Other security reports

W

we make it

we-make.it

48

We make it is a Berlin-based small studio specializing in risography printing, book works, and graphics services, catering primarily to independent publishers and DIY enthusiasts. The company emphasizes collaborative processes and democratization of art and information through self-publishing. The website is built on WordPress with a moderate technical infrastructure including jQuery and Swiper.js, and uses Yoast SEO for optimization. Marketing scripts from sender.net are present for email campaigns. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Contact information is available via email and physical address, with active social media presence. The domain is well-established since 2012, consistent with the business history. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

O

openbiblio.eu

openbiblio.eu

43

Openbiblio.eu is a niche community platform dedicated to promoting openness and collaboration within the library and bibliothekswissenschaft sectors. It hosts various projects including an incentive system for open libraries, webcasts, and a Mastodon social instance, primarily serving library professionals and academics. The platform is operated by Stabi Berlin and leverages WordPress technology hosted by netcup GmbH. Technically, the website is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and serves its community purpose effectively but would benefit from enhanced security and compliance measures.

C

CK Kramolín

ck-kramolin.cz

42

CK Kramolín is a small, local cycling club based in the Czech Republic, focused on organizing cycling events and supporting its members. The website provides event news, photos, and contact information primarily in Czech language, targeting cycling enthusiasts in the region. The domain age and WHOIS data align well with the club's history and activities, indicating a legitimate and stable organization. Technically, the website uses Bootstrap and jQuery with a basic but functional design. However, it lacks modern security features such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are important for GDPR compliance. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

A

Rekonstrukce koupelen a kuchyní |AVE PROFIS| Plzeň a okolí

avprofis.cz

55

The website www.avprofis.cz is a small-scale business site built on the Wix platform. The site content is minimal and primarily technical, with no visible business descriptions, contact information, or policies. The lack of WHOIS data and domain registration details raises concerns about the domain's legitimacy and transparency. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security headers and privacy compliance features. The security posture is basic with no evident vulnerabilities but also no strong security practices. Overall, the site appears to be either under development or a placeholder with limited business presence and low trust indicators.

A

Automoto klub v AČR Nepomuk - since 1946

amknepomuk.cz

42

The website for Automoto klub v AČR Nepomuk is a minimal, outdated online presence for a local automotive club in the Czech Republic with a claimed history since 1946. The site uses deprecated HTML framesets and lacks substantive content, modern design, or mobile optimization. There are no visible contact details, privacy policies, or terms of service, and no WHOIS data is available for the domain, which raises concerns about legitimacy and trustworthiness. The site includes Google Analytics and Tag Manager scripts but lacks security best practices such as HTTPS enforcement and security headers. Overall, the digital maturity of the site is low, and it does not meet modern standards for security or privacy compliance.

The website www.rybsvaz.cz appears to be a portal titled 'RIS Portál' with minimal visible content in the provided HTML. The lack of WHOIS data and absence of registrant information limit the ability to verify domain legitimacy and business identity. The technical infrastructure shows use of modern CSS frameworks such as Tailwind CSS and PrimeVue, indicating some level of digital maturity. However, the absence of privacy policies, contact information, and security headers suggests a low security posture and limited compliance with privacy regulations. Overall, the website presents a low trust profile with minimal business credibility signals.

The website solarnisystemy-ceskebudejovice.cz is currently inaccessible, displaying only a minimal placeholder message 'site not found'. There is no visible business content, metadata, or contact information to analyze. The domain is registered since 2011 with the registrar REG-KRAXNET and uses the name server ns.kraxnet.com, indicating a legitimate registration but no active website presence. The lack of content and security features such as HTTPS and security headers indicates a very low digital maturity and security posture. No privacy or cookie policies are present, and no business or contact details are available, which severely limits trust and credibility. Overall, the site appears offline or abandoned, posing a high risk for users seeking information or services from this domain.

