Medium-risk security reports

Banka CREDITAS a.s. is a Czech bank established in 1996, originally as a credit union and licensed as a bank since 2016. It offers a range of financial services including savings accounts, loans, investment products, and corporate financing primarily targeting Czech companies and expanding into Western Europe. The bank is part of the CREDITAS Group, a Czech investment group with interests in financial services, energy, and real estate. The website is professionally designed, mobile-optimized, and provides comprehensive business and contact information. Technically, it uses modern web technologies and a proprietary CMS (Solidpixels). Security posture is good with HTTPS enforced and secure forms, though explicit security headers and published security policies are lacking. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy page found. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high.

The website skutecnydarek.cz operates as an e-commerce platform for charitable gifts affiliated with the non-profit organization Člověk v tísni. It targets a Czech-speaking audience, offering original charitable gifts that support people in need. The site is professionally designed with consistent branding and good content quality, reflecting a medium-sized non-profit entity with a clear mission. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Microsoft Clarity for analytics, and Stripe for payment processing. The presence of HTTPS and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security headers could be confirmed. Privacy compliance is good with a detailed cookie policy and consent banner, but no explicit privacy policy or terms of service pages were detected in the provided content. The absence of WHOIS data limits domain trust analysis, but the website's content and technology usage suggest legitimacy. Overall, the site is a trustworthy, well-maintained charitable e-commerce platform with room for improvement in transparency and security documentation.

Projekt Austerlitz is a cultural and historical initiative dedicated to commemorating the Battle of Austerlitz and related Napoleonic events through reenactments, educational content, and public events. The project has established partnerships with regional government bodies, tourism organizations, and media outlets, indicating a recognized presence in the cultural heritage sector in the Czech Republic. The website serves as an official portal for event information, historical articles, and partner engagement, targeting history enthusiasts and the general public interested in Napoleonic history. Technically, the website is built on an older version of WordPress (4.9.1) with legacy JavaScript libraries such as jQuery 2.0.3 and Fancybox 2.1.5. While the site uses HTTPS, it lacks modern security headers and employs outdated software versions, which may expose it to security vulnerabilities. The site is moderately optimized for performance and mobile use but could benefit from modernization and improved accessibility features. From a security perspective, the site has no visible privacy or cookie policies, no incident response or security policy disclosures, and no contact information for security or data protection officers. The WHOIS data is unavailable or malformed, limiting domain trust verification. Despite these gaps, the site does not show signs of malicious activity or blocking by WAFs, and the content is safe and appropriate for general audiences. Overall, Projekt Austerlitz presents a credible cultural project with room for improvement in technical security, privacy compliance, and transparency. Strategic enhancements in these areas would strengthen trust and protect both the project and its visitors.

The Health and Safety Authority (HSA) operates the hsalearning.ie platform, providing free, accessible online health and safety awareness courses targeted at workers, employers, educators, and students in Ireland. The platform leverages the Moodle LMS to deliver structured educational content, supporting workplace safety and compliance. The website is professionally designed with consistent branding and clear navigation, emphasizing accessibility and user experience. Privacy and cookie policies are comprehensive and GDPR compliant, supported by Cookiebot for consent management. Technically, the site uses modern web technologies including Moodle, YUI, jQuery, and FontAwesome, hosted by Hosting Ireland with a secure HTTPS configuration. Security posture is solid with room for improvement in DNSSEC and security headers. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business history, indicating legitimacy and trustworthiness.

Zlín Film Workshops is a small Czech Republic-based business specializing in film education and workshops, including camera, sound, lighting, and photography training. The website is professionally designed using the Wix platform and targets film professionals and enthusiasts seeking practical training. The business operates in a niche media education sector with a regional focus. Technically, the website uses Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structured data indicate legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

Koredge is a well-established French digital agency and ESN with over 25 years of experience, specializing in custom web development, digital marketing, and bespoke application solutions. They serve a diverse clientele across sectors such as transportation, tourism, sport, healthcare, and public administration, positioning themselves as a trusted partner for digital transformation and growth. Their business model combines strategic consulting with technical execution, offering tailored digital solutions including e-commerce, UX/UI design, and hosting services. Technically, the website is built on WordPress with modern frameworks and plugins like Yoast SEO, Google Tag Manager, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized, SEO-friendly, and uses structured data for enhanced search visibility. Multimedia content such as videos and client testimonials enhance user engagement. From a security perspective, the site enforces HTTPS and uses asynchronous loading for tracking scripts, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies and missing WHOIS domain registration data reduce overall trust and compliance posture. Overall, Koredge presents a professional and credible digital presence with strong business and technical foundations. The main risks relate to incomplete privacy compliance and lack of domain registration transparency. Strategic improvements in security headers, privacy disclosures, and WHOIS data transparency are recommended to enhance trust and regulatory compliance.

