Medium-risk security reports

AJ Produkter is a leading supplier of office furniture, warehouse and workshop equipment, and related products primarily serving business customers in Denmark and other Nordic and European countries. The company offers a broad range of products including office chairs, desks, storage solutions, and ergonomic accessories, supported by services such as workspace design and consulting. The website demonstrates a mature digital presence with modern web technologies, multi-language support, and integrated payment solutions. Security posture is solid with HTTPS, Content-Security-Policy, and cookie consent mechanisms, though some advanced security headers and policies are absent. The absence of WHOIS data limits domain trust verification, but the professional presentation and business information support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.

AJ Produkter is a leading Norwegian e-commerce retailer specializing in office furniture, warehouse, and workshop equipment. The company positions itself as Norway's largest online store for workplace furnishing, offering fast delivery, excellent customer service, and a 7-year warranty on products. The website is professionally designed with clear navigation and is optimized for mobile devices, targeting business customers in Norway. Technically, the site uses modern JavaScript frameworks, integrates with multiple trusted payment and analytics providers, and employs error monitoring tools to maintain operational stability. Security measures include HTTPS enforcement and a robust Content-Security-Policy header, alongside a cookie consent mechanism compliant with GDPR standards. However, explicit privacy policy and terms of service pages were not detected in the provided content, representing an area for improvement. Overall, the website demonstrates a strong security posture and business credibility, with a trustworthy domain registration consistent with the company's claims.

The Business Graduates Association (BGA) is an internationally recognized membership and quality assurance organization for business schools, operating as a division of the Association of MBAs (AMBA). The website presents a professional and comprehensive platform offering membership, validation, and accreditation services to business schools globally. It also hosts events and provides networking opportunities for business education professionals and students. The technical infrastructure leverages modern web technologies including React and Google Tag Manager, hosted on DigitalOcean with CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNS security and explicit security policies. Overall, the website reflects a credible and trustworthy organization with a strong market position in the education sector.

Vysoká škola Sting, o.p.s. is a private higher education institution based in the Czech Republic specializing in accounting, taxation, and financial management education. The website presents a professional and comprehensive digital presence with detailed program offerings, news, testimonials, and partner collaborations. The institution targets students and professionals seeking practical and career-oriented education in finance and economics. The site is built on Drupal 11, employs modern web technologies, and is mobile-optimized with good accessibility and SEO practices. Privacy and cookie policies are implemented with GDPR compliance, and the site uses Google Tag Manager for analytics with user consent mechanisms in place. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. Despite this, the website content and branding are consistent and trustworthy, supported by certifications and regional awards.

Integsoft s.r.o. is a specialized technology company focused on Java-based system integration, Big Data analytics, and secure single sign-on solutions. They offer custom software development, integration services using Mule ESB, and a proprietary product suite called Integration Eye® for monitoring and securing APIs. The company positions itself as a trusted partner with official alliances with MuleSoft and Red Hat, serving diverse sectors including banking, energy, and manufacturing. Their website reflects a mature digital presence with professional design and clear business messaging. Technically, the site uses modern web technologies and analytics tools, though some security best practices like security headers and explicit privacy policies are missing. The absence of WHOIS data reduces domain trust but does not negate the legitimacy suggested by the website content and partner relationships. Overall, the company demonstrates a solid business and technical foundation with room for improvement in security and compliance transparency.

Cannes Lérins TV et Radio operates as a local media outlet serving the Bassin Cannois region in France, providing live television and radio streaming, podcasts, and local news content. The website targets residents and visitors interested in regional media and cultural events. The business model focuses on content delivery through multiple channels including online streaming and social media engagement. The company appears to be a small-sized media entity, recently founded in 2024, with a consistent brand presence and active content updates.

Bastide Rouge is a regional center of excellence in the creative economy and audiovisual professions located in Cannes, France. The organization supports business creation, innovation projects, and employment by providing professional facilities such as production studios, post-production, meeting rooms, and event spaces. The website reflects a mature digital presence with a WordPress CMS, modern plugins, and integration of Google services for analytics and translation. The business model focuses on rental and service provision to professionals, startups, and creatives in the audiovisual sector. Bastide Rouge maintains a strong market position as a hub in Cannes, supported by partnerships and testimonials. Security posture is adequate with HTTPS and cookie consent, though improvements are recommended in DNS security and security headers. Privacy compliance is good with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-structured, serving a general audience interested in creative business services.

