Medium-risk security reports

BIG EVIL CORPORATION is a small UK-based independent videogame studio specializing in creating new games for retro consoles, particularly the SEGA Mega Drive and Genesis. Their business model focuses on niche market segments of retro gaming enthusiasts, offering original games developed using authentic 1990s SEGA development tools. The company maintains an active online presence with social media channels and a dedicated development blog, supporting community engagement and marketing efforts. Technically, the website is built on the 123-reg Website Builder platform, leveraging common web technologies such as JavaScript, jQuery, and Google Analytics for tracking. The site is hosted securely with HTTPS and uses CDN services for content delivery, though mobile optimization and accessibility are basic and could be improved.

Art'cade is a small retail business based in Lyon, France, specializing in the sale and rental of original arcade machines that blend retro gaming culture with urban art aesthetics. The website presents a professional and consistent brand image, targeting retro gaming enthusiasts and urban art lovers. The business model focuses on niche market offerings combining entertainment and artistic expression. Technically, the website is built on the Wix platform, leveraging modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is good with HTTPS enabled, but lacks some security headers and visible privacy compliance documentation. The absence of WHOIS data limits domain legitimacy verification, which slightly reduces trust. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

Rose Colored Gaming is a niche e-commerce retailer specializing in unique and creative products designed for the display and protection of geek culture collections. Founded in 2012 and based in the US, the company targets enthusiasts and collectors within the geek community. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing tools to support its online retail operations. The business maintains a consistent brand presence with active social media channels and clear policy pages, although some privacy compliance aspects such as cookie consent are lacking. Technically, the website uses a solid infrastructure hosted on SiteGround with Shopify CMS, integrating multiple JavaScript libraries and marketing pixels for analytics and customer engagement. Performance and mobile optimization are good, but there is room for improvement in accessibility and security hardening, particularly by enabling DNSSEC and implementing security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks advanced security policies and incident response information. The absence of a cookie consent mechanism and GDPR compliance indicators suggests partial privacy compliance. The WHOIS data is consistent with the business profile, showing a long-standing domain registration without privacy protection, which supports legitimacy. Overall, Rose Colored Gaming presents a professional and trustworthy online presence with moderate security and privacy maturity. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its risk posture and customer trust.

Retrotainment Games LLC operates a professionally designed e-commerce website focused on retro cartridge-based video games. The company targets retro gaming enthusiasts and collectors, offering game development, manufacturing, publishing, and retail services. The website is built on the Shopify platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data raises concerns about domain registration legitimacy, although the active and professional online presence suggests a legitimate business. Security posture is strong with HTTPS and secure Shopify checkout, but privacy and cookie policies are missing, which impacts compliance. Overall, the site is safe and trustworthy for general audiences but would benefit from enhanced privacy disclosures and domain registration transparency.

Rontar Group OÜ operates a professional adtech platform focused on providing dynamic retargeting and native advertising solutions primarily for e-commerce businesses. The company integrates with major platforms such as Shopify and Magento and serves over 1,200 customers globally, positioning itself as a specialized player in the digital advertising market. The website content is well-structured, with clear service offerings and customer testimonials that reinforce its market credibility. Technically, the site employs modern JavaScript libraries and third-party analytics and advertising tools, ensuring a functional and moderately optimized user experience across devices. Security posture is solid with HTTPS enforced and GDPR-compliant consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. The absence of WHOIS data is a notable anomaly but does not currently undermine the operational legitimacy of the business. Overall, Rontar presents as a trustworthy and competent adtech provider with a good balance of business and technical maturity.

Enterprise Europe Network Catalunya is a regional branch of the EU's Enterprise Europe Network, providing comprehensive business support services to SMEs, startups, and scaleups in Catalonia. The organization offers a wide range of services including innovation support, internationalization assistance, and access to European funding programs. The website reflects a professional and consistent brand aligned with the European Commission's network objectives. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies and frameworks such as Bootstrap and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and consent management implemented, although some security headers could be improved and a formal security policy is absent. Overall, the domain registration data aligns well with the business entity, supporting legitimacy and trustworthiness.

