Medium-risk security reports

IDcomet is a small technology company operating under Tall Pines Data, LLC, providing website traffic intelligence services through software that identifies website visitors using an enhanced IP address database. The company targets website owners who seek detailed visitor insights, operating a SaaS business model with a niche market position. The website is professionally designed using modern frontend technologies such as Vue.js and Material Design Lite, offering a good user experience and mobile optimization. However, the site lacks some advanced SEO and accessibility features. From a security perspective, the website uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. No privacy or cookie consent mechanisms are present, and no direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data is consistent with the business identity, showing a stable domain registration with a long expiry date. Overall, the website is functional and professional but could improve in security practices and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and providing clearer contact information to enhance trust and compliance.

BeSignal is a specialized software provider offering whistleblowing reporting platforms tailored to meet the requirements of the European Whistleblowing Directive and data protection standards. Founded in 2021 and based in France, the company targets organizations in both the corporate and public sectors, including schools, to streamline whistleblowing report management and resolution. Their business model is primarily SaaS, delivering compliance-focused solutions with multi-language support and a professional online presence. Technically, the website leverages modern JavaScript frameworks such as Vue.js, integrates HubSpot for marketing and analytics, and employs Cookiebot for cookie consent management. The hosting is provided by OVH sas, a reputable European hosting provider. Security-wise, the site enforces HTTPS and has domain protections against unauthorized transfers or deletions, but lacks DNSSEC and some security headers. No explicit privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional and functional with moderate security posture and good business credibility.

The website pardubiceonline.cz is a local news and information portal dedicated to the city of Pardubice in the Czech Republic. It provides news, updates, and special content related to local events, technology, and community interests. The site is part of a larger network of city portals, indicating a focused niche media presence. The business model appears to be based on advertising and promotional partnerships, supplemented by related services such as web development and AI training offered through partner sites. The domain is well-established since 2011, supporting its credibility and market presence. Technically, the site uses modern frontend technologies including Tailwind CSS, Leaflet.js for maps, AOS for animations, and integrates Google Analytics via Google Tag Manager. Hosting is provided by a Czech hosting provider (vshosting.cz), consistent with the local focus. The site is mobile-optimized with good navigation and content structure, although accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a GDPR policy available on a related domain, but no cookie consent mechanism is present on the site itself. Contact information is primarily via contact forms rather than direct emails or phone numbers, which limits direct communication channels. Overall, the site presents a moderate risk profile with good business credibility and technical implementation but could improve in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and enhancing incident response transparency.

The website libereconline.cz is a Czech language local news and information portal focused on the city of Liberec. It provides news articles, city updates, and links to related portals and services. The site is part of a broader network of city portals managed under the zpravodajstvionline.cz project. The business model appears to be media and advertising-driven, supplemented by partnerships offering web development and AI training services. The site targets residents and visitors interested in local news and city information. Technically, the site uses modern frontend technologies including Tailwind CSS, Leaflet.js for maps, AOS for animations, and Google Analytics for tracking. The site is mobile responsive and has a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are missing. Privacy and terms of service pages are available on a related domain, indicating some compliance with GDPR. Overall, the domain is legitimate, registered since 2011, and consistent with the website's purpose. Recommendations include adding cookie consent, improving security headers, and publishing explicit security policies to enhance trust and compliance.

Praha2online.cz is a local news and information portal focused on Prague 2 and broader Czech Republic news. It provides categorized news content, local updates, and special interest articles, supported by a network of related city portals. The website leverages modern front-end technologies such as Tailwind CSS, Leaflet.js, and AOS for animations, ensuring a responsive and visually appealing user experience. Hosting is provided by vshosting.cz, with domain registration dating back to 2010, indicating an established presence in the local media market. The site integrates Google Analytics for user tracking but lacks a visible cookie consent mechanism, which may impact privacy compliance.

