Medium-risk security reports

Sacem is a well-established French organization founded in 1851, dedicated to managing the rights of authors, composers, and music publishers. The website reflects a mature digital presence with comprehensive services for members and clients, including rights management, project support, and access to a repertoire of works. The site is professionally designed, mobile-optimized, and provides multi-language support, indicating a broad target audience and international reach. Technically, the site uses modern frameworks such as Bootstrap and Font Awesome, with appropriate use of HTTPS and cookie consent mechanisms, demonstrating good digital maturity. Security posture is solid with HTTPS and some security best practices, though explicit security headers and incident response information are not evident. Overall, the site is trustworthy and professional, though the lack of WHOIS data limits domain registration transparency.

The NAMM Foundation is a well-established non-profit organization dedicated to advancing music education and participation through philanthropic programs, research, and community engagement. Their website reflects a focused mission with multiple featured programs such as global grantmaking, career mobility initiatives, and educational resources. The organization targets educators, students, and music industry professionals, positioning itself as a key player in the music education non-profit sector. Technically, the website is built on Drupal 7 with a variety of contributed modules and uses modern web technologies including Google Tag Manager and JW Player. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical debt is evident due to the use of older jQuery versions and lack of visible security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a baseline compliance with privacy regulations such as GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy. Overall, the security posture is solid but could be improved by adding security headers and explicit incident response information. The website is trustworthy, safe for general audiences, and demonstrates a professional online presence consistent with its mission. Strategic recommendations include modernizing technical components, enhancing security headers, and publishing clear security and incident response policies to further strengthen trust and compliance.

AXA Atout Cœur is a French non-profit association affiliated with AXA France, focused on combating social exclusion, risk prevention, and environmental protection. Established in 2009, it mobilizes thousands of volunteers annually to engage in community and environmental actions. The website serves as a platform to inform visitors about the association's mission, upcoming events, and opportunities for engagement such as skills sponsorship. Technically, the site is built using modern React technology with asynchronous loading of analytics scripts including Google Tag Manager and Piano Analytics, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response information are absent. Overall, the site presents a professional and trustworthy digital presence for the association.

Fondation Daniel et Nina Carasso is a non-profit organization dedicated to promoting sustainable food systems and civic art in France and Spain. The foundation operates under the aegis of Fondation de France and supports social and ecological transformation through financial grants, impact investments, and expert accompaniment. Their website reflects a professional and well-structured digital presence, targeting a broad audience including artists, researchers, and social entrepreneurs. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security measures include HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though some security headers could be improved. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and compliance indicators support legitimacy.

Weydemann Bros. is a German film production company established in 2008, specializing in producing films and series. Their website showcases completed and in-development projects, targeting film industry professionals and enthusiasts. The company maintains a consistent and professional online presence with clear branding and social media engagement on Facebook and Instagram. Technically, the website uses jQuery and Typekit fonts, is hosted via DomainControl (GoDaddy), and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, with room for improvements in security and privacy practices.

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

Conversiontracking.io is a small, specialized digital agency founded in 2024, focusing on improving conversion tracking and analytics for marketers using Google and Meta advertising platforms. The website is built on Squarespace and integrates modern tracking technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel to deliver measurable improvements in ad performance. While the technical infrastructure is solid and the site is professionally designed with good user experience, there is a notable absence of visible privacy and cookie policies, which impacts compliance and privacy posture. Security practices are generally good with HTTPS and domain transfer protections, but DNSSEC and HSTS are not enabled, representing areas for improvement. Overall, the business appears legitimate and trustworthy, with a clear market niche and professional branding.