VORTAL is a leading global provider of eProcurement and eSourcing solutions, targeting both public and private sector organizations. Their platform offers a comprehensive suite of services including category management, dynamic purchasing systems, eAuctions, and supplier relationship management, positioning them strongly in the B2B technology and government sectors. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins for SEO, multilingual content, and cookie consent, indicating a well-maintained infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, complemented by a comprehensive cookie consent mechanism ensuring GDPR compliance. However, the absence of publicly available WHOIS data due to privacy protection slightly reduces transparency but is justified given the business nature. Overall, the site demonstrates a solid balance of business credibility, technical maturity, and privacy compliance.

The website vosatkajan.cz is a personal website belonging to Jan Vosátka, primarily focused on personal genealogy and related content. It serves as a personal branding and informational site without evident commercial activities. The site is built on Joomla CMS with the Gantry 5 framework and uses common web technologies such as jQuery and Font Awesome. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, but lacks advanced security headers and formal privacy or terms of service documentation. Contact information is limited but includes a valid email and WhatsApp number. Overall, the site is trustworthy and safe for general audiences.

RE/MAX Česká republika operates as a leading real estate brokerage network in the Czech Republic, offering a wide range of services including property sales, rentals, auctions, mortgage financing, and commercial real estate solutions. The company also supports career development for real estate agents and franchising opportunities, positioning itself as a dominant player with over 170 offices nationwide. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization, reflecting a mature digital presence. Technically, the site leverages modern tools such as Google Tag Manager, Google Analytics, and Mapy.cz API, with a consent-based cookie management system enhancing privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and explicit privacy documentation. The absence of WHOIS data reduces domain trustworthiness but does not detract from the overall professional appearance and market credibility of the business. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security.txt, and enhancing security headers to further strengthen trust and compliance.

Azivex s.r.o. is a small local business based in Hořovice, Czech Republic, with an online presence hosted on the Wix platform. The website is primarily in Czech and appears to target local customers, though specific business services or products are not detailed on the homepage. The site uses Wix's standard technology stack and scripts, indicating a moderate level of digital maturity. The technical infrastructure is typical for small businesses using website builders, with basic mobile optimization and moderate performance. Security posture is limited, with no advanced security headers or policies detected, and no visible privacy or cookie policies, which may expose the business to compliance risks. The absence of WHOIS registrant data reduces trustworthiness and raises questions about domain registration transparency. Overall, the website is functional and safe for general audiences but would benefit from enhanced security and compliance measures.

ArenaJech.cz is a specialized Czech e-commerce and physical retail business focused on competitive swimming gear, offering products from major brands such as Arena, Speedo, and TYR. The website targets competitive swimmers and swimming enthusiasts primarily in the Czech Republic and Slovakia, providing a broad range of swimwear, goggles, training aids, and accessories. The business model combines online sales with a physical store presence, enhancing customer reach and service. The site is professionally designed with clear navigation and product categorization, supporting a positive user experience.

The website domecekhorovice.cz represents a municipal leisure center named Středisko volného času - DOMEČEK HOŘOVICE, established in 2005 and serving the local community of Hořovice, Czech Republic. It offers cultural and educational activities primarily targeting children, youth, and families. The site provides event announcements, contact information, and terms of service documentation, reflecting a public sector non-profit business model with municipal backing. Technically, the website employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Google Maps API, and Lightbox2 for image galleries. The site appears to be custom-built or uses an unknown CMS, with moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks security headers and does not provide privacy or cookie policies, which are compliance gaps. The use of third-party analytics implies moderate user tracking without explicit consent mechanisms. No incident response or vulnerability disclosure information is present. Overall, the website is legitimate, consistent with its municipal purpose, and safe for general audiences. Strategic improvements include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance to strengthen trust and security posture.

