affiliate marketing website launched in 2023. It targets French-speaking adult users interested in online gambling by providing casino reviews, bonus offers, and comparisons. The website positions itself as a top resource for reliable online casinos in 2025. Technically, the site is built on WordPress using Bootstrap and jQuery, with integrations for Google Tag Manager and Visual Website Optimizer for analytics and marketing. The hosting provider is not explicitly identified but DNS is managed via Cloudflare, enhancing DNS reliability and security. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. The site uses tracking and marketing tools that imply moderate user tracking. Overall, the website is professional and functional but would benefit from improved privacy and security practices.

Bookkerit.com is a Finnish-language affiliate website specializing in listing and reviewing sports betting and casino sites targeted at Finnish customers. The site provides detailed information on betting bonuses, tips, and guides, positioning itself as a trusted resource in the Finnish gambling affiliate niche. The business appears small but focused, founded in 2022, and maintains consistent branding and good content quality. Technically, the site is built on WordPress, uses popular plugins like Yoast SEO, and is hosted on SiteGround, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for improved security posture. Privacy compliance is weak, with no visible privacy or cookie policies, which is a significant gap given the site's data collection and affiliate marketing activities. Overall, the site is functional and professional but should improve privacy and security practices to enhance trust and compliance.

The website at rtv9.nl is currently non-functional from a content perspective due to a missing and disabled required WordPress plugin (Breakdance). The visible content is limited to a PHP warning and a message instructing to install and enable the Breakdance plugin. There is no metadata, structured data, or business information available on the site. The technical infrastructure appears to be based on WordPress, but the site suffers from poor error handling and lack of content rendering. No security headers or HTTPS status could be determined from the provided data. The security posture is weak due to exposed PHP warnings and missing security best practices. Overall, the site is not currently serving its intended purpose and lacks basic compliance and trust indicators.

Online Casino LTD operates the website online.casino, a comprehensive international online casino guide established in 2017 and based in Malta. The platform offers extensive casino reviews, bonus information, payment method listings, and affiliate programs targeting gamblers worldwide. The website is well-positioned as a leading resource in the online gambling affiliate space, providing localized content and expert insights. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and SEO tools such as Yoast, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS, Content-Security-Policy headers, and domain transfer protection, though DNSSEC is not enabled and privacy policies are not explicitly published. Overall, the site demonstrates a professional and trustworthy presence with moderate user tracking via Google Analytics and Facebook pixels.

The website qbet.com appears to be an online gambling platform offering casino games, cashback, and tournaments targeted at adult users. However, the actual website content is inaccessible, showing only a loading spinner, which suggests the presence of a web application firewall or security challenge blocking full access. The WHOIS data for the domain is unavailable, indicating the domain may be unregistered, privacy protected, or otherwise obscured, which raises concerns about legitimacy and transparency. The site uses modern frontend technologies such as React and Material-UI but lacks visible content, privacy policies, or contact information, limiting trust and compliance assessment. Overall, the security posture is weak due to missing HTTPS and security headers information, and no privacy or cookie policies are detected.

Take Back The Tech! is a well-established non-profit campaign founded in 2006, dedicated to empowering women and girls to take control of technology to end gender-based violence. The website serves as an educational and advocacy platform offering resources, campaigns, and community engagement tools. It targets activists, women, and communities concerned with technology-facilitated violence. Technically, the site is built on Drupal 9 with modern web technologies, providing a responsive and accessible user experience. However, some technical aspects such as DNSSEC and security headers could be improved to enhance security. The security posture is moderate with domain management practices that prevent unauthorized changes but lacks published security policies or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, with a clear mission and consistent branding, but could benefit from enhanced security and privacy practices.