DOMOV HORIZONT is a Czech non-profit organization providing residential and protected housing services for persons with disabilities. Established in 2007, it serves a local audience with specialized care offerings. The website is built on WordPress using the Astra theme and Elementor page builder, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is solid with HTTPS enforced and standard security headers present, complemented by a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. Overall, the site is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

Savaria Patient Care is a healthcare-focused company specializing in patient handling solutions such as ceiling lifts, therapeutic surfaces, and related equipment. The company builds on the legacy of Handicare and SPAN-America, positioning itself as a trusted provider in clinical excellence and patient safety. Their offerings include product sales, preventative maintenance, corrective services, design support, and clinical education, targeting healthcare providers across various care settings including hospitals, long-term care, and home care. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and Cloudflare DNS services. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enabled and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the security posture is good but could be enhanced by publishing security policies, incident response contacts, and vulnerability disclosure information. The business credibility is high due to consistent branding, comprehensive product portfolio, and clinical education programs. No adult or questionable content is present, making the site safe for general audiences.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations and travel services primarily targeting the German-speaking market. The company offers a wide range of cruise options, detailed travel preparation information, and ship details, positioning itself as a leading cruise operator in Germany. The website is built on Adobe Experience Manager, leveraging modern web technologies and content delivery networks for performance and scalability. User privacy is managed via a Usercentrics consent platform, indicating compliance with GDPR requirements. Security posture is strong with HTTPS and reputable hosting, though explicit security policies and incident response contacts are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness suitable for a large enterprise in the transportation and hospitality sectors.

Institut dokumentárního filmu operates the DOKweb platform, a well-established non-profit organization founded in 2009, focused on supporting and promoting documentary film talents primarily in Central and Eastern Europe. The website offers a range of services including news articles, events, professional tools, and a podcast, targeting filmmakers and industry professionals. The organization maintains a strong regional presence with partnerships and donor support from cultural and governmental institutions. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cloudflare DNS, with a responsive design and good SEO practices. Security measures include HTTPS, reCAPTCHA v3 integration, and a comprehensive cookie consent mechanism, although some security headers could be improved. The domain is long-standing and consistent with the organization's history, indicating legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policies and direct contact emails.

The Maison Départementale des Personnes Handicapées de Seine-et-Marne (MDPH 77) is a government entity providing centralized access to rights and benefits for persons with disabilities in the Seine-et-Marne region of France. The website serves as an official portal offering information, application processing, partner resources, and event updates tailored to the disabled community and their families. It is positioned as a trusted regional public service with a clear mission and strong local government backing. Technically, the website is built on Drupal 8, hosted by Scaleway, and employs modern web standards including responsive design, SVG icons, and privacy-focused analytics via Matomo. Cookie consent is managed through a compliant mechanism (Tarteaucitron), reflecting good privacy practices. The site demonstrates good SEO, accessibility, and user experience, with clear navigation and professional branding consistent with government standards. From a security perspective, the site uses HTTPS with a good SSL configuration and clientTransferProhibited domain status, indicating protection against unauthorized domain transfers. While explicit security headers are not visible in the HTML, the overall posture is solid with no exposed sensitive data or vulnerabilities detected. However, the site lacks publicly visible security policies or incident response contacts, which could be improved. Overall, the website is a well-maintained, trustworthy government portal with strong compliance to privacy regulations and a clear focus on serving its target audience. The risk profile is low, with recommendations to enhance security headers and publish security policies to further strengthen trust and resilience.

Vimec s.r.l. is an established Italian company specializing in accessibility solutions for public and private spaces, with over 45 years of experience. Their product portfolio includes stairlifts, platform lifts, home elevators, and mobile stairlifts, tailored to individual needs. The company emphasizes personalized service, quality Italian manufacturing, and a strong presence across Italy and international markets. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is good with HTTPS enforced, though some security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall credibility given the professional content and structured data. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

Extrema S.r.l. is an Italian company specializing in manufacturing mobility and accessibility solutions such as servoscala, montascale, and piattaforme elevatrici. With over 25 years of experience and a presence in more than 50 countries, Extrema positions itself as a trusted provider focused on improving quality of life through innovative and customizable products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to individuals and organizations seeking barrier-free mobility solutions. Technically, the site leverages modern frameworks like Nuxt.js and Vue.js, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with privacy regulations, including GDPR, supported by clear privacy and cookie policies.

RehaKomp is a Czech-based company specializing in the rental and sale of rehabilitation and compensatory medical aids, including motodlahy, rotopeds, wheelchairs, and related equipment. Established as a family business since 1990, it has evolved into a medium-sized enterprise with a strong regional presence and a comprehensive product offering. The website serves both as an e-commerce platform and a rental service portal, targeting individuals requiring home care rehabilitation aids and healthcare providers. Technically, the site is built on the PrestaShop platform, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Smartlook for user behavior insights. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR, though it lacks explicit security policy or incident response contact information. WHOIS data is not publicly available, likely due to privacy protection, but the website content and trust signals indicate a legitimate and professional business. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and header configurations.

