Medium-risk security reports

Greentube GmbH, a division of NOVOMATIC, is a leading full-service provider in the online and mobile gaming sector, delivering secure and innovative casino entertainment solutions globally. The company targets B2B clients, offering a broad portfolio including slot games, table games, video poker, and server-based gaming platforms. Their market position is strong, supported by a comprehensive product suite and certifications such as ISO 27001. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, optimized for mobile and SEO, and integrates analytics and consent management tools. Security posture is robust with HTTPS, security headers, and cookie consent, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data slightly impacts domain trust. Strategic recommendations include publishing security policies, vulnerability disclosure, and providing direct security contacts to enhance trust and compliance.

Aristocrat Leisure Limited is a globally recognized gaming content and technology company listed on the Australian Securities Exchange. The company offers a broad portfolio of gaming products including land-based casino games, online real-money gaming, and free-to-play social casino games, serving both business and consumer markets worldwide. Their digital presence is supported by a modern WordPress-based website with strong SEO and accessibility features, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and security headers, though the absence of a public security policy and incident response details suggests room for improvement. The WHOIS data is unavailable, which is unusual for a corporate domain and may warrant further monitoring. Overall, the website projects a professional and trustworthy image aligned with its market position.

Brightstar Lottery presents itself as a global leader in lottery technology and services, offering integrated retail and digital lottery solutions, game creation, and operational expertise. The website is professionally designed with modern technologies and provides rich content targeting lottery operators and industry stakeholders worldwide. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Technically, the site uses a mature tech stack including jQuery, FontAwesome, and Bootstrap, with analytics tools like Plausible and Hotjar for user insights. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal privacy or cookie policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

Scientific Games is a leading global technology provider specializing in lottery and gaming solutions. With over 50 years of experience, the company offers a broad portfolio of products including central gaming systems, self-service terminals, and innovative lottery scratch games. Their website reflects a mature enterprise with a strong market position and a focus on customer service excellence, as evidenced by recent awards. The digital infrastructure leverages modern web technologies and includes comprehensive privacy and cookie consent mechanisms, indicating a commitment to regulatory compliance. However, the absence of publicly accessible WHOIS data and security policy details suggests areas for improvement in transparency and security communication. Overall, the website is professional, well-designed, and targets lottery operators and gaming industry stakeholders worldwide.

Themedox is a small digital agency specializing in web design, product design, web development, and branding services. Founded in 2010 and based in the United Kingdom, the company positions itself as an award-winning, client-focused agency with international projects. Their website showcases a professional design with a portfolio of featured projects and client testimonials, targeting professionals and businesses seeking digital agency services. Technically, the website uses modern front-end libraries such as Bootstrap, Swiper, and Font Awesome Pro, hosted via NameCheap with DNS parking. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration is transparent and consistent with the business, though the domain age is younger than the founding year, suggesting recent domain acquisition or rebranding.

The MERKUR GROUP website represents a well-established international company specializing in the development and provision of slot machines, gaming machines, casinos, sports betting, and related financial services. With a history dating back to 1957, the company positions itself as a leader in the gaming industry with a large workforce and multiple subsidiaries. The website content is professionally presented, targeting industry partners, customers, and potential employees. Technically, the site employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is common for corporate domains, but limits transparency. Overall, the site is trustworthy and professionally maintained, with moderate room for security and compliance enhancements.

MERKUR GROUP is a well-established German company with over 65 years of experience in the gaming industry, specializing in the development and provision of slot machines, casino operations, sports betting, and related financial and eSolutions services. The company positions itself as a major player in the hospitality and gaming sectors with a large workforce and a diversified product portfolio. Their website reflects a professional and consistent brand image, targeting a general audience interested in gaming and career opportunities within the group. Technically, the website employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent mechanisms but lacks explicit security headers and incident response information, suggesting room for improvement in security transparency. Overall, the domain WHOIS data is unavailable due to TLD restrictions or privacy protection, but the website content and external references strongly support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing clear security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

