Medium-risk security reports

Vrtal s.r.o. operates a well-established wholesale and retail business specializing in alcoholic and non-alcoholic beverages, as well as food products. The company has a strong market presence in the Czech Republic with over 22 years of tradition, multiple warehouses, and specialized stores. Their website reflects a professional e-commerce platform with comprehensive product categories and a user-friendly interface targeting both businesses and consumers interested in beverage wholesale. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Smartlook, and Facebook Pixel, integrated with a cookie consent mechanism that respects user privacy and GDPR compliance. The site is hosted by WEDOS, a reputable provider, and uses HTTPS with good SSL configuration. The CMS appears to be Foxentry, supporting a structured and responsive design optimized for mobile devices. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional platform. Strategic improvements in security headers and incident response transparency could further enhance its security maturity and user trust.

Akinu.cz is a Czech Republic-based e-commerce retailer specializing in pet supplies and premium pet food, serving pet owners primarily in the Czech market. The website offers a broad range of products for dogs, cats, rodents, birds, and aquatic pets, supported by a loyalty program and customer support channels. The business positions itself as an experienced player with 30 years in the industry, focusing on quality and customer satisfaction. Technically, the website is built on the Shoptet e-commerce platform, utilizing a variety of modern marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility basics, though some technical debt is noted with the use of an outdated jQuery version. Performance is moderate, with a well-structured navigation system. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. However, explicit security headers are not fully implemented, and some JavaScript libraries are outdated, which could pose risks. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, though the website content and business indicators suggest a legitimate operation. Overall, Akinu.cz presents a professional and trustworthy online retail presence with room for improvement in security hardening and domain registration transparency. Strategic recommendations include updating technical components, enhancing security headers, and publishing clear incident response and vulnerability disclosure policies.

Zerops s.r.o. operates the website zerops.io, presenting itself as a developer-first cloud platform that builds, deploys, runs, and manages applications regardless of size or environment. The company is based in the Czech Republic and was founded in 2017, consistent with the domain registration data. The platform targets developers and businesses seeking cloud application deployment and management services. The website is professionally designed, uses modern web technologies including Angular and Google Fonts, and is hosted via Cloudflare, ensuring good performance and security. However, the site lacks visible privacy, cookie, and terms of service policies, as well as explicit contact information, which impacts privacy compliance and user trust.

vshosting~ is a Czech-based managed cloud and dedicated server provider established in 2006, offering high-performance enterprise cloud solutions tailored to client needs. They provide a broad range of services including GPU servers, private cloud, managed servers, and CDN, supported by 24/7 senior certified administrators. The company positions itself as a leading European provider with infrastructure supporting over 40,000 projects, emphasizing security, availability, and scalability. Their technical infrastructure leverages modern web technologies such as Next.js and React, with strong SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and technically mature organization with a strong market presence in the technology sector.

The Nordic Urban Resilience Institute is a specialized organization focused on enhancing urban resilience in Nordic regions through expert knowledge and cross-sector collaboration. Their website presents a professional and clear description of their mission, services, and target audience, primarily regional governments, municipalities, academia, and business sectors. The institute positions itself as a neutral facilitator for addressing regional challenges related to climate change, urbanization, and societal pressures. Technically, the website is built on WordPress using the Enfold theme and standard web technologies such as jQuery and Google Fonts. The site is mobile optimized with good SEO and accessibility basics, though some advanced accessibility features could be improved. Performance is moderate with no major issues detected. No analytics or tracking scripts were found, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security.txt files are present. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which impacts domain legitimacy assessment. Overall, the website is professional and trustworthy in content and presentation but would benefit from improved transparency in privacy and security policies and verification of domain registration details to enhance trust and compliance.