Subak is a small non-profit organization focused on driving systemic change through collaborative climate action. The organization empowers a community of transformative not-for-profit organizations by leveraging AI, data, and policy expertise to create a healthier and safer world. Their business model centers on curating groups of not-for-profits to collaborate on sectoral missions, providing space, funding, and resources to shift policies and change narratives within chosen sectors such as energy and heat. Technically, the website is built on the Squarespace platform, utilizing modern web technologies including jQuery, Google reCAPTCHA, and various third-party plugins for enhanced user experience. The site is hosted on Squarespace's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS with HSTS enabled, uses reCAPTCHA to mitigate bot traffic, and does not expose sensitive data. However, it lacks explicit privacy, cookie, and terms of service policies, as well as contact information for incident response or data protection officers, which are areas for improvement. Overall, the website presents a professional and trustworthy front consistent with its mission. The domain WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns were detected. Strategic recommendations include adding comprehensive privacy and cookie policies, improving accessibility, and providing clear contact channels for security and compliance matters.

The Global Encryption Coalition is a non-profit organization founded in 2020 that promotes and defends encryption worldwide, particularly in countries and multilateral forums where encryption is under threat. With over 350 members, the coalition supports companies offering encrypted services and organizes events such as Global Encryption Day to raise awareness. The website reflects a mature digital presence with a focus on advocacy, policy, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and accessible, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. WHOIS data is unavailable due to privacy protection, but the site’s professionalism and active content indicate legitimacy. Overall, the site presents a trustworthy and authoritative resource in the encryption advocacy space.

The Internet Society Foundation is a reputable non-profit organization dedicated to supporting initiatives that strengthen the Internet's function and reach globally. It operates multiple grant programs aimed at digital inclusion, resiliency, research, and emergency response, positioning itself as a key player in the Internet development ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of non-profits, Internet communities, and global stakeholders. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and CookieYes for consent management. The infrastructure supports good performance and accessibility, with mobile optimization and SEO best practices in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, reflecting GDPR awareness. Contact information is transparent and includes phone, email, and physical address, enhancing business credibility. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the site presents a low-risk profile with strong trust indicators and a professional online presence, suitable for its mission and audience.

The domain streamka.info currently hosts no accessible website content, serving only a standard 404 Not Found error page via nginx. The domain is newly registered in July 2024 with privacy protection through a service based in Iceland, and uses Cloudflare DNS servers. There is no metadata, structured data, forms, or business information available on the site. The lack of content and contact details severely limits any meaningful business or security analysis. Technically, the site appears minimal with no detected CMS or frameworks, and no security headers or HTTPS information provided. The security posture is weak due to absence of visible security best practices and no DNSSEC enabled. Overall, the website is not operational or publicly accessible beyond an error page, indicating either a placeholder or abandoned domain.

Radio Screen is a specialized media technology company providing an associated data broadcasting platform for DAB+, RadioDNS Hybrid Radio, and Webradios. Their platform enables radio stations to enhance their visual identity by distributing logos, artist images, and metadata to compatible receivers, including vehicle infotainment systems. The company operates primarily in France and targets broadcasters and automotive infotainment providers. The website reflects a professional and consistent brand image with clear business messaging and established partnerships with recognized industry players such as Music Story and WorldDAB. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for analytics. The site is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Cookie consent and privacy policies are implemented with GDPR compliance in mind, using the Complianz plugin for consent management. However, some security headers are missing, and no explicit security policy or incident response information is published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, with no privacy protection and a domain age appropriate for the business maturity. Overall, Radio Screen presents a low-risk profile with a solid business model and good digital maturity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance their security posture and trustworthiness further.

The website dycast.pro is currently inaccessible beyond a maintenance notice displayed in both French and English. The company behind the domain is SAS DYCAST, registered in France with OVH SAS as the registrar. However, the domain WHOIS data shows a creation date in the future (February 2025), which is inconsistent and suspicious. The website lacks any active content, contact information, privacy or cookie policies, and security disclosures. Technically, the domain uses Cloudflare DNS but does not have DNSSEC enabled, and no security headers or HTTPS enforcement details are visible. This indicates a low digital maturity and security posture. Overall, the site appears to be either under development or temporarily offline, with minimal trust and business credibility indicators.