Mayfield Brain & Spine is a well-established healthcare provider specializing in neurological and spine care with a history dating back to 1937. The organization operates multiple locations across Cincinnati, Dayton, and Northern Kentucky, offering specialized services including brain tumor care, neurovascular services, spine care, interventional pain management, and physical therapy. Their market position is strong as a regional leader with a comprehensive care team and partnerships with related healthcare organizations. The website reflects a professional and patient-focused business model targeting individuals seeking expert neurological and spine treatment in the region. Technically, the website employs modern web technologies such as Bootstrap and Piwik PRO analytics, providing a responsive and accessible user experience with good SEO practices. However, some improvements in security headers and privacy compliance could enhance their digital maturity. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy standards, though cookie consent and detailed security policies are absent. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing comprehensive privacy and security policies to improve compliance and user trust.

TrueAnal.org is an adult entertainment website specializing in hardcore anal pornography featuring exclusive content and popular pornstars. The site operates on a subscription and content distribution model, targeting adult viewers seeking explicit anal-themed videos. The platform uses DataLife Engine CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted behind Cloudflare DNS services. While the site offers good content quality and user experience with clear navigation and mobile optimization, it lacks critical privacy and cookie policies, which are compliance gaps. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No business contact emails or phone numbers are publicly available, limiting business credibility. Overall, the site is functional and consistent with its niche but requires improvements in privacy compliance and security hardening.

POWERPLAY MANAGER, s.r.o. operates the PowerPlay Manager online sports management game platform, offering free-to-play management games for hockey, soccer, handball, and basketball. The platform targets sports enthusiasts globally, providing multilingual support and live game broadcasts. The business model relies on free access with advertising and partnerships. Technically, the site uses a traditional web stack with jQuery and related libraries, integrates Facebook login, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS and cookie management, though some security headers are missing and incident response information is absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

WANET s.r.o. is a Czech Republic-based IT company specializing in external network management, website creation, SEO optimization, and smart home technology development. The company offers tailored IT services with a focus on individual client needs and provides 24/7 monitoring and security for managed networks. Their product portfolio includes smart IP weather stations and home automation systems, positioning them as a niche technology provider in their regional market. Technically, the website uses a basic but functional stack including jQuery and custom JavaScript, with a cookie consent mechanism implemented for compliance. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS domain registration data, reduces overall trust and compliance posture. Security practices include CAPTCHA on contact forms but lack visible security headers and confirmed HTTPS status. Overall, the website is accessible, professionally presented, and content-rich, but improvements in security and compliance documentation are recommended.

WarioWeather, operated by WANET s.r.o., provides IP weather stations designed for smart homes, precision agriculture, and intelligent building management. Their product offers integrated weather data collection, forecasting, and device control capabilities accessible via web interfaces. The company targets niche markets requiring precise environmental monitoring and automation. Technically, the website uses standard web technologies including jQuery and Google Analytics, with basic mobile optimization and cookie consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, contact transparency, and domain registration verification are recommended to enhance credibility and compliance.

The website bayhilldentalteam.com is currently inaccessible due to a Cloudflare security block page, which prevents access to any actual website content or business information. The domain is registered through GoDaddy.com, LLC since 2016 with a valid expiry in 2026, indicating a stable and legitimate registration consistent with a dental practice business. However, no metadata, contact information, privacy policies, or business descriptions are available for analysis due to the block. The technical infrastructure includes Cloudflare as a DNS and security provider, but no further technical or CMS details can be determined. Security posture cannot be fully assessed given the lack of accessible content and headers. Overall, the site is currently non-functional for analysis and scores very low on AI scoring metrics due to the block.

The website officialticketcenter.com is currently inaccessible due to a Cloudflare security block page, preventing access to any actual business content or metadata. The domain is registered since 2000 with GoDaddy.com, LLC, indicating a longstanding presence, but no further business details can be extracted from the blocked page. The technical infrastructure includes Cloudflare as a security and hosting provider, but no CMS or additional technologies are detectable due to the block. Security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates some level of protection. No privacy, cookie, or terms of service policies are available, and no contact information or business credentials are visible. Overall, the site is currently not analyzable beyond the domain registration data and the Cloudflare block indication.

