Media security reports

N

Nicole S. Young

nicolesy.com

50

Nicolesy.com is the professional website of Nicole S. Young, a full-time photographer and author specializing in photography education and e-commerce. The site offers a variety of photography tutorials, books, presets, and overlays, targeting photography enthusiasts and learners. The business model combines content creation with digital and physical product sales, supported by a well-structured online store and community engagement. The website is well-established with a domain age of nearly 19 years, reflecting a mature and consistent online presence. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and technologies such as Yoast SEO, Google Analytics, hCaptcha, and affiliate marketing tools. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is inferred to be with GoDaddy.com, LLC, consistent with the domain registration data. From a security perspective, the site uses HTTPS and employs hCaptcha for form protection, but lacks DNSSEC and some advanced security headers. There is no visible security policy or incident response information, and privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, nicolesy.com is a credible, professional photography education and e-commerce site with good technical and business maturity. Improvements in privacy compliance and security policy transparency are recommended to enhance trust and regulatory adherence.

D

DOOH s.r.o.

dooh.sk

45

DOOH s.r.o. operates the largest digital out-of-home (DOOH) advertising network in Slovakia, featuring 18 outdoor LED screens across 13 locations. The company targets businesses seeking impactful outdoor advertising solutions with fast deployment and measurable results. Their business model centers on renting LED advertising space and providing real-time campaign statistics, positioning themselves as market leaders in the Slovak digital outdoor advertising sector. The website content is professionally presented in Slovak, with clear calls to action and comprehensive contact information, supporting a strong business credibility profile. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google reCAPTCHA v3, and Google Tag Manager, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and invisible reCAPTCHA on forms, though no explicit security headers or published security policies were detected, indicating room for improvement in security posture. From a security perspective, the site shows a moderate maturity level with no critical vulnerabilities detected in the provided data. The absence of a privacy policy and security incident response information suggests compliance gaps, particularly regarding GDPR transparency. Cookie consent is implemented, reflecting basic privacy compliance. The WHOIS data is consistent with the business profile, showing a domain registered in 2021 without privacy protection, reinforcing legitimacy. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced security headers, published privacy and security policies, and formalized incident response contacts to improve compliance and security posture.

L

Levická televízna spoločnosť s.r.o.

levickatelevizia.sk

50

Levická televízna spoločnosť s.r.o. operates a local television broadcasting website focused on news, sports, public affairs, and advertising for the Levice region in Slovakia. The company has an established presence since 2007 and provides a range of multimedia content primarily hosted on Vimeo. The website uses Joomla CMS and integrates common web technologies such as jQuery, Bootstrap, and FontAwesome, delivering a good user experience with mobile optimization and clear navigation. Contact and business information are transparently provided, including GDPR-compliant privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enforced, though additional security headers and policies could enhance protection. Overall, the site is trustworthy, professionally maintained, and serves its local audience effectively.

vbq.cz is a Czech-language local lifestyle and service ranking website, providing curated lists such as best dentists, confectioneries, and pizza places in various Czech cities. The site targets Czech-speaking users interested in local services and lifestyle content. Technically, the site is built on WordPress with common plugins like Yoast SEO, Contact Form 7, and uses Cloudflare for DNS and CDN services. The site implements cookie consent with denial of ad and analytics storage by default, indicating some privacy awareness. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. Business credibility is moderate due to absence of contact details and privacy policy. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security transparency.

Q

Qobuz

qobuz.com

66

Qobuz is a well-established digital music service specializing in high-quality streaming and Hi-Res downloads, targeting audiophiles and music enthusiasts primarily in Finland and other international markets. The website demonstrates a mature digital presence with extensive content, clear subscription offerings, and a strong brand identity. Technically, the site employs modern web technologies, including SPA architecture, advanced analytics, and performance monitoring tools, ensuring a fast and responsive user experience across devices. Security posture is solid with HTTPS enforcement, content security policies, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, though the lack of WHOIS transparency slightly reduces domain trustworthiness.

N

Napster

napster.com

65

Napster is a well-established global music streaming service offering over 110 million songs and official music videos with ad-free and offline listening options. The company also provides B2B branded music platform solutions, serving businesses seeking to launch their own music services. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses WordPress CMS with modern analytics and marketing tools such as Google Analytics, Amplitude, Braze, and Hotjar, alongside a consent management platform for GDPR compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response information are absent. The lack of WHOIS data limits domain trust assessment, but the overall digital footprint and branding indicate legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing transparency on data retention.