Palm déplacements is a regional public transportation service provider serving the Cannes Pays de Lérins area in France. The website offers comprehensive information on bus routes, schedules, traffic updates, bike rentals, car sharing, and other mobility services. It targets local residents and visitors seeking convenient transportation options. The business appears recently established or rebranded in 2024, with a medium-sized operational scope focused on sustainable and multimodal transport solutions. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation.

The website 'Info Tri Agglo Cannes Lérins' serves as a local government informational portal providing residents of the Cannes Lérins agglomeration with schedules and modalities for waste sorting and household waste collection. The site targets local residents and operates as a public service platform. Technically, it is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization, and employs Google Analytics for visitor tracking. The site demonstrates good content quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The domain uses privacy protection for WHOIS data, which is typical for such informational sites. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security practices.

Pay.com.au is a specialized Australian payments platform that enables businesses to make payments using credit cards where traditionally they could not, thereby earning rewards points and unlocking travel benefits. The company positions itself as a niche player in the finance sector, focusing on business payments and loyalty rewards, with a strong emphasis on travel-related redemption services. The website is professionally designed, mobile-optimized, and rich in content, targeting Australian businesses seeking to optimize their payment processes and rewards earnings. Technically, the site is built on WordPress and leverages a modern tech stack including various analytics and marketing tools, hosted likely on AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates high professionalism and trustworthiness, though privacy and cookie policies are not explicitly found, which is a compliance gap.

MEMOIO is a German-based company offering a secure B2B messaging platform designed for businesses to communicate easily and securely across devices. The website positions MEMOIO as a trusted, German-made solution for professional communication between customers, colleagues, and partners. The business appears to be small-sized, founded in 2014, with a focus on technology and secure communication services. Technically, the website uses modern web technologies including JavaScript and Electron for desktop app support, with a moderate performance profile and basic mobile optimization. Security posture is adequate but could be improved by hardening the Content-Security-Policy and adding additional security headers. Privacy compliance is partially addressed with a privacy policy present, but lacks cookie consent mechanisms. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but has room for improvement in security and privacy compliance.

SWI Group is a well-established Swiss institutional investment holding company specializing in alternative investments with over €10 billion assets under management. The company operates globally with a strong presence across 26 countries and manages diversified portfolios through its two main divisions: Stoneweg Real Assets and Icona Alternatives. The website reflects a professional and modern digital presence built on WordPress with advanced SEO and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. The domain registration is consistent with the business claims, showing a long history and no suspicious patterns. Overall, the website and business demonstrate high credibility and professionalism.

1618 Investment Funds is a Luxembourg-based financial services company founded in 1992 and promoted by CBH Compagnie Bancaire Helvétique SA. It offers a comprehensive range of actively managed investment funds targeting institutional and private clients globally. The company emphasizes transparency and economic research, providing regular market insights to its clients. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a moderate performance and good mobile experience. Security posture is adequate with HTTPS and reCAPTCHA integration, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong, featuring a comprehensive cookie policy and consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

1618 Investimentos is a Brazilian asset management company regulated by CVM and adherent to ANBIMA self-regulation codes, offering investment management, multi-family office services, and ESG commitments. The company operates under the Grupo CBH umbrella, targeting private and institutional clients with a holistic and entrepreneurial approach to wealth management. The website is built on WordPress with a modern tech stack including Yoast SEO and WPML for multilingual support. It features good design quality, mobile optimization, and clear navigation. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy page found. Contact information is clearly presented with phone and physical address details. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