Harbor Inn Seafood Charlotte is a small, family-owned seafood restaurant located in Charlotte, North Carolina. The business focuses on providing fresh, wild-caught seafood at family-friendly prices, serving both lunch and dinner menus with options for carry-out and online ordering. The website is professionally designed using the Squarespace platform, featuring clear navigation and mobile optimization. The business targets local seafood lovers and families, positioning itself as a favorite in the Charlotte area. Technically, the website leverages Squarespace CMS with integrated Google Analytics and Tag Manager for visitor tracking. The site uses HTTPS with a good SSL configuration but lacks advanced security headers. Performance is moderate with good mobile responsiveness. However, privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms. From a security perspective, the site shows basic good practices such as HTTPS enforcement but lacks security headers and incident response information. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and enhanced security measures.

The website represents the Visiting Nurses Association of America (V.N.A.A.) as featured within the Young Survival Coalition's platform, a nonprofit organization focused on supporting young women diagnosed with breast cancer. The business operates as a national association advocating for community-based nonprofit home health and hospice providers, offering services such as advocacy, education, and collaboration. The target audience includes patients, healthcare providers, and supporters within the nonprofit healthcare sector. The website is well-branded and consistent with a clear mission and service offering. Technically, the website is built on FusionCMS and integrates modern analytics and tracking tools including Google Analytics, Google Tag Manager, and Facebook Pixel. It uses HTTPS with good SSL configuration, and the site is mobile-optimized with good accessibility and SEO practices. However, some security headers are missing, and there is no visible cookie consent mechanism despite the use of tracking scripts, which could be improved for privacy compliance. From a security perspective, the site demonstrates a solid posture with no exposed sensitive data or vulnerabilities detected in the HTML content. The lack of explicit security policies or incident response contacts is a gap. The WHOIS data is unavailable or protected, which is typical for nonprofits, and does not raise immediate concerns. The domain appears legitimate and consistent with the organization's online presence. Overall, the website is professional, trustworthy, and serves its nonprofit advocacy purpose effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

Storybuilt is a small design and development collective specializing in modern architecture and spatial storytelling. The company focuses on creating sustainable, modern structures that merge form and function, targeting clients interested in contemporary architectural solutions. The website reflects a professional and consistent brand image with a modern design and clear navigation, although it lacks explicit contact details beyond a contact form. Technically, the site uses standard web technologies with Cloudflare DNS and CDN services but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain status protections in place, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security practices.

Mountain State Beverage operates as a regional distributor specializing in wine and craft beer, with a focus on brands like Laughing Dog Brewing. The website serves primarily as a promotional platform for their craft beer offerings and brand partnerships. The technical infrastructure is based on WordPress with the Divi theme, leveraging common plugins for SEO, social sharing, and analytics. The site is hosted behind Cloudflare DNS and uses HTTPS, indicating a baseline of security and performance. However, the absence of privacy and cookie policies, lack of security headers, and missing contact information reduce the overall trust and compliance posture. The site content is professionally presented with good design and navigation, targeting mature audiences interested in craft beer. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.

The website adnxl.com currently presents no accessible content, with an empty HTML body and no metadata or scripts. The domain WHOIS data is suspicious, showing a creation date in the future (May 18, 2025), which undermines trust and legitimacy. The site uses Cloudflare nameservers, suggesting it may be protected by a WAF or under construction, but no active content or security headers are present. There are no privacy, cookie, or terms of service policies, nor any contact information or business details visible. Overall, the digital maturity of the site is very low, with no technical or business signals to assess. Security posture is poor due to lack of HTTPS and security headers, and the domain registration data raises concerns about legitimacy.

The website jakfungujedns.cz is an official educational platform operated by CZ.NIC, the Czech Republic's domain registry association responsible for managing the .CZ domain and DNS infrastructure. It provides clear, step-by-step educational content about how DNS works, targeting general internet users and those interested in internet technology. The site is well-branded with CZ.NIC logos and consistent messaging, reinforcing its authoritative position in the Czech internet ecosystem. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.11.0, along with Piwik analytics for user tracking. It is hosted likely on CZ.NIC infrastructure, ensuring reliability and performance. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are possible, such as updating JavaScript libraries and enhancing accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, it lacks visible security headers and a published privacy policy, which are important for compliance and user trust. No forms or sensitive data collection are present, reducing attack surface. The WHOIS data confirms the domain is legitimately registered to CZ.NIC, consistent with the website's purpose and content. Overall, the website is trustworthy, professionally maintained, and serves its educational purpose well. Strategic improvements in privacy documentation, security headers, and technical modernization would enhance its security posture and compliance standing.

