Medium-risk security reports

The website www.lancome.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual site content. This prevents extraction of any meaningful business, technical, or security information. The WHOIS lookup for the domain returned no entries, indicating either privacy protection or lack of public registration data, which further limits trust and legitimacy assessment. Without access to the site content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure appears to rely on Cloudflare services for security and hosting, but no further details are available. The security posture is limited to the presence of Cloudflare's WAF, but no other security headers or configurations can be verified. Overall, the site cannot be fully analyzed, and the risk assessment remains low due to lack of accessible data.

Strohmy a.s. is a Czech-based company specializing in electricity trading across European markets. Founded in 2022, it leverages expertise from energy, trading, investment banking, and professional poker to deliver precise decision-making supported by advanced mathematical and data analysis tools. The company emphasizes a respectful and trusting team environment and actively contributes to societal well-being through charitable donations and partnerships. The website reflects a professional and consistent brand image, targeting experienced professionals and partners in the energy sector. Technically, the site is built on WordPress with modern plugins and demonstrates good SEO and mobile optimization, though some security best practices like security headers and explicit privacy policies are missing. Overall, the security posture is adequate with HTTPS enabled and GDPR consent integrated in forms, but could be improved with additional policies and headers. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Onboardee.io operates the Onbee.app platform, a SaaS solution focused on digitizing and modernizing employee onboarding, offboarding, and HRIS processes. The platform targets HR professionals and team leaders, offering features such as onboarding plan templates, digital employee cards, contract templates with digital signatures, and integrations with popular ATS and SSO providers. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, it leverages modern web technologies including Alpine.js and Astro framework, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers properly configured, though explicit privacy and terms policies are missing. The domain uses privacy protection in WHOIS, which is common for startups but limits transparency. Overall, the platform appears legitimate and well-positioned in the HR technology niche.

The website 42firenze.it currently serves a security challenge page that blocks direct access to its main content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2021 and is active without DNSSEC enabled. The visible page uses outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities. No business or contact information, privacy, cookie, or terms of service policies are present on the accessible page, limiting the ability to assess the business or compliance posture. The site includes a security check powered by BitNinja, suggesting some level of security awareness but lacks modern security headers and best practices. Overall, the site’s digital maturity is low, with poor content quality and minimal SEO or accessibility features.

Campus 19 is a Belgian coding education platform affiliated with the global 42 network, offering free, peer-to-peer, project-based learning without traditional classes or teachers. It targets adults aged 18 and over, providing an innovative approach to IT education with campuses in Brussels and Antwerp. The platform emphasizes accessibility, inclusivity, and direct career placement, boasting a 100% employment rate after the core curriculum. Technically, the website is built on WordPress, leveraging modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel, and is hosted by OVH. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

GreatPages is a Brazilian technology company specializing in providing high-performance landing page templates and a platform for infoproduct creators and online course sellers. Their service enables users to create optimized landing pages with marketing tool integrations and SEO configurations, targeting the Brazilian market. The website is professionally designed with good content quality and moderate technical implementation, including Cloudflare DNS for hosting and performance. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved with better security practices and transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security measures.

GreatSoftwares is a Brazilian technology company offering a suite of software solutions primarily targeting photographers, studios, and businesses requiring digital tools. Their portfolio includes management systems, website builders, payment processing, email marketing, e-commerce, and membership platforms. The company positions itself as a comprehensive provider with a growing international presence. Technically, the website is built with modern web standards, uses HTTPS, and is hosted on a specialized platform, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy, with clear business information and compliance with privacy regulations.

Nadační fond Czechitas Báry Bühnové is a Czech non-profit foundation dedicated to supporting women and disadvantaged groups in accessing IT education and career opportunities. The foundation provides scholarships and funding to help overcome barriers in the IT sector, aiming for systemic change in IT education across all ages. The website is professionally designed, targeting Czech-speaking audiences, and presents a clear mission with calls to action for donors and applicants. The foundation collaborates with reputable partners and uses established donation platforms to facilitate contributions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. It is hosted on Webflow's infrastructure, ensuring reliable performance and mobile responsiveness. The site includes a cookie consent mechanism compliant with GDPR, although explicit privacy and terms of service pages are limited or linked externally. No blocking or WAF mechanisms were detected, and SSL is properly configured, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some security headers and formal security policies. The absence of WHOIS data for the domain is a concern for transparency and trust, although the website content and partner references support legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the site presents a moderate to good security posture with room for improvement in policy disclosures and technical headers. The overall risk assessment is moderate with recommendations to improve domain registration transparency, add security headers, and publish formal security and privacy policies. These steps will enhance trustworthiness and compliance, supporting the foundation's mission and stakeholder confidence.