A

Adami

adami.fr

69

Adami is a French collective management organization dedicated to supporting artists-interpreters through rights management, financial aid, and career support. The website is professionally designed, multilingual (French and English), and targets artists and project holders in the cultural and media sectors. The business model revolves around collective rights management and funding artistic projects, positioning Adami as a key player in the French artistic ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published security policy and incident response details suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the professional presentation and official social media presence support legitimacy. Overall, the site is safe, compliant with GDPR, and well-structured, serving its audience effectively.

P

PROCIREP

procirep.fr

53

PROCIREP is a French collective management organization representing cinema and television producers, focusing on rights management related to private copying and retransmission rights. Established since 1999, it operates alongside related entities such as ANGOA and the French ISAN agency, providing support and funding for audiovisual production. The website reflects a professional and consistent brand presence targeting French audiovisual producers and stakeholders. Technically, the site uses the SPIP CMS with standard web technologies and integrates Google Analytics with a compliant cookie consent mechanism. Security posture is adequate with HTTPS and consent management but lacks explicit security headers and published security policies. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, though improvements in accessibility and security transparency are recommended.

S

Stadt Herne

inherne.net

46

inHerne.net is an established local online city magazine serving the community of Herne, Germany. It provides news, cultural content, and event information relevant to residents and visitors. The website is professionally designed using WordPress with a modern theme and plugins, offering a good user experience and mobile optimization. The content is well-structured, relevant, and trustworthy, supported by official city affiliation and contact information. Technically, the site uses standard web technologies and is hosted under a reputable registrar with a domain age consistent with its business history. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is reliable and serves its purpose effectively.

M

mediaprint infoverlag gmbh

total-lokal.de

46

mediaprint infoverlag gmbh operates the website total-lokal.de, providing regional and local informational brochures, news, and job listings across Germany. With over 50 years of experience, the company serves municipalities and local businesses by publishing both digital and print content focused on topics such as education, building, seniors, and local economy. The website is well-branded and targets residents and businesses seeking localized information. Technically, the site uses common JavaScript libraries and galleries, is mobile-optimized, and implements HTTPS with a DigiCert certificate, ensuring secure user interactions. Privacy compliance is addressed with a comprehensive privacy policy and a cookie consent mechanism. However, direct contact emails and phone numbers are not prominently displayed, relying mainly on contact forms. Security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and serves a niche media publishing market in Germany.

SZM s.r.o. operates SZM.sk, the largest Slovak internet directory offering categorized listings of companies, news, culture, education, technology, and more. The website serves Slovak internet users seeking organized access to local and national web resources. The business model centers on providing directory services combined with advertising placements, supported by partner sites in related sectors such as TV programming, banking, and insurance. The domain has a long history since 2003, indicating established market presence. Technically, the website uses a custom-built platform with legacy charset windows-1250, multiple JavaScript libraries including Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. Hosting is provided by Platon, with multiple ad networks integrated. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. Security posture is moderate with HTTPS enabled and consent management for GDPR compliance. However, legacy HTTP resource loading and lack of modern security headers reduce the security score. No explicit privacy policy or terms of service were found, which is a compliance gap. No direct contact information is provided on the main page, limiting user trust and support access. Overall, SZM.sk is a moderately mature online directory with a stable business presence but requires improvements in privacy transparency, security hardening, and modernization of technical infrastructure to enhance trust and compliance.

C

Centre National de la Musique

whatthefrance.org

48

What The France is a culturally focused media platform created by the Centre National de la Musique to promote French music internationally. It offers curated playlists, video content, news, and branded events to highlight the French music scene. The website is well-positioned as a niche cultural promoter with a clear target audience of music enthusiasts and industry professionals. Technically, the site is built on WordPress with modern plugins and technologies, optimized for performance and SEO, and includes multilingual support. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site demonstrates a professional and trustworthy presence with strong branding and compliance with privacy regulations.

C

CNMlab

cnmlab.fr

52

CNMlab is a French think tank and research laboratory affiliated with the Centre national de la musique, focusing on music industry research and academic collaboration. The website serves as a platform for publications, scientific council information, and calls for contributions, targeting academics and music professionals. Technically, the site is built on WordPress with a modern tech stack including Gravity Forms, WP Rocket, and WPML for multilingual support. The site is well-optimized for performance and SEO, with good mobile responsiveness and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and domain transfer protection, though it lacks explicit security headers and a cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, matching the business entity and history. The site content is safe, professional, and relevant to its niche audience.