Spinelli s.r.o. is a Czech-based marketing consultancy specializing in creative marketing solutions, business consulting, brand building, HR marketing, and marketing communication. The company targets businesses seeking to improve their brand presence and operational success through tailored marketing strategies. The website presents a professional image with clear service offerings and notable client references, positioning Spinelli as a trusted partner in the marketing sector within the Czech Republic. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, uses web fonts and icons for design consistency, and implements a cookie consent mechanism compliant with GDPR standards. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, while HTTPS is presumably enabled (based on URL schema), explicit security headers and policies are not visible in the provided data. The absence of WHOIS registration details limits the ability to fully verify domain legitimacy and ownership, which is a moderate risk factor. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Spinelli's website reflects a credible and professional marketing consultancy with moderate technical maturity and privacy compliance. The main risk lies in the lack of publicly available WHOIS data, which should be addressed to enhance trust and transparency.

Böllhoff is a globally recognized leader in joining technology, specializing in fastening and assembly solutions primarily for the manufacturing and automotive sectors. The company positions itself as a competence leader with a strong emphasis on innovation and quality, supported by ISO certifications. Their website reflects a professional and consistent brand image targeting industrial clients and suppliers. Technically, the site employs modern technologies such as Google Tag Manager and Usercentrics for consent management, hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a public vulnerability disclosure or incident response page is noted. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the lack of WHOIS data reduces domain trustworthiness, suggesting privacy protection or registration anomalies. Overall, the website is safe, professional, and trustworthy, with room for improvement in transparency and accessibility.

NTN Europe is a well-established manufacturer and provider of bearings, linear modules, and related industrial components, serving sectors such as automotive, aerospace, and manufacturing. The company offers a broad range of products and services including technical assistance, product analysis, and training, supported by online configurators and e-commerce tools. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal CMS, uses modern web technologies, and is hosted via a reputable registrar. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and policies could be improved. Privacy compliance is strong with clear policies and GDPR-aligned consent. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content blocking.

Rubena, s.r.o. is a Czech manufacturing company specializing in a wide range of rubber products including V-belts, air springs, tyres, ice hockey pucks, and rubber molded parts. The company operates multiple e-commerce platforms to sell its products and supports multiple languages, indicating a focus on international markets. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern tracking and consent management tools such as Google Analytics and CookieScript, and employs JavaScript frameworks like Naja for enhanced user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response contacts could be improved. WHOIS data is privacy protected, which is common for EU domains, and does not raise immediate concerns. Overall, the website presents a trustworthy and professional image suitable for its industrial manufacturing business.

SKF is a global enterprise specializing in manufacturing and supplying bearings, bearing units, seals, lubrication solutions, and maintenance services across various industrial sectors worldwide. The website content is primarily in Finnish and targets B2B customers, emphasizing SKF's commitment to reducing friction and advancing industrial progress. The site uses modern web technologies including Angular and integrates consent management and performance monitoring tools, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS usage and consent mechanisms in place, but lacks explicit security headers and published privacy or terms policies. WHOIS data is unavailable, which slightly impacts trust but the brand presence and content quality support legitimacy. Overall, the website is professional and functional with room for improvement in compliance and security transparency.

Mars Czech promotional website serves as a regional marketing platform for Mars, Incorporated, focusing on brand promotions, initiatives, and consumer engagement within the Czech Republic. The site features official Mars branding and links to global Mars social media channels, reinforcing its legitimacy and corporate alignment. The business model centers on consumer goods promotion and marketing campaigns tailored to the local market. Technically, the site employs modern JavaScript modules and the Vue.js framework, with Bootstrap and FontAwesome for styling and icons, indicating a contemporary front-end approach. However, no CMS or hosting provider details are evident, and performance is moderate with basic SEO and accessibility features. Security posture is moderate; HTTPS is assumed but no security headers or incident response information are present. Privacy compliance is strong with clear links to comprehensive privacy, cookie, and legal policies hosted on mars.com, though no cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in security and contact transparency.

The website www.foodora.cz is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) challenge page requiring CAPTCHA verification. This security measure blocks automated access and prevents retrieval of any meaningful website content, including business information, policies, or contact details. The WHOIS lookup for the domain returned no data, indicating either privacy protection or a domain registration issue, which further limits trust and transparency. The technical infrastructure includes advanced bot mitigation technologies such as PerimeterX and Google reCAPTCHA Enterprise, demonstrating a focus on security but also limiting external analysis. Overall, the site’s security posture is strong in terms of bot protection but lacks visible security headers or accessible compliance documentation. The lack of accessible content and WHOIS data results in a low legitimacy and trust score.