Czechitas z.ú. operates a pilot mini e-commerce shop offering branded merchandise and vouchers to support its mission of empowering women and children in the Czech Republic to explore IT. The website is professionally designed, mobile-optimized, and built on the Shoptet platform, integrating standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Contact information and social media presence are clearly provided, enhancing trust and engagement. Technically, the site uses HTTPS with CSRF protection on forms and a cookie consent mechanism, reflecting a good security posture. However, the absence of WHOIS data limits domain legitimacy verification, and security headers are not explicitly detected, suggesting room for improvement. No explicit security policies or incident response contacts are published. Overall, the website demonstrates a solid foundation in content quality, privacy compliance, and business credibility, but would benefit from enhanced transparency in domain registration and security practices. The risk level is moderate with no critical vulnerabilities detected, but verification of domain registration details is recommended to strengthen trust.

42 Singapore operates as a tuition-free ICT education institution leveraging a peer-to-peer, project-based learning model derived from the 42 Paris pedagogy. It targets learners seeking innovative, hands-on coding education without traditional teachers or lectures. The institution is part of the globally recognized 42 Network and offers an EU-recognized diploma equivalent to a Bachelor's degree. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing pixels, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and external references support legitimacy. Overall, the site is professional and user-friendly but would benefit from enhanced transparency in privacy, security policies, and domain registration details.

42 Abu Dhabi is a tuition-free coding school based in Abu Dhabi, UAE, operating as part of the global 42 Network. The school emphasizes peer-to-peer learning and project-based education, targeting aspiring coders aged 18 and above. The website reflects a professional and consistent brand image, with clear navigation and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and anti-clickjacking measures, though lacks some security headers and explicit privacy policies. The domain registration is consistent with the business location and purpose, enhancing trustworthiness. Overall, the website is well-positioned in the education sector with a strong market presence but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

42 Prague is a tuition-free coding institute that offers innovative, peer-to-peer software engineering education as part of the global 42 Network. The website reflects a strong market position within the education and technology sectors, targeting aspiring coders worldwide with a unique, gamified, and project-based learning model. Technically, the site employs modern analytics and marketing tools, including Google Tag Manager, TikTok Pixel, and Hotjar, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

Czechitas is a Czech non-profit organization dedicated to opening the world of IT to women, children, and other beginners. The organization offers a wide range of IT courses, including digital academies, corporate upskilling, and career development support. Their market position is strong within the Czech Republic as a leading educational entity focused on digital literacy and inclusion. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and various marketing and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response contacts could enhance their security maturity. Overall, the domain is privacy protected, which is justified for a non-profit, and the website exhibits high trustworthiness and professionalism.

Legitas advokátní kancelář s.r.o. is a modern Czech legal services firm specializing in online business, e-commerce, and marketing law. The company targets e-shops, web applications, and development firms, offering comprehensive legal advice, contract preparation, and business formation services. Their website reflects a professional and client-focused approach with clear service offerings and client testimonials, positioning them as a trusted partner in their niche market. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and integrating Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Cookie consent is implemented with granular controls, reflecting GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and employs cookie consent mechanisms to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website and business appear legitimate and professionally managed, with a strong focus on privacy and compliance. The lack of publicly available WHOIS data is consistent with privacy protection practices common for small legal firms. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a terms of service page to improve transparency and trust.

The website at czechtrade.cz is currently inaccessible, returning an HTTP 404 Not Found error with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered since 1998 with a Czech registrar and hosted on websupport.cz name servers, indicating a legitimate and long-standing domain. However, the lack of accessible content severely limits the ability to assess the company's digital presence, security posture, or compliance status. No privacy, cookie, or terms of service policies are found, nor any contact or security incident response information. The technical infrastructure cannot be evaluated beyond the registrar and hosting provider data. Overall, the site appears offline or misconfigured, resulting in a very low AI score and high risk from a security and compliance perspective.

The domain fi.tdsynnex.com is currently not registered or not found in the WHOIS database, indicating it is inactive or unregistered. The website content is minimal or inaccessible, with no metadata, scripts, or business information available for analysis. This suggests the domain is either unused or a placeholder without active operations. The lack of HTTPS, security headers, privacy policies, and contact information further indicates a very low digital maturity and security posture. Overall, the domain and website present significant legitimacy and trust concerns, and no meaningful business or security insights can be derived from the current state.

Becom Summit is a professionally managed event platform organized by BeCommerce, the Belgian e-business federation, targeting the Belgian e-commerce sector. The website effectively communicates event details, past editions, and upcoming dates, positioning itself as a leading e-commerce event in Belgium. The technical infrastructure is based on WordPress with modern plugins and multilingual support, indicating a mature digital presence. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the website presents a trustworthy and credible business front with clear contact information and legal disclosures.