Chef och Chefakademin is a well-established Swedish media and education company specializing in leadership development. Founded in 2003, it holds a strong market position as the largest leadership media provider in Sweden, offering leadership training, a leading leadership magazine, and digital tools to support leaders. The website reflects a professional and consistent brand image targeted at leaders and managers in Sweden and the Nordic region. Technically, the site is built on WordPress, leveraging modern technologies such as Google Tag Manager, Cookiebot for consent management, and Cloudflare DNS services. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is partially met with a cookie consent banner but lacks a clearly accessible privacy policy or terms of service in the analyzed content. Contact information is not explicitly provided on the analyzed page. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The Adventist News Network website serves as the official news channel for the Seventh-day Adventist Church, providing a wide range of religious news, video content, and updates globally. The site targets members of the church and interested audiences seeking authoritative religious news. It operates as a non-profit media outlet with a consistent and professional brand presence. Technically, the website is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. It integrates Google Tag Manager and TrustArc for analytics and consent management, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS, employs multiple security headers, and secures user input forms with consent checkboxes. However, it lacks explicit privacy and cookie policies, which are critical for full GDPR compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong content quality and technical implementation. Strategic improvements in privacy transparency and contact information would enhance trust and compliance.

The Seventh-day Adventist Locator website serves as an official platform to help users find Seventh-day Adventist churches and offices worldwide. It positions itself as a trusted locator service affiliated with the Adventist Church, providing a focused and straightforward user experience centered on location search functionality. The site leverages modern web technologies including Angular and Mapbox GL JS to deliver an interactive and responsive interface. Hosting and analytics are managed via Cloudflare, ensuring reliable performance and security at the infrastructure level. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and user trust. The absence of WHOIS registrant data suggests privacy protection, which is reasonable for this type of religious locator service. Overall, the site is functional, professional, and safe, but could improve transparency and compliance aspects.

The Slovenská biblická spoločnosť is a Slovak non-profit organization dedicated to spreading the Bible and related religious materials through multiple channels including print, online, audio, and visual media. With over 30 years of history, it holds a reputable position in the religious non-profit sector in Slovakia. The organization operates several related websites and an online bookshop, targeting a general audience interested in biblical content and religious education. Technically, the website is built on a modern WordPress platform using Elementor and other popular plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies are missing. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate non-profit entity.

Advent Orion is a Slovak-based small retail and publishing company specializing in books for children, youth, and spiritual growth. The website serves as an e-commerce platform built on WordPress and WooCommerce, offering a variety of books, calendars, and magazines. The company maintains a clear online presence with contact information, privacy and cookie policies, and social media integration, primarily Facebook. Technically, the site uses modern web technologies including Bootstrap and Google Tag Manager, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data aligns with the business claims, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

ADRA Slovensko is a Slovak non-profit humanitarian organization focused on providing aid and development projects both domestically and internationally. The website presents a professional and content-rich platform showcasing their key services such as humanitarian aid, volunteer programs, and fundraising initiatives. The organization is affiliated with ADRA International, enhancing its credibility and market position. Technically, the website is built on WordPress with modern tools like Elementor and WooCommerce, hosted likely by Websupport. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

Hope Channel Inc. operates a well-established Christian media platform focused on delivering Adventist and Bible-based television programming primarily to North American audiences. The organization functions as a non-profit entity, leveraging donations and online streaming to reach its target demographic. The website reflects a mature digital presence with a modern tech stack including Next.js and React, supported by Cloudflare DNS and CDN services. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements essential security headers. The domain registration data is consistent with the organization's claims, showing a long-standing presence since 2003 without privacy protection, which aligns with the transparency expected of a non-profit. However, the site lacks a publicly available security policy and incident response contact, which could be improved to enhance trust and preparedness. Overall, the website demonstrates a solid security posture, good privacy compliance with cookie consent and GDPR awareness, and a credible business profile. The use of reputable third-party services for analytics and donation processing further supports operational integrity. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure process to strengthen security governance.

Generali G24 is an established Slovenian online insurance platform offering a wide range of insurance products including vehicle, health, accident, travel, and pet insurance. The website is part of the Generali Slovenia group, positioning itself as a modern and reliable partner for customers seeking fast and easy insurance solutions online. The business model focuses on direct-to-consumer sales with an emphasis on digital convenience and customer trust. The site is well-branded and consistent with the parent company's identity. Technically, the website uses a mature technology stack including Liferay CMS, jQuery, Google Tag Manager, and analytics tools. Hosting is supported by Google Cloud DNS infrastructure, ensuring reliable performance and availability. The site is mobile optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could include enhancing security headers, publishing security policies, and adding vulnerability disclosure channels to further strengthen trust and compliance.

