Medium-risk security reports

TEPfactor.cz is a Czech adventure park offering team adventures, school trips, and family outings. The website is professionally designed with good SEO and mobile optimization, targeting families, schools, and corporate clients. The business is operated by ORSYS s.r.o., a Czech company, and positions itself as the largest adventure park in the Czech Republic. The site integrates multiple marketing and tracking technologies including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Exponea, indicating a mature digital marketing infrastructure. However, the absence of WHOIS data and explicit privacy and terms of service documents presents some trust and compliance concerns. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and formal security policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

spddm.org is a recently established WordPress-based blog focused on automobile news, vehicle launches, and reviews. The site targets automobile enthusiasts and general readers interested in transportation news. It uses a modern WordPress theme (GeneratePress) and SEO plugin (Rank Math) to optimize content visibility. The technical infrastructure includes Google Analytics for tracking and LaraPush for push notifications, hosted on GoDaddy. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Business credibility is moderate given the new domain and limited contact information. Overall, the site is functional and content-rich but could improve security and privacy practices.

CORA computer, s.r.o. is a Czech IT company established in 1994, specializing in comprehensive IT services including hardware and software supply, IT infrastructure implementation, outsourcing, and web development. The company primarily serves industrial sectors such as manufacturing, with clients in the Czech Republic and neighboring countries. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses modern web technologies like jQuery, Bootstrap, Google reCAPTCHA, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with secure form handling via reCAPTCHA but lacks explicit security headers and privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site is well-structured, mobile-optimized, and safe for general audiences.

The website 'Mon Entreprise et Harmonie' appears to be a French business-oriented platform, likely related to insurance or employee services, as suggested by the domain and iconography. The site uses a modern Angular framework with Material Design components, indicating a contemporary technical infrastructure. However, the content provided is minimal and lacks detailed business descriptions, contact information, or privacy and security policies. The security posture is basic, with no visible security headers or incident response information, and privacy compliance is low due to missing policies. Overall, the site is accessible and legitimate based on WHOIS data, but it would benefit from enhanced transparency and security measures.

Harmonie & Moi is a client portal website for Harmonie Mutuelle, a French mutual insurance company specializing in healthcare insurance services. The website provides access to client accounts and online services, targeting existing customers of Harmonie Mutuelle. The domain is well-established since 2018 and is actively maintained with consistent WHOIS registration data. The website uses modern JavaScript frameworks, likely Angular, and employs Dynatrace for performance monitoring. However, the landing page content is minimal, possibly due to an error or loading state, and lacks visible privacy, cookie, or terms of service policies. No contact information or security policies are presented, which limits transparency and user trust. Security posture is moderate with HTTPS enforced and domain transfer protections, but missing security headers and incident response details reduce overall security maturity. The website is safe for general audiences with no adult or explicit content detected.

Fio banka is a modern Czech financial institution offering free bank accounts, online investment services, and loan products including mortgages. The website reflects a well-established banking entity with a clear focus on retail customers and investors within the Czech Republic. Their business model combines traditional banking with digital investment brokerage, supported by a network of branches and online platforms. The site is professionally designed, with clear navigation and relevant content tailored to their audience. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap components, alongside Google Tag Manager for analytics and marketing. The site is HTTPS secured and includes a comprehensive cookie consent mechanism, indicating a mature approach to privacy compliance. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks visible advanced security headers and a public vulnerability disclosure channel. No WHOIS data was available, which slightly reduces domain trustworthiness, but the website content and external links support legitimacy. Overall, the security posture is solid but could be improved with additional headers and incident response transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and consider a security.txt file. The site is safe for general audiences and demonstrates strong business credibility and privacy compliance.