Webstack is a technology-focused conference primarily targeting web developers, including Laravel artisans and software developers, with a focus on full-stack development and AI. Founded in 2023 and based in Slovakia, it organizes annual events in Bratislava, offering sponsorship and ticket sales as key business activities. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it employs modern JavaScript libraries and frameworks such as Alpine.js, Flickity, FancyBox, and Google reCAPTCHA v3, hosted on Websupport infrastructure with DNSSEC enabled and HTTPS enforced, indicating a mature digital presence. Security posture is strong with best practices observed, though the absence of a cookie consent mechanism and published security policies are areas for improvement. Overall, the domain registration details are consistent and legitimate, supporting the trustworthiness of the business. The site integrates social media and marketing tools like Facebook Pixel and Plausible Analytics, with moderate user tracking and basic privacy compliance. The website is safe for general audiences and does not contain any adult or questionable content.

Criss Cross by Triad is a Slovak media team operating within the creative agency TRIAD, specializing in media planning, buying, and campaign optimization with a strong creative integration. The company targets Slovak businesses seeking innovative and effective media solutions, leveraging a multi-channel approach including online, radio, TV, OOH, and influencer marketing. Their market position is strong locally, supported by award-winning campaigns and a reputation for creativity and efficiency. Technically, the website employs modern frameworks such as Bootstrap 5, jQuery, and AOS, hosted on Websupport with DNSSEC and HTTPS enabled, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and cookie consent mechanisms, though additional security headers and formal policies could enhance protection. Overall, the site is professional, well-branded, and compliant with GDPR through linkage to the parent company's privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible online presence.

TRIAD Advertising is a Slovak-based creative agency founded in 2023, specializing in brand strategy, campaign ideation and execution, purpose-driven projects, and creative tech activations. The agency serves a diverse clientele including global brands and small businesses, positioning itself as an ingenious and honest partner that blends creativity with technology. Their portfolio demonstrates strong market presence with over 200 internationally recognized campaigns and a broad range of services tailored to maximize client budgets and impact. Technically, the website employs modern web technologies including jQuery and custom JavaScript, uses Google Fonts, and is hosted on a Slovak hosting provider. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. However, some improvements could be made in accessibility and security headers implementation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy. No cookie consent mechanism is present, which may affect GDPR compliance. No explicit security or incident response policies are published. The WHOIS data is consistent with the business claims, indicating a legitimate and trustworthy domain. Overall, the website is professional, secure, and credible with minor gaps in privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

MVKM s.r.o. is a Czech Republic based marketing agency specializing in performance marketing, PPC campaigns, SEO, social media management, and video production. The company targets businesses seeking measurable marketing results and ROI, positioning itself as a small but professional agency with over 20 satisfied clients and a high client satisfaction rate. The website is modern, well-designed, and mobile-optimized, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and React, with service workers for enhanced performance. Security posture is good with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is limited, with no dedicated privacy policy page found, though a cookie consent banner is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

Kultura Jablonec, p.o. is a publicly funded cultural organization supported by the statutory city of Jablonec nad Nisou, Czech Republic. It manages local cultural venues including cinemas, event spaces, and tourist information centers, organizing a variety of cultural and social events. The website targets local residents and visitors interested in cultural activities and community events. The business model is that of a government-supported non-profit entity focused on cultural promotion and event management. The organization maintains a consistent brand presence and offers clear contact channels and social media engagement.

Kultura Jablonec, p.o. is a publicly funded cultural organization supported by the statutory city of Jablonec nad Nisou. It manages local cinemas, cultural venues, and organizes a variety of cultural and social events aimed at residents and visitors. The organization plays a key role in the cultural life of the region, offering event spaces for rent, ticket pre-sales, and tourist information services. The website reflects a medium-sized entity with a clear focus on community engagement and cultural promotion. Technically, the site is built on WordPress using the Avada theme and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is good with HTTPS enforced and spam protection via Google ReCAPTCHA, though additional security headers could enhance protection. Privacy compliance is basic, with a cookie policy present but no explicit privacy or terms of service pages. Contact information is comprehensive and prominently displayed, supporting business credibility. The absence of WHOIS data limits domain trust assessment but the website content and presentation indicate a legitimate and professional organization.