Generali ZAME is a loyalty and benefits program operated by GENERALI zavarovalnica d.d., a major insurance provider in Slovenia and part of the Generali Group. The website offers a comprehensive platform promoting health, wellness, and lifestyle benefits alongside insurance-related discounts. The program targets Slovenian residents interested in insurance and healthy living, providing a mobile app and various partner discounts. Technically, the site is built on Liferay CMS with modern JavaScript libraries and frameworks, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, cookie consent, and secure authentication via the REKONO system, though some security headers could be explicitly enhanced. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

Creative Opportunities Unlimited is a small non-profit organization dedicated to supporting participants of Odyssey of the Mind through scholarships and association support. Their website, built on the Wix platform, presents a professional and consistent brand image focused on educational and creative development for youth. The technical infrastructure is standard for Wix-hosted sites, with modern JavaScript polyfills and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable or privacy-protected, which is common for small non-profits but slightly reduces transparency. Overall, the site is trustworthy and safe, with room for improvement in privacy compliance and security best practices.

ProfiSMS is a Czech-based telecommunications company specializing in SMS marketing and customer communication platforms. With a strong market presence and a claim of 18 years in operation, it offers a comprehensive suite of messaging services including bulk SMS, 2-way SMS, SMS Voice, and Viber messaging. The company targets businesses and developers seeking efficient and reliable communication channels, supported by extensive API integrations and professional tools. The website reflects a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, the site employs modern technologies such as Google Tag Manager, reCAPTCHA, and Chatwoot for live chat support, indicating a well-maintained infrastructure. Security practices are evident in the use of HTTPS, end-to-end encryption claims, and a detailed cookie consent mechanism, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data is a minor concern but does not significantly detract from the overall legitimacy given the professional presentation and business references. Strategic recommendations include enhancing transparency around security policies and improving HTTP security headers to further strengthen trust and compliance.

506.io is a UK-based small business specializing in developing Shopify apps that enhance eCommerce store performance by increasing average order value, automating discounts, and managing fulfillment. The company operates within the Shopify ecosystem as a certified partner, serving a broad range of retailers including notable brands. Their key offerings include EasyGift, GetSale, and EasyScan apps, which provide upselling, promotion automation, and inventory management capabilities respectively. The website is professionally designed using Webflow CMS and hosted on DigitalOcean, integrating modern analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, the site is trustworthy and well-positioned in the eCommerce app market but would benefit from enhanced privacy and security disclosures.

RIDGID is a well-established manufacturer of rugged, professional-grade tools primarily serving tradespeople such as plumbers and contractors. The website reflects a strong market position supported by its parent company, Emerson Electric Co., and offers a comprehensive product catalog including diagnostics, pressing, drain cleaning, and pipe fabrication tools. The site is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting a broad European audience with multiple language and country versions. Technically, the site employs modern web technologies including AngularJS, jQuery, and various analytics and marketing tools, hosted likely behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, indicating good privacy compliance. Overall, the website demonstrates high business credibility and trustworthiness, with no signs of malicious or suspicious activity.

The analyzed domain identitypxl.app is currently a parked domain hosted by GoDaddy.com LLC, a well-known domain registrar and parking service provider. The website content is minimal, serving primarily as a placeholder with advertising and a Trustpilot widget referencing GoDaddy. There is no active business or service presented on the site, and no contact or company-specific information is available. The domain appears to be available for purchase through GoDaddy's domain marketplace. From a technical perspective, the site uses standard web technologies including JavaScript, CSS, and SVG graphics, with React inferred from the HTML structure. The hosting and platform are provided by GoDaddy, and the page loads quickly with basic mobile optimization. However, there is no CMS detected, and SEO optimization is poor due to lack of meaningful content and metadata. Security posture is minimal; no security headers were detected, and no HTTPS configuration details were available from the provided data. The site includes external scripts for advertising and review widgets but does not collect user data via forms. Privacy and cookie policies are present but generic, referencing GoDaddy's main privacy policy. No incident response or security policies specific to this domain are found. Overall, the domain is low risk but also low value in its current state. It is suitable only as a parked domain awaiting potential sale. Strategic recommendations include implementing basic security headers, enabling HTTPS, and providing clear privacy and terms policies if the domain is developed into an active business site.