Žlutý kvítek is a small-scale, non-profit community initiative based in the Czech Republic that promotes ethical values such as honesty, kindness, and self-discipline inspired by Jaroslav Foglar. The website serves as an informational platform encouraging visitors to join the movement by adhering to seven ethical rules. The site is built on WordPress with a moderate technical infrastructure including jQuery and standard plugins. It features a cookie consent mechanism but lacks comprehensive privacy and security policies. No WHOIS data is available, which limits domain trust assessment. The website is accessible without WAF or security challenges and contains no adult or questionable content, making it safe for general audiences.

Capital Brief Pty Ltd operates a professional Australian media website focused on business and political news for the new economy. The site targets founders, executives, investors, and policymakers in Australia, providing subscription-based newsletters and digital content. Owned by Scire, an independent media company, Capital Brief demonstrates a clear market niche with a strong focus on Australian economic and political developments. The website is well-branded, professionally designed, and regularly updated with relevant content. Technically, it employs modern web technologies including Stripe for payments, Sentry for error monitoring, and Alpine.js for frontend interactivity, hosted likely behind Cloudflare infrastructure. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are comprehensive and GDPR compliant. However, WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from improved domain registration visibility and enhanced security disclosures.

Edit.video is a free online video editor demo website powered by Pintura Labs, a technology company specializing in image and video editing tools. The site offers a privacy-focused, no-ads, no-tracking, no-account-required video editing experience directly in the browser. It targets general users seeking quick and private video editing without watermarks or intrusive elements. The business model is supported indirectly by companies purchasing Pintura licenses, enabling this demo to remain free and open. Technically, the website is well implemented using modern web technologies including JavaScript, HTML5, CSS3, and the Pintura video editor framework. It supports mobile and desktop platforms with good performance and basic accessibility features. The site uses HTTPS exclusively and employs privacy-first analytics, avoiding cookies and tracking scripts. However, explicit security headers and formal security policies are not published. From a security perspective, the site demonstrates strong privacy practices by not collecting personal data or requiring accounts. The absence of security headers and incident response information is a minor gap. No vulnerabilities or suspicious elements were detected. The domain WHOIS data is privacy protected, which is typical for small tech demos, and no suspicious registration patterns were found. Overall, the website is trustworthy, professionally designed, and well suited for its purpose as a demo tool. Strategic recommendations include adding security headers, publishing a security policy and incident response contacts, and clarifying cookie usage to further enhance trust and compliance.

Edit.photo is a free online photo editing web application operated by Duckyard BV, a Netherlands-based company founded in 2017. The website offers a fast, privacy-focused photo editor with no ads, popups, cookies, or account requirements, targeting general users seeking simple image manipulation in-browser. The service is powered by Pintura Labs, a commercial product provider, which finances the free offering indirectly. The website is well-structured with clear navigation, privacy, and terms pages, and uses modern web technologies including service workers and Cloudflare DNS for hosting and performance optimization. Security posture is strong with HTTPS enforced, no tracking cookies, and minimal data collection, although some security headers could be improved. WHOIS data is consistent with the business claims, showing a legitimate and transparent registration. Overall, the site demonstrates a good balance of usability, privacy, and security for its niche.

CropGuide B.V. operates a specialized SaaS platform providing image cropping and editing tools that integrate seamlessly with popular NoCode platforms and JavaScript libraries. The service targets website owners and developers seeking to improve user-uploaded photo quality by enabling client-side cropping, resizing, and orientation correction. The website is professionally designed, mobile-optimized, and offers clear navigation with demos and detailed documentation, positioning CropGuide as a niche but trusted player in the image editing technology market. Technically, the website employs modern web technologies including JavaScript, CSS3, and HTML5, with integrations for Crisp chat and Simple Analytics for user engagement and minimal tracking. The platform emphasizes privacy by performing all image processing client-side, ensuring no image data is transmitted to CropGuide servers. Performance is fast, and the site is accessible across modern browsers and devices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response plan. No vulnerability disclosure or security.txt file is present, and cookie consent mechanisms are absent, which may impact compliance. The WHOIS data is unavailable due to TLD restrictions, but the website's professional presentation and trust signals mitigate concerns about legitimacy. Overall, CropGuide demonstrates a strong business and technical foundation with room for improvement in formal security policies and privacy compliance mechanisms. Strategic enhancements in these areas would further strengthen trust and regulatory adherence.

