Medium-risk security reports

Tesco Stores SR, a.s. operates a comprehensive retail supermarket website serving Slovakia, offering online grocery shopping, loyalty programs (Clubcard), and various promotional offers. The website is professionally designed with a strong brand presence and clear navigation, targeting general consumers in Slovakia. The business model focuses on retail sales both in physical stores and online, supported by a loyalty program to enhance customer retention. The site is part of the larger Tesco PLC group, a major player in the retail sector. Technically, the website uses modern frameworks such as React and Next.js, integrates analytics and performance monitoring tools like Google Analytics and New Relic, and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital infrastructure suitable for an enterprise retail business.

Deník N operates as a reputable Czech news media outlet providing fast and reliable news updates across various categories including politics, economy, culture, and sports. The website demonstrates a solid market position within the Czech Republic's media landscape, targeting a general audience interested in current affairs. Technically, the site leverages modern web technologies such as React and integrates privacy and advertising SDKs to manage user consent and deliver personalized content. The presence of HTTPS and security headers indicates a good security posture, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service reduces overall compliance confidence. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy transparency and security documentation.

Mega Fitness is a small fitness club located in Prague, Czech Republic, offering personal training, nutrition planning, and body diagnostics. The business operates in a local market with a family-friendly atmosphere and provides a fully equipped gym facility. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Contact information is clearly presented, supporting business credibility. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy and security practices.

Svět kulturistiky is a Czech media website operated by Watch Star Media s.r.o., focusing on bodybuilding, fitness, nutrition, and health content. The site offers articles, training advice, and nutrition tips targeting fitness enthusiasts and bodybuilders primarily in the Czech Republic. The business operates as a niche media outlet with a small company size and a long-established domain since 1998. Technically, the website is built on WordPress with modern libraries such as jQuery and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and presents content professionally with good navigation and SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

NerdWallet Wealth Partners is an online fiduciary financial advisory service offering fee-only wealth management, investment management, and financial coaching. The website is professionally designed with a modern tech stack including Next.js and Material UI, hosted likely on Vercel. It targets individuals seeking comprehensive, low-cost financial advice delivered virtually. The site demonstrates good SEO practices and clear branding consistent with NerdWallet's reputation. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and WHOIS data shows suspicious inconsistencies. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is trustworthy and professional but would benefit from enhanced privacy transparency and domain registration corrections.

Curated Capital & Planning LLC is a specialized financial advisory firm focusing on remarried baby boomers with blended families. The company offers fee-only, fiduciary financial planning and investment management services, operating virtually across the United States. The website is professionally designed, with clear branding and trust indicators such as CFP certification and industry memberships. Technically, the site uses modern web technologies including Bootstrap, jQuery, and MailerLite for marketing and forms, hosted on Zephyr CMS. The site is mobile optimized and performs moderately well. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is safe, professional, and trustworthy for its target audience. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing terms of service and incident response policies, and verifying domain registration details to improve legitimacy and trust.

PlanVest is a small financial planning firm based in Blair, Nebraska, offering comprehensive financial advisory services focused on client engagement and confidence building. The website presents a professional image with clear descriptions of services and a focus on personalized financial planning for individuals including young professionals and retirees. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Zephyr CMS, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and cookie consent mechanisms are areas for improvement. The domain WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy, but the website content and trust indicators like CFP certification and regulatory disclosures support business credibility. Overall, the site is well-constructed but would benefit from enhanced security headers, privacy compliance features, and verification of domain registration details.

Artisan Financial Planning is a specialized financial advisory firm offering flat-fee financial planning and investment management services tailored specifically for musicians, performing artists, and creatives. The company positions itself as an affordable, transparent, and client-aligned alternative to traditional asset-based fee advisors, emphasizing simplicity and empathy in its service delivery. The website content is professionally crafted, targeting a niche market segment with clear messaging and trust signals such as professional certifications and media features. Technically, the website is built on a modern stack including jQuery, Bootstrap, Font Awesome, and Zephyr CMS. It integrates marketing and analytics tools such as Google Tag Manager, MailerLite, and Plausible Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which could impact privacy compliance. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the professional presentation and certifications mitigate some concerns. Overall, the website presents a low-risk profile with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and clarifying domain registration details to enhance trust and compliance.