Rollingbox is a well-established French digital agency specializing in web marketing, website creation, inbound marketing, and e-marketing services. Founded in 2006 and based in Versailles and Lyon, the company has completed over 700 projects, serving local and international clients. The website reflects a professional and modern digital presence, leveraging WordPress CMS with Elementor and various optimization and marketing plugins. The technical infrastructure is robust, hosted by OVH sas, and optimized for performance and mobile responsiveness. Security posture is good with HTTPS enabled and domain security statuses set, though there is room for improvement in security headers and incident response transparency. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, Rollingbox presents a credible and trustworthy digital agency profile with a solid market position in the French digital services sector.

The website zoethical.org represents a small organization named Petites Singularites based in Belgium, founded in 2018. The site content is minimal, featuring a simple landing page with a tagline 'Awakening territories to life' and navigation links to related domains and a login portal. The business model and market position are not explicitly stated, and no direct contact information or detailed service descriptions are provided. The target audience appears to be general, possibly niche or community-focused given the linked federated social media profiles. Technically, the website uses a privacy-focused analytics tool, Plausible Analytics, and is hosted by Gandi SAS. The domain is secured with HTTPS, but lacks DNSSEC and security headers, indicating a basic security posture. The site is accessible without WAF or blocking mechanisms, but lacks privacy and cookie policies, impacting compliance maturity. Mobile optimization and accessibility are basic, and the site structure is minimal. From a security perspective, the domain registration is transparent and consistent with the website's organization, enhancing trustworthiness. However, the absence of security headers and privacy policies, as well as no visible incident response or vulnerability disclosure information, suggests room for improvement in security and compliance practices. No critical vulnerabilities or suspicious patterns were detected. Overall, the website scores moderately on AI evaluation metrics, reflecting its minimal content and basic technical and security implementations. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, improving mobile and accessibility features, and providing clear contact and incident response information to build trust and compliance.

The website at z7l.eu is currently minimalistic and contains only a placeholder text with no substantive content or business information. The domain is registered through GANDI, a reputable registrar, but no registrant details or business identity are disclosed on the site. The lack of content, metadata, and contact information suggests the site may be inactive, under construction, or abandoned. Technically, the site does not reveal any modern technologies, scripts, or frameworks, and no security headers or SSL configuration details are available, indicating a low digital maturity level. Security posture is weak due to the absence of HTTPS and security best practices. Overall, the site presents a low trust profile with no privacy or cookie policies, no terms of service, and no contact channels, which are critical for compliance and user trust.

The website keskonfai.com currently serves no accessible content, returning only a 404 error page. This indicates either the site is under construction, removed, or misconfigured. The domain is registered with OVH sas since 2019 and is active with standard domain status flags, but no registrant details or business information are publicly available. Due to the lack of content, no business description, services, or market positioning can be determined. Technically, the site lacks any detectable technologies, metadata, or security configurations, resulting in a poor digital maturity assessment. Security posture is minimal with no HTTPS or security headers observed, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other regulations. Overall, the site presents a high risk due to lack of transparency, content, and security controls.

L'Ouvre-Boîtes is a French cooperative focused on supporting the creation and development of business activities within a secure and cooperative framework, primarily serving the Loire-Atlantique and Vendée regions. The website reflects a regional cooperative model with a clear mission to assist entrepreneurs and small business owners through cooperative employment structures. The site is built on Drupal 10 and uses Matomo analytics to respect user privacy. The design is professional and content is relevant to its target audience, with good navigation and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the website presents a trustworthy and professional image consistent with its cooperative business model.

AFAS is a well-established technology company providing business software solutions, primarily in the Netherlands. The analyzed website is a dedicated status page for AFAS services, offering real-time updates on system status, incidents, and scheduled maintenance. The page is designed to inform customers and users about the operational status of various AFAS products and integrations. The business model is SaaS-focused, targeting business customers who rely on AFAS software for their operations. Technically, the status page is hosted on the Statuspal platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and hCaptcha for bot protection. The site is mobile-optimized and performs well with fast loading times. However, it lacks some advanced accessibility and SEO features. The use of HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are important for GDPR compliance. There is no published incident response or vulnerability disclosure information, which could be improved to enhance trust and transparency. Overall, the website is professional, trustworthy, and serves its purpose effectively. The main risks relate to privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear security contact information to improve compliance and user trust.