The website at cofidisretail.es is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This indicates that access is restricted or the site is misconfigured, preventing any meaningful content or business information from being retrieved. The lack of accessible content severely limits the ability to assess the company's market position, services, or target audience. The WHOIS data for the domain is also unavailable due to registrar-imposed query restrictions, further complicating legitimacy and ownership verification. From a technical perspective, the site shows no detectable technologies, scripts, or frameworks, and no security headers or SSL details are available. The absence of privacy, cookie, or terms of service policies suggests the site is either offline or under maintenance. Security posture is weak due to the lack of HTTPS and security best practices, and the site is effectively blocked from analysis by access restrictions. Overall, the risk assessment is elevated due to the inability to verify ownership, lack of content, and absence of security controls. This situation warrants caution for users attempting to interact with the domain, as it may be inactive, under administrative control, or intentionally restricted. Strategic recommendations include resolving access issues, publishing clear business and privacy information, and implementing robust security headers and HTTPS to improve trust and compliance.

The website filmcommission.cz is currently non-operational, displaying a critical internal server error caused by insufficient disk space on the hosting server. The domain is long-established since 2003 and hosted on a provider inferred from the nameservers. The site uses modern technologies including .NET 8 and Umbraco CMS, but the current technical failure prevents access to any business or service information. No privacy, cookie, or terms of service policies are present, nor any contact or social media information. The exposed detailed error stack trace represents a security risk by revealing internal application details. Overall, the site’s digital maturity is low due to the outage and lack of accessible content.

Superior Bikes, operated by Bike Fun International, is a well-established premium bicycle brand specializing in high-performance mountain, gravel, and electric bikes. With over 30 years of history rooted in Czech design and development, the company targets cycling enthusiasts and professional athletes seeking quality and innovation. The website serves as a product showcase and information portal, supporting a dealer-based sales model. Technically, the site leverages modern frameworks like Next.js and integrates advanced features such as 360-degree product views and Google Maps, delivering a fast, mobile-optimized user experience. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers and explicit policies could be enhanced. Privacy compliance is addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional, trustworthy brand with strong market positioning in the transportation sector.

AŽD Praha s.r.o. is a leading Czech company specializing in the manufacturing and supply of security and control systems for transportation, focusing primarily on railway and road transport sectors. The company offers a broad range of products and services including telecommunications, automation technologies, system integration, and training. Their market position is strong within the Czech Republic and they maintain a professional online presence with comprehensive information about their offerings and corporate policies. Technically, the website employs modern web technologies such as Vue.js for chatbot functionality, Google reCAPTCHA for form security, and LinkedIn Insight for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional content and compliance indicators. Overall, the website reflects a well-established business with a focus on transportation technology and security solutions.

KilpiSport.com is a medium-sized retail and e-commerce business specializing in outdoor clothing, footwear, and accessories. The company operates both online and through nine physical stores in the Czech Republic, targeting outdoor enthusiasts and lifestyle customers. Their product range includes gear for hiking, running, cycling, and casual wear, emphasizing quality and performance materials. The website is professionally designed with clear navigation and a consistent brand presence, supported by a loyalty program and informative blog content. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and CDN hosting to deliver a responsive and moderately performant user experience. Security posture is good with HTTPS enforced and standard tracking scripts, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. However, the domain WHOIS data is missing, which slightly reduces trustworthiness but does not detract from the overall legitimacy of the business.