Akeron is a technology company specializing in digital transformation and flexible software solutions aimed at improving business efficiency and decision-making. The company positions itself as an innovative provider in the technology sector, targeting businesses seeking to modernize their operations through software. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress using Elementor, with integrations for analytics and marketing tools such as Google Tag Manager, HubSpot, and Cookiebot for consent management. Security posture is solid with HTTPS enforced and bot detection mechanisms in place, though some security headers and explicit policies are missing. The absence of WHOIS data reduces trust slightly, but the overall digital maturity and business presentation indicate a legitimate and professional operation.

Strategy.com is a specialized financial analytics platform focusing on providing real-time market data and metrics related to MicroStrategy (MSTR) stock and Bitcoin. The website offers detailed financial indicators such as price, returns, market capitalization, trading volume, and Bitcoin holdings, targeting investors and financial analysts interested in these assets. The platform also extends its offerings to merchandising and software products, indicating a diversified business model within the finance and technology sectors. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience for its target audience. Technically, the website leverages modern web technologies including React, Next.js, and Material-UI, with content managed via Contentstack CMS. It integrates marketing and analytics tools such as Google Tag Manager and Marketo, and employs OneTrust for cookie consent management, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes important security headers, contributing to a strong security posture. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR compliance indicators. The absence of direct contact emails or phone numbers slightly reduces business credibility. Overall, the website presents a trustworthy and professional front for its niche financial analytics services. The main risk factor is the absence of WHOIS registration data, which reduces transparency about domain ownership and age. Strategic recommendations include enhancing security transparency, adding incident response information, and improving direct contact availability to strengthen trust and compliance further.

CoreFiling is a specialized technology company providing intelligent software and services focused on digital data collection and XBRL reporting solutions. Their flagship True North Data Platform addresses challenges faced by filers, data collectors, auditors, and software vendors, positioning them as a niche leader in the XBRL ecosystem. The website reflects a mature digital presence with professional design, structured data, and clear contact information, supporting their market credibility. Technically, the website is built on WordPress with the Divi theme, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit security policies. The absence of publicly available WHOIS data introduces some uncertainty regarding domain registration transparency, though the overall professional presentation and consistent branding mitigate concerns. No signs of blocking or WAF interference were detected, allowing full content analysis. Overall, CoreFiling demonstrates a strong business and technical foundation with room for improvement in privacy disclosures and security policy transparency to enhance trust and compliance.

Viessmann Generations Group GmbH & Co. KG operates as an impact-driven investment ecosystem focused on sustainable and long-term investments across energy, environmental, and social sectors. The company emphasizes co-creating living spheres for future generations by investing in majority, minority, generational, and early-stage innovation ventures. Their portfolio includes companies specializing in grid infrastructure, district heating and cooling, clean cold solutions, renewable energy, and health-related sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that aligns with their business objectives. Technically, the website is built on Webflow with modern JavaScript libraries such as GSAP and Lenis for smooth animations and scrolling. It integrates Google Tag Manager and Usercentrics CMP for analytics and privacy compliance, respectively. The site is well-optimized for performance and mobile responsiveness, with good accessibility and SEO practices observed. From a security perspective, the site enforces HTTPS and uses privacy-compliant cookie consent mechanisms. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited due to TLD restrictions and privacy protection but does not raise legitimacy concerns. Overall, the security posture is solid but could be enhanced by publishing explicit security policies and incident response contacts. The overall risk assessment is low, with the company demonstrating strong business credibility, compliance with privacy regulations, and a professional online presence. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.

Wetpassions.com is an adult entertainment website specializing in free streaming and downloading of pornographic videos in HD and 4K quality. The site offers a wide range of adult content categories targeting an adults-only audience. Technically, the website is built on the DataLife Engine CMS platform, utilizing jQuery, Bootstrap, and FontAwesome for frontend design. The site is hosted behind Cloudflare DNS but lacks visible HTTPS enforcement and security headers, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits compliance and trustworthiness. Overall, the site serves a niche adult content market with basic technical implementation but requires significant improvements in security and privacy compliance.