Praha1online.cz is a Czech local news and information portal focused on Prague 1 and surrounding areas. It provides timely news, updates, and information on various topics including local events, technology, and community affairs. The site is part of a broader network of city portals and thematic websites, supported by partnerships with web development and AI training providers. The business model appears to be based on advertising and content provision to a local audience. Technically, the website employs modern frontend technologies such as Tailwind CSS, Leaflet.js for maps, AOS for animations, and integrates Google Analytics for user tracking. Hosting is provided by Czech-based providers, consistent with the domain registration data. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No direct contact emails or phone numbers are found, and no formal security or incident response policies are published. The WHOIS data is transparent and consistent with the website's local focus and age, supporting legitimacy. Overall, the site is a well-maintained local news portal with moderate technical maturity and a good business presence. Strategic improvements in privacy compliance and security practices would enhance trust and regulatory adherence.

Centrum léčby pohybového aparátu (CLPA) is a specialized healthcare provider in the Czech Republic focusing on orthopedics, rehabilitation, and physiotherapy. It operates under the parent company Group Mediterra and holds recognized certifications such as the SAK accreditation, indicating high-quality medical care. The website presents a professional image with comprehensive service descriptions, clear contact information, and a user-friendly interface optimized for both desktop and mobile users. The target audience primarily includes patients seeking specialized musculoskeletal treatment and rehabilitation services. Technically, the site is built on WordPress with common plugins and modern JavaScript libraries, ensuring moderate performance and good SEO practices.

Nemocnice Tanvald, s.r.o. is a regional healthcare provider located in Tanvald, Czech Republic, offering a broad range of ambulatory and inpatient medical services. Founded in 1889, the hospital operates in a modern renovated facility and is part of the Group Mediterra network, which includes several other healthcare and rehabilitation centers. The website presents a professional image with clear information about services, departments, and patient resources, targeting patients and visitors primarily in the Czech Republic. The business model focuses on comprehensive patient care with multidisciplinary medical teams across various specialties. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery and Owl Carousel for UI components. It integrates Google Analytics and Google Tag Manager for traffic analysis and marketing. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the website content and affiliation with Group Mediterra support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Recommendations include adding security headers, publishing security policies, and implementing a vulnerability disclosure mechanism. Overall, Nemocnice Tanvald's website is a well-structured, professional healthcare portal with good privacy compliance and moderate technical maturity. Addressing minor security and transparency gaps will enhance trust and security posture further.

Nemocnice Sedlčany is a regional healthcare provider in the Czech Republic offering a wide range of medical services including surgeries, rehabilitation, and various specialized ambulances. The hospital is part of the Group Mediterra, indicating a structured parent company relationship. The website is professionally designed using WordPress CMS, with modern technologies such as jQuery, Owl Carousel, and Google Tag Manager integrated for analytics and user experience. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy in Czech language. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though security headers could be improved. Overall, the site reflects a trustworthy and professional healthcare institution with active communication channels and social media presence.

Nemocnice sv. Zdislavy, a.s., operating under the brand Nemocnice Mostiště, is a modern healthcare provider based in the Czech Republic offering a wide range of ambulatory and inpatient medical services including advanced robotic surgeries and specialized care. The hospital serves both domestic and international patients and is part of the Group Mediterra healthcare network. The website is professionally designed, multilingual, and provides comprehensive information about services, departments, and patient care. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and reCAPTCHA for security and analytics. Privacy and cookie policies are implemented with GDPR compliance. However, WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Overall, the site demonstrates a good security posture with HTTPS and consent mechanisms but could improve by adding security headers and explicit security policies.

Soukromá střední zdravotnická škola Mělník, o.p.s. is a private secondary healthcare educational institution located in Mělník, Czech Republic. It is the sole healthcare school in the region, offering a four-year practical nurse study program culminating in a matriculation exam. The school operates without tuition fees and is part of the Group Mediterra a.s. ecosystem, which includes multiple healthcare facilities and clinics. The website serves students, prospective students, and parents with comprehensive information about the school, study programs, and contact details. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery, Owl Carousel, and Google Tag Manager for analytics and user interaction. The site is mobile-optimized, has good SEO practices, and implements a cookie consent mechanism compliant with GDPR. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security policy documentation and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms the domain's legitimacy and long-standing registration since 2003, consistent with the school's history. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and policy documentation. It poses low risk and effectively supports the institution's educational mission.

