Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,185001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
30,701–30,750 of 99,066
Handicare Salvaescaleras Españahandicare-salvaescaleras.es
Healthcare · Spain
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Handicare Salvaescaleras España is a well-established company specializing in stairlift and platform lift solutions for people with reduced mobility. The company leverages over 130 years of experience and a global presence to offer personalized, safe, and certified mobility products primarily targeting elderly and mobility-impaired individuals in Spain. Their business model includes direct sales through certified partners, installation, and after-sales service with warranty support. The website is professionally designed, mobile-optimized, and provides comprehensive information about products, services, and contact options. Technically, the site uses modern analytics and tracking tools with a strong focus on privacy compliance, including a granular cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website and business demonstrate high credibility and trustworthiness.
Handicare Stairlifts UKhandicare-stairlifts.co.uk
Healthcare · United Kingdom
75Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Handicare Stairlifts UK is a reputable and established provider of stairlift and mobility solutions with a strong market presence in the UK and Europe. The company offers a comprehensive range of stairlift products tailored to various staircase types and customer needs, supported by free consultations, home visits, and detailed product information. Their website reflects a professional and user-friendly design, with clear navigation and multiple contact options, including phone, address, and a detailed contact form. Technically, the site employs modern analytics and tracking tools with GDPR-compliant cookie consent mechanisms, ensuring privacy compliance. Security measures such as HTTPS and reCAPTCHA are implemented, although some security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting the company's legitimacy.
Handicare Trapliften Nederlandhandicare-trapliften.nl
Healthcare · Netherlands
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Handicare Trapliften Nederland is a well-established company specializing in the sale, rental, and servicing of stairlifts tailored to various types of stairs. With over 135 years of experience and a strong market presence in the Netherlands, the company offers personalized advice, fast installation, and a range of new and secondhand products. The website reflects a mature digital infrastructure with multiple analytics and marketing tools integrated, alongside a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and a public security policy suggests room for improvement. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.
Handicare Monte Escaliers Francehandicare-monte-escaliers.fr
Healthcare · France
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Handicare Monte Escaliers France is a well-established company specializing in the manufacturing and distribution of custom stairlifts designed to improve mobility and independence for individuals with reduced mobility. With over 135 years of experience and a large user base, the company holds a strong market position in the healthcare accessibility sector in France. Their business model leverages a network of certified local partners to provide personalized consultation, installation, and after-sales services. The website reflects a professional and trustworthy brand with comprehensive content, certifications, and customer testimonials.
Savaria Stairliftsavariastairlift.com
Healthcare · Canada
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Savaria Stairlift is a healthcare-focused company specializing in mobility products such as stair lifts, wheelchair lifts, home elevators, and ceiling lifts. The company targets individuals seeking to maintain independence and accessibility in their homes, including seniors and people with mobility challenges. With a North American manufacturing base and a network of local installers, Savaria positions itself as a reliable provider of comprehensive home mobility solutions. The website reflects a medium-sized business founded recently in 2023, with a professional online presence and clear product offerings. Technically, the website is built on WordPress using WooCommerce and Elementor, supported by SEO and analytics tools like Yoast SEO, Google Tag Manager, and Facebook Pixel. Hosting is provided by DreamHost, LLC. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features could be improved. Security is robust with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security or incident response policies are published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Contact information is available via a toll-free phone number and contact form, but no direct company emails were found. The domain registration is consistent with the business claims, with no privacy protection and a domain age appropriate for the company's founding date. Overall, Savaria Stairlift presents a trustworthy and professional digital presence with solid security and privacy practices. Recommendations include enabling DNSSEC, publishing a security.txt file, enhancing accessibility, and adding explicit security policies to further strengthen trust and compliance.
Handicare Trapliften Belgiëhandicare-trapliften.be
Manufacturing · Belgium
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Handicare Trapliften België is a well-established company specializing in the manufacturing and sale of stairlifts for both straight and curved stairs. With a history dating back to 1886 and a strong international presence, the company offers a comprehensive range of products and services including sales, rentals, maintenance, and custom solutions. Their website reflects a professional and trustworthy brand with clear contact information, certifications, and compliance with privacy regulations. Technically, the site uses modern analytics and tracking tools with a robust cookie consent mechanism, though some security headers could be improved. Overall, the site is accessible, well-structured, and optimized for mobile users, supporting a positive user experience.