L

LepsiPrace.cz

lepsiprace.cz

44

LepsiPrace.cz is an online job portal primarily targeting job seekers and employers in the Czech Republic. The platform offers job listings and candidate services, leveraging WordPress CMS with specialized job board plugins. The website demonstrates a good level of content quality and user experience, with a professional design and clear navigation. However, the absence of publicly available WHOIS data limits the ability to verify domain legitimacy and registrant details, which impacts overall trust. Technically, the site uses modern web technologies and performance optimization plugins but lacks visible security headers and comprehensive privacy or terms of service documentation. The cookie consent mechanism is present, indicating some level of privacy compliance. Security posture is moderate but could be improved by implementing standard security headers and incident response information. Overall, the site is functional and relevant for its target audience but would benefit from enhanced transparency and security practices.

A

Avanzado Group s.r.o.

avanzadogroup.cz

43

Avanzado Group s.r.o. is a small Czech company specializing in comprehensive security and detective services, shooting courses, and construction of turnkey family houses. The website presents a professional image with clear service offerings and active social media presence, targeting general audiences including businesses and organizations. Technically, the site is built on WordPress 4.9.8 with common plugins and libraries such as jQuery and Bootstrap, but uses outdated versions that pose security risks. The site employs HTTPS and Google reCAPTCHA for form security but lacks modern security headers and up-to-date software versions. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but requires technical and compliance improvements to enhance security and trust.

Hořákov CZ is a small-scale community website dedicated to the history and current affairs of the village Hořákov in the Czech Republic. The site provides archival materials, historical documents, and local information primarily targeted at residents, natives, and enthusiasts of the region. The website is built on WordPress, utilizing common plugins and a well-known theme, delivering a moderate performance and good mobile responsiveness. The content is rich in historical data, including downloadable PDFs and genealogical information, but lacks modern privacy and security compliance features such as privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and serves its niche audience well but should enhance compliance and security practices to align with best practices.

W

DOLLY4D : Situs Slot Dolly4D Maxwin Mudah Dengan Pola Spin Gacor Harian

worldtbook.com

52

The website worldtbook.com operates as an online slot gambling platform branded as DOLLY4D, targeting an Indonesian audience interested in online slot games with high RTP and popular providers. The business model centers on online gambling services, but lacks clear company information, contact details, and compliance documentation. Technically, the site uses modern JavaScript frameworks such as React and Next.js, hosted behind Cloudflare DNS and utilizing DigitalOcean Spaces CDN. However, security best practices are not fully implemented, with no DNSSEC, no visible security headers, and unclear SSL status. The WHOIS data is suspicious due to a future domain creation date and minimal registrant information, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but poor security and compliance posture, with significant risks related to business credibility and regulatory adherence.

K

ČKA - online výsledky

kuzelky.com

45

The website kuzelky.com serves as an online portal for bowling (kuzelky) results and league information primarily targeting the Czech bowling community. It provides schedules, live results, club contacts, and administrative login capabilities. The site is niche-focused, catering to players, clubs, and fans within the Czech Republic, and is supported by a domain registered since 2007, indicating a stable presence in its market segment. The business model revolves around providing timely sports results and league management information rather than commercial transactions or e-commerce. Technically, the site employs traditional web technologies including XHTML 1.0 Transitional, JavaScript with jQuery, and SweetAlert2 for UI dialogs. It uses XMLHttpRequest for dynamic content loading and is hosted via the registrar Gransy, s.r.o. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. SEO and accessibility features are minimal, and the design is functional but basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers such as Content Security Policy or HSTS. The login form does not show advanced protections like CAPTCHA or anti-CSRF tokens. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is consistent with the website’s Czech focus and shows no suspicious patterns. Overall, the site is moderately trustworthy and functional for its purpose but requires improvements in privacy compliance, security hardening, and modernization of technical infrastructure to enhance user trust and regulatory adherence.

The website sazkovekancelare.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to the site's content. This prevents extraction of any meaningful business, compliance, or contact information. The domain was registered in 2018 with REG-ACTIVE24 and uses Cloudflare nameservers, indicating a standard setup for security and performance. Due to the blocking, no privacy policies, cookie consent mechanisms, or terms of service are detectable. The technical infrastructure relies on Cloudflare's security platform, but no further details on CMS or frameworks are available. The security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF and CAPTCHA indicates a baseline security measure. Overall, the site cannot be fully analyzed, and the risk assessment is limited by the lack of accessible data.