Momentum Children's Charity is a UK-based non-profit organization dedicated to supporting families of seriously ill children, particularly those affected by cancer and other life-challenging conditions. The charity operates through partnerships with NHS hospitals across London, Surrey, and Sussex, providing services such as family support workers, therapies, respite breaks, and bereavement support. Their website reflects a professional and compassionate approach, targeting families in need as well as donors and volunteers. The charity maintains a strong market position within its regional healthcare support sector, leveraging fundraising and community engagement as key business models. Technically, the website is built on WordPress with modern plugins including Yoast SEO, Bootstrap framework, and integrates Google Tag Manager and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via a CDN provider, ensuring reasonable delivery speeds. From a security perspective, the site uses HTTPS with no visible exposed sensitive data and employs email obfuscation to protect contact information. However, security headers are not detected, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a trustworthy and professional front for the charity, with strong content quality and business credibility. The lack of WHOIS data is mitigated by the charity's transparency in other trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and formalizing vulnerability disclosure to further strengthen the security posture and trustworthiness.

The website www.baglik.cz represents ALADIO s.r.o., a Czech-based e-commerce retailer specializing in school bags, backpacks, wallets, and related accessories primarily targeting children, students, and parents in the Czech and Slovak markets. The site offers a broad catalog of products including backpacks for various age groups, school supplies, and travel bags, positioning itself as a specialized retailer in this niche. The business model is focused on direct online sales with a clear emphasis on product variety and brand partnerships. Technically, the website is built on the Upgates e-commerce platform and employs modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and other marketing and tracking tools. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy regulations. However, it lacks visible security headers and explicit privacy and terms of service pages, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registrant data is a minor concern but does not significantly detract from the site's legitimacy given the professional presentation and technical setup. Overall, www.baglik.cz is a legitimate, well-structured e-commerce site with a solid market position in the retail sector for school-related products. Strategic improvements in privacy disclosures, security headers, and registrant transparency would enhance trust and compliance.

Teekanne.cz is the Czech Republic website for Teekanne, a well-established tea brand with a history dating back to 1882. The website primarily serves as a brand and product showcase, targeting general consumers interested in tea products. The site employs modern front-end technologies such as Swiper.js for interactive elements and presents a professional and consistent brand image. However, the technical infrastructure lacks visible advanced security headers and privacy compliance indicators, and no WHOIS data is publicly available, which limits trust assessment. The absence of explicit privacy and cookie policies suggests room for improvement in compliance and transparency. Overall, the website is functional and visually appealing but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

The website ceske-budejovice.cz currently presents no accessible content beyond an empty HTML skeleton. The domain is registered since 1999 with consistent WHOIS data indicating a legitimate registration through REG-GRANSY and name servers ns1.redirect.host and ns2.redirect.host. However, the absence of any metadata, content, or contact information suggests the site is either inactive, under construction, or abandoned. There is no evidence of privacy, cookie, or security policies, nor any technical or business information available on the site. The lack of HTTPS and security headers further indicates a minimal security posture. Overall, the site does not provide any meaningful business or security information and scores very low on content quality, technical implementation, and privacy compliance.

Nakladatelství UMÚN s.r.o. is a Czech Republic based publishing company specializing in artwork created by artists with severe physical disabilities who paint using their mouth and feet. Established since 1993, it operates as part of a global association supporting such artists, offering products including calendars, greeting cards, and reproductions. The website reflects a niche cultural and retail business model focused on social inclusion and artistic promotion. Technically, the website uses basic web technologies including JavaScript and CSS, with no modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate; no HTTPS or security headers were explicitly identified in the provided data, and no incident response or security policies are publicly disclosed. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR principles. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate based on content and history. Overall, the website is functional but would benefit from enhanced security, technical modernization, and clearer contact information.