The website kristalovyraj.cz represents a retail business specializing in Czech glass, jewelry, and related decorative products, including a creative bead workshop for children. It positions itself as the largest Czech glass and jewelry retail center in Central Europe, targeting a general audience primarily within the Czech Republic. The business model focuses on in-person retail sales combined with experiential creative workshops, supported by partnerships with local cultural and tourism organizations. Technically, the website is built on the Mozello CMS platform, utilizing common JavaScript libraries such as jQuery and Fancybox, and is hosted via Amazon CloudFront CDN. The site demonstrates good mobile optimization and basic SEO practices but lacks advanced security headers and explicit privacy and terms of service documentation. Cookie consent mechanisms are implemented, linking to a cookie policy hosted on the Mozello platform. From a security perspective, the site uses HTTPS (assumed from CDN usage), but no security headers were detected in the provided data. There is no exposed sensitive data or known vulnerabilities from the analysis, but the absence of WHOIS data and domain registration details reduces trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the security posture is moderate but could be improved with better transparency and security best practices. The overall risk assessment suggests the website is functional and legitimate based on content and partner affiliations but lacks critical domain registration transparency and formal privacy documentation. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

The website represents Spolek sympozia rytého skla, a non-profit cultural association dedicated to organizing international symposia on engraved glass art. It showcases a history of events dating back to 1996 and upcoming events in 2025, targeting artists, cultural enthusiasts, and the general public interested in glass art. The site is built on WordPress with multilingual support and uses common web technologies such as jQuery and Featherlight lightbox. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policies. The absence of WHOIS data limits domain registration insights, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy within its niche but could improve privacy and security practices.

Krátoška Chemin, spol. s r.o. is a Czech Republic-based distributor of chemical raw materials and specialties serving various industrial sectors since 1991. The company operates modern warehouses and uses its own transport fleet to provide flexible Just-in-Time deliveries. Their website reflects a professional business presence with clear information about certifications and company background. Technically, the website uses modern frontend technologies such as Bootstrap and WebFont Loader, is mobile optimized, and performs moderately well. Security posture is adequate with HTTPS enabled but lacks important security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis but the business information and certifications support legitimacy. Overall, the website is professional and trustworthy with room for security and privacy improvements.

fermacell® is a German-based manufacturer specializing in gypsum fiber boards and related construction materials, operating under James Hardie Europe GmbH. The company offers innovative building solutions including fire and sound protection products and floor heating systems like Therm25™. Their market position is strong within the European construction sector, supported by industry awards and a professional digital presence. The website is well-structured, providing comprehensive product information and digital tools for planning and building professionals. Technically, the site uses ASP.NET with Kentico CMS, integrates modern tracking and consent management tools, and is hosted with Cloudflare DNS services. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy. Overall, the site is professional, trustworthy, and suitable for its target audience of construction industry stakeholders.

James Hardie Europe is a leading manufacturer and distributor of fiber cement facade products, serving construction professionals and homeowners in the Netherlands. The company offers a range of products including Hardie® Panel, Hardie® Plank, and Hardie® Shield, emphasizing sustainability, durability, and aesthetic appeal. The website reflects a mature business with a strong market position and a comprehensive product offering. Technically, the site is built on Kentico CMS using ASP.NET WebForms, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security and incident response policies are not publicly visible. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Institut kontaktní práce s.r.o. is a specialized educational organization founded in 2019, focused on providing accredited training and professional development for contact workers in low-threshold social services in the Czech Republic. The website reflects a well-established niche player with strong ties to the parent organization Česká asociace streetwork, z. s. (ČAS). The business model centers on delivering accredited courses and tailored training programs to social service professionals, supported by a consistent brand and clear communication channels. The target audience includes social workers, contact workers, and related professionals seeking career growth and skill enhancement.