AUMOVIO SE is a large German company specializing in future mobility solutions, including software-defined vehicles, electric mobility, vehicle electrical/electronic architectures, safety, driver assistance, and user experience technologies. The company recently became publicly listed on the Frankfurt Stock Exchange, indicating a strong market presence and investor confidence. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting automotive industry professionals, investors, and potential employees. Technically, the site uses modern technologies such as Adobe Experience Manager, Google Tag Manager, and ConsentManager for privacy compliance. Security posture is good with HTTPS and consent mechanisms, but lacks explicit security policies and vulnerability disclosures. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility, though the absence of WHOIS data for the domain is a concern that should be investigated further.

Uber Eats is a leading global online food and grocery delivery platform operated by Uber Technologies Inc. The website offers consumers the ability to order food and groceries from local restaurants and stores with contactless delivery options. It supports business accounts, restaurant sign-ups, and delivery partner registrations, positioning itself as a comprehensive marketplace in the food delivery sector. The platform is accessible via web and mobile apps, serving over 500 cities worldwide. Technically, the website is built using modern web technologies including React and various JavaScript libraries, with performance optimizations such as CDN usage and script preloading. It employs Google reCAPTCHA for bot defense and uses secure HTTPS connections with Content Security Policy measures. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident. From a security perspective, Uber Eats demonstrates strong security posture with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly found, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The lack of WHOIS data is due to privacy protection, which is justified for a large enterprise. The platform integrates extensive analytics and marketing tools, reflecting a mature digital marketing strategy. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure to further strengthen security culture and user trust.

The website allegro.sk currently presents a security challenge page that blocks access to its main content, likely due to bot protection mechanisms. As a result, no meaningful business, contact, or policy information is accessible for analysis. The site appears to be an e-commerce storefront related to the Slovak market, but the lack of accessible content prevents a full assessment of its market position or services. Technically, the site uses JavaScript and includes an iframe from captcha-delivery.com for security verification, indicating a WAF or bot mitigation solution is active. Security posture cannot be fully evaluated due to the blocking, but the absence of visible security headers or SSL details is a concern. Overall, the site’s risk assessment is limited by the lack of accessible data, and strategic recommendations focus on improving transparency, security policies, and accessibility once the blocking is resolved.

mypage.cz is a Czech language media and news website launched in 2024, focusing on films, series, games, and general lifestyle topics. It provides news articles, reviews, and guides targeting a general audience interested in entertainment and related subjects. The site operates primarily on advertising revenue, leveraging Google Adsense and Matomo analytics for monetization and user insights. The website is professionally designed with consistent branding and good content quality, offering a clear navigation structure and mobile optimization. Technically, it uses standard web technologies including Google Fonts, JavaScript, and CSS, hosted on infrastructure associated with REG-GRANSY and vas-hosting name servers. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. No critical vulnerabilities or suspicious WHOIS data were found, and the domain registration is consistent with the site's new business age. Overall, the site is safe, compliant with GDPR, and suitable for general audiences.

HockeyFrance.TV is a niche sports media streaming platform operated by Live Arena Sports AB, focusing on delivering hockey-related content to fans interested in French hockey. The platform leverages modern web technologies such as the Ionic Framework and service workers to provide a mobile-optimized user experience. However, the website content is relatively basic with limited visible content and no forms or interactive elements detected in the provided HTML. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user transparency. Security posture is weak due to lack of visible security headers and no WHOIS data available to verify domain legitimacy. Overall, the site appears functional but lacks critical security and compliance features, which could impact user trust and regulatory adherence.

The website themeboy.com is currently inaccessible, serving a 403 Forbidden error page, likely protected or restricted by Cloudflare. Due to this access restriction, no meaningful business content, contact information, or policies are available for analysis. The domain is registered since 2007 via GoDaddy and uses Cloudflare DNS, indicating a legitimate registration and hosting setup. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies limit the ability to assess the business or security posture comprehensively. The website shows no signs of active analytics, marketing, or social media integration. Overall, the site appears to be either down, restricted, or under maintenance, resulting in a very low AI score and limited insights.

Raccourci Interactive is a well-established French digital agency specializing in e-tourism solutions, including web development and mobile application creation for tourism offices. Positioned among the top 5 e-tourism agencies in France, it operates through a group structure including subsidiaries such as Idnet Marketing and Tactyl. The website reflects a professional digital presence with a focus on tourism destinations and client references. Technically, the site uses Drupal 7 CMS combined with AngularJS and Bootstrap frameworks, integrating modern mapping and analytics technologies. Security posture is strong with HTTPS enforced and IP anonymization in analytics, though additional security headers and a formal security policy could enhance protection. Privacy compliance is supported by a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. WHOIS data is missing, which slightly impacts trust but the overall business credibility remains high due to transparent contact information and social media presence.