Becom is a Belgian e-commerce federation established in 2023, dedicated to supporting and certifying online shops in Belgium. The organization offers a range of services including the Becom Trustmark certification, security and cookie scans, educational events such as bootcamps and summits, advocacy and legal support, and a comprehensive knowledge wiki. Their target audience includes B2B, B2C, and D2C e-commerce players in Belgium, positioning themselves as a leading federation in the local e-commerce ecosystem. Technically, the website is built on WordPress with modern plugins and integrations such as Google Tag Manager and reCAPTCHA, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

Dynamate is a Belgian technology company specializing in digital transformation services that connect people and technology to empower businesses. Their market position is that of a well-established digital partner offering a broad range of IT services including business applications, cloud infrastructure, modern workplace solutions, security, web and mobile development, and digital marketing. The company targets businesses seeking impactful and innovative digital solutions to enhance operational efficiency and competitiveness. Technically, the website is built on modern frameworks such as Astro and integrates multiple third-party platforms like Microsoft 365, Shopify Plus, and HubSpot, indicating a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms including cookie consent and a responsible disclosure page. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data is incomplete and restricted, which slightly reduces domain trustworthiness. Overall, the website presents a professional, trustworthy, and compliant digital presence.

Trustlocal.be is a Belgium-based online platform specializing in connecting consumers with local service providers across various sectors such as legal, construction, cleaning, and personal services. Established in 2020 and operating under the parent company Trustoo, it holds a strong market position as a leading service comparison platform in Flanders. The website offers comprehensive listings, user reviews, and price comparisons, facilitating easy contact between customers and trusted local businesses. The platform leverages modern web technologies including Next.js and Sanity CMS, ensuring a fast, mobile-optimized, and SEO-friendly user experience. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for local service discovery in Belgium.

Bazzacco Srl is an Italian technology company specializing in digital solutions, software management systems, and digital marketing services tailored primarily for SMEs, bookstores, and stationery shops. Their product portfolio includes proprietary software such as Lybro and 3Click, alongside services like web design, digital signage, and brand identity development. The company maintains a professional online presence with clear contact channels and active social media engagement, positioning itself as a reliable regional player in the digital transformation sector for retail and small business clients. Technically, the website is built on WordPress using Elementor and related plugins, integrating modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized, SEO-friendly, and exhibits good performance metrics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are not evident. The WHOIS data is unavailable due to EURid privacy policies, which is common for European domains, but the website content and business information are consistent and professional, supporting legitimacy. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital infrastructure and business credibility suitable for its market segment. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and conducting regular security audits to maintain resilience. Continued focus on accessibility improvements and transparency will further strengthen trust and compliance.

Leadaki is a specialized digital marketing agency focusing on full funnel strategies leveraging data-driven marketing techniques. The company holds reputable certifications such as Google Premier Partner and Google Marketing Platform, positioning itself as a trusted player in the Argentine and broader Spanish-speaking digital marketing landscape. Their service offerings include performance campaigns, brand campaigns, programmatic buying, e-commerce marketing, and marketing automation through Cliengo. Technically, the website employs a modern tech stack with multiple analytics and marketing tools integrated, including Google Analytics, TikTok Analytics, Facebook Pixel, Hotjar, and VWO, indicating a mature digital infrastructure. The site is mobile-optimized and uses service workers for PWA capabilities, though accessibility features are basic. Security posture is strong with HTTPS and no exposed sensitive data, but lacks some security headers and formal policies. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and certifications suggest a legitimate business. Privacy and cookie policies are missing, which impacts compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

Overalia is a specialized digital marketing agency based in Spain, with a strong focus on online marketing strategies, web development, traffic acquisition, and analytics. The company positions itself as a Google Analytics Certified Partner and Google Partner, serving a diverse client base with over 1,200 projects completed. Their website demonstrates a professional and modern digital presence, utilizing contemporary web technologies and providing comprehensive content including case studies and detailed service descriptions. The technical infrastructure is solid, with HTTPS enforced and integration of security features like Google reCAPTCHA. Privacy and cookie policies are well implemented, reflecting good compliance with GDPR standards. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, although the website content and certifications strongly support the business's credibility.

Europ Assistance Belgium operates as a provider of travel insurance and assistance services including roadside, cancellation, and home assistance insurance. The website targets travelers and vehicle owners in Belgium, positioning itself as a trusted expert in the insurance sector. The digital presence is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and consent management tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is restricted by DNS Belgium, which is common for .be domains but slightly reduces transparency. Overall, the website is credible and trustworthy with room for improvement in security transparency and accessibility compliance.