The website pracenaulici.cz represents the Česká asociace streetwork, a Czech non-profit umbrella organization focused on low-threshold social services addressing children, youth, addiction, and homelessness. The site provides campaign information and links to related social service areas. The organization appears to be small-sized and founded in 2018, with a clear mission to support vulnerable populations in the Czech Republic. The website is professionally designed with good content relevance and clear navigation, optimized for mobile devices. Technically, it uses standard web technologies including JavaScript, CSS, and Google Analytics for visitor tracking, with a cookie consent mechanism implemented to comply with privacy regulations. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. Security posture is moderate with HTTPS implied but no detailed security headers detected. No contact information or incident response details are published, limiting transparency. Overall, the website is safe, trustworthy, and serves a general audience without adult or explicit content.

Restart Shop is a Czech non-profit social enterprise operated by Česká asociace streetwork, o.p.s., focused on sustainability through the sale of donated goods and providing training employment to socially disadvantaged individuals. The website presents detailed information about their projects, social impact, and contact details, supported by multiple EU and local government grants. The technical infrastructure is modern with use of JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, hosted on a Czech provider. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

KELER KSZF Zrt. operates as a leading clearing house in Hungary and Central and Eastern Europe, providing clearing, central counterparty, risk management, and guarantee services primarily for financial and energy markets. The company is EMIR authorized and has nearly 20 years of experience, serving multiple market platforms including Budapest Stock Exchange and various energy exchanges. The website reflects a professional business presence with clear service offerings and market focus. Technically, the site uses modern frameworks such as Next.js and React, with Google Tag Manager for analytics and cookie consent management. Security posture is strong with HTTPS and security headers, though explicit privacy and terms policies are missing. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is well-structured and trustworthy but could improve privacy compliance and contact transparency.

KDPW_CCP S.A. operates as a central counterparty clearing house in Poland, providing clearing, risk management, collateral management, and reporting services primarily for organized and non-organized financial and commodity markets. The website presents a professional and comprehensive overview of its services, targeting financial market participants and counterparties. The company holds a significant market position within Poland's financial infrastructure, supported by regulatory compliance and transparent communication. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integration of Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and offers good navigation and content relevance, although accessibility features could be improved. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some HTTP security headers and does not publish explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain trust verification. Strategic improvements in security headers and incident response transparency would further strengthen its security and compliance stance.

Asociácia priemyselných zväzov a dopravy (APZD) is a Slovak association representing employer and business unions in the industrial and transport sectors. The organization acts as a key partner for Slovak industry, providing advocacy, education, analytical services, and event organization. The website reflects a professional and active entity with a clear focus on supporting Slovak businesses in these sectors. Technically, the site is built on WordPress with modern SEO and tracking tools, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some improvements in security headers and policies are recommended. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

Grand Hotel**** Bachledka Strachan is a well-established hospitality business located in Ždiar, Slovakia, offering luxury accommodation, wellness, gastronomy, and seasonal activities. The website reflects a mature digital presence with multilingual support and a strong focus on customer experience. The business is positioned as a premier grand hotel with high customer satisfaction and a comprehensive range of services targeting tourists and travelers seeking premium lodging and relaxation experiences. Technically, the site is built on WordPress with modern libraries and integrations such as Google Tag Manager and MailerLite, supporting marketing and analytics needs effectively. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital asset for the business.

The BKMS System website is currently undergoing maintenance and displays a minimal placeholder page in English and German. The business behind the site is EQS Group AG, a medium-sized technology company specializing in compliance and whistleblowing systems. The domain is well-established, created in 2004, and registered through a reputable registrar, indicating legitimacy and stability. However, the current website content is minimal, lacking critical elements such as privacy policies, cookie consent mechanisms, contact information, and security disclosures. From a technical perspective, the site uses Cloudflare DNS but does not show evidence of HTTPS or security headers in the provided data. There are no scripts, analytics, or tracking technologies detected, which limits the ability to assess digital maturity fully. The site’s SEO, accessibility, and mobile optimization cannot be evaluated due to the maintenance page’s minimal content. Security posture is weak based on the available data, with no HTTPS detected, no security headers, and no published security or incident response policies. The domain registration is consistent with the business claims, but DNSSEC is not enabled, representing a minor security gap. There are no signs of vulnerabilities or malicious content, and the site content is safe for general audiences. Overall, the website currently provides limited information and functionality, resulting in a low AI score. Strategic improvements should focus on restoring full website content, implementing HTTPS, publishing privacy and cookie policies, adding security headers, and providing clear contact and incident response information to enhance trust and compliance.