La Doc - Librairie et médiathèque is a small, local library and bookstore service based in Fribourg, Switzerland, specializing in religious and liturgical materials. The website provides access to thematic collections aligned with liturgical seasons and offers user account management for borrowing and searching resources. The business appears community-focused with a clear target audience interested in religious education and media. Technically, the site uses a modern web stack including Bootstrap, jQuery, and Google Fonts, running on the NetBiblio WebOPAC platform. While the site is functional and well-structured, mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking important security headers and anti-CSRF protections. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and contact information support legitimacy. Overall, the site is suitable for its educational purpose but requires improvements in security and privacy transparency.

Stichting KMVK is a well-established Dutch non-profit organization focused on promoting sustainability within the tourism sector. It operates as an authoritative body offering recognized sustainability certifications, environmental distinctions, and inspection services. The organization collaborates with prominent partners such as HISWA-RECRON, ANWB, and KHN, reinforcing its market position as a leader in sustainable tourism certification. The website reflects a professional and consistent brand image, targeting entrepreneurs and businesses in the Dutch tourism and recreation industry. Technically, the website employs modern web technologies including Google Fonts, jQuery, and Swiper.js, and is built on a CMS platform likely provided by Holiday Media. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security-wise, the site uses HTTPS and implements a comprehensive cookie consent mechanism with opt-in functionality, although it lacks publicly visible formal security policies or incident response contacts. Overall, the domain registration aligns well with the organization's history and legitimacy, supporting a high trust level.

Spojené nástroje elektronické s.r.o. is a small Czech technology company specializing in electronic public procurement solutions. The company operates a platform aggregating public tenders in the Czech Republic, notably through the portal FEN.cz, and collaborates with government ministries on digitalization projects. Their market position is important within the Czech public procurement sector, serving businesses and public entities involved in tenders. The website reflects a professional business presence with clear contact information and a focused description of their services. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site lacks visible security headers, privacy and cookie policies, and incident response information. HTTPS status is unknown from the data but should be verified. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved with standard best practices. The overall risk is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and publishing incident response contacts to enhance trust and compliance.

Elektronické tržiště Gemin is a Czech Republic-based electronic marketplace platform designed to facilitate public sector procurement and government contracts. Operated by QCM, s.r.o., it serves as a B2B platform enabling public administration and self-government entities to electronically issue public tenders with minimal costs. The platform positions itself as the first next-generation electronic marketplace in the Czech Republic, emphasizing simplicity, efficiency, and transparency in public sector commerce with commercial entities. The website targets government bodies and suppliers interested in public procurement processes. Technically, the website employs a custom CMS named Gemin, utilizing legacy JavaScript libraries such as jQuery 1.8.3, jQuery UI 1.10.2, Prototype.js, and Scriptaculous. It uses Google Fonts and Google Analytics for tracking. The site is served over HTTPS, but the use of outdated libraries introduces potential security risks. The website demonstrates moderate performance and basic mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and uses cookies with domain and expiry settings. However, it lacks modern security headers like Content-Security-Policy and uses outdated JavaScript libraries that may expose vulnerabilities. No explicit privacy, cookie, or security policies are found, and no incident response or vulnerability disclosure information is provided. WHOIS data is unavailable, likely due to privacy protection, limiting domain registration trust verification. Overall, the security posture is moderate but could be improved by updating libraries and adding security policies. The overall risk assessment indicates a legitimate and professionally presented public sector platform with moderate technical maturity and some security gaps. Strategic recommendations include updating JavaScript libraries, implementing security headers, publishing privacy and cookie policies, enhancing accessibility and mobile responsiveness, and conducting regular security audits to strengthen trust and compliance.