Office de Tourisme Laval Agglomération operates as the official tourism promotion entity for the Laval area in Mayenne, France. The website provides comprehensive information on accommodations, events, restaurants, and local experiences, targeting tourists and visitors. The business model focuses on tourism information dissemination and online booking facilitation. The site is professionally designed with consistent branding and high-quality content, positioning it as a trusted local tourism resource. Technically, the website is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Leaflet, and Google Maps API. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security is generally good with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. The security posture is solid but could be improved by adding security headers, publishing privacy and terms of service pages, and establishing a vulnerability disclosure policy. The absence of WHOIS registrant data is a concern but does not necessarily indicate illegitimacy given the professional site presentation. Overall, the website is a reliable and professional tourism portal with minor gaps in privacy and security documentation. Strategic improvements in these areas would enhance trust and compliance.

The website www.bouclesdelamayenne.fr represents a professional cycling event known as Boucles de la Mayenne - Crédit Mutuel, part of the UCI Pro Series calendar. It targets cycling enthusiasts and partners, offering event promotion and media broadcasting services. The site is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data from the AFNIC server raises concerns about domain registration transparency, although the website content and branding appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and regulatory adherence.

The website 'Le Chainon Manquant' serves as an informational platform for an event scheduled from September 16 to 21, 2025, in Laval, France. It primarily provides event details and related media content, targeting the general public interested in attending or learning about the event. The business model focuses on event promotion without evident e-commerce or transactional features. Technically, the site is built on WordPress and leverages modern web fonts, iconography, and tracking technologies such as Facebook Pixel and Google Tag Manager. However, the site lacks visible advanced frameworks or custom platforms, indicating a basic digital maturity level. Security posture is moderate; HTTPS is implied but security headers and policies are not evident, and no forms or sensitive data handling mechanisms were detected. The absence of WHOIS data and registrant information raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the site is functional for its purpose but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

The Festival du Premier Roman et des Littératures Contemporaines is a well-established cultural event organized by the association Lecture en Tête, based in Laval, France. The website serves as an information hub for festival programming, guest authors, school meetings, and media archives. It targets literature enthusiasts and the local cultural community, operating as a small non-profit entity with a history dating back to 2008. The site reflects a consistent brand identity aligned with the association's mission. Technically, the website is built on Drupal 9 with Bootstrap 3.4.1, integrating Google Analytics for audience measurement with a clear cookie consent mechanism and opt-out functionality. The site is hosted by IONOS SE, a reputable provider, and demonstrates moderate performance with good mobile optimization. Accessibility and SEO are basic but functional. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the festival's operational timeline. Overall, the website is professional, trustworthy, and compliant with GDPR requirements regarding cookies and privacy. Strategic improvements could focus on enhancing security headers, accessibility, and publishing explicit security policies to strengthen trust and compliance further.

The website fetedujeu53.fr represents the 'Fête du Jeu 53', a cultural event organized by a collective of local associations in Laval, France. The event focuses on various types of games and community engagement, supported by municipal funding and local partners. The website provides event information, a blog, and partner details, targeting a general audience interested in gaming and cultural activities. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and some security headers, but lacks advanced headers and visible incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and stability of the organization.

Atmosphères 53 is a small non-profit cultural association based in Mayenne, France, dedicated to cinema programming, cultural mediation, and organizing film festivals and educational cinema activities. The website serves as a regional hub for cinema-related events, schedules, and cultural projects, targeting a general audience interested in film and culture within the Mayenne region. The business model focuses on cultural promotion rather than commercial sales, positioning itself as a key regional player in cinema culture. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WP Rocket, leveraging jQuery and bxSlider for interactive elements. The site is mobile-optimized and uses HTTPS with Google Analytics and Tag Manager for visitor tracking. Security posture is good with HTTPS enforced, but lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is unavailable due to privacy protection, which is reasonable for this type of organization. Overall, the website is professional, trustworthy, and well-maintained, though improvements in privacy compliance and security headers would enhance its posture.

Théâtre Les 3 Chênes is a small regional cultural venue based in Loiron-Ruillé, France, specializing in theatrical performances, workshops, and cultural events. The website serves as an information and ticketing portal for visitors and community members, reflecting a well-maintained and professionally designed platform. The business operates primarily in the hospitality and cultural sector, targeting a general audience interested in arts and theater. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted by OVH, and incorporates privacy-conscious analytics via Matomo alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though lacking some advanced security headers and formal security policies. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and consistency.