Group Mediterra a.s. is a Czech healthcare group operating multiple hospitals, clinics, and a medical secondary school, providing comprehensive healthcare services including preventive, acute, and follow-up care. The group serves both domestic patients under public health insurance and international patients seeking specialized medical procedures. The website is professionally designed using WordPress CMS with modern technologies and offers multilingual support. It implements GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is good with HTTPS and reCAPTCHA but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable, which reduces domain transparency but the website content and business information appear legitimate and trustworthy.

TAZ Verlags- und Vertriebs GmbH operates taz.de, a well-established German left-leaning independent news media website founded in 1992. The site offers critical journalism including analyses, commentaries, interviews, and reportages, targeting a general audience interested in progressive news. The business model combines subscription services and advertising revenue, supported by a cooperative structure. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks like Alpine.js, Cash DOM, and uses Google Publisher Tag for advertising and Matomo for analytics. Mobile optimization and accessibility are well implemented, providing a good user experience. Security posture is strong with HTTPS enforced and consent mechanisms for cookies, though explicit security headers could be confirmed. Privacy compliance is robust with clear privacy and cookie policies in German, aligned with GDPR requirements. WHOIS data is consistent with the business claims, showing legitimate domain registration and hosting in Berlin. Overall, the site is professional, trustworthy, and secure, with no critical vulnerabilities detected.

German U15 e.V. is a non-profit association representing fifteen leading research-intensive universities in Germany. The organization focuses on promoting excellent research, innovative teaching, and international cooperation among its member institutions. The website serves as an information hub for policy statements, publications, events, and news related to higher education and research in Germany. The association holds a significant position in the German academic landscape, advocating for science policy and fostering collaboration. Technically, the website is built on the Infopark CMS Fiona platform using Ruby on Rails, with a modern tech stack including HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. Hosting appears to be managed through German academic networks, ensuring reliability and alignment with the organization's profile. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a baseline security posture. However, it lacks several recommended security headers and does not provide explicit vulnerability disclosure or incident response contacts. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent mechanism is a notable gap. Contact information is primarily available via contact forms rather than direct emails or phone numbers. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and providing clearer contact channels for security incidents to strengthen trust and compliance.

Smart Slider 3 is a well-established WordPress plugin provider specializing in slider creation tools for WordPress and Joomla platforms. With over 800,000 users, the company NEXTENDWEB LTD. holds a strong market position in the WordPress plugin ecosystem, offering advanced editing capabilities and a freemium business model. The website demonstrates professional design, excellent content quality, and clear branding consistency, targeting web developers and site owners seeking enhanced slider functionality. Technically, the site is built on WordPress, leveraging modern web technologies including Google Tag Manager and Google Analytics for marketing and analytics purposes. Hosting and domain registration are managed via Cloudflare, ensuring reliable infrastructure and domain security. Security posture is good with HTTPS enforced and standard security headers present; however, improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy and professional, with minor gaps in privacy and security documentation.

EpilepsyCourses is a specialized educational platform offering SEEG and epilepsy-related courses primarily targeting neurologists and neurosurgeons. The website presents detailed course information, including upcoming events in 2025 and 2026, with a focus on expert training to improve epilepsy care. The business operates in the healthcare and education sectors, with a small organizational size and a domain age consistent with its recent founding in 2021. Technically, the site is built on WordPress using Elementor and related plugins, hosted by Infomaniak Network SA, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC and security headers are absent. Privacy and cookie policies exist but lack advanced compliance features such as consent mechanisms or GDPR explicit statements. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is professional, trustworthy, and safe for general audiences.

finance&invest.brussels is a regional financial support organization focused on providing financing solutions and investment assistance to businesses and independent professionals in Brussels, Belgium. The website serves as a portal to help users find the best financing options to launch and grow their projects. The organization positions itself as a key partner for Brussels-based projects, offering advisory and financial services tailored to the local market. The digital presence is built on a mature WordPress infrastructure using the Divi theme and Gravity Forms for interactive elements, supported by modern web technologies and SEO best practices. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a strong commitment to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for its target audience, though direct contact information is not prominently displayed in the analyzed content.