Proplavani.cz is a Czech Republic-based e-commerce retailer specializing in swimming accessories and sports swimwear, endorsed by Czech Olympian Martina Moravčíková. The business operates primarily online via a Shopify platform with two physical stores in Prague. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies compliant with GDPR. The technical infrastructure leverages Shopify's hosting and CDN services, integrating marketing and analytics tools such as Facebook Pixel and AVADA Cookies Bar. Security posture is strong with HTTPS enforced, though some security headers are missing and no explicit security policies or incident response contacts are publicly available. The domain WHOIS data is not publicly accessible, indicating privacy protection, which slightly reduces transparency but is common for e-commerce sites. Overall, the site is trustworthy, well-maintained, and targets general audiences interested in swimming products.

EDF Renewables North America operates as a market-leading independent power producer and service provider specializing in renewable energy solutions including onshore and offshore wind, solar photovoltaic, energy storage, and electric vehicle charging across North America. The company positions itself as a sustainable energy leader with a history dating back to 1987 and is affiliated with the global EDF Group. Their website reflects a professional and comprehensive digital presence, targeting businesses and stakeholders interested in clean energy solutions. The business model focuses on development, operation, and optimization of renewable energy assets, supported by a strong corporate social responsibility ethos and active communication channels including press releases and social media. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and several plugins for SEO, multilingual support, and GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No critical vulnerabilities were detected in the visible content. The absence of WHOIS registration data for the domain www.edf-re.com is a notable concern, as it raises questions about domain legitimacy and ownership transparency. Despite this, the website content, branding consistency, and external links to known EDF Group domains support the authenticity of the business. The site does not expose sensitive data and complies with privacy regulations, including GDPR. However, the lack of direct contact emails or phone numbers and missing security.txt or incident response information suggests areas for improvement in transparency and security readiness. Overall, EDF Renewables North America presents a credible and professional online presence aligned with its business objectives in the renewable energy sector. Strategic recommendations include verifying domain registration details, enhancing security headers, publishing security and incident response policies, and improving direct contact information availability to strengthen trust and compliance.

EDF Renewables North America operates a dedicated Mexico division focused on renewable energy projects including solar and wind power generation. The company has been active in Mexico since 2000, with a large employee base and offices in Mexico City and Oaxaca. Their market position is strong as a leading independent power producer and service provider in the renewable energy sector, offering a broad portfolio of clean energy technologies and services. The website reflects a mature digital presence with modern technologies, SEO optimization, and multi-language support. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and corporate affiliations support legitimacy.

Eden Renewables is a small Indian company specializing in renewable energy solutions, likely offering consulting and sustainable energy services. The website is built on WordPress using Elementor and includes essential privacy compliance features such as a privacy policy and cookie consent banner. The technical infrastructure is moderate with standard hosting by GoDaddy and no advanced security headers detected. The security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and additional HTTP security headers. No incident response or vulnerability disclosure policies are published, which could be a gap in security transparency. Overall, the website is professional and trustworthy with room for technical and security enhancements.

The website edf-re.cl is currently disabled and inaccessible, displaying only a minimal message indicating the site owner should contact technical support. There is no visible content, metadata, or business information available on the site. The domain is registered since 2018 with a valid expiry in 2026, using name servers associated with French providers, but no registrant organization details are provided. The lack of accessible content and contact information severely limits the ability to assess the business or technical infrastructure. Security posture is poor due to absence of HTTPS, security headers, and policies. Overall, the site appears inactive or under maintenance, resulting in a low trust and credibility score.

Dalkia Solutions is a large energy efficiency solutions provider offering a comprehensive range of services including chiller services, combined heat and power, digital services, intelligent load management, LED lighting and controls, operations and maintenance, refrigeration, retail energy, smart infrastructure solutions, solar plus storage, and strategic energy management. The company targets commercial and industrial clients nationwide and is part of the EDF Group, a well-known energy conglomerate. The website demonstrates a professional and consistent brand presence with detailed service descriptions and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and OwlCarousel, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS with CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No explicit incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. The absence of WHOIS data is a concern but the website content and branding align with a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security headers, explicit contact information, and improved privacy compliance mechanisms to strengthen its security posture and user trust.