Objective Wealth is a small financial advisory firm specializing in tax-conscious comprehensive financial planning and investment management. The website presents a professional image with clear descriptions of services including financial and retirement planning, investment management, tax planning and preparation, and small business retirement plans. The firm targets individuals and small businesses seeking personalized financial guidance. The website is built on a modern technical stack including jQuery, Bootstrap, FontAwesome, and uses Zephyr CMS. Tracking technologies such as Google Tag Manager and Facebook Pixel are implemented for analytics and marketing purposes. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trust. No forms or direct contact information were found in the provided content, limiting user engagement options. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and verified domain registration information.

The website wowyup.agency represents a small digital agency offering services such as digital marketing, product photography, and web presentations. The site is minimalistic with limited content and lacks detailed business or contact information, which constrains its market positioning and trust signals. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, Bootstrap, and some animation libraries like Velocity.js and PhotoSwipe for galleries. However, the site lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to absence of visible security headers and no evidence of HTTPS enforcement from the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which impacts compliance and user trust. WHOIS data is privacy protected by Identity Digital, which is common for small agencies but limits transparency. Overall, the site is functional but basic, with room for significant improvements in security, compliance, and business credibility.

The domain asolutions.si is registered since 2016 under a Slovenian registrar and uses Wix as its hosting and CMS platform. However, the website is currently not connected to any live content and only displays a Wix error page indicating the domain is not linked to a published website. There is no business information, contact details, or policies available on the site. Technically, the site uses AngularJS and jQuery libraries loaded from Wix and Google CDNs, but no analytics, advertising, or security headers are present. The lack of HTTPS confirmation and security best practices reduces the security posture. Overall, the site is non-functional as a business website and lacks compliance and trust indicators.

Le Silex is a French-based SEO and netlinking service provider specializing in backlink campaign management and comprehensive netlinking strategies. The company positions itself as a platform of true experts with over 10 years of experience and a client base exceeding 300 satisfied customers. Their services include backlink monitoring, branding, relinking, and SEO consulting, targeting businesses seeking to improve their online visibility and search engine rankings. The website is professionally designed using Webflow, featuring modern technologies and a responsive layout optimized for mobile devices. The technical infrastructure leverages Webflow's hosting and includes analytics via Humblytics. Security posture is moderate with HTTPS assumed but lacking explicit security headers and cookie consent mechanisms. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism and trustworthiness with clear contact information and client testimonials.

Textklinik GmbH is a professional language service provider based in Düsseldorf, Germany, specializing in proofreading, translation, copywriting, interpreting, transcription, and training services. With over 25 years of experience and a network of more than 300 native speakers, the company targets advertising agencies and businesses seeking high-quality language solutions. Their market position is strengthened by adherence to strict quality standards, including the DIN EN ISO 17100:2016-05 certification and a rigorous four-eyes principle for quality assurance. Technically, the website is built on the Webflow platform, utilizing modern technologies such as jQuery and hosted on a reliable CDN infrastructure. The site demonstrates excellent performance, mobile optimization, and SEO practices, providing a professional and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved and incident response contacts formalized. Overall, the site is trustworthy, professional, and compliant with GDPR, featuring comprehensive privacy and cookie policies. No adult or questionable content is present, and the business information is consistent with WHOIS data, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and formalizing incident response contacts to further strengthen security and compliance.

Websee is a French CMS platform developed by Net 15, specializing in creating professional, administrable websites for businesses, artisans, associations, and web agencies. The company emphasizes personalized service, responsive design, and compliance with modern web standards including GDPR and cookie consent. The website is well-structured, visually consistent, and provides clear contact channels and client testimonials, positioning itself as a trusted regional player in the web development market. Technically, the site uses a proprietary CMS with common JavaScript libraries and Matomo analytics, indicating a privacy-conscious approach. Security posture is adequate with HTTPS and cookie consent but lacks advanced HTTP security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces domain trust assessment, but the overall business presence and content quality support legitimacy.