The website www.opel-ihned.cz serves as a comprehensive online platform for listing and filtering Opel brand vehicles available immediately from authorized dealers in the Czech Republic. It aggregates stock and demo vehicles, providing detailed filtering options by model, dealer, engine type, color, equipment, and price. The platform targets consumers seeking to purchase Opel vehicles quickly and conveniently, positioning itself as a trusted intermediary between buyers and authorized dealers. The business model focuses on lead generation and vehicle inventory display, supported by dealer contact information and location mapping. Technically, the site is built on JavaServer Faces with PrimeFaces UI components, enhanced by Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager, Google Analytics, and Adform for marketing and tracking purposes, alongside a live chat service (Smartsupp). The site is mobile-optimized with good SEO practices, including structured data (JSON-LD) and Open Graph metadata, enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and no published security or incident response policies are found. The absence of WHOIS data reduces transparency but does not directly imply malicious intent. Overall, the security posture is moderate with room for improvement in policy publication and header implementation. The overall risk assessment suggests a legitimate, professionally maintained automotive sales platform with moderate technical maturity and privacy compliance. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

Nejlevnejsinabytek.cz is a Czech Republic based e-commerce platform specializing in furniture and home accessories. The website offers a large inventory of furniture products, including private label items under the NEJBY brand, and targets general consumers seeking affordable and quality home furnishings. The business is positioned as one of the largest furniture e-shops in the Czech market, providing extensive stock and a loyalty club for customers. Technically, the site uses modern JavaScript libraries, CDNs, and tracking tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policy pages. The absence of WHOIS domain registration data is a notable concern, reducing domain trustworthiness, though the website content and business presence indicate legitimacy. Overall, the site is professional and trustworthy for its market segment.

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.

Dirtbikes.cz operates as a specialized e-commerce and physical retail business focused on motorcycles, ATVs, scooters, and related accessories primarily serving the Czech Republic market. The company offers a wide range of products from well-known brands such as Kawasaki, CFMOTO, and Vespa, complemented by professional servicing and rental services. The website is well-structured, professionally designed, and provides clear navigation and product information, targeting motorsport enthusiasts and vehicle buyers. Technically, the site employs modern tracking and analytics tools including Google Tag Manager, Matomo, and Facebook Pixel, alongside a custom e-commerce platform. Security posture is solid with HTTPS enforced and consent management for tracking, though explicit security headers and policies are not fully implemented. The absence of public WHOIS data suggests privacy protection, which is common but slightly reduces transparency. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in security disclosures and WHOIS transparency.

The website www.eberry.cz represents a Czech Republic based online retail platform specializing in electronics and household goods. The site offers a user-friendly e-commerce experience with a professional design and moderate technical sophistication, including modern JavaScript frameworks and analytics integrations. Despite the lack of publicly available WHOIS data due to privacy protection, the website appears legitimate and well-maintained. However, the absence of explicit privacy and cookie policies and contact information limits full compliance and trust transparency. Security posture is generally good with HTTPS and monitoring tools in place, but could be improved by adding security headers and formal policies. Overall, the site serves its retail audience effectively but should enhance privacy compliance and contact transparency to strengthen trust and regulatory adherence.

ESSOX FINANCE, s.r.o. is a Slovak financial services company specializing in vehicle financing for Peugeot and Citroën brands. It operates as a subsidiary of ESSOX, s.r.o., with a history linked to PSA Finance Slovakia. The website presents clear business information, branding consistent with PSA Group, and targets Slovak vehicle buyers. Technically, the site uses standard web technologies with legacy Google Analytics integration and basic cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent but lacks published security policies or incident response details. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Clustaar is a French technology company specializing in AI-powered chatbot solutions aimed at enhancing customer service and conversational automation. Founded in 2013, the company targets businesses seeking to leverage conversational AI to improve customer interactions and feedback analysis. The website is built on WordPress using the Divi theme, hosted by OVH sas, and employs Cloudflare DNS services. The technical infrastructure is modern but basic, with HTTPS enabled and reCAPTCHA implemented for form security. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as detailed contact information and security policies, which are important for compliance and trust. Overall, the website presents a professional and business-focused image with good design and user experience but could improve in privacy compliance and security transparency.