BNP Paribas is a major international banking and financial services institution headquartered in France. The website analyzed is a subdomain (mediahub.bnpparibas) currently under maintenance, providing corporate and brand information in multiple languages. The business model focuses on banking and financial services with a strong market position. The site uses common web technologies such as jQuery and Bootstrap but lacks advanced CMS or frameworks. Security posture is moderate with domain registration locks but missing DNSSEC and visible HTTPS configuration. No privacy or cookie policies are present, and no contact information is provided on the maintenance page. Social media presence is strong with official accounts linked. Overall, the site is professional but currently limited in content due to maintenance.

BNP Paribas is a major European and international banking group with a diversified business model spanning corporate, institutional, commercial, personal banking, and investment services. The website reflects a mature digital presence with comprehensive content targeting a broad audience including investors, clients, and job seekers. The technical infrastructure employs modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and explicit security policies are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness consistent with a leading financial institution.

Morgan Stanley's client login portal provides a secure and professional interface for wealth management clients to access their financial accounts and manage investments. The website leverages modern web technologies including Adobe Target for personalized marketing and Glia for customer engagement, hosted likely on Akamai infrastructure to ensure performance and availability. The site demonstrates a strong security posture with HTTPS enforcement and browser compatibility checks, although explicit security headers and privacy policies are not present on the login page, indicating room for improvement in transparency and compliance. Overall, the portal aligns with enterprise standards for financial services platforms, offering a trustworthy and functional user experience.

The website https://particuliers.sg.fr/ represents Société Générale's retail banking and insurance services, targeting individual customers primarily in France. It serves as a portal for account access and product discovery, reflecting the merger of Société Générale and Crédit du Nord banks. The site exhibits professional branding, consistent messaging, and promotes official mobile applications, indicating a mature digital presence. Technically, the site uses a custom Société Générale JavaScript framework with modern asynchronous features and standard web technologies. Security measures include HTTPS and frame busting scripts, though explicit security headers could be further confirmed. The absence of WHOIS data reduces domain trust slightly but does not detract from the site's legitimacy given the strong brand presence. Privacy and cookie policies were not detected in the analyzed content, suggesting an area for improvement in compliance transparency. Overall, the site is well-structured, secure, and trustworthy for its banking audience.

Hitrádio Faktor is a regional Czech radio station offering multiple internet radio streams, podcasts, and local news content. The website serves Czech-speaking audiences interested in music and regional entertainment. The business operates under the parent company RádiaCZ and has been established since 2005, indicating a mature presence in the media sector. The site provides live streaming, playlists, contests, and a listener club to engage its audience. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and Foundation CSS framework. It is hosted under the REG-ACTIVE24 registrar and shows good mobile optimization and SEO practices. The site uses HTTPS with a good SSL configuration and includes CSRF tokens for security. However, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is solid with no visible vulnerabilities or exposed sensitive data. Tracking and analytics are implemented moderately, with Google and Facebook services used for user behavior analysis. The site lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Overall, the website is professional and trustworthy with good content quality and technical implementation. Strategic recommendations include adding comprehensive privacy and security policies, implementing a security.txt file, and enhancing accessibility features to improve compliance and user trust.

Česká golfová federace (ČGF) is the official governing body for golf in the Czech Republic, providing comprehensive services including tournament organization, player rankings, club information, and educational resources. The website serves as a central hub for Czech golf players, clubs, and enthusiasts, offering detailed information about golf courses, competitions, and federation activities. The site is professionally designed, mobile-optimized, and integrates modern web technologies such as Google Analytics and Facebook SDK for analytics and social media engagement. Privacy and cookie policies are implemented with user consent mechanisms, reflecting compliance with GDPR standards. However, the absence of WHOIS data for the domain reduces transparency and trust slightly, although the website content and structure strongly indicate legitimacy. Security posture is good with HTTPS enforced and security headers present, but explicit security and incident response policies are not publicly available. Overall, the site is a reliable and professional resource for the Czech golf community.