ČEZNET s.r.o.ceznet.cz
Energy · Czech Republic
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ČEZNET s.r.o. is a Czech-based internet service provider specializing in high-speed optical fiber internet (FTTH) and IPTV services. As part of the ČEZ Group, a major energy conglomerate, ČEZNET leverages strong corporate backing to offer reliable and advanced telecommunications solutions primarily targeting residential and business customers within the Czech Republic. The company emphasizes quality, stability, and customer-centric service, supported by a modern fiber-optic infrastructure and comprehensive customer support channels. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google reCAPTCHA, and Cookiebot for consent management, ensuring a responsive and user-friendly experience. The site integrates tracking and advertising tools such as Adform and Google Tag Manager, balanced with GDPR-compliant privacy and cookie policies. Performance and accessibility are well addressed, with good SEO practices and mobile optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with a cookie consent mechanism in place. While explicit security headers are not visible in the HTML, the overall posture is good with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong corporate branding and content quality. Overall, ČEZNET presents a professional, trustworthy, and well-maintained digital presence aligned with its business objectives. Strategic recommendations include enhancing explicit security header implementation and continuous monitoring of third-party scripts to maintain security and compliance.
Jak přežít dluhyjakprezitdluhy.cz
Finance · Czech Republic
62Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Jak přežít dluhy is a Czech Republic based small business specializing in debt advisory services, including assistance with executions and debt relief. The website offers free expert consultation targeting individuals struggling with expensive loans or execution proceedings. The business operates primarily in the finance sector and has been active since 2017. Technically, the website is built on WordPress with Yoast SEO for optimization and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and security headers, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.
- MediMedi
medimedi.cz
Healthcare · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MediMedi is a Czech-based e-commerce company specializing in the sale of medical diagnostic equipment, laboratory supplies, protective healthcare products, and supplements. The company targets healthcare professionals, clinics, senior homes, and general households, positioning itself as a niche supplier in the healthcare sector within the Czech Republic. Their website is built on the Shoptet e-commerce platform, featuring a professional design with clear navigation and product categorization. The site supports multiple currencies and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, the use of an outdated jQuery version and the absence of some security headers such as Content-Security-Policy and X-Frame-Options present potential vulnerabilities. The lack of a visible privacy policy page and incident response contacts suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a good balance of business functionality and technical implementation but would benefit from updates to its security posture and privacy compliance to enhance trustworthiness and reduce risk.
Związek Cyfrowa Polskacyfrowapolska.org
Technology · Poland
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Związek Cyfrowa Polska is a Polish industry association representing the digital and electronics sector, focusing on advocacy, compliance, and sector development. The organization serves as a key voice for innovative and rapidly expanding technology companies in Poland, offering services related to copyright, environmental regulations, taxation, public procurement, and digital radio transformation. The website reflects a professional and consistent brand image with clear communication of its mission and activities. Technically, the site is built on WordPress using modern themes and plugins, providing a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no visible security or incident response policies are published. Privacy compliance is partial, with a cookie consent mechanism but no privacy policy or terms of service pages found. Overall, the domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.
Media · Hungary
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Magazin Centrum, operated by Central Médiacsoport Zrt., is a leading Hungarian magazine publisher offering a comprehensive subscription platform for both print and digital magazines. The website mc.hu provides a user-friendly interface with clear navigation, multiple subscription options, and promotional offers, targeting Hungarian magazine readers. The technical infrastructure leverages modern web technologies including Next.js, Google Analytics, Hotjar, and a GDPR-compliant consent management platform, ensuring a mature digital presence. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and privacy policies in place, although some security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with data protection regulations.
Obec Líšniceobec-lisnice.cz
Government · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Obec Líšnice operates an official municipal website serving the local community of Líšnice in the Czech Republic. The site provides comprehensive information about the municipality, including news, official documents, event calendars, and contact details. It targets residents and visitors seeking local government services and updates. The website is built on a custom CMS platform by Galileo Corporation and uses modern web technologies such as jQuery, Bootstrap, and Swiper for UI components. Mobile optimization and accessibility features are well implemented, ensuring good user experience across devices. Security posture is moderate with HTTPS enforced and cookie consent mechanisms present, but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and structure indicate a legitimate government entity. Overall, the site is professional, trustworthy, and serves its intended audience effectively.
- UUzeniny Příbram, a.s.
uzeninypribram.cz
Manufacturing · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Uzeniny Příbram, a.s. is a Czech meat processing company operating production plants in Příbram and Zábřeh na Moravě. The company focuses on pork and beef slaughtering and producing high-quality meat products such as hams and specialties with reduced sodium content. The website provides basic company and production information primarily targeting general consumers interested in their meat products. Technically, the website uses standard web technologies including Google Fonts, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is accessible, uses HTTPS, and implements a cookie consent mechanism, but lacks a privacy policy and security headers, which are important for compliance and security posture. No WHOIS data was found, which limits domain trust verification and reduces overall legitimacy confidence. The website does not expose any critical security vulnerabilities but could improve in privacy compliance and security best practices.