Cyklotury.cz is a Czech Republic based small-scale content portal focused on cycling tours, equipment reviews, and travel tips for cycling enthusiasts of all ages. The website offers a variety of articles and blog posts related to cycling tourism primarily in the Czech Republic and neighboring countries. It operates a content-driven business model monetized through advertising and affiliate partnerships, with a consistent brand presence and active social media engagement on Facebook, YouTube, and Instagram. Technically, the site is built on Drupal 7 CMS with a technology stack including jQuery, Google Fonts, Google Analytics, and Facebook SDK. The site is mobile optimized with moderate performance and basic accessibility features. SEO practices are reasonably implemented with proper meta tags and structured content. However, the use of an outdated CMS version poses potential security risks. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is unavailable, which reduces trustworthiness and raises questions about domain registration legitimacy. Overall, Cyklotury.cz presents a good quality content experience for its niche audience but requires improvements in privacy compliance, security hardening, and domain legitimacy verification to enhance trust and reduce risk.

To-das.cz is a Czech educational service specializing in preparatory courses and simulated entrance exams for students in 5th, 7th, and 9th grades. The website offers comprehensive content including course descriptions, schedules, personalized training applications, and extensive testimonials. The business is well-positioned in the Czech education market with strong trust signals such as high Google review ratings, notarized statistics, and media coverage. Technically, the site is built on WordPress and uses a modern tech stack with multiple analytics and marketing tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be improved. Privacy compliance is basic but includes cookie consent and a privacy policy. WHOIS data is unavailable, which slightly impacts domain trust assessment, but overall the site appears legitimate and professional.

PeckaDesign is a well-established Czech company specializing in custom e-commerce solutions for large market players, boasting 25 years of experience. Their services encompass bespoke e-shop development, omnichannel strategies, UX research, frontend coding, mobile applications, and consulting. The company targets leading e-commerce businesses in the Czech and Slovak markets, positioning itself as a trusted partner with a strong portfolio of references and awards. Technically, the website employs modern JavaScript technologies, including New Relic for performance monitoring and Google Tag Manager for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and professionally designed, providing a positive user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published privacy or terms policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding are professional and trustworthy. Overall, the site demonstrates solid business credibility and technical implementation but would benefit from enhanced security and compliance documentation.

The German Brand Award website represents a well-established branding award platform operated by the Rat für Formgebung – German Design Council. It targets marketing professionals and companies seeking recognition for brand excellence. The site offers comprehensive information about the award, jury, events, and participation benefits, positioning itself as a reputable and professional entity in the branding and marketing sector. The business model revolves around organizing award competitions, hosting award shows, and facilitating networking events to promote brand success. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as Swiper.js and integrating analytics and marketing tools including Google Tag Manager, Google Analytics, Hotjar, and Criteo. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Hosting appears to be supported by Cloudflare as a CDN, enhancing performance and security. From a security perspective, the website enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no dedicated security policy or incident response contact information is provided. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces the overall trustworthiness. Overall, the website demonstrates a strong digital presence and business credibility, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing explicit security headers, publishing a security policy, and verifying domain registration details to enhance trust and compliance.

German Web Awards is a reputable annual award event recognizing the best web agencies in Germany, focusing on design, know-how, service, and customer satisfaction. The awards have been running for six years and are organized by Herzog & Adelmann Gruppe, a known entity in the German digital agency space. The website is professionally designed, mobile-optimized, and provides clear information about the awards, participation, winners, and evaluation criteria. It targets German web agencies and digital service providers aiming to gain recognition and market differentiation. Technically, the site uses modern web technologies including Webflow CMS, GSAP animations, and hosts multimedia content on Amazon S3. The domain is registered with GoDaddy and shows no privacy protection, aligning with the business's transparency. Security posture is good with HTTPS and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy, professional, and well-maintained digital presence.

The German Design Award website represents a prestigious international design award managed by the Rat für Formgebung – German Design Council. The site showcases award categories, jury members, news, and event information, targeting design professionals globally. The business model revolves around promoting design excellence through competitions, networking, and visibility for winners. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Hotjar with GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. WHOIS data is missing or privacy protected, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand and organizational backing. Overall, the site is trustworthy, compliant, and professionally maintained.