CZI s.r.o is a Czech internet agency with nearly 20 years of experience specializing in modern web development, content creation, and online reputation management. The company serves a B2B market, targeting businesses and organizations seeking professional digital presence and reputation services. Their website demonstrates a solid market position with notable clients and industry awards, reflecting a reputable and established business. Technically, the website is built on WordPress using modern themes and plugins such as Astra, Beaver Builder, Yoast SEO, and Google Analytics integration. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA, but additional security headers and policies are absent. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. WHOIS data is missing, which slightly reduces transparency and trustworthiness. Overall, the website is professional and trustworthy, but improvements in transparency, security headers, and privacy documentation are recommended to enhance compliance and security posture.

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

Orchestre à l'École is a French non-profit association dedicated to enriching young people's lives through collective instrumental music education in schools. It has a significant presence across France with over 184,000 beneficiaries and partnerships with notable foundations and cultural institutions. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content supporting its mission. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Consent Framework for analytics and privacy compliance, and is hosted on a reliable CDN. Security posture is strong with HTTPS and security headers, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a concern for domain legitimacy but is mitigated by the professional and transparent nature of the website content and contact information. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

La Bulle Musicale® is a French educational company specializing in multisensory interactive equipment designed to foster musical awakening and social interaction for children aged 0 to 6 years. Their products are validated by neuroscientific research and target early childhood professionals, medico-social, and cultural sectors. The website reflects a niche market position with a focus on educational innovation and inclusivity. Technically, the site is built on WordPress using Elementor and Astra theme, incorporating modern web technologies and multimedia content. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. WHOIS data is unavailable, which raises concerns about domain transparency and legitimacy. Overall, the site is professional and trustworthy in content but would benefit from enhanced compliance and security disclosures.

Linguise is a technology company specializing in automatic neural translation services for websites, enabling users to translate content into over 80 languages with instant updates and SEO optimization. The company targets website owners, eCommerce businesses, and international enterprises seeking to expand their global reach efficiently. Their service integrates with major CMS platforms and offers a live front-end editor for convenient translation management. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with Elementor and leverages modern web technologies including Google Analytics, Google Tag Manager, and Tawk.to for live chat support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data reduces domain trustworthiness, but the overall business credibility remains high based on website content and customer testimonials.

The domain yoyocasino.com is registered since 2016 with GoDaddy.com, LLC and uses Cloudflare as a hosting and security provider. The website content is currently inaccessible, returning a 404 Not Found error page served by nginx behind Cloudflare's WAF, which blocks access to the actual content. No business, contact, or policy information is available on the site, preventing a full assessment of the company's operations or compliance posture. The technical infrastructure indicates use of modern web security services, but the absence of DNSSEC and security headers is noted. Overall, the site appears non-functional or under maintenance, limiting the ability to evaluate its business or security maturity.

Caixa Econômica Federal is a major Brazilian government-owned financial institution providing a wide range of banking and financial services to the Brazilian population. The website serves as a portal for these services, including retail banking and lottery offerings. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Microsoft SharePoint and multiple analytics and advertising platforms. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response information are not published on the site. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent management system in place. Overall, the website reflects a mature digital presence consistent with a large government financial institution.

The website videoarchiv-nfa.cz serves as a specialized digital archive for experimental film and video art, operated under the auspices of the Národní filmový archiv (National Film Archive) of the Czech Republic. It provides access to curated collections, research databases, and distribution services primarily targeting researchers, academics, and film enthusiasts interested in audiovisual heritage. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technically, it is built on WordPress with a custom theme, hosted likely by Webglobe, and uses HTTPS for secure access. However, it lacks explicit privacy and cookie policies, security headers, and analytics or tracking tools, indicating a minimal data collection approach and some compliance gaps. The domain registration data aligns well with the stated purpose and timeline of the project, enhancing trustworthiness.