ILUNION Hotels operates as a hospitality chain offering accessible 3, 4, and 5-star accommodations primarily in Spain. The website serves as the official booking platform, providing multi-language support and a loyalty program to enhance customer engagement. The business targets a broad audience seeking accessible and quality hotel services. Technically, the site is built on Adobe Experience Manager, integrating modern analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and vulnerability disclosures. The absence of WHOIS data for the .co.uk domain suggests the domain may be a subdomain or alias rather than a registered domain, which warrants further verification. Overall, the website is professional, secure, and compliant with privacy norms, suitable for general audiences.

ILUNION Hotels operates a professional and accessible hotel chain primarily in Spain, offering 3 to 5-star accommodations with a focus on family and business travelers. The website is well-structured, multilingual, and integrates modern technologies such as Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent. Contact information is clearly provided, and the site promotes a loyalty program and event hosting services. However, the absence of WHOIS data and explicit privacy and security policies slightly reduce trustworthiness. The site uses HTTPS and implements cookie consent, but could improve by publishing clear privacy policies and security incident contacts.

ILUNION Hotels operates a professional, accessible hotel chain website targeting German-speaking customers interested in accessible and family-friendly accommodations in Spain. The site is built on Adobe Experience Manager with integrated Adobe Analytics and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. The domain registration is consistent with the business claims, and the website content is comprehensive and professionally presented. Overall, the site demonstrates good business credibility and technical implementation with room for improvement in privacy policy transparency and security header implementation.

ILUNION Hotels operates a large chain of accessible hotels primarily in Spain and Portugal, offering 3 to 5-star accommodations with a focus on family, business, and accessible travel. Their website is professionally designed using Adobe Experience Manager, with multilingual support and integrated booking and loyalty programs. The technical infrastructure includes modern analytics and cookie consent tools, ensuring a good digital maturity level. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are missing. Overall, the site is trustworthy and well-positioned in the hospitality market.

ILUNION Hotels operates a chain of accessible hotels in Spain offering 3, 4, and 5-star accommodations with direct online booking capabilities. The website presents a professional and consistent brand image targeting tourists seeking accessible lodging options. Technically, the site leverages Adobe Experience Manager CMS, integrates Google Tag Manager and Adobe Analytics for marketing and user tracking, and implements cookie consent via OneTrust. Security posture is solid with HTTPS and standard security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the site is well-structured, mobile-optimized, and trustworthy, supporting a large hospitality business presence in Spain and Italy.

The website at dondedormiresdespertar.es currently lacks accessible WHOIS data due to IP authorization restrictions imposed by the Red.es WHOIS service. This limits the ability to verify domain registration details, impacting trust and legitimacy assessments. The website appears to be built on WordPress technology, utilizing Google Tag Manager for analytics and tracking, and includes Tailwind CSS for styling. However, the content is minimal and truncated, with no clear business description, contact information, or privacy and cookie policies present in the provided HTML. Security posture is weak, with no detected security headers or explicit security policies. Overall, the site shows basic technical implementation but lacks critical compliance and trust indicators, resulting in a low overall risk score.

Boondooa Créations is a well-established digital agency based in Annecy, France, specializing in website creation, digital strategy, SEO, and web marketing services. With over 15 years of experience, the company serves a regional clientele including Annecy and Geneva, offering tailored digital solutions such as custom CMS development, mobile applications, and comprehensive marketing campaigns. The website reflects a professional and creative brand image with strong content quality and user experience. Technically, the site uses modern JavaScript libraries and a custom CMS platform, ensuring good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the business content and contact information appear credible. Overall, the website is professional and trustworthy, but domain registration inconsistencies should be investigated further.

Carts Guru is a specialized SaaS provider offering ecommerce marketing automation tools that enable online merchants to engage customers across multiple channels including email, SMS, and Facebook Messenger. The company targets ecommerce businesses seeking to increase revenue through automated, multichannel marketing campaigns and data-driven decision making. Their platform includes features such as campaign automation, audience segmentation, templates, and detailed dashboards, supported by a professional team offering premium support services. The website reflects a medium-sized business based in Spain with a strong market presence and over 1000 clients worldwide. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery, Swiper, noUiSlider, and Select2. It is well optimized for mobile devices, fast loading, and SEO-friendly with proper meta tags and structured data. Google Tag Manager is used for analytics and marketing tracking. The site employs HTTPS with good SSL configuration but lacks some advanced security headers. Contact is primarily via a secure web form, with no direct email or phone contacts publicly listed. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit cookie consent mechanisms and published incident response contacts or vulnerability disclosure policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces trust but is common for SaaS businesses. Overall, the security posture is solid but could be improved with additional transparency and security headers. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing cookie consent, publishing incident response contacts, adding security headers, and maintaining regular vulnerability audits. The website is professional, trustworthy, and well-positioned in the ecommerce marketing automation sector.