KifDom is a French niche marketplace specializing in the acquisition and resale of expired .fr domain names, targeting SEO professionals and domain investors. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive domain listings, auctions, and immediate purchase options. The business is operated by Ranxplorer, a company accredited by AFNIC since 2014, indicating a stable market presence. Technically, the site uses modern frontend technologies including Bootstrap, Tailwind CSS, and Google Tag Manager, with HTTPS enforced for secure communications. Security measures include CSRF protection and session management, though some standard security headers are not explicitly detected. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in French, consistent with GDPR requirements. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. WHOIS data for the domain is unavailable or shows no match, which raises minor concerns about domain registration transparency but does not detract significantly from the site's legitimacy. Overall, KifDom presents a trustworthy and functional platform for expired domain transactions in the French market.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that appears when a webpage fails to load or is inaccessible. This page includes the offline dinosaur game and related scripts but contains no actual website content, business information, or external links. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security policies are available. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game implementation. Security posture cannot be fully assessed due to the nature of the content, but no obvious vulnerabilities or sensitive data exposure are detected. Overall, this is not a public-facing website but an internal browser error page, and thus the risk assessment is minimal with no business credibility or privacy compliance to evaluate.

The domain www.fflutte.com appears to be unregistered or inactive as indicated by the WHOIS query returning no match. The website content provided is incomplete and truncated, suggesting the site is inaccessible or blocked. No privacy, cookie, or terms of service policies are present, and no contact information or business details are available. The technical infrastructure cannot be assessed due to lack of data, and no security headers or HTTPS information is detected. Overall, the site lacks fundamental elements of a legitimate and secure web presence.

enpact e.V. is a Berlin-based non-profit organization dedicated to empowering entrepreneurship globally, focusing on emerging markets in Africa, Asia, Eastern Europe, and Latin America. The organization provides financial support, mentoring, business development training, and ecosystem development to entrepreneurs and support organizations. Their market position is solid with a history dating back to 2013 and a broad network of partners and donors. Technically, the website is built on WordPress with modern plugins and scripts, offering a good user experience with mobile optimization and clear navigation. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with GDPR cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy organization with a strong focus on social impact.

Cluster Industrial is a Mexican-based digital platform focused on providing leading information and specialized content for the mobility and industrial sectors. The company positions itself as a key player in transforming the industrial landscape in Mexico through its digital platform, strategic events, and expert content. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders in Mexico. Technically, the site is built on the Ghost CMS platform, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although the absence of visible privacy and cookie policies indicates room for compliance improvement. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and legal disclosures to improve user trust and regulatory compliance.

Cosmos Online is a well-established Mexican B2B digital platform specializing in connecting industrial buyers and suppliers across a wide range of sectors. With over 30 years of experience, it offers services such as product catalogs, quotation requests, supplier memberships, and industry news, positioning itself as a key player in the Mexican industrial marketplace. The website is professionally designed with good content quality and consistent branding, targeting industrial businesses in Mexico. Technically, the site employs modern web technologies including Google reCAPTCHA, Google Analytics, and Cloudflare CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and spam protection, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear business information and active user engagement features.

LIGNA is a globally recognized trade fair organized by Deutsche Messe AG, focusing on tools, machines, and plants for woodworking and wood processing industries. The website serves as a comprehensive platform for exhibitors, visitors, and press, providing event information, exhibitor details, news, and multimedia content. The site is well-branded, professionally designed, and targets industry professionals and stakeholders primarily in Germany but with international reach. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates a consent management platform (Usercentrics), and uses Google Tag Manager for analytics and tracking. Hosting is managed via managed IP name servers, ensuring reliable delivery. Security posture is strong with HTTPS enforced and CSRF tokens present, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is robust with clear privacy and cookie policies and active consent mechanisms. Overall, the website is trustworthy, professional, and secure, with no signs of adult or questionable content.