PowerFlex is a medium-sized company specializing in clean energy and intelligent energy management solutions, targeting commercial and industrial clients seeking to reduce carbon footprints and optimize energy usage. Their offerings include commercial solar, energy storage, EV charging infrastructure, and a proprietary intelligent energy management platform. The website is professionally designed, mobile-optimized, and rich in relevant content, showcasing strong branding and trust signals such as customer testimonials and partnerships with major corporations. Technically, the site leverages modern web technologies including Webflow CMS, Google Analytics, HubSpot forms, and Osano for cookie consent, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie management, though explicit security headers and policies are not fully documented. WHOIS data is missing, which raises some concerns about domain legitimacy, but the overall business credibility and website quality mitigate this risk. Strategic recommendations include publishing a security policy, improving WHOIS transparency, and adding vulnerability disclosure mechanisms.

The Landesstelle für Museen Baden-Württemberg is a government advisory body dedicated to supporting museums within the Baden-Württemberg region. Their primary focus is on fostering well-structured, audience-oriented, and sustainable museum landscapes through consulting, funding, and educational programs. The website reflects a professional and regionally focused institution with clear contact information and relevant content tailored to museums and cultural stakeholders. Technically, the website is built on TYPO3 CMS with Bootstrap components for responsive design and uses Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is accessible, mobile-optimized, and well-structured, though it lacks some advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it could improve by implementing security headers, publishing security policies, and establishing a vulnerability disclosure process. The WHOIS data shows no privacy protection but uses agency name servers, which is typical for professional hosting. Overall, the domain and website appear legitimate and consistent with a government advisory entity. The overall risk is low, with recommendations focusing on enhancing security posture and privacy compliance to further strengthen trust and resilience.

The website www.realitnikariera.cz serves as a professional career portal for RE/MAX Alfa, a leading real estate brokerage office in the Czech Republic. It offers comprehensive information about becoming a real estate agent, company mission, vision, strategy, and testimonials from current agents. The site is well-structured, content-rich, and targets individuals interested in real estate careers within the Czech market. Technically, it is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not confirmed. WHOIS data is unavailable due to privacy protection, which is common and justified for business domains. Overall, the site is trustworthy, professional, and compliant with GDPR regulations.

RE/MAX Alfa is a professional real estate agency operating primarily in the Czech Republic, offering a wide range of services including property sales, rentals, appraisals, auctions, and legal support. The company is part of the international RE/MAX network and positions itself as a market leader with a strong focus on customer satisfaction and high-quality service delivery. The website is well designed, multilingual, and provides comprehensive information about services, agents, and legal policies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, ensuring good performance and user experience. Security measures include HTTPS and Google reCAPTCHA, although additional security headers could enhance protection. The absence of WHOIS data is a notable gap, but the overall digital presence and business information suggest a legitimate and trustworthy operation.

Freiraumfest is a non-commercial, self-organized cultural festival based in Graz, Austria, focusing on community-driven events and free spaces for cultural, artistic, and political engagement. The festival is scheduled for November 16-23, 2025, and aims to provide a platform for diverse community participation beyond commercial interests. The website is built on WordPress using modern plugins and themes, offering a good user experience with mobile optimization and SEO features. Security posture is adequate with HTTPS but lacks advanced security headers and formal policies. No privacy or cookie policies are present, which is a compliance gap. Overall, the site is legitimate and trustworthy for its purpose but could improve in privacy and security transparency.