Clarté is a well-established French company specializing in consulting, innovation, and training in virtual reality, augmented reality, and artificial intelligence for professional use. With over 25 years of experience, it positions itself as a reference in immersive technologies, offering a broad range of services including consulting, solution development, equipment rental, and training. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients and professionals interested in immersive tech solutions. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Yoast SEO, ensuring fast performance and good SEO. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site is trustworthy and professional, though WHOIS data is privacy protected, limiting domain age verification. Strategic recommendations include publishing security and incident response policies and enhancing transparency on vulnerability disclosures.

École nationale supérieure d'Arts et Métiers (ENSAM) is a prestigious French engineering grande école specializing in initial and continuing education, research, and innovation in technology and industry. The institution maintains strong partnerships with industry and academic bodies, positioning itself as a leader in engineering education and industrial innovation in France. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and industry collaborators. The business model focuses on education, research, and industry collaboration with services including degree programs, continuing education, and incubation support for startups. Technically, the website is built on Drupal 10 with modern web technologies including jQuery, Matomo analytics, and responsive design. The site demonstrates good SEO, accessibility, and mobile optimization. Hosting and domain registration are consistent with an academic institution, with domain age supporting legitimacy. Analytics usage respects privacy with Do Not Track enabled. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks published privacy and cookie policies, incident response contacts, and security headers, which are areas for improvement to enhance compliance and trust. Overall, the website is trustworthy, professional, and well-maintained, with recommendations to improve privacy compliance and security transparency to further strengthen its security posture and regulatory adherence.

Laval Virtual is a well-established European event organizer specializing in XR (Extended Reality) technologies, hosting exhibitions, conferences, awards, and networking events. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting XR professionals, startups, researchers, and enthusiasts. Technically, the site is built on WordPress with modern plugins and analytics integrations, hosted by OVH in France. Security posture is good with HTTPS and domain protections, though improvements in security headers and published policies are recommended. Privacy compliance is strong with cookie consent and a detailed privacy policy. Overall, the site is trustworthy and professionally managed, supporting Laval Virtual's market leadership in XR events.

Laval Mayenne Aménagements (LMA) is a regional real estate and urban development facilitator based in Laval, France. The company supports both public entities and private enterprises in managing and executing real estate and urban planning projects, offering services ranging from project management to assistance in construction and urban services. Their market position is focused on the Mayenne region, with a medium-sized organizational footprint and a professional digital presence. The website reflects a clear business model centered on project facilitation and urban development services, targeting local governments and businesses. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data, but improvements are recommended in security headers and incident response disclosures. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent. Overall, the risk level is moderate with recommendations to enhance security and compliance to strengthen trust and regulatory adherence. Strategically, LMA should focus on verifying domain registration legitimacy, implementing cookie consent, and enhancing security headers to improve their digital trust and compliance posture.

The website www.laval.fr is the official digital presence of the city of Laval, France, serving as a comprehensive portal for municipal information, public services, cultural activities, and citizen engagement. It targets residents, visitors, and local businesses, providing a broad range of services and information relevant to the community. The site is well-structured with clear navigation and professional design, reflecting the city's commitment to accessibility and transparency. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Google Fonts, and a robust cookie consent management system (Tarteaucitron.js). Analytics are handled via Matomo, respecting user privacy and Do Not Track settings. The site demonstrates good mobile optimization and accessibility features, although some security headers are not explicitly detected in the provided data. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, indicating a mature approach to privacy compliance. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to AFNIC policies rather than malicious intent. No critical vulnerabilities or suspicious content were identified. Overall, the site presents a low-risk profile with strong business credibility as a government entity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information for privacy and security concerns to further strengthen trust and compliance.