Combell is a professional web hosting and domain registration company targeting a broad audience including starters, SMEs, and large enterprises. They offer a comprehensive suite of services including domain names, web hosting (shared, dedicated, WordPress, Drupal), email hosting with Microsoft 365, website and webshop building tools, SSL certificates, and reseller hosting. The company positions itself as a leading hosting specialist with 24/7 support and a strong customer focus. Technically, the website employs modern tracking and marketing technologies such as Google Analytics, Microsoft Clarity, Visual Website Optimizer, and Bing UET, alongside a cookie consent mechanism ensuring GDPR compliance. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is good with HTTPS enforced and SSL certificates in use, though explicit security headers and policies are not fully documented. WHOIS data is unavailable, which is unusual for a .com domain and slightly reduces trust, but the active and professional website presence mitigates concerns. Overall, Combell demonstrates a mature digital presence with strong business credibility and moderate to high security maturity.

The Association for Diagnostics & Laboratory Medicine (ADLM) is a professional organization focused on laboratory medicine and clinical chemistry. Founded recently in 2023, it serves a global community of clinical laboratorians, researchers, and healthcare professionals by providing educational resources, advocacy, networking opportunities, and scientific publications. The website reflects a mature and professional association with a strong emphasis on community engagement, education, and scientific advancement. ADLM positions itself as a key player in laboratory medicine with a comprehensive portfolio of services including conferences, journals, and certification programs. Technically, the website is built on a modern stack including Sitecore CMS, HubSpot marketing tools, Coveo search integration, and Cloudflare DNS services. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. The domain is registered with GoDaddy and protected with multiple EPP statuses, indicating a stable and legitimate registration. However, DNSSEC is not enabled, and security headers are not visibly configured, which are areas for improvement. From a security perspective, the site uses HTTPS and has protections against domain hijacking. Tracking and marketing scripts are present, but no explicit cookie consent mechanism was found, which may impact GDPR compliance. No incident response or security policy information is publicly available. Overall, the security posture is good but could be enhanced by adding security headers, enabling DNSSEC, and implementing privacy compliance features. The overall risk assessment is low with high trustworthiness and professionalism. Strategic recommendations include improving privacy compliance, enhancing security headers, and publishing security policies to increase transparency and user trust.

SeamlessAccess is a non-profit service governed by a coalition of major organizations in the research and scholarly publishing sectors, providing a federated Single Sign-On solution to streamline access to scholarly collaboration tools and research infrastructure. The service targets institutions, libraries, identity providers, and researchers, enabling seamless authentication across multiple platforms. The website is professionally designed using the Hugo static site generator, with good mobile optimization and clear navigation, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC, security headers, and incident response transparency. Privacy compliance is generally good with a comprehensive privacy policy, but cookie consent mechanisms and terms of service are lacking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

Scholarly iQ is a specialized service provider offering trusted data, analytics, and strategic consulting services primarily for the academic publishing market. Their key offerings include COUNTER compliance solutions, business intelligence, data management, and strategic consulting, targeting publishers, librarians, and other stakeholders in academic content usage. The company has a well-established presence with a domain registered since 2008 and a significant user base, positioning it as a credible player in its niche. Technically, the website employs a moderate technology stack including jQuery, Google Tag Manager, and Microsoft Clarity for analytics and tracking. The site enforces HTTPS and uses reputable hosting via GoDaddy. While the site is mobile optimized and has good navigation and design quality, it lacks advanced security headers and uses an outdated jQuery version, which could pose security risks. No cookie consent mechanism is present, indicating partial privacy compliance. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of DNSSEC, security headers, and updated libraries suggests room for improvement. No incident response or security policy information is published, which could impact trust and compliance. Overall, Scholarly iQ presents a professional and trustworthy business website with solid content and business credibility but would benefit from enhanced security measures and privacy compliance to strengthen its posture and user trust.

KRONUS Inc. is a specialized healthcare company focused on providing immunoassay and autoimmune diagnostic test kits to medical professionals and laboratory facilities worldwide. With over 35 years of experience and an ISO 13485:2016 quality management certification, KRONUS positions itself as a trusted supplier in the niche market of endocrine and metabolic autoimmune disorder diagnostics. The website content clearly targets medical professionals and laboratories, emphasizing product quality and specialized services. Technically, the website employs a simple technology stack including jQuery 2.2.3 and custom CSS/JavaScript. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for technical improvement. The hosting and domain registration are managed by reputable providers, supporting operational stability. From a security perspective, the website shows moderate maturity. The domain is secured with clientTransferProhibited status, but DNSSEC is not enabled, and no security headers were detected. There is no evidence of privacy or cookie policies, which presents compliance risks especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, supporting user trust and communication. Overall, KRONUS.com is a professional and trustworthy website with solid business credibility but with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen the company’s digital trustworthiness and regulatory posture.