Mairistem is a French software publisher specializing in digital management solutions tailored for local governments and collectivités. With over 40 years of experience and a client base exceeding 15,000 collectivités, the company offers a comprehensive suite of interoperable software products covering finance, human resources, civil status, citizen services, and territory management. Their business model combines software licensing with cloud solutions, consulting, training, and dedicated client support, positioning them as a trusted partner in the government technology sector. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and analytics tools such as Matomo and HubSpot, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact details. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the professional presentation and extensive business information mitigate this concern. Overall, Mairistem demonstrates a mature digital presence aligned with its market position, though improvements in transparency around security policies are recommended.

Groupe JVS is a French software publishing group specializing in IT solutions for public sector organizations, particularly local and territorial collectivities. With over 40 years of experience, the group operates through five subsidiaries offering tailored software and digital services to facilitate the digital transformation of public services. Their market position is solid within the French public sector, supported by a network of 14 regional agencies and a portfolio of innovative solutions aimed at improving citizen engagement and administrative efficiency. Technically, the website is built on Drupal CMS and integrates modern analytics and marketing tools such as Matomo and HubSpot. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable concern, reducing the overall trust score despite the professional appearance and business legitimacy of the site. Overall, Groupe JVS presents a professional and credible digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details to ensure ongoing trustworthiness.

France.fr is the official tourism website for France, providing comprehensive information about French destinations, culture, and travel experiences. It targets international tourists and travelers interested in exploring France's wonders. The site is well-branded, multilingual, and professionally designed, reflecting its role as a government-backed informational portal. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and engaging user experience. It integrates Google Tag Manager for analytics and Axeptio for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. The absence of WHOIS data is notable but may be due to registry policies for .fr domains. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

The website villesdefrance.fr is currently inaccessible due to a Cloudflare 521 error indicating the web server is down. This prevents any content from being served to visitors, resulting in a minimal error page with no business or contact information available. The domain is registered with OVH since 2008 and uses Cloudflare as a CDN and security provider. The lack of accessible content severely limits the ability to assess the business operations, services, or compliance posture. Technically, the site relies on Cloudflare but suffers from server availability issues that must be resolved to restore service. Security posture is weak due to the unavailability of the site and absence of security headers or policies. Overall, the site’s risk is elevated due to downtime and lack of transparency, requiring urgent remediation to restore trust and functionality.

Atout France is the official French government agency dedicated to developing and promoting tourism both domestically and internationally. The website presents a comprehensive range of services including market analysis, sustainable tourism initiatives, innovation support, professional training, and event organization. It targets tourism professionals and stakeholders aiming to enhance France's tourism sector. Technically, the site is built on Drupal CMS, employs modern web technologies, and integrates privacy and analytics tools such as Google Tag Manager and Axeptio for cookie consent. The design is professional, mobile-optimized, and accessible, reflecting the French government's digital standards. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to AFNIC policies, but the official branding and content strongly indicate legitimacy. Overall, the site is a trustworthy, well-maintained government resource for tourism stakeholders.

SEMAE is a French interprofessional organization dedicated to the seed and plant sector, providing comprehensive information, regulatory guidance, certification services, and sector development support. The website serves a broad audience including producers, distributors, educators, journalists, and public officials, positioning itself as a key player in the European seed industry. Technically, the site is built on WordPress with Bootstrap and common web technologies, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the website content and social media presence indicate a legitimate and professional entity. Overall, the site is well-maintained, informative, and trustworthy for its target audience.

The website rencontresvvf2024.fr currently serves only a 404 error page indicating that the requested content is not found or has been removed. The domain is newly registered in February 2024 and hosted by OVH, a reputable hosting provider. There is no accessible business content, metadata, or structured data to analyze, and no contact or policy information is available. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS status could be confirmed from the provided data. Security posture is minimal due to the absence of content and security best practices. Overall, the site appears to be either under development or abandoned, with no trust or compliance indicators present.

MerchantPro is a SaaS eCommerce platform provider offering a comprehensive suite of tools for merchants to create, manage, and grow online shops and marketplaces. With over 15 years of experience and more than 5000 merchants worldwide, the company positions itself as a stable and scalable solution for businesses of all sizes. The website reflects a professional and modern digital presence, emphasizing performance, security, and customer support. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and LinkedIn Insight for analytics and marketing, with responsive design and good SEO practices. Security posture is solid with HTTPS and secure cookie settings, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, but no direct company contact emails or phone numbers are provided, relying instead on contact forms and social media channels.