Elevate Festival is an established interdisciplinary cultural event held annually in Graz, Austria, focusing on music, art, and political discourse. The festival offers a diverse program including concerts, performances, workshops, and discussions, targeting culturally and politically engaged audiences. The website is built on TYPO3 CMS with Bootstrap framework, providing a responsive and well-structured user experience. It includes essential privacy and cookie policies, indicating GDPR compliance, and integrates Matomo analytics for user tracking. Security posture is solid with HTTPS enforcement and standard security headers, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-positioned within its niche.

CryptoParty Austria is a community-driven non-profit initiative focused on educating individuals about internet security, privacy, and anonymity through meetups and workshops. The website serves as an information hub for upcoming events primarily in Austrian cities such as Vienna and Graz, and provides resources for learning about encryption and secure communication. The organization leverages open-source technologies and is hosted by the reputable Chaos Computer Club Wien, reinforcing its community and privacy-oriented ethos. Technically, the site uses DokuWiki CMS with PHP and jQuery, offering a functional but basic user experience with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience well but could improve in compliance and security transparency.

FunkFeuer.at represents a non-commercial, community-driven initiative focused on building and maintaining free, decentralized wireless networks in Austria. Founded in 2003, it operates through volunteer-run nodes that form a mesh network to provide open communication infrastructure without commercial interests. The website serves as an informational hub with links to regional initiatives, community resources, and sponsors supporting the project. Technically, the site uses modern web technologies such as Bootstrap and custom CSS, delivering a mobile-optimized and well-structured user experience. However, it lacks formal privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The absence of tracking and advertising tools aligns with the community's privacy-conscious ethos. WHOIS data confirms the domain's legitimacy and consistent registration details matching the organization's profile. Overall, the site is trustworthy and functional but could enhance compliance and security transparency.

mur.at is a small cultural initiative based in Austria focused on promoting network culture and network art. The website serves as a portal to various related projects and provides resources such as a newsletter subscription and service status monitoring. The business model appears to be non-profit or community-driven, targeting artists and cultural communities interested in digital and networked art. Technically, the site is built using modern front-end technologies including Hugo CMS, Bootstrap, jQuery, and LESS CSS, with a responsive design suitable for mobile devices. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. Security posture is moderate with no detected blocking or WAF mechanisms, but the absence of security best practices and compliance documentation reduces the overall security score. Overall, the site is professional and consistent in branding but could enhance trust and compliance by adding privacy policies and security measures.

Forum Urbanes Gärtnern operates the Zentralgartenbüro website as a non-profit organization dedicated to promoting urban gardening, community gardens, and educational gardening initiatives in Graz, Austria. The organization provides workshops, consulting, garden construction, and networking opportunities to foster social-ecological transformation through gardening. Their market position is that of a local leader in community gardening support with a clear focus on education and social impact. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to their audience.

Forum Stadtpark is a well-established non-profit cultural association based in Graz, Austria, active since 1959. It serves as a vibrant hub for artists, cultural workers, and scientists, offering a broad range of services including art exhibitions, cultural events, artist residencies, and publications. The organization targets a diverse audience interested in contemporary art and culture, maintaining a strong local and regional presence. The website reflects this mission with comprehensive event listings, media galleries, and detailed organizational information. Technically, the site employs modern JavaScript libraries such as jQuery and Handlebars, ensuring a responsive and user-friendly experience across devices. While the site performs moderately well, there is room for improvement in accessibility and SEO. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media channels.

cba.media is a non-profit cultural broadcasting archive offering a large collection of podcasts, audio, video, images, and documents primarily targeting German-speaking audiences interested in culture, society, and politics. The platform is built on WordPress with a modern theme and provides a professional user experience with good navigation and mobile optimization. The website is secured with HTTPS and includes a comprehensive privacy policy compliant with GDPR. However, it lacks a cookie consent mechanism and visible security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for this type of organization and does not detract from its legitimacy. Overall, cba.media presents a trustworthy and well-maintained digital presence in the cultural media sector.