- MUDr. Zuzana Plesníková
zubar-zborovice.cz
Healthcare · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website represents a small local dental clinic operated by MUDr. Zuzana Plesníková in Zborovice, Czech Republic. It offers preventive, therapeutic, and restorative dental services targeting local patients. The site is built on WordPress using the Divi theme, with standard plugins and tracking tools such as Google Analytics and Google Tag Manager. The technical infrastructure is modern and functional, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, likely due to privacy protection, which limits domain trust verification. Overall, the site is professional and trustworthy for its business scope but could improve compliance and security transparency.
Motoforzamotoforzafairings.com
Transportation · Czech Republic
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Motoforza is a Czech Republic based manufacturer and retailer specializing in composite motorcycle fairings and accessories. With over 30 years of experience, the company serves a niche market of motorcycle enthusiasts and racers by offering high-quality aftermarket parts tested in professional racing series. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product categories. Technically, the site employs modern analytics and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity, alongside live chat support. Security posture is solid with HTTPS enforced and secure form handling, though improvements are needed in cookie consent and security headers. The absence of WHOIS registration data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the business presents a credible and professional online presence with room for enhanced privacy compliance and security transparency.
- MUDr. Marie Jurnová
prakticky-lekar-trinec.cz
Healthcare · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website prakticky-lekar-trinec.cz represents a small healthcare business operated by MUDr. Marie Jurnová, a general practitioner in Třinec, Czech Republic. The practice offers comprehensive preventive and treatment services including vaccinations, management of diabetes and hypertension, occupational health services, and laboratory diagnostics. The business targets adult patients locally and emphasizes quality care and patient communication. The website is built on WordPress using the Divi theme, featuring a professional design, clear navigation, and mobile responsiveness. It integrates Google Analytics and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but some backend PHP warnings and lack of security headers indicate areas for improvement. Privacy compliance is basic, lacking a privacy policy or terms of service pages. Overall, the site is trustworthy and professional but could enhance security and compliance documentation.
Synpo a.s.synpo.cz
Manufacturing · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Synpo a.s. is a Czech chemical company with over 70 years of tradition specializing in applied research and production of resins, varnishes, paints, adhesives, sealants, and polymers. The company serves both small and multinational companies, offering a broad range of products and services including accredited laboratories and custom production. Their market position is strong within the manufacturing sector, supported by a professional website and active social media presence. Technically, the website is built on the Solidpixels CMS platform, uses modern tracking tools like Google Analytics and Tag Manager, and is secured with HTTPS. However, the absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
- BBrnoKontejnery.cz
brnokontejnery.cz
Transportation · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BrnoKontejnery.cz is a Czech Republic-based small business specializing in container transport, rental, earthworks, waste removal, construction machinery rental, and related services primarily serving Brno and surrounding regions. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, targeting both individual and business customers in the construction and logistics sectors. The domain age and WHOIS data support the legitimacy and established presence of the business. Technically, the website uses a modern but standard technology stack including jQuery, Bootstrap, Owl Carousel, and Google Tag Manager for analytics. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and no CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with a privacy policy and cookie banner present, but no incident response or vulnerability disclosure policies are found. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The security posture is adequate but could be improved by adding security headers and formal policies. The business credibility is strong given the consistent WHOIS data and clear contact information. The AI overall score reflects a good quality website with room for security and privacy enhancements.
Badec Store s.r.o.badec.store
Retail · Czech Republic
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Badec Store s.r.o. operates an e-commerce website specializing in professional badminton equipment, targeting badminton players and enthusiasts primarily in the Czech Republic. The company offers a range of products including rackets, clothing, shoes, shuttlecocks, and accessories from well-known brands. The website presents a professional and user-friendly interface with clear navigation and relevant content. Technically, the site uses common web technologies such as jQuery, Google Analytics, Facebook Pixel, and custom scrollbar plugins, but does not rely on a widely known CMS, indicating a custom or proprietary platform. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.
OAK - Online Akademie GmbHonline-akademie.com
Education · Germany
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
OAK - Online Akademie GmbH is a small German-based online education provider focused on helping individuals find and pursue their professional calling with passion and success. The company offers online courses and professional training services, targeting individuals seeking career development. The website is built on the Wix platform, leveraging modern web technologies and Matomo analytics for user tracking with cookies disabled. The site presents a professional design with good mobile optimization and basic SEO features. Security posture is adequate with HTTPS enforced and some security best practices implemented, though explicit security headers and privacy policies are missing. The WHOIS data for the domain is unavailable, raising questions about domain registration status, but the website content and structured data indicate a legitimate business presence in Cologne, Germany. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and clearer domain registration transparency.