The website cdnshm.com currently displays only an error page indicating a rendering failure, with no accessible business content or user interface elements. The domain is registered with eNom, LLC since 2020 and uses stabletransit.com nameservers, suggesting a hosting or CDN provider relationship. However, the lack of any visible content, contact information, or policies severely limits the ability to assess the business or technical maturity of the site. Technically, the site lacks security headers, HTTPS confirmation, and any modern web technologies or analytics, indicating a minimal or misconfigured deployment. Security posture is weak due to missing best practices and no evidence of incident response or data protection measures. Overall, the site appears inactive or improperly configured, resulting in a low trust and credibility rating.

UnfoldWP is a small technology business specializing in the development and sale of premium multipurpose WordPress themes. Founded in 2022 and based in Nepal, the company targets WordPress users, bloggers, and developers seeking high-quality, customizable themes. Their business model revolves around theme sales, starter templates, and bundled plans, positioning themselves as a niche provider with a focus on design quality and user experience. The website reflects a professional and consistent brand image with strong trust indicators such as user testimonials and a money-back guarantee. Technically, the website is built on WordPress 6.8.3, utilizing modern technologies including jQuery, Google Tag Manager, LiteSpeed Cache for lazy loading, and SEO plugins like All in One SEO. The site demonstrates excellent performance, mobile optimization, and SEO practices, contributing to a fast and accessible user experience. Hosting details are not explicitly identified, but the presence of LiteSpeed assets suggests a performant hosting environment. From a security perspective, the site enforces HTTPS with excellent SSL configuration and follows best practices by avoiding exposed sensitive data and vulnerable libraries. However, it lacks visible security headers and does not publish formal security or incident response policies. No cookie consent mechanism is present, which is a compliance gap for GDPR. The WHOIS data is consistent with the website's claims, showing transparent registration without privacy protection, reinforcing legitimacy. Overall, UnfoldWP presents a low-risk profile with a strong business and technical foundation. Strategic improvements include implementing cookie consent, publishing security policies, and enhancing security headers to elevate compliance and security posture. These steps will further strengthen trust and regulatory adherence.

La Cave aux Poètes is a well-established cultural concert venue located in Roubaix, France, with a history spanning approximately 30 years. The website serves as a digital presence to promote concerts and cultural events, targeting a general audience interested in music and local cultural activities. The business model revolves around event hosting and community engagement, positioning itself as a key player in the local hospitality and entertainment sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, and several plugins for SEO, GDPR compliance, and interactive content. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is moderate with HTTPS enabled and domain status protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

L'aéronef is a non-profit cultural association based in Lille, France, specializing in organizing concerts and music-related cultural projects. Established in 2016, it holds a reputable position in the regional cultural scene, supported by partnerships with governmental and cultural institutions. The website serves as a platform for event promotion and ticketing, targeting a general audience interested in music and culture. Technically, the site is built on Drupal 11, employs Matomo for analytics, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and token-based ticketing, though explicit security policies and cookie consent mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and privacy mechanisms are recommended.

Musée La Piscine de Roubaix is a cultural institution and museum located in France, dedicated to art and industry. It serves a broad audience including tourists, art enthusiasts, and local visitors, offering exhibitions, educational activities, and virtual tours. The museum is supported by the City of Roubaix and various partners, positioning it as an important regional cultural entity. The website reflects this with professional design, consistent branding, and clear navigation. Technically, the site is built on WordPress with common plugins and libraries, providing moderate performance and basic mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policies are published. The WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in security transparency and accessibility.

Zénith de Lille is a regional entertainment venue in Lille, France, offering a diverse program of concerts, shows, and corporate events for the 2024/2025 season. The website is built on WordPress and integrates modern technologies such as jQuery, Slick Carousel, and analytics tools like Piwik PRO and Google Tag Manager. The site presents a professional design with good navigation and mobile optimization, targeting general public and event organizers. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and external partnerships suggest a legitimate business. Strategic recommendations include improving security headers, adding cookie consent, publishing clear privacy and terms pages, and verifying domain registration details.