Signal is a well-established nonprofit organization founded in 2013, providing secure messaging services through its Signal Messenger app and related group functionalities. The website signal.group serves as a gateway to join Signal groups and links users to official Signal resources, downloads, and support. The organization holds a strong market position as a leading privacy-focused messaging platform with a global user base. Technically, the website employs modern web technologies including Bulma CSS framework and JavaScript, with responsive design optimized for mobile devices. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, some security best practices such as security headers and cookie consent mechanisms are absent, which could be improved to enhance compliance and security posture. From a security perspective, the domain WHOIS data is limited due to registry restrictions, but the domain is actively maintained and consistent with the nonprofit's branding and operations. No WAF or blocking mechanisms are detected, and the site does not engage in advertising or tracking, aligning with privacy principles. Overall, the website demonstrates a strong security posture with room for improvement in transparency and compliance documentation. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and implementing cookie consent to meet GDPR requirements. These steps will further strengthen trust and compliance for the organization's global audience.

Bikes and Rails is a community-driven housing project based in Vienna, Austria, focused on providing ecological, affordable, and solidarity-based living spaces. It operates within the habiTAT network, which promotes non-speculative housing models. The website serves as a platform for community engagement, event announcements, and direct credit investment opportunities to support the project financially. The project has received local awards and is recognized as a model for sustainable housing. Technically, the site is built on WordPress with modern plugins and uses HTTPS with CAPTCHA protection on forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which limits domain trust verification, but the website content and external recognitions support its legitimacy.

GemSe – Gemeinsam Sein is a small non-profit queer-feminist collective and association based in Kärnten, Austria, providing a community space for events, workshops, and vacation stays. The organization promotes solidarity, antifascism, and radical tenderness, targeting the queer-feminist community and allies. The website is multilingual and offers booking options and event information, supported by EU co-financing and ProEuropean Values initiatives. Technically, the website runs on WordPress 6.8.3 with common plugins such as Essential Blocks and WP Multilang. It uses HTTPS with a good SSL configuration and is hosted under a registrar consistent with the Austrian location. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics, though some accessibility features could be improved. From a security perspective, the site uses HTTPS and has domain transfer protection but lacks DNSSEC and security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may affect GDPR compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional for its niche community purpose but could improve privacy compliance and security posture by adding cookie consent, security headers, and published security policies.

servus.at is a small non-profit cultural and technological initiative based in Linz, Austria, focused on demystifying technology through artistic and cultural projects. It supports research projects, organizes the biennial 'Art Meets Radical Openness' festival, and operates an independent open source data center for its members, which include artists, educational institutions, and NGOs. The website is built on Drupal 7 with a moderate technical infrastructure including jQuery, Bootstrap, and Matomo analytics. It is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is good with HTTPS and privacy-aware analytics, but lacks explicit privacy and cookie policies and security headers. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is trustworthy and professional but could improve compliance and security best practices.

The Deutsche Postcode Lotterie GmbH & Co. KG operates a socially responsible lottery platform in Germany, allowing participants to win prizes based on their postal codes while supporting charitable projects. The website is professionally designed, highly accessible, and optimized for mobile devices, reflecting a mature digital presence. Key services include monthly and daily lottery draws, with a significant portion of proceeds dedicated to social causes. The platform holds reputable certifications such as TÜV Saarland and Trusted Shops, enhancing its credibility. Technically, the website leverages modern frameworks including Next.js and Storyblok CMS, hosted on Vercel and AWS infrastructure. It employs best practices in security, including HTTPS enforcement, security headers, and content security policies. Analytics and marketing tools like Google Tag Manager and Usercentrics CMP are used with GDPR-compliant consent mechanisms. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit security policy and incident response contact details could be more visible. Privacy compliance is robust, with comprehensive privacy and cookie policies in place. The domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security policy transparency and incident response visibility to further strengthen user trust and compliance.