The website hub.info is currently a parked domain page with minimal content, primarily serving as a placeholder indicating the domain is for sale. There is no active business presence, no contact information, and no privacy or cookie policies. The technical infrastructure relies on iframes and external ad/tracking domains, with no visible CMS or modern frameworks. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. The domain's WHOIS data is privacy protected or unavailable, which is typical for parked domains but reduces trustworthiness for business use. Overall, the site lacks professionalism and business credibility, making it unsuitable for commercial or user-facing purposes in its current state.

Wake-up Clean-up is a Brussels-based non-profit organization dedicated to promoting environmental cleanliness through community clean-up events. The website serves as a platform for citizens and groups to join the movement, organize or participate in clean-ups, and access educational resources. The site is well-branded, multilingual, and provides clear calls to action for engagement. Technically, it is built on Drupal 10 with modern libraries and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security practices include HTTPS enforcement and basic security headers, though there is room for improvement in advanced security configurations and accessibility compliance. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the website demonstrates a solid digital presence for a small non-profit with a focus on community and sustainability.

Event media s.r.o. is a Czech Republic based marketing company specializing in event organization and advertising services, particularly in sports event tours and dealer days. The company positions itself as a creative and reliable partner offering full-service marketing solutions to increase client revenue and brand awareness. The website reflects a small-sized business with a regional focus and a consistent brand presence. Technically, the website uses a variety of jQuery-based scripts and custom code hosted on Czech hosting infrastructure, with moderate performance and good mobile optimization. Security posture is basic, with cookie consent implemented but lacking advanced security headers and policies. No privacy policy or terms of service pages are present, which is a compliance gap. The domain registration data is consistent with the business claims and shows a mature domain age, supporting legitimacy. Overall, the website is functional and professional but could improve in privacy and security compliance.

Nova-Art s.r.o. is a Czech-based event and artistic agency specializing in organizing events, representing artists across various genres, and providing own production services such as concert production and dubbing studios. The company targets corporate clients and event organizers, leveraging an extensive network of artists and creative professionals. The website reflects a mature business with professional branding and a clear service offering. Technically, the site uses modern JavaScript frameworks like Alpine.js, integrates Google Tag Manager and Analytics, and employs Cloudflare Turnstile captcha for form security. The site is mobile-optimized and well-structured, providing a positive user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. The absence of WHOIS data for the domain is a concern for domain legitimacy but does not detract from the professional presentation of the business. Overall, the website is trustworthy, compliant with GDPR, and serves its business purpose effectively.

Flamengo květiny s.r.o. operates as a medium-sized flower retail business in the Czech Republic, with approximately 200 physical stores. The company specializes in florist-arranged fresh flowers, emphasizing quality and customer satisfaction. Their website serves as a digital storefront and information hub, featuring product promotions, florist advice, and store location maps. The company maintains an active social media presence to engage customers and promote brand awareness. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js and Vue.js, supported by a headless CMS likely Strapi, enabling dynamic content management. The site includes cookie consent mechanisms and integrates Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Mobile optimization and SEO practices are adequately implemented, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data due to privacy protection is common for commercial entities and does not raise immediate concerns. Overall, the security posture is adequate but could be improved with additional headers and formal security documentation. The overall risk assessment indicates a legitimate and professionally maintained retail website with moderate technical sophistication and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving contact information transparency to strengthen trust and compliance.

Hortim is a well-established Czech company specializing in the wholesale and comprehensive service of fresh fruit and vegetables, including farming, packing, storage, ripening, and logistics. The company operates multiple subsidiaries and brands, serving a broad market with significant annual throughput. Their website reflects a mature digital presence with multilingual support and detailed service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though some security headers and explicit incident response information are missing. The absence of WHOIS data limits domain trust verification, but the professional presentation and certifications support business credibility. Overall, Hortim demonstrates a strong market position with room for enhanced transparency and security documentation.