Tourcoing Jazz Festival is a well-established cultural event organizer specializing in jazz and related music genres in the Hauts-de-France region of France. Founded in 1986, it has a strong regional presence and offers a variety of concerts, masterclasses, and cultural activities. The website is professionally designed using WordPress and integrates modern marketing and analytics tools such as Sendinblue and Google Analytics. The festival maintains active social media channels and provides clear contact information for ticketing and programming inquiries. Security posture is adequate with HTTPS enabled, though improvements are recommended in DNSSEC and security headers. Privacy and cookie policies are present, supporting GDPR compliance, but cookie consent mechanisms could be enhanced. Overall, the website reflects a credible and trustworthy organization with a solid digital presence.

The website transpole.fr currently returns a 502 Bad Gateway error served by Microsoft Azure Application Gateway, indicating backend server or configuration issues that prevent content delivery. Due to this, no business content, metadata, or contact information is accessible for analysis. The domain is well-established, registered since 1997 with a reputable registrar and consistent WHOIS data, suggesting a legitimate transportation-related business likely operating in France. However, the lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. The hosting on Microsoft Azure indicates a modern cloud infrastructure, but the current outage represents a critical availability risk. Security posture cannot be evaluated due to missing headers and lack of HTTPS confirmation. Privacy and cookie policies are absent, and no contact or incident response information is available. Overall, the site is currently non-functional, resulting in a low AI score and incomplete analysis.

Hello Lille is the official agency promoting the attractiveness of the Métropole Européenne de Lille, targeting businesses, event organizers, and students. The website serves as a comprehensive portal to discover opportunities for implantation, events, and education in Lille. The technical infrastructure is modern, leveraging WordPress with a custom Woody theme and multiple JavaScript libraries for interactive and responsive user experience. The site supports multiple languages, enhancing its international reach. Security posture is solid with HTTPS and consent management implemented, though improvements are needed in security headers and explicit privacy policies. Overall, the website is professional, trustworthy, and well-positioned to serve its audience effectively.

TPF is a large, international multidisciplinary engineering consultancy headquartered in Spain, with a presence in over 45 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, asset management, project supervision, and quality control, targeting businesses and public sector clients. Their market position is strong, supported by a diversified portfolio and global reach. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as jQuery and GSAP, and integrates privacy-conscious analytics via Plausible. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as DNSSEC and security headers are missing. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

IM-PACT is a specialized consulting firm focused on Building Information Modeling (BIM) services, targeting professionals and companies involved in digital construction modeling. The website presents a professional and consistent brand image, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The technical infrastructure is modern but lacks some advanced security configurations and privacy compliance features. Security posture is moderate with no detected blocking mechanisms or WAF, but absence of security headers and privacy policies lowers the overall security rating. The domain WHOIS data is unavailable, which reduces trustworthiness and raises moderate concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

iREPORT s.r.o. operates a Czech-language online music and style magazine providing news, concert photo reports, reviews, interviews, video and audio content, exclusive CD/DVD supplements, and contests. The website targets music enthusiasts primarily in the Czech Republic and offers a rich multimedia experience with frequent content updates and an active event calendar. The business model is focused on media publishing with advertising revenue streams and audience engagement through contests and social media. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, and various tracking and advertising scripts such as Google Analytics, Hotjar, and Rubicon Project. The site is mobile optimized and uses HTTPS with a good SSL configuration. Consent management is implemented via Didomi and CPEX CMP, supporting GDPR compliance. However, the site lacks some advanced security headers and explicit contact or security policy information. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but could improve by adding more comprehensive security headers and publishing incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and operation of the website. Overall, the website is well-designed, content-rich, and compliant with privacy regulations, but the missing domain registration data and limited security policy transparency present moderate risks. Strategic improvements in security posture and transparency would enhance trust and compliance.