Poly-Pipets, Inc. is a specialized manufacturer of disposable pipets primarily serving diagnostic kit manufacturers, laboratories, and healthcare providers. The company offers exact volume transfer pipets, single-use disposable dispensing and spreading pipets, and custom pipet design services. Founded in 2014, it positions itself as a woman-owned, ISO 9001:2015 certified business with a focus on quality and customer orientation. The website reflects a professional B2B business model with clear contact channels and product information. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and WP Rocket for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with good loading speeds and structured metadata. Security measures include HTTPS enforcement, security headers, spam protection, and CAPTCHA integration, indicating a mature security posture. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. No dedicated security or incident response policies are visible, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy from a content and technical perspective but would benefit from improved privacy compliance and verification of domain registration details to strengthen its security and business credibility.

Jant Pharmacal Corporation operates as a supplier of medical and laboratory diagnostic products, serving healthcare professionals and clinical laboratories. Established since 1986, the company offers a broad range of products including point-of-care diagnostics, laboratory analyzers, molecular testing solutions, and consulting services to improve laboratory efficiency and profitability. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting laboratory professionals. Technically, the website is built on WordPress with WooCommerce, leveraging modern technologies such as jQuery, Google Analytics, Google Tag Manager, and WP Rocket for performance optimization. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security measures include HTTPS enforcement and some security headers, with evidence of Wordfence security plugin usage. However, the absence of visible privacy and cookie policies, lack of security.txt or vulnerability disclosure pages, and missing WHOIS registration data present compliance and trust concerns. The WHOIS data absence is unusual for an active commercial site and warrants further investigation. Overall, the site maintains a good security posture but could improve transparency and compliance. Strategically, enhancing privacy compliance, incident response visibility, and domain registration transparency will strengthen trust and reduce risk. Regular security audits and updates to third-party scripts are recommended to maintain a robust security posture.

Evik Diagnostics is a specialized contract manufacturer focused on lyophilized reagent beads (Lyobeads) for diagnostic assays across medical, veterinary, environmental, and agricultural sectors. The company offers contract development, manufacturing, automation, and assay formulation services, supported by ISO 13485:2016 certification, indicating a strong commitment to quality management. Their website presents a professional image with clear service offerings and industry focus, targeting diagnostic manufacturers seeking stable, ambient storage assay reagents. Technically, the website is built on Joomla CMS with the T3 framework and Bootstrap 3, utilizing modern JavaScript libraries such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security posture is moderate with no visible security headers or explicit SSL configuration details, and no privacy or cookie policies are present, indicating gaps in compliance and user data protection transparency. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. This discrepancy lowers the overall trust score and suggests a need for further verification of domain ownership. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused. Overall, Evik Diagnostics demonstrates a solid business and technical foundation but should address privacy compliance and domain registration transparency to enhance trust and security posture.

Fortis Life Sciences, LLC is a medium-sized company operating in the healthcare sector, specializing in life sciences and diagnostics. The company offers a broad portfolio of products and services including reagents, diagnostic components, CDMO services, contract research and development, and biopharma solutions. Their website positions them as a trusted partner for life science and diagnostics companies, emphasizing integrated solutions designed to support complex development challenges and innovation scaling. The company targets B2B customers in research, diagnostics, and therapeutic markets. Technically, the website is built using modern web technologies such as React and Next.js, with Builder.io as the CMS platform. It employs Google reCAPTCHA for form security and loads efficiently with good mobile optimization and SEO practices. However, some security headers are missing, and there is no explicit cookie consent mechanism or detailed security policy published on the site. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements bot protection on forms. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the professional website content and presence on LinkedIn support the business's credibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for Fortis Life Sciences, but improvements in domain registration transparency, security headers, and privacy compliance would enhance trust and security posture. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and adding cookie consent mechanisms to align with privacy regulations.