C

Centre national de la musique

cnmwork.fr

49

CNMwork is a professional portal operated by the Centre national de la musique (CNM) focused on providing a directory and job, internship, and service offers within the French music sector. It serves as a national platform connecting music industry professionals and job seekers, positioning itself as a key resource in the French music employment ecosystem. The website is well-branded with official logos and government affiliation, enhancing its credibility. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility compliance could be improved. Performance is moderate, with no blocking or WAF detected, indicating reliable availability. Security posture is solid with HTTPS enforced and secure cookie settings, but lacks explicit security headers and documented security policies or incident response information. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, CNMwork presents a trustworthy and professional digital presence for the French music sector, though improvements in security headers and accessibility would enhance its posture. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its official backing.

A

Arsenal – Institut für Film und Videokunst e.V.

arsenal-berlin.de

55

Arsenal – Institut für Film und Videokunst e.V. is a well-established non-profit cultural institution based in Germany, specializing in film and video art. The organization operates a cinema, film archive, distribution services, and manages independent Berlinale sections such as Forum and Forum Expanded. Their target audience includes film enthusiasts, cultural institutions, and the general public interested in film culture. The website reflects a professional and consistent brand image with comprehensive content about their services and events. Technically, the website is built on TYPO3 CMS with jQuery and custom JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices. The site is served over HTTPS, ensuring secure communication, though it lacks some advanced security headers. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. From a security perspective, the site maintains a good posture with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are areas for improvement to enhance compliance and user trust. Overall, the website is trustworthy, professionally maintained, and aligned with the institution's cultural mission. Strategic enhancements in privacy compliance and security policies would further strengthen its position and user confidence.

A

AGITPROP

agitprop.bg

37

AGITPROP is a small Bulgarian media production company specializing in creative documentaries, art, and advertising photography. The website content focuses on explaining the term 'AGITPROP' and showcases categories of their work including film, video, campaigns, photography, and graphic design. The company appears to target a general audience interested in artistic and documentary media. The technical infrastructure is basic, relying on custom JavaScript and CSS with hosting inferred to be StableHost. The website lacks modern CMS or frameworks and shows limited mobile optimization and accessibility features. Security posture is minimal with no visible HTTPS or security headers in the provided data, and privacy compliance is poor due to absence of privacy and cookie policies. No contact information or social media links are provided, which limits business credibility. Overall, the site is functional but basic, with room for improvement in security, privacy, and user engagement.

8horses GmbH is a small, Switzerland-based arthouse film production company composed of a group of artists, filmmakers, writers, and cinematographers. Their website showcases a portfolio of artistic film projects and emphasizes their collaborative creative approach. The company targets a niche audience interested in arthouse and artistic films, positioning itself as a specialized media production entity within the Swiss market. Technically, the website is built on the Indexhibit CMS platform and uses jQuery for scripting. It employs HTTPS for secure communication but lacks advanced security headers and modern tracking or analytics tools. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design quality. From a security perspective, the site has a basic posture with HTTPS enabled but missing critical security headers and no visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security hardening. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and provide vulnerability disclosure information to enhance trust and compliance.

VABANQUE, spol. s r.o. is a Czech Republic based full-service advertising and communication agency with over 15 years of experience. The company offers a broad range of marketing and branding services including 3D modeling, packaging design, web development, video production, and event promotion. Their client portfolio includes notable brands and they emphasize tailored marketing solutions to strengthen client market positions. The website is professionally designed with clear navigation and contact information, reflecting a stable and credible business presence. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager, with moderate performance and basic mobile optimization. Security posture is average with HTTPS usage but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but could improve in privacy and security transparency.

K

Kino Lumière

kino-lumiere.sk

47

Kino Lumière is a Slovak cinema focused on providing a comprehensive film program, online ticket sales, and cultural events. The website serves as a portal for film enthusiasts, families, and seniors, offering specialized programs such as BABY kino and SENior kino. The business operates primarily in the media sector with a local market focus. Technically, the website uses a specialized cinema CMS platform with integrations for Google Analytics and Facebook SDK, supporting multimedia content and online ticketing. The site is secured with HTTPS and includes a cookie consent mechanism, though it lacks explicit privacy and terms of service pages, which are important for GDPR compliance. Security headers are not evident, indicating room for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, but could enhance compliance and security practices.