Winncare Polska Sp. z o.o.winncare.pl
Healthcare · Poland
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Winncare Polska Sp. z o.o. is a medium-sized healthcare company specializing in the design and manufacture of medical equipment for dependent persons and their caregivers. The company has a strong European presence with over 40 years of expertise and a focus on improving patient care and mobility. Their product portfolio includes patient transfer devices, rehabilitation equipment, and pressure sore prevention solutions. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, Yoast SEO, and Google Tag Manager. Security posture is strong with HTTPS, DNSSEC, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly available. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Winncarewinncare.de
Healthcare · Germany
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Winncare is a well-established European healthcare company specializing in innovative medical beds, pressure ulcer therapy products, patient handling equipment, and hygiene solutions. With over 40 years of experience and recent strategic acquisitions, Winncare has expanded its international footprint and strengthened its market position. The company targets healthcare providers, caregivers, and patients requiring specialized care products. Technically, the website is built on WordPress with modern JavaScript libraries, hosted on OVH infrastructure, and offers a good user experience with mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, supporting Winncare's credibility in the healthcare sector.
Winncarewinncare.dk
Healthcare · Denmark
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Winncare is a Denmark-based healthcare company specializing in the design and manufacture of innovative medical and rehabilitation products aimed at improving the lives of dependent individuals and their caregivers. The company offers a broad portfolio including medical beds, pressure relief mattresses, lifting aids, fall management solutions, and hygiene products. The website demonstrates a professional and consistent brand presence with multilingual support, indicating a strong European market position. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit privacy compliance documentation. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest legitimacy. Overall, Winncare presents as a credible medium-sized healthcare provider with a focus on quality and innovation.
Winncarewinncare.uk
Healthcare · United Kingdom
60Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Winncare UK is a healthcare solutions provider specializing in the design and manufacture of innovative lifting and patient handling equipment, pressure ulcer prevention products, and bariatric specialist rentals. With over 40 years of experience, the company positions itself as a leading European healthcare equipment manufacturer, serving a broad audience including healthcare providers, caregivers, and medical institutions. The website reflects a professional and comprehensive product and service offering, supported by strategic partnerships and acquisitions such as Five Mobility. Technically, the site is built on WordPress with modern plugins and SEO tools, providing good mobile optimization and user experience. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. The WHOIS data for the domain www.winncare.uk is invalid, indicating potential domain registration issues that should be addressed to improve trust. Overall, the website is safe, professional, and well-structured but would benefit from enhanced privacy compliance and clearer contact information.
Winncarewinncare.es
Healthcare · Spain
55Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Winncare is a medium-sized healthcare company based in Spain, specializing in innovative medical solutions such as medical beds, pressure ulcer prevention products, fall management, and mobility aids. The company has a strong European presence and over 40 years of experience, targeting dependent persons and their caregivers. The website is built on WordPress and uses common web technologies like jQuery and Slick Slider, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and explicit privacy and cookie policies. WHOIS data could not be retrieved due to query restrictions, limiting domain legitimacy verification. Overall, the site is professional, content-rich, and safe for general audiences.
Obecní úřad Chlistovchlistov.cz
Government · Czech Republic
61Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website www.chlistov.cz serves as the official online presence for the municipality of Chlistov in the Czech Republic. It provides comprehensive information for local residents and tourists, including municipal office details, public notices, local history, sports facilities, and event calendars. The site is well-structured with clear navigation and consistent branding, targeting citizens and visitors alike. The business model is governmental, focusing on public service and community engagement. Technically, the site employs common web technologies such as jQuery, Google Analytics, Flexslider, and Font Awesome icons. It includes a cookie consent mechanism compliant with GDPR, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security standpoint, while HTTPS is implied by external script sources, no explicit security headers were detected in the provided data. The cookie consent banner and privacy policy presence are positive indicators, but the absence of WHOIS registration data raises concerns about domain legitimacy. No signs of WAF or blocking mechanisms were found, and no critical vulnerabilities were identified in the content. Overall, the website is a trustworthy municipal resource with good content quality and user experience. However, the missing WHOIS data and lack of visible security headers suggest areas for improvement in domain registration transparency and security hardening. Strategic recommendations include verifying domain registration status, implementing security headers, and enhancing security policy disclosures.
Obecní úřad Číhaňcihan.cz
Government · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.cihan.cz/cihan/ serves as the official online presence of the municipality of Číhaň in the Czech Republic. It provides comprehensive information about the local government office, community associations, tourism, and practical information for residents and visitors. The site targets local citizens and tourists, offering updates, official documents, and contact details. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Font Awesome, with a moderate performance and good mobile optimization. Security-wise, the site lacks visible HTTP security headers and explicit security policies but implements a cookie consent mechanism compliant with GDPR principles. The absence of WHOIS data limits domain trust assessment, but the site content and contact information appear legitimate for a small municipal government entity.