Bouygues Immobilier is a prominent French real estate developer specializing in new residential properties and investment opportunities across France. The website presents a professional and comprehensive digital presence, targeting homebuyers and investors with detailed program listings and customer support. The company leverages modern web technologies including Drupal 9, Google Tag Manager, and consent management tools to ensure a compliant and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website's branding and content quality. Strategic recommendations include publishing security policies, adding vulnerability disclosure channels, and enhancing transparency to further strengthen trust and compliance.

Soare Sekt Slovakia, s.r.o. is a medium-sized Slovakian company specializing in the production and distribution of alcoholic and non-alcoholic sparkling wines and beverages. It operates under the parent company Soare Sekt a.s. and benefits from a strong brand portfolio including Mucha Sekt, Moscato de Luxe, and Robby Bubble. The company targets adult consumers in Slovakia and international markets, emphasizing quality and tradition dating back to 1991. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit security headers and incident response contacts are absent. Privacy policies are comprehensive and GDPR compliant, including detailed data processing and retention information. Overall, the site reflects a trustworthy and mature digital presence aligned with the company's business operations.

The website infernum.org is currently inaccessible, returning a 403 Forbidden error served by nginx on Ubuntu. This prevents any meaningful content or metadata extraction. The domain is registered since 2001 with a reputable registrar, indicating a long-standing registration, but the lack of accessible content severely limits business and security analysis. No privacy, cookie, or terms of service policies are present, and no contact information is available on the site. The technical infrastructure appears minimal with no modern CMS or frameworks detected. Security posture is weak due to absence of HTTPS and security headers. Overall, the site is not currently usable for end users or business purposes in its present state.

The website mail.kersnikova.org/roundcube hosts a Roundcube Webmail client interface, providing users with web-based email access. It is a technical service platform rather than a commercial business site, targeting users who require email access for the kersnikova.org domain. The site is minimalistic, focusing solely on login functionality without additional business or marketing content. The technical infrastructure is based on well-known open-source technologies including Roundcube 1.6.6, jQuery, jQuery UI, and Bootstrap, indicating a standard modern webmail deployment. The site is mobile optimized and uses secure form practices such as CSRF tokens and autocomplete off for password fields. However, no explicit security headers or privacy policies are present in the HTML content, which limits the security posture and privacy compliance. The WHOIS data for the domain is unavailable due to a malformed query response, which reduces confidence in domain legitimacy and registration transparency. Overall, the site serves its functional purpose but lacks business transparency and comprehensive security controls.

The website kraucher.cz represents a small-scale business operated by Marek Kraucher, specializing in web design and internet marketing services primarily targeting local or regional clients in the Czech Republic. The site is built on WordPress 4.9.28 and uses legacy technologies such as jQuery 1.3.2 and the Yoast SEO plugin, indicating a need for modernization. The business appears stable with a domain age since 2009, consistent with a long-term presence in the market. Technically, the website employs basic SEO and analytics tools, including Google Analytics, but lacks modern security practices such as updated libraries and security headers. The site is accessible without any WAF or security challenges, but the absence of privacy and cookie policies and the use of outdated scripts present compliance and security risks. From a security perspective, the site has HTTPS enabled but lacks critical security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. There is no evidence of incident response or security policies, and no GDPR compliance mechanisms are visible. Contact information is clearly provided, enhancing business credibility. Overall, the website scores moderately on content quality and business credibility but falls short on privacy compliance and security posture. Strategic improvements in updating technology, implementing security best practices, and adding privacy policies would significantly enhance the site's trustworthiness and compliance.

The website at wpgmaps.com is currently inaccessible, serving a 403 Forbidden error page likely protected by Cloudflare. This prevents access to any meaningful content or business information. The domain is registered since 2012 with GoDaddy.com, LLC and uses Cloudflare DNS servers but lacks DNSSEC. No privacy, cookie, or terms of service policies are present, nor is there any contact information or forms available on the page. The lack of accessible content and security headers limits the ability to assess the website's technical maturity or security posture. The domain registration data suggests a legitimate business domain, but the website itself is currently blocked from public access.