Libuše Dlabola Pražáková is an artist based in Semily, Czech Republic, showcasing her paintings and art cycles through a professionally designed portfolio website. The site targets art enthusiasts and potential collectors, providing a clear presentation of her work and contact details for inquiries. The business model is focused on promotion and potential sales of artwork, with a niche local/regional market position. Technically, the website uses Materialize CSS framework, Google Fonts, and Material Icons, delivering a responsive and visually appealing experience. The site performs moderately well with good mobile optimization and basic accessibility features. However, there is no detected CMS or hosting provider information, and no advanced technical frameworks are used. From a security perspective, the site lacks important security headers and privacy-related policies, which lowers its security posture. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the legitimate content and contact information. No forms or tracking scripts are present, minimizing data collection risks but also indicating limited user engagement features. Overall, the website is a good quality artist portfolio with moderate technical maturity and low security compliance. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

Sharp Type is a specialized global digital type foundry offering custom and retail typefaces for various design applications including print, digital, and environmental design. The company targets designers, brands, and publications seeking high-quality and multiscript font solutions. The website demonstrates a mature technical infrastructure built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with a high level of content quality and user experience.

Good Type Foundry AS is a small, award-winning Norwegian type foundry specializing in retail and custom typefaces for digital and print use. The company operates an e-commerce platform built on WordPress and WooCommerce, offering a wide range of font products and custom design services. Their market position is niche but reputable, supported by a client list including notable organizations and a consistent brand presence. The website is professionally designed with good content quality and clear navigation, targeting designers and creative professionals. Technically, the website leverages a modern WordPress stack with WooCommerce for e-commerce functionality, enhanced by plugins such as CleanTalk Anti-Spam and Mailchimp integration. Performance and mobile optimization are good, though some accessibility features could be improved. The site uses HTTPS but lacks DNSSEC and certain security headers, indicating room for security enhancements. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and anti-spam measures but lacks visible security policies, incident response information, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, supporting legitimacy. Overall, the website presents a low risk profile with moderate security posture and good business credibility. Strategic improvements in security headers, privacy compliance, and published policies would enhance trust and compliance.

Velvetyne is a small, France-based open source font collective specializing in the design and distribution of libre fonts. The website serves as a platform to showcase their font projects, offer custom font services, and promote workshops. The target audience includes typography enthusiasts, designers, and the open source community. The business model revolves around open source font creation and community engagement. Technically, the website is built on the ProcessWire CMS and hosted by Alwaysdata. It uses standard web technologies such as HTML5, CSS, and SVG for font previews. The site demonstrates good design quality, mobile optimization, and clear navigation, although accessibility features are basic. Performance is moderate, with no evident use of advanced analytics or tracking. From a security perspective, the site lacks visible security headers and published security policies. There is no privacy or cookie policy, nor any incident response or vulnerability disclosure information. The domain is well-registered with a reputable registrar and has been active since 2010, supporting the legitimacy of the business. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, Velvetyne presents a trustworthy and professional presence in its niche, but it would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

KOMETA is an independent type design studio specializing in progressive retail and custom typefaces. Founded in 2022, the company operates a professionally designed website showcasing their retail font collections and bespoke typography services. The target audience includes designers, studios, and brands seeking unique and expressive fonts. The business model focuses on retail font sales and custom typography projects, positioning KOMETA as a niche player in the type foundry market. Technically, the website is built using modern frameworks such as Nuxt.js and is hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain registrar protections, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Cargo is a technology company operating a site builder platform tailored for designers and artists. The platform focuses on enabling creatives to showcase their work and connect with potential clients and peers. The business operates in a niche market segment with a clear target audience and offers key services including site building tools, templates, and a community network. The website is professionally designed with good content relevance and user experience, although it lacks explicit privacy and cookie policies. Technically, the site uses modern JavaScript frameworks, including React, and is hosted on Amazon AWS infrastructure. Analytics and advertising tools such as Google Tag Manager and Reddit Ads Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the site is legitimate and functional but could improve compliance and security transparency.

Zlatá Firma is a Slovak business award platform recognizing top-rated companies based on customer reviews aggregated from reliable sources such as Google Maps and Facebook. The platform promotes these companies by listing them and allowing them to use the Zlatá Firma logo and marketing packages. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience of Slovak businesses and customers. Technically, the site uses modern JavaScript and Google Tag Manager for analytics and marketing, with HTTPS enforced ensuring secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced privacy compliance. The WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the site presents a moderate to good security posture with room for improvement in privacy and security best practices.