- OObec Mokrosuky
mokrosuky.cz
Government · Czech Republic
60Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Obec Mokrosuky operates as a local government authority serving the village of Mokrosuky and its surrounding area in the Czech Republic. The website provides essential administrative information, contact details, official documents, and public notices to residents and visitors. The site is positioned as a small municipal government entity focused on transparency and community engagement. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics for visitor insights. Cookie consent management is implemented to comply with GDPR requirements, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by adding security headers and enforcing HTTPS site-wide. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional and trustworthy but would benefit from modernization and enhanced security practices.
Referral Rockreferralrock.com
Technology
53Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Referral Rock is a well-established SaaS company founded in 2013 that provides referral marketing software targeted at technology companies, SMBs, e-commerce, and service businesses. The company positions itself as a reliable provider of hosted referral websites and referral tracking solutions, serving thousands of businesses. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization, reflecting a mature digital presence. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and published security policies. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the website is trustworthy and professional but could improve transparency and security practices.
- TTomáš Bdínka
tomasbdinka.cz
Technology · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Tomáš Bdínka is a seasoned UX/UI and Webflow designer with over 14 years of experience, offering specialized services in digital product design and web development. The website showcases a professional portfolio targeting businesses and individuals seeking high-quality web design solutions. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, and Typekit fonts, hosted on DigitalOcean, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and anonymized analytics, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is well-designed and functional, but could enhance compliance and security to better protect user data and build trust.
Darujme.czdarujme.cz
Non-profit · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Darujme.cz is the leading online donation platform in the Czech Republic, facilitating donations for over 1500 organizations and municipalities. The platform offers personal and corporate fundraising campaigns, enabling NGOs, schools, churches, and companies to raise funds efficiently online. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, it leverages WordPress CMS, AWS hosting, and modern analytics tools like Google Analytics and Microsoft Clarity, with a strong emphasis on privacy compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure payment processing, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the presence of clear contact information and reputable partners supports legitimacy. Overall, Darujme.cz presents a trustworthy, well-maintained platform with good business credibility and technical maturity.
Beckhoff Automation GmbH & Co. KGbeckhoff.com
Technology · Germany
57Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Beckhoff Automation GmbH & Co. KG is a global leader in industrial automation technology, specializing in PC-based control systems and EtherCAT fieldbus technology. Their Finnish website offers comprehensive information on their product portfolio including industrial PCs, I/O components, motion control, automation software, and machine vision solutions. The company targets industrial automation professionals and system integrators, positioning itself as a technology innovator with a strong global presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Matomo analytics, with responsive design and good accessibility features. The site includes consent management mechanisms and secure login forms, indicating a mature digital infrastructure. However, explicit security headers and detailed security policies are not publicly visible, suggesting room for improvement in security transparency. Security posture is solid with HTTPS usage and privacy compliance, but the absence of incident response contacts and vulnerability disclosure policies limits full security maturity. The WHOIS data is unavailable, which slightly reduces trust but the professional presentation and consistent branding mitigate concerns. Overall, the site is well-maintained, user-friendly, and trustworthy for its industrial audience. Strategic recommendations include enhancing security header implementation, publishing clear security and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.
- ACTIVA spol. s r.o.
activacik.sk
Retail · Slovakia
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ACTIVA spol. s r.o. operates the website activacik.sk, an established e-commerce platform specializing in school and office supplies primarily targeting Slovak and Czech markets. The company has a strong market presence since 1992 and offers a wide range of products including creative toys, school backpacks, and stationery. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web technologies such as Google Tag Manager, React components, and AWS hosting, ensuring reliable performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, although some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site is trustworthy, well-maintained, and aligned with business goals.
- ACTIVA spol. s r.o.
skolnisvet.cz
Education · Czech Republic
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Školní svět is an educational online magazine operated by ACTIVA spol. s r.o., targeting school children, parents, and teachers in the Czech Republic. The site offers creative tutorials, educational articles, and product reviews focused on school supplies and creative activities. It holds a niche position in the Czech educational content market with a small business scale and consistent branding. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Smart Slider 3, and it employs Google reCAPTCHA for form security. The site is mobile-optimized and implements GDPR-compliant cookie consent and privacy policies. Security posture is good with HTTPS enabled and some best practices observed, though security headers are missing and no explicit incident response or security policies are published. The WHOIS data is not publicly available, indicating privacy protection, which is common for small businesses but reduces transparency. Hidden spammy gambling links in off-screen content reduce trust slightly. Overall, the website is professional, content-rich, and safe for general audiences.