Multiview is a professional B2B digital media agency specializing in marketing services for associations and businesses. The company focuses on helping clients reach, engage, and grow their most valued relationships through digital marketing strategies. Their market position is that of an established and reputable service provider in the B2B marketing space, leveraging modern marketing technologies and platforms such as HubSpot. The website reflects a medium-sized enterprise with consistent branding and good content quality. Technically, the website is built on the HubSpot CMS platform and integrates a variety of marketing and analytics tools including Google Analytics 4, Hotjar, Adobe DTM, and Snap Pixel. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a modern tech stack and proper meta tags. From a security perspective, the site enforces HTTPS, uses security headers, and employs reCAPTCHA Enterprise to protect forms. Cookie consent mechanisms are in place, indicating GDPR compliance. However, the absence of a published security policy, incident response plan, and vulnerability disclosure program are gaps that could be addressed to improve security posture and transparency. Overall, the website is professional and trustworthy, but the lack of WHOIS data and domain registration details introduces some uncertainty about domain legitimacy. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility compliance to further strengthen the site's security and trustworthiness.

Koregos.org is a specialized online multimedia review and encyclopedia dedicated to the arts and art history, providing a rich collection of articles, videos, and reporticles validated by editorial committees. The website targets a diverse audience including experts, amateurs, and juniors, and operates as a free educational resource supported by cultural and governmental institutions in Belgium. Technically, the site uses a custom backend with legacy JavaScript libraries such as jQuery 1.7 and JW Player for multimedia content delivery. While the domain is well-established and consistent with the business claims, the website lacks modern security practices such as DNSSEC, security headers, and updated libraries, which poses potential risks. Privacy compliance is minimal with no visible privacy or cookie policies, and no contact or social media information is provided, limiting user engagement and trust. Overall, the site is functional and content-rich but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

The domain jwpsrv.com is registered since 2012 with GoDaddy.com, LLC as the registrar and uses Amazon AWS nameservers. However, the website content is inaccessible, returning a minimal 'File not Found' message indicative of a 404 error or missing content. There is no metadata, structured data, or any visible content to analyze. No privacy, cookie, or terms of service policies are present, nor any contact or security-related information. The lack of HTTPS and security headers further diminishes the security posture. Overall, the site appears inactive or improperly configured, limiting any meaningful business or security analysis.

Saint-Gervais Mont-Blanc is an official tourism website promoting the mountain village of Saint-Gervais in Haute-Savoie, France. It offers comprehensive information about mountain activities, wellness, thermal spas, and local events, targeting tourists and visitors interested in alpine experiences. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Google Tag Manager, and Leaflet maps. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms policies are not clearly found. The WHOIS data is missing or unavailable, which is unusual but the website content and technical setup suggest legitimacy. Overall, the site is a well-maintained digital presence for regional tourism with room for improvement in privacy transparency and contact information.

Havas Village España operates as an integrated marketing and communication agency under the Havas Group umbrella, pioneering a model that consolidates multiple marketing specialties within a single location. The website reflects a mature digital presence built on WordPress, leveraging modern plugins such as Yoast SEO and Smart Slider 3, and integrates Google Tag Manager for analytics. The content is professionally crafted, targeting businesses and brands seeking comprehensive marketing solutions in Spain. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent but no clear privacy policy or terms of service pages. Overall, the domain appears legitimate despite unavailable WHOIS data, with privacy protection justified for this business type.

Fond Sidus is a Czech non-profit organization dedicated to supporting children through educational projects, entertainment, and promoting healthy nutrition including fermentation and homemade fermented vegetables. The website presents a well-structured archive of projects spanning many years, indicating a sustained presence in the educational and social sector. The target audience primarily includes children, educational institutions, and individuals interested in healthy lifestyles. Technically, the website uses a proprietary or custom CMS platform (eshop-rychle.cz) and integrates Matomo analytics with user consent, reflecting a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, and no contact information is explicitly provided, which limits transparency and user trust. Security-wise, HTTPS is enabled but the absence of security headers and WHOIS data opacity are notable weaknesses. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security hardening.

Obec Ladná operates an official municipal website serving the residents and visitors of Ladná, Czech Republic. The site provides comprehensive information about the municipality, including news, official documents, event calendars, and contact details. It positions itself as a trusted source for local government information and community engagement. The website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery, Bootstrap, and Leaflet for mapping. It also integrates accessibility and multilingual support via Google Translate. From a technical perspective, the site employs a modern tech stack with several third-party libraries and scripts, ensuring a responsive and user-friendly experience. However, the absence of explicit security headers and lack of WHOIS data for the domain are notable gaps. The site uses HTTPS and implements cookie consent mechanisms, indicating attention to privacy compliance, including GDPR adherence. Security posture is moderate; while no critical vulnerabilities or exposed sensitive data were detected, the lack of security headers and missing WHOIS information reduce overall trust. The website does not display any signs of malicious activity or adult content, making it safe for general audiences. Overall, the website is a credible and functional municipal portal but would benefit from enhanced security configurations and verification of domain registration details to improve trustworthiness and compliance.