Leadberry is a technology company offering a web-based B2B lead generation software that converts website visitors into sales leads by leveraging Google Analytics data. The company targets sales, marketing teams, management, and agencies globally, positioning itself as a reliable SaaS provider with a strong market presence evidenced by testimonials and media features. The website demonstrates a mature digital infrastructure using modern JavaScript frameworks and integrates multiple marketing and analytics tools to optimize lead generation and user engagement. Security posture is solid with HTTPS enforcement and CAPTCHA protections, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and parent company association. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance.

The website spotlightmontreal.ca currently serves only a security verification page implementing Google reCAPTCHA v3, indicating the presence of a web application firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, limiting the ability to assess the company's operations or services. The domain is recently registered in early 2023 with privacy protection enabled, which is common for new or small businesses but reduces transparency. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA, hosted on DigitalServer.io, but lacks DNSSEC and visible security headers, indicating room for security improvements. Overall, the website's security posture is moderate due to bot protection but lacks comprehensive security best practices and compliance documentation. The lack of accessible content and business information results in a low trust and credibility score.

TIPOS, národná lotériová spoločnosť, a. s., is the official national lottery operator in Slovakia, providing a wide range of regulated gambling services including lotteries, scratch cards, sports betting, virtual sports, and online casino games. The website moj.etipos.sk serves as a portal for these services, targeting the adult Slovak population with a professional and well-structured online presence. The company holds a strong market position as a government-backed entity with exclusive rights in the sector. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google Analytics, and Cookiebot for analytics and consent management. The site is mobile-optimized and uses secure HTTPS connections with robust security headers and two-factor authentication for user login, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility practices, though some accessibility enhancements could be made. From a security perspective, the site demonstrates strong adherence to best practices including HTTPS enforcement, CSP with violation reporting, and secure login mechanisms. Privacy policies and cookie consent are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, moj.etipos.sk is a trustworthy, professional, and secure platform for regulated gambling services in Slovakia. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include publishing incident response contacts, adding a security.txt file, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

Vysoké učení technické v Brně (Brno University of Technology) is a prestigious Czech technical university with over 120 years of tradition. It offers a wide range of technical, economic, natural science, and artistic study programs across eight faculties and three university institutes. The university maintains a strong position in scientific research and international cooperation, supported by memberships in notable university networks and awards such as the HR Excellence in Research Award. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, researchers, and academic partners. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.12.4, Google Tag Manager, CookieHub for cookie consent, and Cloudflare for hosting and security. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforcement and multiple security headers, although the use of an older jQuery version suggests some technical debt. Privacy compliance is robust, featuring detailed privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, explicit vulnerability disclosure and incident response information are not publicly available, which could be improved to enhance transparency and security readiness. Overall, the site is professional, trustworthy, and well-maintained, representing a large educational institution with a strong market position. Strategic recommendations include updating legacy libraries, publishing vulnerability disclosure policies, and enhancing incident response visibility to further strengthen security and compliance.

The International Clinical Research Center (ICRC) is a joint clinical research and education institution affiliated with the Faculty Hospital St. Anne's in Brno and the Medical Faculty of Masaryk University. It focuses on advancing medical research, education, and industrial cooperation, positioning itself as a key regional player in healthcare innovation. The website reflects a professional and well-structured digital presence, targeting medical researchers, healthcare professionals, students, and the general public interested in medical advancements. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO and Matomo analytics for privacy-conscious visitor tracking. It integrates Google Maps and cookie consent mechanisms, demonstrating a moderate to good level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration details slightly impacts trustworthiness, but the site's affiliations and certifications, such as the HR Award, support its legitimacy. Overall, the ICRC website is a secure, privacy-compliant, and professionally maintained platform that effectively serves its audience. Strategic improvements in security headers, accessibility, and transparency of domain registration would further enhance its trust and resilience.