- CCRIF – Czech Credit Bureau, a. s.
skyminder.cz
Finance · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SkyMinder.cz is a Czech Republic-based international credit and business information service operated by CRIF – Czech Credit Bureau, a. s. The platform provides comprehensive financial, credit, and commercial reports on over 200 million companies worldwide, targeting businesses that require reliable data on foreign partners. Integrated within the Cribis application, SkyMinder offers online access to reports from more than 160 countries, supplemented by investigative services in additional jurisdictions. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement.
- CRIF - Czech Credit Bureau
mcribis.cz
Finance · Czech Republic
51Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
CRIF - Czech Credit Bureau operates the Cribis.cz platform, providing comprehensive credit and risk information services primarily for businesses in the Czech and Slovak Republics. The platform offers tools for screening companies and individuals, including credit reports, relationship diagrams, monitoring services, and AML compliance checks. The company positions itself as a trusted partner for businesses seeking to mitigate risks associated with unreliable partners. Technically, the website is built on WordPress with modern technologies such as React and integrates multiple analytics and marketing tools, including Google Analytics and Microsoft Clarity. The site demonstrates good privacy compliance with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are not confirmed. The absence of WHOIS data is a notable gap, reducing domain registration trustworthiness, but the website content and business information appear professional and credible overall.
- CRIF - Czech Credit Bureau
crif.cz
Finance · Czech Republic
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
CRIF - Czech Credit Bureau is a large, global company specializing in credit and business information systems, analytics, outsourcing, and advanced digital solutions including Open Banking. The company operates in over 40 countries with more than 85 subsidiaries and employs over 6500 professionals. Their services target both businesses and consumers, focusing on credit risk management, business intelligence, digital platforms, certifications, and consumer financial health and cybersecurity. The website content is professional, well-structured, and primarily in Czech, reflecting their regional focus while linking to global subsidiaries. Technically, the website uses modern web technologies such as Bootstrap, Swiper.js, jQuery, and Matomo for analytics, combined with Usercentrics for consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and ISO certifications prominently displayed, but could be improved by adding explicit security headers and publishing incident response or vulnerability disclosure information. No WHOIS data was found, which limits domain registration transparency and trust assessment. However, the website's professional presentation, certifications, and extensive global presence support its legitimacy. No signs of blocking or WAF interference were detected, and the site contains no adult or questionable content, making it safe for general audiences. Overall, CRIF - Czech Credit Bureau presents a credible and professional digital presence aligned with its business focus, though domain registration transparency should be improved to enhance trust further.
Pixelfieldpixelfield.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pixelfield is a Czech Republic-based digital agency specializing in the development and design of mobile and web applications, virtual and augmented reality solutions, games, and custom software. Established in 2012, the company serves a diverse clientele including startups and established businesses, positioning itself as a reliable partner for digital product innovation. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Hotjar, and Oribi, and is hosted on cesky-hosting.eu with HTTPS enabled, ensuring secure communications. However, the absence of explicit privacy and cookie policies, security headers, and vulnerability disclosures indicates areas for compliance and security improvement. Overall, Pixelfield demonstrates a solid digital presence with room to enhance privacy compliance and security posture.
- MESIT holding, a.s.
mesit.cz
Manufacturing · Czech Republic
63Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
MESIT holding, a.s. is a well-established Czech manufacturing company with over 70 years of tradition, specializing in the development and production of highly specialized products and systems primarily for aviation, defense, transport, electrical engineering, mechanical engineering, and education sectors. The company holds significant certifications such as the EASA Level B certification, positioning it as a reputable supplier in the aviation electronics market. MESIT is part of the OMNIPOL Group, enhancing its market presence and operational capabilities. The website infrastructure leverages modern technologies including jQuery, Bootstrap, and integrates multiple analytics and user experience tools such as Google Analytics, Hotjar, and Smartlook. The site is mobile-optimized with good SEO and accessibility features, although some improvements in security headers and incident response disclosures could be made. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature privacy posture. Security-wise, the site enforces HTTPS and employs cookie consent but lacks visible advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, but the website content and business information strongly indicate legitimacy and consistent branding. Overall, MESIT holding, a.s. presents a professional and trustworthy digital presence aligned with its business stature. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and improving security headers to further strengthen the security posture.