S

SPEDIDAM

myspedidam.fr

36

My SPEDIDAM is a French media rights management platform focused on providing artists with tools to manage their accounts and royalty declarations. The website serves as a secure login portal for artists and associated members, reflecting a specialized business model in the media sector. The company appears established with a domain age of over six years and consistent WHOIS data, indicating legitimacy and operational stability. Technically, the website employs a modern technology stack including jQuery, Kendo UI, Bootstrap, and ASP.NET MVC framework. While the site is mobile optimized and uses Google Analytics for tracking, there is room for improvement in accessibility and SEO optimization. The performance is moderate, and the design quality is good, providing a professional user experience. From a security perspective, the site enforces password complexity and includes CSRF tokens in forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No cookie consent mechanism is present, which is a GDPR compliance gap. The absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and trust. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and clearer terms of service documentation to strengthen its security posture and regulatory adherence.

T

Tero Radio

teroradio.com

47

Tero Radio is a Thai-based online radio and entertainment platform offering multiple radio stations, podcasts, music charts, event promotions, and video content. The website targets a general Thai audience interested in contemporary hits, Asian music, and entertainment news. The platform is moderately mature with a domain age of approximately 3.5 years and a consistent brand presence across social media and partner subdomains. Technically, the site uses modern web technologies such as Next.js and React, with integrations for Google Tag Manager and advertising via Google DoubleClick. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is legitimate and professionally maintained but would benefit from enhanced security and privacy transparency.

TERO MUSIC is a Thai music label specializing in artist creation, music rights management, and event promotion. The website showcases a variety of artists, music releases, videos, and upcoming events, targeting Thai music fans and industry participants. The company appears to be a medium-sized entity founded in 2021 with a consistent brand presence and active social media engagement. Technically, the site uses a modern tech stack including jQuery, Bulma CSS, Owl Carousel, and Google Analytics, hosted with Cloudflare DNS and registered via GoDaddy. The website is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with no DNSSEC, no visible security headers, and no HTTPS enforcement details provided. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

A

Awesome Projects SRL

sahiavintage.ro

42

Sahia Vintage is a Romanian digital platform dedicated to preserving and showcasing documentary films produced by the Alexandru Sahia Studio between 1950 and 1990. Operated by Awesome Projects SRL since 2019, it serves a niche cultural audience interested in historical film archives. The website employs a standard WordPress CMS with common web technologies such as Bootstrap and jQuery, hosted on Romanian infrastructure. It features a bilingual interface (Romanian and English) and integrates Google Analytics for visitor tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms but lacks advanced security headers and DNSSEC. Privacy compliance is basic, relying on a PDF terms document rather than a dedicated privacy policy page. Contact information is not directly available on the homepage, limiting user engagement channels.

M

Modern Times Review

moderntimes.review

46

Modern Times Review is a European niche media publication specializing in cinepolitical documentary and nonfiction book reviews through original essays. The website targets a general audience interested in documentary film and nonfiction literature, positioning itself as a specialized magazine in this domain. Technically, the site is built on WordPress with WooCommerce and several plugins for SEO, analytics, advertising, and push notifications, reflecting a moderate level of digital maturity. The site is mobile optimized and uses modern web technologies but lacks some advanced accessibility features. Security-wise, the site enforces HTTPS and does not expose sensitive data, but lacks explicit security headers and formal security or privacy policies, which are areas for improvement. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact and security information to improve trust and compliance.

G

grandfilm produktion gmbh

grandfilm-produktion.de

42

Grandfilm Produktion GmbH is a small German media company specializing in international auteur film production and distribution. Founded in 2014, it operates primarily in Frankfurt and Nürnberg, focusing on festival-premiered films and co-productions with notable filmmakers. The website is built on WordPress using Elementor and jQuery, reflecting a modern but basic technical infrastructure. While the site is accessible and professionally designed, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact information is clearly provided, enhancing business credibility. Overall, the website serves its niche audience well but could improve compliance and security practices.

G

GTO Solutions, s.r.o.

inoutic.cz

54

KupniSila.cz is a Czech media portal operated by GTO Solutions, s.r.o., providing economic news, purchasing power analysis, price information, and consumer advice targeted at Czech citizens. The website leverages WordPress CMS with a modern theme and plugins, including Yoast SEO and Google Adsense for monetization. It maintains a professional design with good content quality and clear navigation. Security posture is adequate with HTTPS enabled and secure login forms, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is legitimate and well-maintained, though WHOIS data is privacy protected, which is common for small media sites.