The European Space Agency (ESA) is a well-established intergovernmental organization dedicated to space exploration, science, and technology development in Europe. The website www.esa.int serves as the official portal providing comprehensive information about ESA's missions, news, educational resources, and multimedia content. It targets a broad audience including the general public, researchers, students, and media professionals. The site demonstrates a high level of professionalism, with consistent branding and rich, relevant content that is regularly updated. Technically, the website employs modern web technologies including jQuery, FontAwesome, and Matomo analytics for user tracking. It uses HTTPS with strong SSL configuration and includes cookie consent mechanisms, indicating good privacy practices. The site is mobile-optimized and performs well with fast loading times and clear navigation. From a security perspective, the site follows best practices such as HTTPS enforcement and cookie consent but lacks explicit published security policies, incident response information, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data confirms the legitimacy and long-standing presence of ESA, enhancing trustworthiness. Overall, the website is a reliable and authoritative source for space-related information from ESA, with strong business credibility and good technical and privacy compliance. Strategic improvements could include publishing detailed security policies and incident response contacts to further enhance transparency and trust.

AMIRES is a business focused on supporting strategically oriented innovation to create business impact. The website presents a professional but basic digital presence, primarily using WordPress CMS with standard web technologies such as Google Fonts and Font Awesome icons. The content is business-oriented, targeting innovation stakeholders, but lacks visible contact information and formal privacy or cookie policies. The technical infrastructure is moderate in performance and mobile optimization but lacks advanced security configurations such as security headers. The security posture is minimal with no detected vulnerabilities but also no published security or incident response policies. Overall, the website is accessible without WAF or blocking mechanisms, but the absence of WHOIS data due to privacy protection limits trust verification. Strategic recommendations include improving transparency with privacy and cookie policies, enhancing security headers, and publishing contact and incident response information.

Vysoká škola ekonomická v Praze (VŠE) is a prominent business university in the Czech Republic, recognized as the best business university in Central and Eastern Europe. It offers a wide range of academic programs including bachelor's, master's, doctoral, and MBA/MPA studies, supported by strong international cooperation and research initiatives. The institution is well-accredited with prestigious certifications such as AACSB, EQUIS, and CEMS, underscoring its academic excellence and global standing. The website reflects a mature digital presence with comprehensive content tailored to students, academics, and partners. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Popper.js, and Google Tag Manager. It is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. The site employs HTTPS with strong SSL configuration and security headers, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR and related privacy regulations. From a security perspective, the site follows best practices such as enforcing HTTPS and using security headers. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced transparency and readiness. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and accreditations support its legitimacy. Overall, VŠE's website is a well-constructed, secure, and compliant platform that effectively serves its educational mission. Strategic improvements include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Vysoká škola chemicko-technologická v Praze (VŠCHT Praha) is a leading Czech higher education institution specializing in chemical technology, biochemistry, food technology, and environmental sciences. The university offers comprehensive bachelor, master, and doctoral programs, alongside active research and industry collaboration. It holds a strong market position as a premier technical university in the Czech Republic with strategic partnerships such as ORLEN Unipetrol. The website reflects a professional academic institution targeting students, researchers, and industry partners. Technically, the site employs modern JavaScript frameworks including Vue.js and RequireJS, integrates Google Analytics and Facebook Pixel for tracking, and uses a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented; however, it lacks visible security headers and published security policies. WHOIS data is missing, which slightly reduces trustworthiness but the official content and social media presence support legitimacy. Overall, the website is well-maintained, secure, and serves its educational mission effectively.