ŠUMAVSKÝ PRAMEN a.s. operates as a regional supplier of bottled spring water and related products such as water dispensers (aquamaty), coffee, and syrups under the Estian brand. The company targets both general consumers and businesses in the Czech Republic and Slovakia, emphasizing health, hydration, and quality. Their business model includes product sales, rentals, and free delivery services, supported by a professional website and active social media presence. The website content is well-structured, informative, and designed to engage customers with product offerings and company news via a blog.

IT Děčín s.r.o. operates the e-commerce website hpdecin.cz, specializing in the retail sale of computers, notebooks, printers, multifunction devices, consumables, and software primarily focused on HP products. The company targets retail customers and businesses within the Czech Republic, positioning itself as a specialist local retailer with a broad product offering and customer advisory services. The website demonstrates a professional and consistent brand presence with clear navigation and comprehensive product categorization. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, reCAPTCHA v3, and integrates with local services such as Seznam.cz and Mapy.cz. The site is built on a CMS platform likely VirtueMart, optimized for mobile devices, and includes accessibility features at a basic level. Performance is moderate with good SEO practices and structured data enhancing search visibility. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. Cookie consent is managed with Google Consent Mode, indicating privacy compliance efforts. However, explicit security headers such as CSP and HSTS are not confirmed and should be implemented to strengthen security posture. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and registration details. This is a notable risk factor despite the professional appearance and trust signals on the website. Overall, the site is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, establishing a clear security policy and incident response contact, and improving accessibility compliance to further strengthen trust and security.

Sunset Drive s.r.o. is a small creative design studio based in Prague, Czech Republic, specializing in design, DTP, graphics, and multimedia portfolios focused on sports such as golf and hockey. The company targets creative professionals and businesses seeking specialized design services. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies including JavaScript and Google Analytics for visitor tracking. While the site presents a professional design and clear navigation, it lacks comprehensive privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers. The absence of WHOIS data reduces transparency but the social media presence and structured data lend credibility.

Amenity Apartmány Perná is a hospitality business offering fully equipped apartments with continental breakfast in the wine region of Perná, Czech Republic. The company targets tourists, families, and corporate groups seeking accommodation and event hosting near the Pálava hills. Their services include apartment stays, bike rentals, conference facilities, and catering. The website is professionally designed using WordPress with modern plugins and SEO optimization, providing a good user experience and mobile responsiveness. Privacy and cookie policies are implemented with GDPR compliance, and contact information is clearly presented. However, the WHOIS data for the domain is unavailable, which limits the ability to fully verify domain registration legitimacy. Overall, the site demonstrates a solid digital presence with moderate security posture and good privacy practices.

Hotel Koflík is a small four-star hotel located in a historic building in the center of Strakonice, Czech Republic. The hotel offers a limited number of rooms and apartments with standard amenities and includes breakfast. The website is professionally designed using the Wix platform, featuring clear navigation and relevant business information. The technical infrastructure relies on Wix's hosting and CMS services, with Google Analytics and Tag Manager integrated for visitor tracking. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features. No WHOIS data is available from the CZ.NIC server, indicating privacy protection or data unavailability, which is common for small businesses. Overall, the site presents a trustworthy and professional online presence for a local hospitality business.

Clicktripz is a specialized digital marketing company focused on the travel and destination marketing sector. Established in 2010, it operates one of the largest travel advertising networks globally, providing travel brands with access to a vast audience of travel shoppers. The company leverages direct publisher integrations and proprietary targeting technologies to deliver high engagement and conversion rates. Their business model centers on CPC pricing, ensuring advertisers pay for qualified leads rather than impressions. The website reflects a mature digital presence built on WordPress with modern plugins and tools, including GDPR-compliant cookie consent and Google Analytics integration. Technically, the site uses a robust WordPress CMS with Elementor for design and layout, Google reCAPTCHA v3 for form security, and MonsterInsights for analytics. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing search and social media visibility. Security practices include HTTPS enforcement and consent management, though explicit HTTP security headers are not detected in the provided data. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. The use of reCAPTCHA and cookie consent aligns with privacy regulations. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not detract from the site's legitimacy given the professional content and branding. Overall, Clicktripz presents a credible, professional digital marketing platform for the travel industry with strong technical foundations and privacy compliance. Strategic enhancements in security transparency and contact information could further strengthen trust and compliance.