Domel, d.o.o. is a Slovenia-based manufacturer specializing in high-performance and ultra-high efficiency electric motors and components. The company targets industrial clients and OEMs, offering customized, sustainable, and innovative drive solutions. Domel has a global presence in over 60 countries and collaborates with major industry players, positioning itself as a reputable and established manufacturer in the electric motor and automation sectors. The website reflects a professional and well-structured digital presence with a focus on product categories, solutions, and research and development capabilities. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager, Hotjar, and Microsoft WebTracking, and employs HTTPS with good security practices, although some security headers are missing. Privacy and cookie policies are not explicitly found, and no direct contact information or security incident response contacts are visible, which could be improved for compliance and trust. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the overall legitimacy suggested by the website content and branding.

Radio Noordzee is a regional radio station based in Oostende, Belgium, broadcasting on 105.0 FM and online. It provides regional news, interviews, and information targeted at the coastal population. The website is built on the Jimdo Creator platform and integrates social media content via Elfsight Facebook feed widgets. The site is well-structured with clear navigation and a cookie consent mechanism compliant with GDPR requirements. Contact information is provided, including a company email and phone number. The WHOIS data for the domain is unavailable due to domain status restrictions, but the website content and presentation suggest a legitimate small media business. Technically, the site uses modern web technologies but lacks some security headers and advanced security policies. Overall, the website is functional, user-friendly, and compliant with basic privacy standards.

The website www.visitoostende.be is the official tourism portal for the city of Oostende, Belgium. It provides comprehensive information on local attractions, events, dining, shopping, accommodation, and cultural experiences. The site targets tourists and visitors seeking to explore Oostende and offers multilingual support in Dutch, French, German, and English. The business model focuses on promoting tourism and local businesses through curated content and event listings. Technically, the site is built on Drupal 9, employs modern web technologies, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Ortto. Security measures include HTTPS, reCAPTCHA, and standard security headers, although some headers could be enhanced. The WHOIS data is restricted by DNS Belgium policy, limiting transparency but not detracting significantly from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure, with room for improvement in privacy policy visibility and explicit security headers.

The website kinepolis.be is currently inaccessible due to a Web Application Firewall (WAF) or security mechanism blocking access, as evidenced by the 'Access Denied' page and reference to errors.edgesuite.net. This prevents any direct analysis of the website's content, metadata, or technical infrastructure. The domain is registered with Combell nv, a reputable Belgian hosting provider, and has been active since 1996, indicating a mature and legitimate business presence likely in the hospitality sector given the domain name and country context. Due to the lack of accessible content, no privacy, cookie, or terms of service policies could be identified, nor any contact or security-related information. The security posture cannot be evaluated, and no technical or business insights beyond WHOIS data are available. The content safety rating is safe as no adult or explicit content is present in the minimal page.

Wait But Why is a well-established, popular long-form blog known for its stick-figure illustrated articles covering a wide range of topics including technology, science, society, and politics. Founded in 2013, it has built a strong niche audience and monetizes through book sales and an official merchandise store. The website demonstrates a mature digital presence with good SEO practices and active community engagement via comments and social media. Technically, the site runs on WordPress with common plugins like Yoast SEO and integrates analytics and social media scripts. Hosting and DNS are managed via Cloudflare and GoDaddy respectively, with HTTPS enabled and standard domain protections in place. Security posture is moderate with room for improvement in DNSSEC adoption and security headers. Privacy compliance is basic, with a privacy policy likely present but no visible cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

The website tyzden.sk is a well-established Slovak media outlet founded in 2004, offering a broad range of content including news, opinion articles, podcasts, videos, and subscription services. It targets a general audience interested in Slovak and international societal topics. The business model relies on advertising and subscriptions, supported by a professional and consistent brand presence. Technically, the site uses modern web technologies such as Google Fonts, Google Tag Manager, Google Analytics, Facebook Pixel, and OneSignal for push notifications, alongside ad networks like Adocean and Protag CDN. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or WAF blocking were detected. The domain WHOIS data confirms legitimacy with consistent registration details and appropriate domain age. Overall, the site is professional and trustworthy but could improve privacy disclosures and security best practices.