TeroAsia is a Thai media company operating a digital news and entertainment portal focused on delivering timely content related to news, sports, entertainment, and cultural programming, particularly associated with Channel 7HD. The website demonstrates a moderate level of digital maturity, leveraging modern web technologies such as Next.js and React, and integrates advertising and tracking tools like Google Tag Manager and Google Ad Manager. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security measures such as HTTPS and domain protection are in place, but additional security headers and vulnerability disclosures are absent, indicating room for improvement in security maturity. Overall, the site is legitimate and serves a broad Thai-speaking audience with relevant media content.

S

Spedidam

spedidam.fr

57

SPEDIDAM is a well-established French collective rights management organization founded in 1959, dedicated to protecting and managing the intellectual property rights of performing artists. The website serves as an information and service portal for artists, music users, and creators of spectacles, offering rights management, legal advice, and cultural aid programs. The organization has a significant market presence with over 115,000 rights holders and a large associate base. Technically, the website is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Swiper Slider, hosted by OVH. The site is moderately performant, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks some security headers and explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, targeting a general audience interested in artists' rights and cultural management. However, compliance with privacy regulations could be enhanced by adding clear privacy and cookie policies and consent mechanisms. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

S

Sacem

sacem.fr

61

Sacem is a well-established French organization founded in 1851, dedicated to managing the rights of authors, composers, and music publishers. The website reflects a mature digital presence with comprehensive services for members and clients, including rights management, project support, and access to a repertoire of works. The site is professionally designed, mobile-optimized, and provides multi-language support, indicating a broad target audience and international reach. Technically, the site uses modern frameworks such as Bootstrap and Font Awesome, with appropriate use of HTTPS and cookie consent mechanisms, demonstrating good digital maturity. Security posture is solid with HTTPS and some security best practices, though explicit security headers and incident response information are not evident. Overall, the site is trustworthy and professional, though the lack of WHOIS data limits domain registration transparency.

G

GRANDFILM

grandfilm.de

48

Grandfilm is a German-based film distribution and production company specializing in independent and art-house cinema. Their website showcases a broad portfolio of films currently in cinemas, upcoming releases, and educational film content, targeting film enthusiasts, cinema operators, and educators. The business operates primarily in the media sector with a small company size and a niche market position in Germany. Technically, the website is built on WordPress with modern analytics and marketing integrations such as Google Analytics, Google Tag Manager, and Facebook Pixel, all implemented with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security policy pages and some security headers, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fünferfilm

fuenferfilm.de

37

Fünferfilm is a small independent film production company based in Hamburg, Germany, founded in 2016. The company focuses on producing artistic and narrative films by dedicated filmmakers, with a strong presence in film festivals and collaborations with various partners in the film industry. Their website showcases a portfolio of films, upcoming projects, and festival participations, targeting film enthusiasts and industry professionals. Technically, the website uses a straightforward tech stack including HTML5, CSS3, jQuery, and Swiper.js for interactive elements. It is hosted on a German hosting provider (kasserver.com) and uses HTTPS, ensuring secure communication. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the website enforces HTTPS but lacks important security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.

P

Port au Prince Film & Kultur Produktion GmbH

port-prince.de

40

Port au Prince is a specialized film production and distribution company based in Germany, operating through multiple GmbH entities focused on production, distribution, and media agency services. The company targets film professionals and enthusiasts, positioning itself as an award-winning niche player in the German film industry. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins and tracking tools, and hosted on RZone servers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Weydemann Bros. is a German film production company established in 2008, specializing in producing films and series. Their website showcases completed and in-development projects, targeting film industry professionals and enthusiasts. The company maintains a consistent and professional online presence with clear branding and social media engagement on Facebook and Instagram. Technically, the website uses jQuery and Typekit fonts, is hosted via DomainControl (GoDaddy), and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, with room for improvements in security and privacy practices.

Déjà-vu film UG is a small German film distribution company specializing in art-house and cinephile films. The website showcases current and repertory films with detailed descriptions and festival accolades, targeting film enthusiasts and cultural institutions. The company maintains partnerships with several VoD platforms, enhancing its distribution channels. Technically, the website uses legacy JavaScript libraries such as jQuery and custom carousel and lightbox scripts, hosted on 1blu.de servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS assumed but no visible security headers or modern protections. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, supporting business credibility.