InstaGYM is a Slovak-based company specializing in organizing fitness camps both domestically and internationally. They position themselves as a market leader in this niche, combining attractive destinations with experienced trainers and verified services. Their business model focuses on both physical fitness camps and providing online services of trainers and nutrition advisors, targeting fitness enthusiasts with busy lifestyles. The website is built using modern JavaScript frameworks (Nuxt.js) and integrates several analytics and marketing tools such as Facebook Pixel, Crisp Chat, and Exponea Analytics. While the site is visually professional and mobile-optimized, SEO is limited due to the robots meta tag preventing indexing. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies or vulnerability disclosures. Overall, the site is safe, trustworthy, and professionally presented, though it would benefit from enhanced privacy compliance and SEO improvements.

The website at boataround.com is currently inaccessible, returning a 403 Forbidden error page with no visible content, metadata, or interactive elements. This prevents any meaningful analysis of the site's business offerings, user experience, or technical infrastructure. The domain is registered with Amazon Registrar, Inc. since 2016 and is actively maintained with an expiry in 2026, indicating a legitimate and established presence. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. From a technical perspective, no information about the technology stack, CMS, or hosting beyond the registrar is available. Security headers, SSL configuration, and privacy compliance cannot be evaluated due to the blocked content. The WHOIS data shows no privacy protection and consistent registration details, supporting domain legitimacy. Security posture evaluation is constrained by the absence of accessible content and security headers. No vulnerabilities or security best practices can be identified. Privacy and compliance policies such as GDPR, cookie consent, or incident response contacts are not found. The site does not expose any contact information or social media links, limiting business credibility assessment. Overall, the site is currently non-functional for external users, resulting in a low AI score and a recommendation to resolve access restrictions to enable proper evaluation and user engagement.

Flipo.at is an established online travel agency specializing in flight ticket bookings, hotel reservations, and car rentals primarily targeting German-speaking customers in Austria. The company, operating under pelicantravel.com s.r.o., leverages over 20 years of experience and serves more than 3 million satisfied customers, positioning itself as a trusted player in the transportation sector. The website offers a comprehensive user experience with clear navigation, multiple language and currency options, and a modern design tailored for desktop and mobile users. Technically, the site employs a modern AngularJS framework combined with various analytics and marketing tools such as Google Analytics, Facebook Pixel, New Relic, and Exponea. The infrastructure appears robust with CDN usage and good mobile optimization. However, some security best practices like explicit security headers are not visibly implemented, and no public security policy or incident response information is provided. From a security and compliance perspective, the website enforces HTTPS, provides a detailed cookie consent mechanism aligned with GDPR, and displays trust badges including IATA membership and PCI compliance. Contact information is transparent and accessible, enhancing business credibility. The absence of WHOIS data limits domain registration trust analysis but does not detract significantly from the overall legitimacy based on website content and trust signals. Overall, Flipo.at demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in security transparency and WHOIS data availability could further enhance trust and compliance standing.

Flipo.de is an established online travel agency specializing in flight ticket bookings, hotel reservations, car rentals, and gift vouchers primarily targeting German-speaking customers. The company operates under pelicantravel.com s.r.o., based in Slovakia, with over 20 years of industry experience and a customer base exceeding 3 million. The website offers a comprehensive and user-friendly platform with multilingual support and integration of various travel-related services. Technically, the site leverages modern JavaScript frameworks like AngularJS and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published incident response policies, indicating room for improvement. Overall, Flipo.de presents a professional, trustworthy, and compliant online presence with solid business credibility and good technical implementation.

Flipo.pl operates as an established online travel agency primarily serving the Polish market, offering affordable flight tickets, car rentals, and gift cards. The business is part of pelicantravel.com s.r.o., a Slovak company with over 20 years of experience and a customer base exceeding 3 million. The website demonstrates a professional and user-friendly design with comprehensive travel search functionalities and multiple payment options. Technically, the site leverages modern web technologies including AngularJS, Google Tag Manager, and various analytics and marketing tools, ensuring a robust digital presence. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms, though it lacks a publicly available security policy or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not significantly detract from the overall trustworthiness given the strong business signals and certifications. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to further strengthen security posture.