OnlineHDTube.com is an adult entertainment video streaming website offering free pornographic videos with an option to upgrade to premium membership. The site targets adults seeking explicit content and features a wide range of videos including categories, pornstars, and channels. Technically, the site is built on the DataLife Engine CMS, uses common web technologies such as jQuery, Bootstrap, and FontAwesome, and is supported by Cloudflare DNS services. While the site is functional and mobile-optimized, it lacks visible privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate with no DNSSEC and missing security headers, though HTTPS usage is implied but not explicitly confirmed in the provided data. The domain is registered with NameCheap since 2021, consistent with the business age and model.

Woodmancx.com is an adult entertainment website specializing in original and exclusive content by Pierre Woodman. It offers a wide range of adult videos across various categories such as fetish, amateur, anal, and teens, targeting an adult-only audience. The site uses the DataLife Engine CMS platform with frontend technologies including jQuery and Bootstrap, providing a moderately optimized and mobile-friendly user experience. However, the site lacks critical privacy and cookie policies, which poses compliance risks, especially under GDPR. Security posture is basic, with no evident security headers or advanced protections, and contact information is limited to a feedback form without direct emails or phone numbers. Overall, the site functions well for its niche but requires improvements in privacy compliance and security to enhance trust and regulatory adherence.

The International Committee of Sports for the Deaf (ICSD) operates the Deaflympics.com website, serving as the official platform for deaf athletes competing internationally. The site provides comprehensive information about Deaflympics games, athletes, sports, countries, and news updates. It holds a recognized position in the international sports community, affiliated with the International Olympic Committee, and targets deaf athletes and sports enthusiasts globally. The business model is non-profit, focusing on event coordination and information dissemination. Technically, the website uses a modern tech stack including jQuery 3.6.0 and Bootstrap 5, hosted likely by 1&1 IONOS. The site is moderately performant, mobile-optimized, and has a consistent branding approach. However, accessibility and SEO optimizations are basic, and no CMS or advanced platforms are detected. From a security perspective, the site lacks DNSSEC and visible security headers, and no cookie consent mechanism is present, which impacts privacy compliance. The domain is well-established with consistent WHOIS data, indicating legitimacy. No WAF or blocking mechanisms are detected, and no critical vulnerabilities are visible in the provided content. Overall, the website is professional and trustworthy but would benefit from enhanced security headers, DNSSEC implementation, and privacy compliance improvements to strengthen its security posture and user trust.

The website www.unicoanalytics.cz appears to be a Wix-hosted site with minimal accessible content. The absence of WHOIS data and registrant information raises concerns about domain legitimacy and transparency. The site lacks visible privacy policies, cookie consent mechanisms, contact information, and business descriptions, which limits its credibility and trustworthiness. Technically, the site uses standard Wix scripts and polyfills but does not demonstrate advanced SEO or accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration. Overall, the site presents a low maturity level in digital presence and security readiness.

Královská věnná města is a cultural and historical regional initiative representing nine Czech towns historically gifted by Czech kings to their queens. The website serves as an informational portal promoting tourism, local events, and cultural heritage in these towns. It targets families, schools, seniors, and active visitors interested in history and regional tourism. The business model focuses on regional promotion and cultural engagement rather than commercial sales. Technically, the site is built on OctoberCMS, uses modern web standards, and integrates Mapy.cz for mapping. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced HTTP security headers and incident response disclosures. WHOIS data is missing, which raises some legitimacy concerns, but the professional content and official social media presence support trustworthiness. Overall, the site is a well-maintained regional cultural portal with moderate technical maturity and good privacy compliance.

The website www.krkonosska70.cz currently serves as a placeholder page announcing the 71st edition of an event scheduled for March 14, 2026. It provides minimal content, primarily a coming soon message with a background video and a logo. There is no detailed business information, contact details, or policies presented. The site is built using Webflow CMS and includes jQuery 3.5.1 as a JavaScript library. Hosting is via Webflow's CDN, ensuring moderate performance and good mobile optimization. Security posture is weak due to lack of security headers and absence of privacy or cookie policies. No WHOIS registration data is available, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is in an early development or maintenance phase with limited digital maturity and business credibility.