Miele Center Faulmann is a specialized retailer and service provider for Miele household appliances located in Vienna, Austria. The company offers a comprehensive range of products including kitchen appliances, laundry care, vacuum cleaners, and accessories, supported by an online shop and repair services. The website reflects a professional e-commerce platform with clear navigation and a focus on customer service. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement, reCAPTCHA for form protection, and a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, the website is well-structured, secure, and compliant with privacy regulations, representing a trustworthy local business.

Faulmann Möbel GmbH operates as a specialized kitchen studio and planner based in Korneuburg, Austria, providing comprehensive kitchen planning, consultation, sales, and installation services primarily targeting private and commercial customers in the local region. The company emphasizes quality, personalized service, and partnerships with reputable kitchen brands. The website is well-structured, professionally designed, and optimized for mobile devices, offering clear navigation and rich content including product highlights and company information. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, suggesting a recent registration or privacy protection. Overall, the site presents a trustworthy and professional business presence with room for security posture improvements.

Gymnathlon Foundation is a Czech non-profit organization dedicated to providing sports scholarships and organizing sports activities for disadvantaged children, particularly those from single-parent and low-income families. The website is professionally designed using the Framer platform and incorporates modern analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service policies, as well as the lack of contact information, limits transparency and user trust. The security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure policies. The WHOIS data shows an unusual future domain creation date, which may be a data error but slightly reduces trustworthiness. Overall, the website is functional and serves its non-profit mission but would benefit from enhanced compliance and security documentation.

Spravia Sp. z o.o. is a Polish real estate developer specializing in new apartment sales in Warsaw districts such as Mokotów, Bemowo, and Praga Południe. Founded in 2021, the company presents a professional online presence with a well-structured website optimized for SEO and user experience. The site targets general consumers interested in purchasing residential properties in Warsaw, offering detailed plans and pricing information. Technically, the website is built on WordPress with modern marketing and analytics integrations including Google Tag Manager, Hotjar, and Cookiebot for GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are not explicitly published. Overall, the website reflects a medium-sized real estate business with a consistent brand and good digital maturity.

Slovenia Games Conference is a well-established annual event focused on the game development industry in Slovenia, attracting local and international professionals including programmers, artists, designers, and business leaders. The conference offers educational tracks, an indie expo, and networking opportunities, positioning itself as the largest games industry event in Slovenia. The website is built on WordPress with WooCommerce and uses common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is via Amazon AWS nameservers, indicating a reliable infrastructure. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to an official email address. Overall, the site is professional, content-rich, and trustworthy but could improve in security and privacy transparency.

HTU Graz serves as the official student representation body at the Technical University of Graz, Austria. It advocates for student interests, provides various support services, and organizes events with a large volunteer base. The organization is well integrated within the university ecosystem and collaborates with multiple student unions and partners. The website is built on TYPO3 CMS with Bootstrap, offering a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and formal incident response disclosures. Overall, the site reflects a trustworthy and credible non-profit educational entity.

Rarebyte GmbH is a small, established game development studio based in Austria with over 19 years of experience and more than 25 released titles. The company focuses on multiplatform game development, including PC, consoles, and mobile platforms, and collaborates with known publishers such as Headup Games and Greenheart Games. Their website reflects a professional and consistent brand image targeting gamers and industry partners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is moderate with some best practices like domain transfer protection and cookie consent but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie banner but no explicit GDPR statements or terms of service. Overall, the website is trustworthy and well-maintained, supporting the company's credibility in the gaming industry.

2Racing.cz is a Czech Republic-based e-commerce website specializing in the sale of automotive parts focused on racing, rally, and tuning enthusiasts. The site offers a wide range of products including racing seats, suspension components, filters, and accessories from reputable brands such as Strongflex, Koni, Sparco, and others. The business targets motorsport hobbyists and professionals seeking specialized car parts. The website is professionally designed with clear navigation and product categorization by car brand and year, supporting a good user experience.