Perskindol.cz is an official website for a healthcare product specializing in muscle and joint pain relief gels with dual cooling and warming effects. The site targets a general audience seeking topical pain relief solutions. The brand appears established with consistent branding and a focused product offering. Technically, the site is built on WordPress using the Divi theme and incorporates modern web technologies such as Google Fonts, Cookiebot for cookie consent, and Yoast SEO for search optimization. The site is accessible, mobile-optimized, and includes tracking via Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit privacy policy documentation. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but could improve compliance and security transparency.

Pražské vodovody a kanalizace, a.s. is a major water utility company serving Prague and surrounding regions, providing essential water supply and sewage services. The company is part of the Veolia group, a global leader in environmental services. Their website offers comprehensive information on services, customer support, water quality, and company news, targeting residential and commercial customers. The business model focuses on utility service provision with a strong emphasis on customer engagement and environmental responsibility. Technically, the website is built on the Vizus CMS platform, utilizing modern web technologies including JavaScript, CSS, and Bootstrap framework components. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR standards. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and provides cookie consent controls, but lacks visible security headers and explicit security policies or incident response contacts. The absence of WHOIS data reduces domain trust slightly, though the affiliation with Veolia and professional presentation support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence for a large utility company. Strategic improvements in security headers, explicit privacy and security policies, and WHOIS transparency would enhance trust and compliance further.

Radiosrental.cz is a small Czech telecommunications business specializing in the rental of walkie-talkies, radiostations, and wifiboxes, primarily serving professional sectors such as film, TV, and event management in Prague. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard Wix scripts, providing a professional and mobile-optimized user experience. However, the site lacks critical privacy and cookie policies, security headers, and WHOIS transparency, which impacts its overall security posture and privacy compliance. No incident response or vulnerability disclosure information is present, limiting the security maturity assessment. Overall, the business appears legitimate based on content and presentation, but the absence of WHOIS data and security best practices suggests room for improvement.

THE PLAYGROUND is a Czech-based family entertainment and retail business offering a variety of attractions such as arcade games, laser games, virtual reality, and a butterfly house, alongside an e-commerce platform for toys and collectibles. The website is built on Shopify, indicating a modern e-commerce infrastructure with integrated marketing and analytics tools. The business targets families and children primarily in Prague, positioning itself as a local entertainment hub with retail capabilities. The domain is newly registered in 2023, consistent with a recently launched or rebranded business.

Topspo is a Czech-based company specializing in organizing diverse sports events and activities for both children and adults, including cycling camps, skating schools, triathlons, and equipment rentals. The company positions itself as a professional and experienced organizer with over 10 years in the market, focusing on engaging and motivating participants through quality instruction and fun experiences. The website is well-structured, visually appealing, and optimized for mobile devices, providing clear navigation and relevant content in Czech language. Technically, the site uses modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Usercentrics for cookie consent, hosted on a CMS platform called Solidpixels. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness and calls for further verification. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche sports event market in the Czech Republic.

Lawi sport s.r.o. is a leading Czech manufacturer and retailer specializing in sportswear, particularly cycling apparel. The company operates a professional e-commerce platform offering a wide range of products including custom-made jerseys, cycling accessories, sports nutrition, and body care products. Their market position is strong within the Czech Republic, targeting sports enthusiasts and athletes with quality products and services. The website reflects a mature digital presence with comprehensive product offerings and customer engagement features.

The website omoda-jaecoo.cz represents the Czech market presence of the automotive brands Omoda and Jaecoo, subsidiaries of the Chinese Chery Group. It offers detailed information about various car models including electric, hybrid, and combustion engine vehicles, targeting a broad audience from young buyers to urban elites. The site includes dealer locators, news updates, and vehicle configuration options, supporting a direct-to-consumer sales model through a network of dealerships. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and analytics tools, hosted on Netim infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policy disclosures. WHOIS data confirms recent domain registration consistent with the brand's market entry timeline. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Klinika Malvazinky is a prestigious rehabilitation clinic located in Prague, specializing in orthopedic surgery, physiotherapy, and rehabilitation services. It operates as part of the Group Mediterra healthcare network, offering modern medical care with a multidisciplinary team of highly qualified physicians. The clinic emphasizes patient comfort with a serene environment including a private park and comprehensive care programs. Technically, the website is built on WordPress and employs modern JavaScript libraries and Google services for analytics and security, including reCAPTCHA. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS and secure form handling, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the website reflects a mature digital presence suitable for a healthcare provider.