R

RED BALLOON FILM GMBH

redballoonfilm.de

47

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

O

One World Romania

oneworld.ro

47

One World Romania is a well-established non-profit organization dedicated to promoting documentary films through its flagship One World Romania festival and related cultural activities such as workshops and film tours. The organization targets documentary enthusiasts, educators, and the general public interested in socially relevant cinema. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted on a Romanian hosting provider, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no detailed privacy or incident response policies. Social media integration and newsletter subscription indicate active community engagement. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

A

Appio Digital s.r.o.

dokweb.net

61

Institut dokumentárního filmu operates the DOKweb platform, a well-established non-profit organization founded in 2009, focused on supporting and promoting documentary film talents primarily in Central and Eastern Europe. The website offers a range of services including news articles, events, professional tools, and a podcast, targeting filmmakers and industry professionals. The organization maintains a strong regional presence with partnerships and donor support from cultural and governmental institutions. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cloudflare DNS, with a responsive design and good SEO practices. Security measures include HTTPS, reCAPTCHA v3 integration, and a comprehensive cookie consent mechanism, although some security headers could be improved. The domain is long-standing and consistent with the organization's history, indicating legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policies and direct contact emails.

I

Ing. Radek Balon

radek-balon.cz

44

Ing. Radek Balon operates a professional videography and photography business primarily focused on wedding videos, music videos, and event coverage in the Olomouc region of the Czech Republic. The website serves as a portfolio and contact point, showcasing extensive video references and detailed service descriptions. The business is positioned as a small local service provider with a friendly and optimistic approach to client collaboration. Technically, the website is built on WordPress with modern plugins such as Elementor and WooCommerce, hosted by REG-WEDOS, and includes SEO and accessibility considerations. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with GDPR and cookie policies present and consent mechanisms active. Overall, the site is professional, trustworthy, and well-suited for its target audience.

R

Radio Screen

radio-screen.com

61

Radio Screen is a specialized media technology company providing an associated data broadcasting platform for DAB+, RadioDNS Hybrid Radio, and Webradios. Their platform enables radio stations to enhance their visual identity by distributing logos, artist images, and metadata to compatible receivers, including vehicle infotainment systems. The company operates primarily in France and targets broadcasters and automotive infotainment providers. The website reflects a professional and consistent brand image with clear business messaging and established partnerships with recognized industry players such as Music Story and WorldDAB. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for analytics. The site is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Cookie consent and privacy policies are implemented with GDPR compliance in mind, using the Complianz plugin for consent management. However, some security headers are missing, and no explicit security policy or incident response information is published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, with no privacy protection and a domain age appropriate for the business maturity. Overall, Radio Screen presents a low-risk profile with a solid business model and good digital maturity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance their security posture and trustworthiness further.

eHutník.cz is a regional news website operated by Třinecké Železárny a.s., providing news, sports, culture, and legal advice focused on the Třinecko region in the Czech Republic. The site targets local residents and stakeholders, offering timely regional information and advertising opportunities. The business model centers on content publishing and local advertising, positioning itself as a trusted regional media outlet. Technically, the website runs on WordPress with popular plugins for SEO, advertising, and forms, supported by Google Analytics and Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, with some security headers implied but not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a secure and accessible platform. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve by adding explicit security headers and a security policy. The domain registration data supports the legitimacy and maturity of the business.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

The website videoarchiv-nfa.cz serves as a specialized digital archive for experimental film and video art, operated under the auspices of the Národní filmový archiv (National Film Archive) of the Czech Republic. It provides access to curated collections, research databases, and distribution services primarily targeting researchers, academics, and film enthusiasts interested in audiovisual heritage. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technically, it is built on WordPress with a custom theme, hosted likely by Webglobe, and uses HTTPS for secure access. However, it lacks explicit privacy and cookie policies, security headers, and analytics or tracking tools, indicating a minimal data collection approach and some compliance gaps. The domain registration data aligns well with the stated purpose and timeline of the project, enhancing trustworthiness.