Nyrstar is a well-established company specializing in the manufacturing and processing of zinc, lead, and other metals with a strong commitment to sustainability. The website presents a professional and comprehensive overview of their operations, products, and corporate responsibility initiatives, targeting industrial customers and partners in the metals and mining sectors. The company positions itself as a leading player with over 150 years of history, although domain registration data is not available to confirm this age. Technically, the website uses modern JavaScript frameworks such as Alpine.js and integrates analytics and tracking tools like Google Analytics and Hotjar. The presence of a cookie consent banner indicates some level of privacy compliance, but explicit privacy and terms of service policies are not found in the provided content. Security posture appears adequate with HTTPS usage and CSRF protections, but lacks visible security headers and incident response information. Overall, the website is functional and professional but would benefit from improved transparency in domain registration, privacy policies, and contact information to enhance trust and compliance.

Stad Hasselt is the official municipal government website for the city of Hasselt, Belgium, providing residents and visitors with comprehensive information about city services, governance, events, and local news. The website is well-structured, professionally designed, and targets Dutch-speaking users primarily within the Hasselt region. It offers key services such as document requests, traffic and parking information, waste management, education, leisure, healthcare, and business support. The site uses Drupal 10 CMS with modern front-end technologies and integrates Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure form handling, though some security headers and incident response information are absent. Privacy and cookie policies are present and appear GDPR compliant. WHOIS data is restricted due to domain policy, but the official branding and domain usage confirm legitimacy. Overall, the website demonstrates a good balance of usability, security, and compliance suitable for a government entity.

The website careersite.be is currently inaccessible due to a 403 Forbidden error indicating that access has been blocked by the server administrator. The domain is registered since 2012 with Cloudstar cv as the registrar, but no business or contact information is available on the site. The lack of accessible content and absence of privacy, cookie, or terms of service policies severely limits the ability to assess the business or security posture. Technically, the site loads minimal resources, primarily a Google Fonts stylesheet, and does not reveal any scripts, analytics, or tracking mechanisms. Security headers and HTTPS status could not be confirmed due to the access restriction. Overall, the site appears to be either under maintenance, restricted intentionally, or inactive, resulting in a low trust and credibility score.

az Vesalius is a Belgian healthcare provider focused on delivering high-quality basic care close to home. The website serves primarily as a recruitment portal for various hospital roles including healthcare workers, doctors, volunteers, and interns. The site targets job seekers and volunteers interested in joining the hospital staff. Technically, the website uses modern web technologies such as jQuery, Isotope, Font Awesome, and Google Fonts, with a moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS assumed but no visible security headers or incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Visualead Ltd. operates a specialized online platform offering visual QR code generation services aimed at businesses and marketers seeking enhanced engagement through branded and mobile-optimized QR codes. The company positions itself as a medium-sized technology firm with a global client base including major brands, providing a SaaS model with campaign management and analytics capabilities. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and tracking tools, with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is partially addressed with clear privacy and terms of use pages, but lacks a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, potentially indicating registration or privacy issues, but the active and consistent web presence mitigates some trust concerns. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and privacy practices.

James Cook Languages is a well-established language education provider specializing in corporate language training, professional courses, translation, and interpreting services across Central Europe. With over 20 years of experience and a client base exceeding 600 companies, it holds a strong market position supported by its membership in the EDUA Group. The website reflects a professional and consistent brand image, targeting corporate clients seeking tailored language solutions. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the domain registration and website content align well, indicating a legitimate and credible business.

Tutor.cz is a Czech education services provider specializing in preparatory courses for secondary school entrance exams, maturita (high school graduation), university entrance, and language learning. The company offers a broad portfolio of services including online and in-person courses, language camps, and individual tutoring, targeting students across multiple cities in the Czech Republic. The website reflects a professional and consistent brand presence with good content quality and clear navigation tailored to its audience. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy page found. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active social media presence support its legitimacy. Strategic recommendations include improving privacy disclosures, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Digiskills.cz is a Czech-based digital education platform specializing in corporate training, online courses, and digital transformation services. The company targets businesses and professionals aiming to enhance their digital skills, offering a comprehensive library of practical courses focused on Microsoft 365 tools, AI, automation, and digital productivity. The website demonstrates a strong market position with over 500 corporate clients and a history of 7 years in e-learning. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and integrates various analytics and marketing tools with a good privacy consent mechanism. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. The absence of WHOIS data is a concern for domain legitimacy but is offset by professional content and trust signals. Overall, the site is well-designed, user-friendly, and trustworthy for its intended audience.