Západočeská univerzita v Plzni is a well-established public university in the Czech Republic offering over 300 study programs across nine faculties. The website serves as a comprehensive portal for prospective and current students, staff, and partners, providing information on admissions, research, partnerships, and university events. The institution holds recognized certifications such as the HR Award and demonstrates compliance with GDPR regulations through detailed privacy policies and cookie consent mechanisms. The university maintains an active presence on major social media platforms, enhancing its outreach and engagement. Technically, the website employs a custom CMS with a jQuery-based frontend, supported by multiple JavaScript modules for enhanced user interaction. The site is mobile-optimized and features responsive design elements, although performance is moderate and could benefit from further optimization. Google Tag Manager and Facebook tracking cookies are used for analytics and marketing purposes, with clear cookie consent provided to users. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, explicit security headers are not evident, and no dedicated vulnerability disclosure or incident response contacts are published. The absence of WHOIS data due to privacy protection is typical for such institutions and does not detract from the site's legitimacy. Overall, the website presents a secure and professional digital presence aligned with the university's educational mission.

The website ww25.qiwio.io is a domain parking page primarily serving advertising content with minimal actual business information or user engagement features. The site lacks meaningful content, contact details, or clear business identity, indicating it is likely used for domain monetization rather than active commercial operations. The technical infrastructure relies on basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising networks integrated. Security posture is weak with no advanced headers or privacy mechanisms, and WHOIS data is unavailable, reducing trustworthiness. Overall, the site presents a low-risk profile but offers limited value or credibility as a business entity.

Triggerbee is a Denmark-based technology company founded in 2014 that provides an all-in-one onsite marketing platform designed to help businesses convert website traffic through personalization, forms, promotions, surveys, referrals, and gamification. The company targets businesses seeking to enhance onsite marketing effectiveness using SaaS solutions. The website is built on WordPress with Elementor, leveraging modern web technologies and integrating multiple analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Ads. Hosting appears to be on Microsoft Azure, inferred from cookies. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully published. Privacy compliance is partially addressed with a detailed cookie consent banner but lacks a clearly accessible privacy policy and terms of service. Overall, the website demonstrates good technical maturity, professional design, and consistent branding, supporting a high trustworthiness level.

AJ Produkter is a leading Swedish company specializing in office, warehouse, and workshop furniture and workplace equipment. The company operates a professional e-commerce platform complemented by a catalog sales model, targeting business customers seeking quality workplace furnishings with fast delivery and extended warranties. The website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks, comprehensive analytics, and marketing tools, ensuring a rich user experience and effective customer engagement. Security posture is strong with HTTPS, Content-Security-Policy headers, and cookie consent mechanisms in place, although explicit privacy and terms policies are not found in the provided content. WHOIS data is missing, which raises concerns about domain registration transparency but does not detract from the professional presentation and contact availability on the site. Overall, AJ Produkter presents a credible and well-established business with room for improvement in compliance documentation and domain registration transparency.

JadeScape is a Singapore-based real estate development project offering residential condominium units in the central region of Bishan. Developed by Qingjian Realty, the website serves as a comprehensive portal for property buyers, providing detailed project information, pricing, floor plans, and appointment booking for showflat visits. The site is professionally designed with good content quality and SEO optimization, targeting property investors and homebuyers in Singapore. Technically, the website is built on WordPress with popular plugins and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. Security posture is moderate with room for improvement in DNS security and HTTP headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

BCNCOFFEEGUIDE is a niche online specialty coffee guide focused primarily on Barcelona, Europe, and global specialty coffee spots. The website offers a comprehensive directory of coffee shops, event listings, B2B coffee offers, and related services such as coffee jobs and gear sales. It targets coffee enthusiasts, tourists, and local consumers interested in specialty coffee experiences. The business operates on a small scale with a focused market position in the hospitality sector. Technically, the website is built on WordPress using the Citadela theme and plugins, integrating Google Maps for location services and Google Analytics for traffic monitoring. The hosting provider is Bluehost Inc., and the site uses HTTPS with a good SSL configuration. Security posture is moderate with room for improvement in security headers and DNSSEC implementation. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, well-branded, and trustworthy, with safe content suitable for general audiences.