The website www.ruik.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. No business-related content, contact information, or policies are available for analysis. The domain WHOIS data is unavailable, indicating either privacy protection or lack of registration, which limits trust and legitimacy assessment. The technical infrastructure relies on Cloudflare for security and performance, but no further technology or CMS details are discernible. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are visible. Overall, the site lacks transparency and content, resulting in a low trust and credibility score.

I

International Bowling Federation

bowling.sport

52

The International Bowling Federation (IBF) operates as the global governing body for the sport of bowling, providing governance, event management, anti-doping education, and resources for athletes and member federations worldwide. The website serves as a central hub for information on upcoming championships, anti-doping guidelines, and organizational structure, targeting athletes, sports officials, and bowling enthusiasts. The business model is typical of a non-profit sports federation, focusing on community engagement and sport development. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for event management and media handling. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Hosting details are not explicit, but DNS uses Microsoft Online name servers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy linked externally and no explicit GDPR compliance statements. Contact information is limited to email and physical address, with no phone numbers or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned within its niche. Strategic improvements in security headers, privacy transparency, and accessibility would enhance its posture and compliance.

Č

Česká bowlingová asociace

czechbowling.cz

54

Česká bowlingová asociace (ČBA) is the national amateur bowling association in the Czech Republic, representing bowling players of all skill levels and ages. It serves as the official representative of the Czech Republic in European and international bowling federations and organizes national competitions, leagues, and player registrations. The website provides comprehensive information about bowling events, rankings, news, and media content targeted at the Czech bowling community. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the professional content and official partnerships support legitimacy. Overall, the site is a well-maintained digital presence for the Czech bowling community with room for improvement in privacy compliance and security headers.

Z

Zako Slovakia, s. r. o.

zakobowling.com

45

Zako Slovakia, s. r. o. operates the website zakobowling.com, providing services and products related to the realization, reconstruction, and maintenance of skittles and bowling lanes. The company also offers an e-commerce platform selling spare parts and accessories for these sports. The business targets sports centers and enthusiasts primarily in Slovakia, positioning itself as a niche regional provider with a small business scale. The website is multilingual, supporting Slovak and several other European languages, enhancing accessibility for a broader audience. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO for search optimization, TranslatePress for multilingual support, and Moove GDPR Cookie Compliance for privacy management. Hosting is provided by Websupport, indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with a functional but basic design and navigation structure. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks DNSSEC, security headers, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or malicious content were detected. The domain registration is consistent and legitimate, though the domain is relatively new compared to the website's content history, suggesting a possible domain migration or re-registration. Overall, the website presents a functional and moderately secure platform for its business operations but would benefit from enhanced privacy disclosures, security hardening, and more comprehensive contact information to improve trust and compliance.

The website kodakprofessional.com currently returns an error page due to a backend API timeout, rendering the site content inaccessible. This prevents extraction of business, contact, or policy information. The domain is registered through a reputable corporate registrar since 2018, indicating a legitimate business presence. However, the lack of accessible content and security metadata limits the ability to assess the site's digital maturity and security posture comprehensively. The site shows no evidence of privacy or cookie policies, contact information, or security best practices in the provided data. Overall, the site is currently non-functional from a user perspective, which poses significant risks to business credibility and user trust.

K

Klášter sv. Františka z Assisi

klaster-votice.cz

48

Klášter sv. Františka z Assisi in Votice is a cultural heritage site offering guided tours, exhibitions, and community activities focused on local history and culture. The website serves as an informational portal for visitors, providing event calendars, multimedia content, and practical visitor information. The site targets tourists, families, and local community members interested in cultural and educational experiences. Technically, the website is built on the Vismo CMS platform, uses modern web technologies, and integrates Google Analytics and Google Translate for analytics and multilingual support. The site is mobile optimized and accessible with clear navigation and structured content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. Overall, the website is trustworthy, professionally maintained, and suitable for its cultural and educational purpose.