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

The website www.latky-wiedrman.cz appears to be a retail business specializing in selling fabrics and related materials such as linings, tulle, organza, and elastic satin primarily targeting customers in the Czech Republic. However, the site content is fully restricted behind a password form, limiting public access and visibility into the full scope of their offerings and business details. The lack of publicly accessible content and absence of WHOIS registration data reduces transparency and trustworthiness. Technically, the site uses Matomo analytics and Google Fonts but lacks visible security headers and privacy compliance mechanisms. The overall security posture is minimal with no clear evidence of GDPR compliance or incident response readiness. The restricted access may be justified for business confidentiality but significantly impacts the ability to assess the website's quality and security comprehensively.

Phocuswright Europe is a prominent travel and technology conference organized by Northstar Travel Media LLC, targeting top executives, innovators, and influencers in the travel industry. The website promotes the 2026 event in Barcelona, Spain, offering professional development, networking, and insights into travel technology trends. The business holds a strong market position as a leading European travel tech event with a medium-sized organizational footprint. Technically, the site employs modern web technologies including Bootstrap, jQuery, and advanced analytics tools such as Google Analytics, Google Tag Manager, RudderStack, and Intercom, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, with good SEO practices and professional design. Security posture is solid with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration and publishing security policies.

CENDIS, s.p. is a Czech government-related entity specializing in transportation information systems under the Ministry of Transport of the Czech Republic. The organization provides key ICT solutions and services such as electronic highway vignettes, unified railway tickets, electronic toll supervision, and various training and certification programs. Their target audience includes drivers, transport operators, public transport passengers, and government officials. The website reflects a professional and consistent brand image with a focus on transparency and public service. Technically, the site is built on WordPress using Elementor and Smart Slider 3, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and offers good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. WHOIS data is missing, which reduces domain trustworthiness, but the official nature of the site and linked government registries support legitimacy. Overall, the site is a reliable source of transportation ICT information and services in the Czech Republic.

NIVEA.cz is the Czech Republic localized website for the globally recognized skincare brand NIVEA, owned by Beiersdorf AG. The site offers a comprehensive catalog of skincare and cosmetic products, along with tips and advice for skin and body care. The website targets general consumers interested in personal care products and maintains a strong brand presence consistent with NIVEA's global identity. Technically, the site is built on the Sitecore CMS platform, employs modern web technologies, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Consent Manager for GDPR compliance. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security-wise, the website enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms, reflecting a mature security posture. However, it lacks publicly available explicit security policies and incident response contacts, which could be improved. The domain WHOIS data is unavailable, likely due to registry policies, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the brand's reputation. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a reliable digital presence for NIVEA in the Czech market.

Nadační fond Flaminia is a Czech non-profit foundation established in 2007, dedicated to supporting mental health and psychological wellbeing projects for children and youth. The organization collaborates with various partner projects and runs awareness campaigns to promote mental health care as equally important as physical health. Their website reflects a professional and consistent brand image, providing clear contact information and detailed descriptions of their initiatives and supported projects. Technically, the website uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Google Fonts, with good mobile optimization and SEO practices. The site is accessible and well-structured, though it uses multiple versions of Bootstrap and jQuery which could be streamlined. No CMS or hosting provider details were detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks important security headers and privacy/cookie policies, which are compliance gaps. No WHOIS data was found for the domain, which reduces trustworthiness and raises questions about domain registration legitimacy. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is trustworthy and professional in content and presentation but would benefit from improved privacy compliance and security hardening. The lack of WHOIS data is a notable concern that should be investigated further.

Qminers is a specialized software development company focused on algorithmic trading, providing a Central European hub for top-tier professionals in quantitative finance and technology. The company emphasizes improving global markets through advanced software solutions and a meritocratic, knowledge-sharing culture. Their website reflects a professional and consistent brand image, targeting expert audiences in finance and technology sectors. Technically, the site uses modern web technologies with embedded video content and is hosted by a reputable provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent banner is present. Overall, the site is safe, professional, and trustworthy but could improve in compliance and security transparency.