Odkazprestarostu.sk is a Slovak non-profit civic engagement platform established in 2010, operated by the Inštitút pre dobre spravovanú spoločnosť (SGI). It enables citizens to report local problems and track their resolution in cooperation with local governments, promoting transparency and public service improvement. The platform has a strong presence in Slovakia with over 100,000 resolved reports and is supported by the European Social Fund. Technically, the website uses a custom CMS with modern JavaScript libraries including jQuery, Bootstrap, and AngularJS, and integrates social media SDKs and analytics tools such as Google Analytics and Mixpanel. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site enforces HTTPS with excellent SSL configuration but lacks some security headers and explicit cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and serves an important civic function in Slovakia.

Denník N is a well-established independent Slovak news media company founded in 2014, offering a broad range of journalistic content including articles, podcasts, and subscription services. The website demonstrates a mature digital presence with a modern tech stack including WordPress CMS, Vue.js framework, and integration with multiple analytics and advertising platforms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with clear privacy and cookie policies and GDPR adherence. The business model is subscription-driven supplemented by advertising and merchandise sales. Overall, the site is professional, trustworthy, and well-positioned in the Slovak media market.

Silné reči is a Slovak entertainment company specializing in stand-up comedy and theatrical performances, operating since 2009. The website showcases their events, formats, and corporate offerings, targeting a general audience interested in comedy and live shows. The company maintains a strong brand presence with active social media channels and a ticketing partner domain. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent, hosted by Websupport with DNSSEC and HTTPS enabled, indicating a mature digital infrastructure. Security posture is solid with Google reCAPTCHA and error tracking via Sentry, though some security headers are missing. Privacy compliance is partially addressed through a detailed cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the site is professional, user-friendly, and trustworthy with no critical vulnerabilities detected.

Signal Technology Foundation operates the Signal messaging platform, a nonprofit organization dedicated to providing secure, private, and encrypted communication services globally. The website reflects a strong commitment to privacy, offering end-to-end encrypted messaging, voice, and video calls without ads or trackers. The platform targets privacy-conscious users seeking a trustworthy alternative to mainstream messaging apps. Technically, the website employs modern web technologies such as Bulma CSS, jQuery, and Lottie animations, hosted behind Cloudflare DNS, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security policies like vulnerability disclosure and incident response contacts are not publicly documented. Overall, the website is professional, trustworthy, and aligns well with the nonprofit's mission.

The website eu.shop.battle.net is the official e-commerce platform for Blizzard Entertainment, a leading global gaming company and subsidiary of Activision Blizzard. It offers digital game licenses, in-game content, and merchandise targeting gamers worldwide. The site demonstrates a mature digital infrastructure with modern web technologies, CDN usage, and strong performance optimizations. Security posture is robust, featuring HTTPS, comprehensive security headers, and cookie consent mechanisms aligned with GDPR compliance. While WHOIS data for the subdomain is unavailable, this is consistent with corporate subdomain management practices and does not detract from the site's legitimacy. Overall, the platform is professional, secure, and trustworthy, serving a large enterprise audience effectively.

Odyzeo Services operates as a small UX/UI design and development studio based in Slovakia, focusing on helping companies achieve their vision through design, prototyping, testing, and algorithmic solutions. The website presents a professional image with consistent branding and clear service offerings targeted at businesses seeking digital design and development expertise. The technical infrastructure includes modern tracking tools such as Google Analytics and Lead Forensics, with a custom CMS (ZeoCMS) powering the site. The site is mobile-optimized and uses reCAPTCHA to secure its contact form, indicating attention to user experience and basic security. However, the absence of visible security headers and privacy/cookie policies suggests room for improvement in compliance and security transparency. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, although the active and professional website mitigates some risk. Overall, the site scores moderately on security and privacy, with recommendations to enhance policy disclosures and security headers to improve trust and compliance.