L

LDStudio

ringoffury.cz

52

Ring of Fury is a Czech-based combat sports event organizer specializing in celebrity fights across boxing, K1, Muay Thai, and MMA with small gloves. The organization targets combat sports fans and entertainment seekers, offering live events, PPV streaming, and merchandise. The website is professionally designed with good content quality and clear navigation, supported by active social media channels. Technically, it uses modern JavaScript libraries and Google Tag Manager for analytics, but lacks some security headers and formal privacy documentation. The absence of WHOIS data raises some trust concerns, though the visible business presence and partner sponsorships support legitimacy. Overall, the site is functional and engaging but would benefit from enhanced security and compliance documentation.

E

Ecocert Deutschland GmbH

ecocert.com

67

Ecocert Deutschland GmbH operates as a leading certification body specializing in ecological and social sustainability certifications across multiple sectors including agriculture, cosmetics, textiles, and forestry. The company offers certification services, professional training, and consulting to support sustainable practices globally. The website reflects a mature digital presence with multilingual support and a clear focus on sustainability and compliance. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high based on content and external trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust further.

L

Les Authentiques Vignerons de Mardeuil

vigneronsmardeuil.fr

42

Les Authentiques Vignerons de Mardeuil is a collective of local winemakers in Mardeuil, France, offering visitors the opportunity to discover and taste their champagnes throughout the year. The website serves as a platform to showcase individual winemakers, their locations, opening hours, and services such as tastings and vineyard visits. The business targets wine enthusiasts and tourists interested in authentic local wine experiences. Technically, the website uses modern web technologies including JavaScript and CSS, is mobile optimized, and employs HTTPS with valid SSL certificates. However, it lacks some security headers and privacy compliance documentation such as privacy and cookie policies. The absence of WHOIS data limits domain trust assessment, but the site content and contact information appear professional and consistent with a small local business. Overall, the site demonstrates a moderate level of digital maturity with room for improvement in security and compliance.

P

Peden Bloodstock, Global Equine Logistics

pedenbloodstock.com

53

The website www.pedenbloodstock.com appears to be a minimal Wix-built site with very limited content and no visible business or contact information. The absence of privacy policies, cookie notices, terms of service, or any security or incident response details indicates a low level of digital maturity and compliance. The WHOIS data is unavailable or the domain is unregistered, which raises concerns about the legitimacy and trustworthiness of the domain. Technically, the site uses Wix platform technologies and includes Sentry for error monitoring, but lacks modern security headers and SEO optimization. Overall, the security posture is weak due to missing policies and lack of contact or incident response information. The site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or explicit content detected.

A

Agence KARACTERE

agencekaractere.fr

40

Agence KARACTERE is a French multidisciplinary communication and design agency established in 2011, offering a broad range of services including strategic consulting, content production, graphic design, web development, maintenance, and web marketing. The agency targets businesses and institutions, particularly in higher education, research, and agro-food sectors. The website demonstrates a professional digital presence with modern WordPress technology and compliance with GDPR and cookie regulations. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is generally good with HTTPS and cookie consent mechanisms, but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy and well-designed, but verification of domain registration is recommended.

The website perfectreplicawatches.to appears to be a minimal redirect page with no accessible content, likely designed to redirect visitors to another domain. The business focus implied by the domain name is the sale of replica watches, which are counterfeit products. The site lacks any visible privacy, cookie, or terms of service policies, and no contact or business legitimacy information is provided. Technically, the site uses basic JavaScript for redirection and is hosted via ParkLogic, but no modern frameworks or CMS are detected. Security posture is weak, with no security headers or HTTPS confirmation visible in the provided data. The use of privacy protection in WHOIS and the redirect behavior suggest attempts to obscure ownership and avoid scrutiny. Overall, the site presents a high risk from a security, compliance, and business credibility perspective.

USR Services, s.r.o. is a Slovakian company established in 2009, with a domain age consistent with its business history. The website is minimalistic, providing only basic contact information including company name, address, and tax identifiers. There is no detailed description of services or business activities, limiting insights into its market position or business model. The website lacks privacy, cookie, and terms of service policies, and does not include interactive elements such as forms or social media links. Technically, the site shows no advanced technologies or CMS usage and has limited SEO and accessibility features. Security posture is weak due to absence of security headers and no visible SSL/HTTPS confirmation from the provided data, although DNSSEC is enabled at the domain level, which is a positive sign. Overall, the site appears legitimate but underdeveloped in terms of digital maturity and security best practices.