Orion - tvoříme vaši domácnost is a Czech retail company specializing in household goods, offering a broad range of kitchen, dining, home, and garden products through both a large network of 121 physical stores and an online e-commerce platform. The website is professionally designed with good content quality, clear navigation, and mobile optimization, targeting Czech households. The company maintains active social media channels and provides customer support via phone. Technically, the site uses modern web technologies including Google Analytics 4 and cookie consent mechanisms, but lacks visible security headers and WHOIS data is unavailable, which impacts trust assessment. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site presents a trustworthy and professional retail business with moderate technical and security maturity.

Le Palais Art Hotel Prague is a luxury boutique hotel located in the prestigious Vinohrady district of Prague. The hotel combines historical charm with modern luxury, offering elegant accommodation and a unique artistic experience with interiors adorned by renowned artists. The website reflects a professional hospitality business with a clear market position targeting tourists and business travelers seeking high-end services including accommodation, dining, conferences, weddings, and wellness. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and consent management via Didomi, ensuring compliance with privacy regulations. Security posture is good with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and compliant with GDPR, with no detected vulnerabilities or suspicious elements.

Dafit Motoracing is a specialized e-commerce retailer focused on motorcycle parts and accessories, serving primarily the Czech market. The website offers a broad catalog of products including fairings, tires, tuning parts, and accessories for various motorcycle brands such as Aprilia, BMW, Ducati, Honda, Kawasaki, KTM, MV Agusta, Suzuki, Triumph, and Yamaha. The business targets motorcycle enthusiasts and professional racers, positioning itself as a niche player in the transportation retail sector. The website is professionally designed with good navigation and content relevance, supporting a positive user experience.

MP TOBACCO s.r.o. operates as a specialized retailer focusing on premium tobacco products including cigars and humidors, targeting a mature adult audience primarily in the Czech Republic. The company emphasizes direct import of high-quality brands such as VAUEN and BOSSNER, positioning itself as a niche player in the tobacco retail market. The website supports this business model with product showcases, a blog, and a photo gallery to engage customers. Technically, the website employs a moderately modern technology stack including jQuery, Bootstrap, and multiple third-party analytics and chat services. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR principles. However, the absence of detected security headers and incomplete WHOIS data indicate areas for improvement in security and transparency. From a security perspective, HTTPS is enabled and form spam protection via Google reCaptcha is present, but the lack of security headers and missing privacy policy reduce the overall security posture. No incident response or vulnerability disclosure information is provided, which could be a risk in case of security events. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, improved transparency through WHOIS data and privacy policies, and clearer contact information to strengthen trust and compliance.

Daniel Šeiner's website serves as a professional portfolio showcasing wedding and fashion photography services. The site targets a general audience interested in high-quality photographic services, positioning itself as a local small business in the Czech Republic. The business model is service-oriented, focusing on personalized photography offerings without evident e-commerce or subscription components. Technically, the website is built on an older WordPress platform with Visual Composer and uses common web technologies such as jQuery and Font Awesome. While the site is mobile responsive and visually consistent, it lacks modern security headers and up-to-date CMS versions, which could expose it to vulnerabilities. Security posture is moderate due to HTTPS usage but is weakened by missing security best practices and absence of privacy and cookie policies. Overall, the site is safe for general audiences and does not contain any adult or explicit content. However, the lack of WHOIS data and contact information reduces trust and business credibility. Strategic improvements in security, compliance, and transparency are recommended to enhance the site's professionalism and user trust.

SIVEK HOTELS is a well-established family-owned hospitality business operating multiple hotels, restaurants, and event services in Prague. The company emphasizes tradition and experience with a 35-year history, targeting tourists and event clients. Their digital presence is professional, leveraging modern web technologies and analytics tools, with a focus on user experience and multi-language support. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and explicit policies. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the website reflects a credible and professional hospitality business with moderate technical maturity and privacy compliance.