DoučMa.sk is an established Slovak online platform operated by meetnlearn s.r.o. that connects students and tutors for personalized tutoring services across various subjects including languages and sciences. The platform offers both online and in-person tutoring options, enriched with user reviews, study questions, and educational blog content. It holds a solid market position in Slovakia with partnerships across multiple European countries, supported by recognized partners including European Union funding. Technically, the website employs modern web technologies such as React, Bootstrap, and integrates third-party services like Google Analytics and Facebook SDK, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and some security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable educational resource.

Aj Ty v IT is a Slovak non-profit organization dedicated to empowering girls and women by providing education, motivation, and community support in the field of information technology. The organization offers workshops, courses, motivational events, and mentorship programs targeting various age groups including school girls, adult women, and educators. Their market position is strong within Slovakia as a recognized entity promoting women in IT. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and tracking tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

Cinema Storck is a small, Belgium-based cinema venue focused on providing film screenings, weekly programs, and cultural film events. The website is built on Drupal 9 and integrates modern web technologies including Google Analytics and a cookie consent mechanism, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience of general cinema enthusiasts. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with accessible privacy and cookie policies. Overall, the business appears legitimate and well-positioned locally with strong cultural partnerships.

Galerija Kapelica is a small, niche art gallery website primarily focused on presenting cultural and artistic exhibitions through an interactive Adobe Flash experience. The website's market position is local and specialized, targeting general audiences interested in art and culture. The business model appears non-commercial or cultural with no visible e-commerce or transactional services. Technically, the site relies on outdated Flash technology, which severely limits accessibility and performance on modern devices. The site lacks mobile optimization, accessibility features, and modern SEO practices. Security posture is weak, with no HTTPS enforcement, no security headers, and no visible privacy or cookie policies despite using Google Analytics for tracking. The domain is old and registered with a reputable registrar, indicating legitimacy, but the technical and security aspects require significant modernization. Overall, the site presents a low trustworthiness profile and poor user experience.

The website mareksivco.sk represents the personal and professional portfolio of Mgr. Marek Sivčo, a Slovak teacher, web developer, poet, and podcaster. The site highlights his extensive experience in web development, teaching engagements, creative works, and supported projects. It targets individuals interested in IT education, Slovak geek culture, and creative arts. The business model is centered on personal branding and educational content delivery, with a niche market position in Slovakia and the broader Slovak-speaking community. Technically, the website employs a modern tech stack including PHP, WordPress, JavaScript, and various Adobe creative tools. Hosting is provided by Websupport, with DNSSEC enabled and HTTPS properly configured, indicating a secure and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks security headers and formal security policies. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies are found, which are notable compliance gaps. The absence of forms reduces attack surface but also limits user interaction. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

Spinkids.cz is a Czech Republic-based e-commerce retailer specializing in creative and interactive children's toys, including popular brands such as Tlapková patrola, Bakugan, Rubik, Batman, and Harry Potter. The website targets parents and children seeking branded toys with fast delivery services. The business is relatively new, founded in 2023, and operates on the PrestaShop platform with a moderate digital maturity level. The site employs multiple analytics and marketing tools including Google Analytics, Matomo, Microsoft Clarity, and CJ.com affiliate tracking, indicating a focus on data-driven marketing and customer insights. Security posture is adequate with HTTPS enforced and tokenized forms, but lacks explicit security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are directly available, which may impact customer support perception. Overall, the site is professionally designed, mobile-optimized, and safe for general audiences, but improvements in privacy compliance and security best practices are recommended.

Náš sad is a Czech-based producer and retailer of traditional fruit wines, operating under the company Soare sekt a.s. The website presents a professional and well-structured digital presence focused on promoting their fruit wine products, targeting adult consumers in the Czech Republic. The business model includes manufacturing and distribution through multiple retail chains and online sales. The website content is rich, localized in Czech, and includes detailed product descriptions and legal compliance information such as age verification and privacy policies. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is moderate with age verification and cookie consent implemented, but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, limiting domain trust assessment, but the website's contact information and content suggest legitimacy. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security best practices and technical enhancements.