ERA a.s.era.cz
Transportation · Czech Republic
60Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
ERA a.s. is a globally recognized leader in next-generation surveillance and flight tracking solutions, specializing in multilateration and ADS-B technologies. The company serves a specialized market including air traffic management authorities, military and security agencies, and aviation industry stakeholders. With over 160 installations across 70 countries and 5 continents, ERA holds a strong market position supported by decades of tradition and experience. Their business model focuses on providing mission-critical surveillance systems and related services in a B2B context. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as HTML5, CSS3, JavaScript, and third-party libraries like Google Tag Manager and Picturefill for responsive images. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security headers and accessibility compliance. From a security perspective, ERA's website enforces HTTPS and uses secure form submission methods, with no visible vulnerabilities or exposed sensitive data. The presence of ISO 27001 certification and partnerships with reputable companies like Airbus enhance trust. However, the absence of explicit security headers and incident response information suggests areas for enhancement. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, ERA's website reflects a professional, trustworthy, and well-maintained digital presence consistent with its industry standing. The lack of public WHOIS data due to privacy protection is justified given the company's international operations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the security posture and user trust.
Other
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website jasknihy.cz is currently a parked domain landing page primarily serving advertisements and offering the domain for sale. There is no active business content or services presented, and no contact or company information is available. The technical infrastructure relies on standard HTML and JavaScript with multiple third-party ad and tracking scripts, including Google Adsense and Youseasky. The site lacks modern security practices such as HTTPS enforcement and security headers, and there is no visible privacy or cookie consent mechanism. WHOIS data indicates the domain is newly created with a suspicious future creation date and uses parking name servers, suggesting it is not actively used by a legitimate business. Overall, the site has a low trustworthiness and business credibility score.
Nakladatelství JOTA, s.r.o.jota.cz
Retail · Czech Republic
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Nakladatelství Jota, s.r.o. is a Czech publishing company operating an e-commerce platform specializing in a wide range of books including fiction, non-fiction, audiobooks, and e-books. The company targets Czech-speaking readers with diverse literary interests and maintains a professional online presence with clear contact information and active social media engagement. The website is well-designed, mobile-optimized, and provides comprehensive product information and customer engagement features such as newsletters and event calendars. Technically, the site employs modern tracking and advertising technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Leadhub Pixel, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers suggests room for improvement. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. The lack of WHOIS data limits domain trust assessment, but the overall professionalism and transparency of the site support a positive legitimacy evaluation.
Nakladatelství Portálportal.cz
Other · Czech Republic
62Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
Nakladatelství Portál is a Czech publishing house website offering content related to books and magazines. The website presents a professional design with a focus on publishing services, targeting a general Czech-speaking audience. The technical infrastructure includes modern frontend technologies such as Bootstrap 4 and Google Tag Manager for analytics and cookie consent management. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or terms of service documentation. Overall, the website is functional and safe but would benefit from enhanced transparency and security practices.
- Covitar s. r. o.
covitar-velkoobchod.cz
Retail · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Covitar s. r. o. operates a Czech-based wholesale and retail e-commerce platform specializing in dried fruits, vegetables, nuts, and other ingredients for healthy nutrition. The company supplies both organic (Bio) and non-organic products and has expanded retail distribution under the brand "Fruits du Paradis." The website targets wholesale buyers and retail customers interested in health food ingredients, positioning itself as a niche supplier in the Czech market. Technically, the website is built on the Shoptet e-commerce platform, leveraging jQuery and integrating Google Analytics and Facebook SDK for marketing and analytics purposes. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS, uses standard security headers, and implements CSRF protection on forms, though it uses an outdated jQuery version which could pose risks. Privacy and cookie policies are present and GDPR compliant, enhancing trust. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Overall, the site presents a professional and secure e-commerce presence with moderate technical maturity.
JIP Východočeská a.s.jip-potraviny.cz
Retail · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
JIP Východočeská a.s. operates a comprehensive food supply business serving both gastronomy professionals and the general public across the Czech Republic. The company maintains a strong nationwide presence with wholesale and retail outlets, supported by its own distribution network. Their website reflects a professional and well-branded digital presence, offering clear navigation and relevant content tailored to their target audiences including B2B partners and retail customers. The business model focuses on wholesale supply, retail sales, and customer loyalty programs, positioning JIP as a key player in the Czech food retail and hospitality sectors. Technically, the website is built on WordPress with modern SEO practices via the Yoast plugin. It demonstrates good mobile optimization and accessibility, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data limits full trust verification, but the site’s content and business information appear legitimate and consistent. Security-wise, the site shows good baseline practices but could improve by adding security headers and publishing a vulnerability disclosure policy. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy and professional, though domain registration transparency should be verified to enhance legitimacy. Strategically, JIP should focus on enhancing security transparency and verifying domain registration details to strengthen trust. Continued investment in digital maturity and compliance will support their market position and customer confidence.