Datu valsts inspekcija is the official Latvian government authority responsible for overseeing personal data protection and GDPR compliance. The website serves as an authoritative source for data protection guidance, regulatory information, and public awareness. It targets Latvian residents, data controllers, and data protection officers with comprehensive resources and services. The site is well-structured, professionally designed, and provides clear contact information, reinforcing its role as a trusted government entity. Technically, the website is built on Drupal CMS, employs modern web technologies, and is optimized for accessibility and mobile use. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

PACE.V4 is a cultural platform dedicated to supporting and promoting performing arts in Central Europe. The website serves as an information hub and networking platform for stakeholders in the performing arts community across the Visegrad countries and neighboring regions. It provides event information, project updates, and links to partner organizations. The business model appears to be non-profit or cultural collaboration focused, with a regional scope and a small organizational size. Technically, the website is built on WordPress using the Enfold theme, with a moderate performance profile and good mobile responsiveness. The presence of a cookie consent banner indicates awareness of privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit contact information for incident response. Overall, the site is professional and trustworthy for its niche audience but could improve in privacy transparency and security best practices.

On the Move is a well-established non-profit organization founded in 2002, providing comprehensive resources and information on cultural mobility for artists and cultural professionals seeking international opportunities. The website serves as a trusted platform offering funding guides, open calls, mentoring, research, and events, positioning itself as a key player in the cultural mobility sector. The organization's Belgian registration and domain age align with its long-standing presence and mission. Technically, the site is built on Drupal 9, employs modern web technologies, and is optimized for mobile and accessibility, although performance is moderate. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

Grandwin is an established online gambling platform founded in 2012, offering a comprehensive suite of services including online casino games, live casino, virtual sports, sports betting, and esports betting. The platform targets adult users interested in gambling and betting, primarily in European markets such as Finland. The business operates under Ardevar Ltd, which is referenced in the website footer, indicating a parent or technology partner relationship. The website is professionally designed with multi-language support and clear navigation, providing a good user experience and trust signals such as responsible gaming information and live chat support. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Cloudflare DNS/CDN services. It employs various third-party services for analytics, real user monitoring, and customer support chat, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. The site uses CAPTCHA and offers two-factor authentication, but the latter is off by default. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligned with GDPR requirements. Overall, Grandwin presents a low to moderate risk profile with a solid business and technical foundation. Strategic improvements in DNS security, explicit security policies, and vulnerability disclosure programs would enhance trust and compliance further.

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

The Thailand Convention and Exhibition Bureau (TCEB) operates as the premier government agency responsible for organizing and promoting MICE (Meetings, Incentives, Conventions, and Exhibitions) activities in Thailand. The website showcases a comprehensive event calendar, detailed service offerings, and extensive information about the bureau's governance and operational structure. It targets event organizers, corporate clients, and government entities seeking MICE solutions in Thailand. The bureau positions itself as a key player in the regional MICE industry with a strong government affiliation and multiple regional offices. Technically, the website employs modern web technologies including Bootstrap, jQuery UI, Slick Carousel, and Select2 for enhanced user experience and interactivity. It integrates multiple analytics platforms such as Google Analytics and Matomo, and uses Facebook SDK for social engagement. The site is mobile-optimized and features a cookie consent mechanism, indicating awareness of privacy compliance requirements. However, explicit security headers are not detected, and no terms of service or incident response policies are publicly available. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible advanced security headers and explicit incident response information. The absence of WHOIS data for the domain reduces trust signals, although the website content and branding strongly suggest legitimacy as a government entity. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and WHOIS data availability. The overall risk assessment is moderate to low, with recommendations to enhance security headers, publish incident response and security policies, and verify domain registration details to improve trustworthiness and compliance posture.

Digitalagentur Sabelfeld is a newly established digital agency based in Lippstadt, Germany, specializing in web design, e-commerce solutions, SEO, and online marketing. The company positions itself as a professional and reliable partner for small to medium businesses seeking to enhance their digital presence and customer reach. The website is well-designed, modern, and optimized for mobile devices, reflecting a strong digital maturity. Technically, the site is built on WordPress with popular plugins such as Elementor and Slider Revolution, ensuring flexibility and ease of content management. Security posture is good with HTTPS enabled and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the site projects a trustworthy and professional image with clear business focus and digital competence.

Korrosion24 is an e-commerce platform operated by RSI Testsysteme GmbH & Co. KG, specializing in corrosion testing supplies such as salts, test plates, measuring devices, and consumables. The website targets professionals and companies involved in corrosion testing, offering a niche product range with clear business positioning in the manufacturing and testing sector in Germany. The site is well-branded, consistent, and provides comprehensive product information and customer support channels. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and market presence.