Soare sekt a.s. is a well-established Czech wine company founded in 1991, offering a broad portfolio of alcoholic and non-alcoholic wine products under multiple brands. The company holds a strong market position in the Czech Republic and exports internationally, supported by a German parent company. The website is built on modern frameworks (Nuxt.js and Vue.js) and features comprehensive privacy and cookie policies, including GDPR compliance and an age verification mechanism for alcohol-related content. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and user-friendly, targeting adult consumers and wine enthusiasts.

Robby Bubble is a well-established brand specializing in non-alcoholic sparkling beverages designed for children and family parties. The website presents a professional and visually appealing platform targeting Czech and Slovak markets, emphasizing fun and fruit-flavored party drinks. The domain has been registered since 2001, indicating a mature presence in the market. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with Google Tag Manager integrated for analytics. However, explicit privacy policies and terms of service are missing, which could impact compliance and user trust. Security headers and advanced security policies are not evident, suggesting room for improvement in security posture.

Terres d'Argentan is a French local government community portal serving 49 communes with approximately 34,000 inhabitants. The website provides comprehensive information about community services, events, public announcements, and citizen resources. It positions itself as an essential public service platform for residents and stakeholders in the Argentan area. The site is well-branded and consistent with official government communications. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Fonts and Google reCAPTCHA for security. It employs Matomo for privacy-conscious analytics and uses the Complianz GDPR plugin to manage cookie consent, demonstrating a good level of digital maturity and compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is actively managed, and analytics cookies are disabled by default. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. It serves its community audience effectively with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and continuing regular updates to maintain security posture.

Bouygues Immobilier Corporate is a well-established real estate company with a strong presence in France and internationally. The website reflects a mature digital presence with comprehensive content about their activities, references, news, and corporate commitments. The technical infrastructure is modern, leveraging Drupal 10, Bootstrap 5, and privacy-focused analytics tools such as Matomo. The site implements GDPR-compliant cookie consent mechanisms and provides clear contact information and social media links. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, though the website content and branding strongly support authenticity. Security posture is good with HTTPS and privacy SDKs, but explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

L'Union sociale pour l'habitat is a prominent French non-profit organization dedicated to supporting social housing entities (Hlm) and contributing to national housing policy development. The website serves as a comprehensive resource hub offering thematic content, publications, event information, and professional support to stakeholders in the social housing sector. The organization maintains a strong market position as a key actor in France's social housing ecosystem, with a large-scale presence and multiple affiliated entities. Technically, the website is built on Drupal CMS, employs modern web technologies such as lazy loading and Matomo analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security and privacy policies are not prominently published. The absence of WHOIS data limits domain trust verification but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

VINCI is a global leader in concessions, energy services, and construction, operating in over 120 countries with a workforce of approximately 285,000 employees. The company focuses on sustainable development, energy transition, and social progress, positioning itself as a key player in infrastructure and mobility solutions. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and newsroom updates, supporting transparency and stakeholder engagement. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and includes cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response details are absent. The WHOIS data is unavailable, which slightly reduces transparency but does not detract from the site's legitimacy given the strong corporate branding and content. Overall, VINCI's website demonstrates professionalism, good technical implementation, and a strong business credibility profile.

VALHOR is a French interprofessional organization dedicated to supporting and representing professionals in the horticulture, floristry, and landscaping sectors. Established in 2005, it serves as a key industry body in France, providing accompaniment and support to horticulture professionals. The website reflects a professional and consistent brand image, targeting industry stakeholders with relevant content and services. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager and Matomo for analytics, and uses Axeptio for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies, which could be improved. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.

Caux Seine agglo is a French regional government entity providing local community services and information to residents and businesses in the Caux Seine area. The website serves as an official portal for announcements, events, and public services, targeting a regional audience. The site is built on WordPress and leverages modern web technologies including Matomo for analytics and Google Fonts for typography. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of a privacy policy and WHOIS data reduces compliance and trust scores. Overall, the site is professional and trustworthy but could benefit from enhanced privacy disclosures and security hardening.