Alpiro s.r.o.alpirossl.cz
Technology · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Alpiro s.r.o. operates the website alpirossl.cz, offering a range of SSL certificates including domain validated, organization validated, extended validation, and S/MIME email signing certificates. The company targets businesses and website owners seeking affordable and reliable SSL solutions, emphasizing fast issuance and support for modern encryption standards. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technically, the site uses standard web technologies such as jQuery, Google Analytics, and Google Tag Manager for tracking. The site is moderately performant and mobile-friendly but lacks advanced accessibility features and comprehensive SEO optimizations. No CMS or hosting provider information is discernible from the content. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain is a significant concern, reducing trust in domain legitimacy. No direct contact emails or phone numbers are provided, only a contact form. Overall, the security posture is moderate but could be improved with better transparency and compliance documentation. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and clarify domain registration details to enhance trust and compliance.
Alpiro s.r.o.alpiro.cz
Technology · Czech Republic
62Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Alpiro s.r.o. is a Czech-based company specializing in the sale and issuance of SSL certificates for web servers, offering a broad portfolio including standard, EV, multidomain, wildcard, code-signing, document-signing, and S/MIME certificates. The company targets web administrators and businesses seeking reliable encryption solutions, positioning itself as a trusted local provider with competitive pricing and a strong emphasis on customer satisfaction, including a 30-day money-back guarantee. The website is professionally designed, content-rich, and primarily in Czech, reflecting a focused regional market approach. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.8.0, with Google Analytics integrated for visitor tracking. While the site is accessible and moderately optimized for performance and mobile use, some technical improvements are recommended such as updating JavaScript libraries and implementing security headers to enhance security posture. The absence of a cookie consent mechanism suggests partial GDPR compliance. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and up-to-date libraries, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or privacy protected, but the website provides clear company registration details, physical address, and contact information, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Alpiro.cz presents a trustworthy and professional online presence for SSL certificate services with room for technical and privacy compliance enhancements. Strategic recommendations include implementing cookie consent, upgrading libraries, adding security headers, and publishing security policies to strengthen trust and compliance.
Pension Albertpenzionalbert.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Penzion Albert is a small hospitality business operating a guesthouse in the Šumava region of the Czech Republic. The website presents a well-structured and visually appealing platform built on WordPress with Elementor, offering detailed accommodation options and amenities. The business targets families and tourists seeking nature and relaxation. Technically, the site uses modern plugins and APIs but lacks full analytics configuration and security headers. The security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. Privacy compliance is currently insufficient due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security measures.
- Apartmány Šumava | Ubytování Vimperk Šumava
apartmanhrabice.cz
Hospitality · Czech Republic
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website apartmanhrabice.cz represents a small hospitality business offering apartment rentals in the Šumava region near Vimperk, Czech Republic. It targets families and leisure travelers seeking comfortable, self-contained accommodation in a traditional mountain environment. The business emphasizes proximity to nature, outdoor activities, and local amenities, positioning itself as a local accommodation provider with a focus on personal freedom and comfort. Technically, the website employs an older jQuery-based technology stack with various UI and image slider plugins. The site is moderately optimized for performance and mobile use but lacks modern CMS or frameworks. SEO is basic with meta tags present but no structured data or Open Graph tags. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site does not display HTTPS status or security headers in the provided data, which limits its security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. Overall, the website is functional and professional for its business purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data effectively.
- FFreetime Europe s.r.o.
apartmanysumava.com
Hospitality · Czech Republic
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Apartmány Šumava is a small hospitality business offering family apartments for rent in the Šumava region of the Czech Republic, specifically in the village of Borová Lada. The website provides detailed information about accommodation options, local attractions, and contact details, targeting tourists and families seeking a quiet and nature-oriented stay. The business appears to be operated by Freetime Europe s.r.o. and FT Sun s.r.o., with a local focus and modest market presence. Technically, the website is built with basic HTML, CSS, and JavaScript, without modern CMS or frameworks. It uses Google Analytics for visitor tracking but lacks privacy and cookie policies, which raises compliance concerns. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. A suspicious external script from an untrusted GitHub source is embedded, posing a security risk. Security posture is moderate but incomplete. There is no evidence of security headers or advanced protections, and the SSL configuration is unknown. The absence of WHOIS data for the domain is unusual and reduces trustworthiness, although the website content and contact information appear legitimate. No forms or sensitive data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the website is functional and serves its business purpose but requires improvements in security, privacy compliance, and technical modernization to enhance trust and protect visitors. Strategic recommendations include removing suspicious scripts, adding privacy and cookie policies, implementing security headers, and verifying domain registration details to improve legitimacy and compliance.