La Captothèque is a regional public service platform operated by Atmo-Auvergne-Rhône-Alpes, focused on enabling citizens to measure and understand air quality in their territories. The website offers sensor loans and data visualization tools to engage the community in environmental monitoring. The platform is supported and financed by the Auvergne-Rhône-Alpes regional government, positioning it as a niche but trusted service in the energy/environment sector. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Flickity, hosted by OVH, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and formal privacy or security policies. The WHOIS data confirms domain legitimacy and consistency with the business age and claims. Overall, the site is professional, trustworthy, and serves a clear public interest mission.

The website www.termsandconditionsgenerator.com offers a free, easy-to-use Terms & Conditions generator tool aimed at website and app owners who need personalized legal documents quickly. The business operates as a niche utility service, redirecting users to a trusted partner site for final document generation. The site is well-branded, uses HTTPS, and employs modern frontend technologies such as Bootstrap and jQuery, with analytics provided by Cloudflare Insights and Plausible Analytics. However, the absence of WHOIS data and lack of contact information reduce the overall trustworthiness. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices. The security posture is basic, with HTTPS enabled but lacking explicit security headers and cookie consent mechanisms. No privacy or cookie policies are present, which is a compliance gap. The site does not expose sensitive data and uses Cloudflare for CDN and security, which adds a layer of protection. From a security perspective, the site shows no immediate vulnerabilities but would benefit from implementing security headers, publishing privacy and cookie policies, and providing contact channels for incident response. The missing WHOIS data is a concern for domain legitimacy, although the site content and partner relationships suggest a legitimate operation. Overall, the website scores moderately well but has room for improvement in privacy compliance, security best practices, and transparency to enhance user trust and regulatory adherence.

Sciences Po is a prestigious and internationally recognized selective research university based in France, specializing in social sciences and humanities. The institution offers a unique multidisciplinary education model combining academic specialization with professional anchoring to prepare societal actors. The website reflects this positioning with comprehensive content, professional design, and clear navigation targeting students, researchers, and professionals. Technically, the site is built using modern frameworks such as Gatsby and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a high level of digital maturity and business credibility, supporting the institution's reputation and trustworthiness.

Visit Delco is the official tourism promotion agency for Delaware County, Pennsylvania, providing comprehensive information on local attractions, events, dining, and accommodations. Positioned as a gateway between Philadelphia and the Brandywine region, it targets tourists, families, and event planners seeking cultural and recreational experiences. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it leverages WordPress with modern plugins and frameworks, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements like DNSSEC and security headers are recommended. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the domain registration and website content are consistent and trustworthy, supporting a high business credibility score.

Delaware County, Pennsylvania operates an official government website providing comprehensive information and services to residents, businesses, and visitors. The site covers a wide range of county functions including courts, human services, health, public safety, elections, and parks. The website is built on Drupal 10 with modern frameworks like Bootstrap 4 and includes accessibility features such as AudioEye and Google Translate integration. The site demonstrates good content quality, clear navigation, and professional design consistent with government standards. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain and website are legitimate and trustworthy, serving as a critical public resource for Delaware County.

The website ootravaux.fr is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business content or information. The domain is registered since 2019 with a reputable registrar and is actively maintained with an expiry in 2026. However, no visible content, contact information, or business details are accessible to perform a comprehensive analysis. The technical infrastructure includes Cloudflare protection, indicating an intention to secure the site from automated threats. Due to the lack of accessible content, the security posture cannot be fully assessed beyond the presence of Cloudflare's WAF. Privacy and compliance policies are not found, and no business credibility indicators are visible. Overall, the site appears to be protected but currently unavailable for detailed evaluation.

The website solocal.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any substantive content, metadata, or business information. The domain is mature, registered since 2007 with CSC Corporate Domains, Inc., and has standard domain status protections enabled, indicating a legitimate and established entity. However, no direct business details, contact information, or compliance policies are accessible from the provided content. The technical infrastructure relies heavily on Cloudflare for security and performance, but no further technical or security details can be assessed due to the content block. Overall, the site’s security posture appears to be supported by Cloudflare’s WAF, but the lack of accessible content limits a full evaluation.