Ollies.cz is a Czech bakery and bistro specializing in cakes, desserts, pastries, and macarons. Established in 2008, it operates a retail e-commerce website built on Joomla CMS with VirtueMart, targeting local customers seeking confectionery products. The website demonstrates a good level of digital maturity with modern web technologies, responsive design, and integration of multiple marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. Cookie consent is implemented via Cookiebot, providing users with granular control over cookie categories, indicating a basic level of privacy compliance. However, the absence of a visible privacy policy and terms of service on the main page limits full compliance transparency. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response contacts are not clearly published. Overall, the website is professional and trustworthy for its business domain but could improve in privacy and security disclosures.

SECTRON s.r.o. is a well-established Czech company specializing in wireless technologies, manufacturing antennas, cable adapters, and distributing wireless modules, modems, and routers. With 29 years of experience and a presence in 58 countries, the company serves industrial and IoT markets, including smart city, agriculture, energy, and electromobility sectors. Their business model combines manufacturing with B2B distribution and an e-commerce platform. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and consent-based analytics, ensuring a good digital maturity level. Security posture is strong with HTTPS, cookie consent, and CAPTCHA-protected forms, though some security headers and explicit policies could be improved. Overall, the website is professional, GDPR compliant, and trustworthy, supporting the company's credibility and market position.

Aspit AS is a Norwegian small-sized company specializing in healthcare journal systems, primarily serving musculoskeletal therapists, psychologists, and psychiatrists in Norway. Their key offerings include the Physica and Psykbase journal systems, supported by dedicated customer portals. The company emphasizes local development in Seljord and green, secure data hosting within Norway. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, hosted on a green-certified data center. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the website and WHOIS data align well, indicating a trustworthy and legitimate business presence.

YunoHost is an open-source, volunteer-driven non-profit project founded in 2012 that provides an easy-to-use system for self-hosting digital services on personal or organizational servers. It targets individuals, small organizations, and associations seeking to control their own digital infrastructure with minimal technical knowledge. The platform offers a variety of applications including mail hosting, cloud storage, social networks, and more, emphasizing privacy, decentralization, and digital sovereignty. The website reflects a consistent brand and community-oriented approach with multilingual support and active donation campaigns. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, using fonts like Source Sans 3 and icon sets such as Font Awesome. It is hosted by OVH sas, a reputable provider, and the domain is well-established since 2012. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No CMS or major frameworks are explicitly detected. The site lacks advanced security headers and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site uses HTTPS and has domain status protections against unauthorized transfers or deletions. However, it lacks explicit security headers and cookie consent mechanisms, and no vulnerability disclosure or incident response contacts are published. No sensitive data exposure or vulnerabilities are evident in the content. The overall security posture is moderate but could be enhanced by adopting best practices such as enabling DNSSEC, adding security headers, and publishing clear privacy and security policies. Overall, YunoHost presents a trustworthy and professional presence consistent with its open-source community-driven mission. The site is safe, free of adult or questionable content, and provides clear information about its services and community. Strategic recommendations include improving privacy compliance, enhancing security configurations, and publishing vulnerability disclosure information to strengthen trust and security culture.

The website 'De-google-ify Internet' is operated by Framasoft, a French non-profit organization focused on providing free software alternatives to centralized web giants. The platform offers a wide range of ethical, privacy-respecting services such as collaborative editing, code hosting, cloud storage, videoconferencing, and more. It targets internet users who seek to regain control over their digital lives by using decentralized and open-source tools. Technically, the website is built with modern frameworks like Vue.js and Bootstrap 4, hosted by OVH, and uses HTTPS for secure communication. However, it lacks some important privacy and security disclosures such as privacy and cookie policies, security headers, and incident response information. The WHOIS data indicates a legitimate and stable domain registration with no privacy protection, consistent with the organization's profile. Overall, the website demonstrates good content quality and business credibility but could improve its privacy compliance and security posture.

Framablog is a well-established French non-profit blog operated by Framasoft, focusing on free software, digital rights, and open culture. The website serves a French-speaking audience interested in digital emancipation and critiques of major tech companies. It offers rich, regularly updated content with a professional design and clear navigation. The blog is part of a broader ecosystem of Framasoft services and community initiatives. Technically, the site runs on WordPress with modern plugins and themes, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good but could be improved by adding explicit cookie consent mechanisms. No direct contact emails or phone numbers are published, but contact forms and dedicated contact pages exist. Social media presence is strong across decentralized and mainstream platforms. Overall, the site is trustworthy, professional, and aligned with its non-profit mission.