Coqui Shoes Canada Ltd. operates an e-commerce platform specializing in footwear retail across Canada, offering products for children, men, and women. The website is built on WordPress with WooCommerce, providing a structured shopping experience with categorized products and customer engagement features such as product warranty and return policies. The company appears to be a small-sized business founded in 2016, targeting general consumers seeking footwear online. Technically, the website leverages a modern CMS and e-commerce stack with plugins enhancing product display and filtering. The hosting is provided by a Slovakian provider (websupport.sk), and the site uses HTTPS with Google reCAPTCHA for form security. However, DNSSEC is not enabled and security headers are absent, indicating room for improvement in security hardening. From a security perspective, the site demonstrates basic best practices but lacks advanced security policies and incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is evident. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, DNSSEC, and privacy consent mechanisms would enhance its security posture and compliance. The domain registration is privacy protected but consistent with a legitimate small business, supporting the site's credibility.

Jana Shoes is a German-based e-commerce retailer specializing in women's footwear, operating under the Wortmann Group umbrella. The website presents a professional and user-friendly shopping experience with a focus on comfort and fashion. The brand targets comfort-oriented female consumers with a broad product range and emphasizes quality and customer satisfaction. Technically, the site leverages Salesforce Commerce Cloud and integrates modern tracking and marketing tools, maintaining good performance and mobile optimization. Security posture is strong with HTTPS, secure payment options, and bot protection, though explicit incident response and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the retail footwear market.

Manik – obuv, s.r.o. is a Slovak family-owned company specializing in the manufacture and direct sale of domestic footwear since 1992. The company has a strong market presence in Slovakia with a recognized brand and a focus on quality and customer satisfaction. Their e-commerce website is built on the Shoptet platform, integrating modern tracking and marketing tools such as Google Analytics and Facebook SDK, while maintaining GDPR compliance through cookie consent and privacy policies. The website offers clear contact channels and product information, targeting Slovak customers seeking comfortable home footwear. Technically, the site is well-structured with good mobile optimization and moderate performance, though some legacy libraries like jQuery 1.11.3 could be updated for security. Security posture is solid with HTTPS and CSRF protections, but could be enhanced by adding security headers and explicit incident response policies. Overall, the website reflects a professional and trustworthy retail business with room for minor technical and security improvements.

ara shoes operates an official e-commerce platform specializing in premium women's footwear and accessories in the Czech Republic. The website showcases a well-structured product catalog with clear branding and a focus on quality and customer convenience, including free shipping and in-store pickup options. Technically, the site is built on PrestaShop with modern frontend technologies and includes structured data for SEO benefits. Security measures include HTTPS and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy page. However, the absence of WHOIS data and explicit contact information limits full trust assessment. Overall, the site presents a professional and functional online retail experience with moderate technical and security maturity.

Lee Cooper is a historic British denim brand with a legacy dating back to 1908. The website presents the brand's heritage and identity but is hosted on the Wix platform with minimal content and lacks critical business and security information. The technical infrastructure relies on Wix's CMS and standard web technologies but includes suspicious external scripts from unknown domains, raising potential security concerns. The absence of WHOIS registration data for the domain www.leecooper.com is a significant red flag, suggesting possible domain registration issues or privacy obfuscation. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site appears functional for brand marketing but requires improvements in security, compliance, and legitimacy transparency.

CAPRICE is an established international footwear retail brand operating an e-commerce platform targeting primarily women and men interested in fashionable shoes and accessories. The website is built on a modern e-commerce platform (Salesforce Commerce Cloud) and supports multiple country and language versions, indicating a mature digital presence. The site offers a wide range of products including seasonal collections and innovative footwear technologies. Technically, the site uses modern JavaScript libraries, tag management, and A/B testing tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is basic with a cookie consent banner but lacks visible privacy and terms of service pages. Overall, the site is professional and trustworthy with moderate tracking and analytics in place.

Tamaris.com is the official online shop for the Tamaris brand, specializing in women's shoes, handbags, and jewellery. The website targets fashion-conscious women primarily in Finland and other European markets. It operates on a mature e-commerce platform (Salesforce Commerce Cloud) with a comprehensive product catalog and user-friendly navigation. The site integrates multiple marketing and analytics tools to enhance customer engagement and conversion. Security measures such as HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms are in place, though DNSSEC is not enabled, representing a minor security gap. The domain's WHOIS data confirms a long-standing and legitimate presence since 1999, reinforcing trust in the brand.

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.