SFBX is a technology company specializing in consent management solutions through its platform AppConsent®. The company targets businesses needing GDPR and e-privacy compliance, offering a SaaS model with integration into major technologies such as Google Consent Mode v2. Their platform leverages a private blockchain to ensure secure and immutable consent records, positioning them as a trusted provider in the privacy compliance market. The website is professionally designed, SEO optimized, and mobile responsive, reflecting a mature digital presence. However, explicit privacy and cookie policies are not directly found on the main page, which could impact user trust and compliance perception. Security posture is generally good with HTTPS and domain protections, but could be enhanced by enabling DNSSEC and security headers. Overall, SFBX demonstrates a solid business and technical foundation with room for improvement in transparency and security best practices.

Aquitem & Aliénor.net is a French technology and retail-focused group with over 35 years of expertise in data services, digital marketing, and hosting solutions. The company operates under the parent Groupe FIDUCIAL and offers a range of services including data hosting, data visualization, loyalty program management, web digital strategy, and AI-powered marketing solutions. Their market position is that of an established medium-sized B2B service provider targeting retailers and businesses seeking advanced data and digital solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Tag Manager, and Matomo. The site is mobile-optimized and uses hCaptcha for form security. Security posture is good with HTTPS and some best practices, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this business type. Overall, the website is professional and trustworthy, though it could improve compliance by publishing privacy and terms of service pages explicitly.

MaCarteFid' by FIDUCIAL is a French-based SaaS provider specializing in customer loyalty solutions tailored for independent merchants. The company offers a 100% web-based platform that requires no hardware or software installation, making it accessible and easy to use. Positioned as an affordable and intuitive solution, it targets small retail businesses seeking to enhance customer retention. The website reflects a professional and consistent brand image, supported by client references and social media presence. Technically, the site is built on WordPress using the Enfold theme, integrating modern analytics tools like Matomo and Google Tag Manager, and employs hCaptcha for form security. The security posture is strong with HTTPS enforced and no critical vulnerabilities detected, although security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website demonstrates a mature digital presence with solid business credibility and security practices.

Aquitem & Aliénor.net is a French technology company specializing in data services, retail marketing, loyalty program management, AI-driven customer targeting, and digital agency services. With over 35 years of expertise and a medium-sized business profile, it serves retail and e-commerce clients primarily in France. The company is part of the FIDUCIAL Group and operates several subsidiaries and partner brands such as ZeFid’ and MyDataviz’. The website reflects a mature digital presence with professional content, consistent branding, and a clear focus on data-driven business solutions. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the domain WHOIS data is privacy protected but consistent with a legitimate business entity. The website is safe, professional, and trustworthy, with no signs of malicious activity or content blocking.

Uscreen is a technology company providing a SaaS platform for creators and entrepreneurs to build and monetize their own video streaming services. The website analyzed is the admin login page, featuring modern web technologies such as Vue.js and Tailwind CSS, and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Sentry for error monitoring. The platform targets content creators seeking to launch subscription or pay-per-view video services and positions itself as an established player with over 25,000 creators. The technical infrastructure is robust, leveraging CDN hosting and modern JavaScript frameworks, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, CSRF protection, and monitoring tools, although explicit privacy and cookie policies are not directly linked on this page, indicating room for improvement in compliance transparency. Overall, the site is professional and trustworthy, with no signs of malicious content or adult material.

MojoHost, B.V. is a European hosting provider specializing in dedicated servers, VPS, cloud compute, cloud storage, and CDN services, primarily targeting businesses and technical users in Europe. The company emphasizes quality service, local payment options, and European IP address space, with a strong brand presence since 1999. Their website reflects a professional and consistent brand image with comprehensive service offerings and customer support portals. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for hosting providers, and no suspicious patterns were detected. Overall, the site is trustworthy and well-positioned in the European hosting market.