Event Schedule is a specialized SaaS platform focused on enabling talent, vendors, venues, and event curators to create, promote, and share custom event calendars. The platform integrates features such as ticket sales, QR check-ins, AI-powered tools, translations, and team collaboration, positioning itself as a niche player in the event management technology space. The website demonstrates a professional and consistent brand presence with clear messaging targeting event organizers and participants. Technically, the site is built on WordPress with Elementor and related plugins, leveraging modern web technologies and SEO best practices. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trust. Social media presence and privacy policies are well established, but incident response and security policies are not publicly disclosed. Overall, the site is functional and professional but would benefit from enhanced security practices and domain registration transparency.

Invoice Ninja operates as a SaaS platform specializing in invoicing and billing solutions primarily targeting freelancers and small businesses. The website serves as a web application built with Flutter Web technology, integrating modern authentication methods such as Google, Apple, and Microsoft OAuth. The platform offers key services including online invoicing, payment processing, and PDF invoice generation. The market position is that of a niche invoicing software provider with a small business scale and moderate brand consistency. From a technical perspective, the site leverages a modern tech stack with Flutter, OAuth libraries, and client-side PDF rendering. Hosting appears to be via Cloudflare, with analytics implemented through Google Tag Manager and Cloudflare Insights. Performance and mobile optimization are moderate to good, though SEO and accessibility features are basic. The site uses service workers for offline capabilities and update management. Security posture shows some strengths such as HTTPS usage (inferred), OAuth authentication, and service worker management. However, no security headers are detected, and no visible privacy or cookie policies are present, indicating gaps in compliance and security best practices. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and moderately secure but lacks comprehensive privacy compliance and visible business contact details. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance. The risk level is moderate with no critical vulnerabilities detected in the static content analyzed.

Česká hiporehabilitační společnost, z.s. operates a specialized website focused on hiporehabilitation, providing educational resources, certification information, and community engagement for professionals and enthusiasts in the field. The organization positions itself as a key non-profit entity in the Czech Republic dedicated to therapeutic and social applications of horse-assisted therapy. The website serves as an information hub with links to partner sites offering courses and events. Technically, the site is built on WordPress with a custom theme and standard web technologies, hosted on Wedos servers. It offers a moderate performance and good mobile optimization but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and cookie consent implemented, though privacy policy and incident response information are missing. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve compliance and security transparency.

Česká hiporehabilitační společnost, z.s. is a Czech non-profit organization specializing in education and training in the field of hiporehabilitation. The website serves as a comprehensive portal for courses, seminars, workshops, and study materials related to hippotherapy and related disciplines. It targets professionals and individuals interested in this healthcare niche, providing up-to-date information and educational resources. The organization appears well-established with a domain age consistent with its founding year of 2015. Technically, the website is built on WordPress using the Mioweb platform, incorporating standard web technologies such as jQuery and Google Fonts. The site is moderately performant, mobile-optimized, and offers good navigation and content relevance. However, it lacks advanced accessibility features and some SEO enhancements could be improved. Hosting is provided by OVH sas, a reputable registrar and hosting provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. The cookie consent mechanism is implemented, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and compliance. Overall, the website is credible and trustworthy for its intended audience but would benefit from enhanced security measures, privacy documentation, and broader contact information to improve compliance and user trust.

HETI Federation is an international organization dedicated to promoting horses in education and therapy. The website serves as a platform to support equine-assisted activities and therapies, targeting individuals and organizations interested in this niche field. The business model appears to be non-profit or educational, with a focus on federation services and community building. Technically, the website is built on WordPress using the Divi theme and several plugins for event management, payments, and membership, indicating a moderate level of digital maturity. The site is hosted with DNS managed via Cloudflare and uses HTTPS, ensuring basic security. However, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose compliance risks. Overall, the website is functional and moderately professional but requires enhancements in privacy and security to improve trust and compliance.