T

touring artists

touring-artists.info

51

Touring Artists is a specialized non-profit platform providing comprehensive information and free consultation services for internationally mobile artists and creatives working in or moving to Germany. The website is supported by reputable cultural institutions such as the International Theatre Institute Germany, the International Society of Fine Arts, and the German Dance Association, and is funded by German cultural government bodies. It offers detailed resources on visas, contracts, social security, taxes, insurance, copyright, and transport, alongside a funding database and guides to support cross-border cultural work. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. Google Tag Manager is used for analytics, with minimal user tracking. However, some security best practices such as explicit security headers are not evident. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS transparency and missing registrar data slightly reduce trust. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Overall, the website is a trustworthy, well-maintained resource for its niche audience, with strong cultural partnerships and government backing. Strategic improvements in security headers and WHOIS transparency could further enhance trust and security posture.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

ffhsh.de

59

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

moin-filmfoerderung.de

60

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

K

Kreativní Česko – Novinky, Akce a Podpora Kreativních Odvětví

kreativnicesko.cz

67

Kreativní Česko is a Czech national portal dedicated to the cultural and creative industries, providing news, events, funding opportunities, and resources for artists, designers, and innovators. The website serves as an information hub and support platform for stakeholders in the creative sector within the Czech Republic. It positions itself as a key resource for cultural professionals and creative entrepreneurs, fostering innovation and collaboration in the industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with a good SSL configuration, ensuring secure communication. The design is responsive and optimized for mobile devices, with a clear navigation structure and good SEO practices. However, no specific CMS or hosting provider information was identified. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. Security headers like HSTS and X-Content-Type-Options are present, though the implementation of Content-Security-Policy and Subresource Integrity could further enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy front for its intended audience. The lack of publicly available WHOIS data limits transparency regarding domain registration, but the site content and technical setup support its legitimacy. Strategic recommendations include enhancing security headers, improving accessibility features, and publishing terms of service and incident response policies to strengthen trust and compliance.

S

SPM MEDIA a.s.

spmmedia.cz

55

SPM MEDIA a.s. is a Czech media company founded in 2023, serving as the umbrella organization for several media brands including Echo Media, HROT MEDIA a.s, Radio Prostor, and the blogging platform Blogosvět. The company targets a general Czech audience with independent news and media content. Their business model focuses on media publishing and advertising, leveraging multiple platforms and brands to reach a broad audience. The website is professionally designed using modern web technologies such as Next.js and React, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA for form protection, though some security headers and policies are missing. The WHOIS data is unavailable, which limits domain trust verification, but the website content and business information appear consistent and professional. Overall, the company presents itself as a credible media group with a growing presence in the Czech media market.

I

Institute of Documentary Film

kinedok.net

67

KineDok is a cultural media project operated by the Institute of Documentary Film, specializing in the distribution and screening of documentary films from Central and Eastern Europe in alternative venues such as cafes, galleries, and open-air cinemas. The project also offers online streaming and educational programs, targeting documentary enthusiasts and cultural communities across multiple European countries. The website is well designed, mobile optimized, and uses modern web technologies including React and Next.js, hosted on Websupport.cz. Privacy and cookie policies are present and GDPR compliant, with active social media engagement. Security posture is good with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. WHOIS data shows a stable domain registration since 2014, consistent with the project's history and legitimacy. Overall, the website demonstrates a mature digital presence with strong content quality and business credibility.

N

Národní filmový archiv

nfa.cz

65

Národní filmový archiv is a Czech national institution dedicated to the preservation, research, and public access of Czech and Czechoslovak film heritage dating back to the late 19th century. The organization operates a professional website offering extensive information about its collections, services, and educational programs, including a cinema (Kino Ponrepo) and digital resources. The website is well-branded, consistent, and targets a broad audience including film enthusiasts, researchers, and educational institutions. Technically, the site employs modern web technologies, integrates Google Analytics and Tag Manager for performance and usage tracking, and is hosted under a reputable registrar with a domain age consistent with the institution's history. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance.

European Film Promotion (EFP) is a well-established organization founded in 2001 that promotes European films and talent internationally. The website serves as a platform to showcase European cinema excellence and diversity, targeting film industry professionals and enthusiasts worldwide. It offers various programs, film sales support, and networking opportunities, positioning itself as a key player in the European film promotion sector. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Slick Carousel, and Typekit fonts, with a newsletter subscription powered by Brevo (Sendinblue). Hosting is provided by Cronon GmbH, a reputable registrar. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security measures such as cookie consent are implemented, but advanced security headers and DNSSEC are missing. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected in the provided data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its business purpose well. Strategic improvements in security headers, accessibility, and explicit policy disclosures would enhance its security posture and compliance standing.