The website lukaspilarik.cz currently serves a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates a protective measure likely to mitigate bot traffic or abuse. The domain is registered since 2016 with a Czech registrar, consistent with the domain's country code and name servers. However, the actual website content is inaccessible due to the security challenge, preventing a full assessment of business operations or services. The page lacks any visible privacy, cookie, or terms of service policies, and no contact or business information is presented. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for bot protection, but no other frameworks or CMS are detected. Security headers and SSL configuration details are not visible in the provided data, limiting security posture evaluation.

STUDIO ERIGO, s.r.o. is a small Czech advertising agency based in Brno specializing in branding, marketing, graphic design, web design, and advertising services. The company targets businesses and organizations seeking comprehensive branding solutions both online and offline. Their website demonstrates a professional presence with a portfolio of clients and projects, indicating an established market position in the regional advertising sector. Technically, the website runs on TYPO3 CMS version 6.1, uses jQuery, Google Tag Manager, and Google Maps API, reflecting a moderately modern digital infrastructure. The site is accessible, mobile responsive to a basic degree, and includes cookie consent and privacy policy mechanisms, showing awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data is not publicly available, likely due to privacy protection, which is common for small businesses. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve technical and security aspects.

C

Canadian Spa International®

canadian-spa.com

41

Canadian Spa International® is a medium-sized company based in the Czech Republic specializing in the manufacturing and distribution of home and commercial spas, whirlpools, swim spas, and heat pumps. The company emphasizes innovation and quality, offering unique patented technologies and extended warranties. Their market position is that of a premium and innovative spa manufacturer targeting consumers and commercial clients interested in wellness products. The website is built on WordPress with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and no security headers were detected, which could be improved to enhance security posture. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website scores well in content quality and business credibility but needs improvements in privacy compliance and security best practices.

R

Resume-Library Inc

resume-library.com

60

Resume-Library Inc operates a leading US-based online job board established in 2013, providing job seekers with tools to upload resumes, search jobs across multiple industries, and receive career advice. The platform also serves employers by offering job posting and resume search services. It is part of the CV-Library Group, a UK-based parent company, indicating a strong backing and international presence. The website is professionally designed, mobile-optimized, and rich in content, targeting primarily US job seekers and employers. Technically, the site leverages modern frameworks such as React and Next.js, integrates analytics and marketing tools like Google Analytics and Criteo, and employs security best practices including HTTPS and security headers. However, WHOIS data for the domain is unavailable, which slightly impacts trust but is mitigated by the site's transparency and business information. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user data protection. Overall, Resume-Library presents a mature digital presence with a solid market position in the online recruitment sector.

C

CV-Library Ltd

cv-library.ie

61

CV-Library.ie is a professional and well-established online job board focused on the Irish employment market. It offers a comprehensive platform for job seekers to search and apply for jobs, register CVs, and receive job alerts, while providing recruiters with tools to post jobs and search candidate databases. The website is well-branded, mobile-optimized, and provides extensive career advice content, positioning itself as Ireland's fastest growing job site. Technically, the site uses modern tracking and analytics technologies including Google Analytics, Bing Ads, and Force24, with good mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. The absence of WHOIS data limits domain registration analysis, but the overall trust signals and professional presentation indicate a legitimate and credible business. Privacy compliance is strong with clear policies and consent banners. Overall, CV-Library.ie represents a mature digital platform with a strong market presence in Ireland's recruitment sector.

The analyzed URL is a CloudFront CDN subdomain serving a maintenance or error page indicating a 403 Forbidden error. The page content is minimal and blocked, preventing access to any meaningful business or security information. The domain is not a registered standalone domain but a CDN edge hostname, which lacks WHOIS registration data and typical trust indicators. Due to the WAF blocking, no metadata, forms, or contact details are available for analysis. The security posture cannot be assessed, and the website quality is poor due to inaccessibility. Overall, the site appears to be a temporary or error state page rather than a full business website.

A

8am Run your Firm, Reclaim the Day | 8am

affinipay.com

62

The website www.8am.com presents as a modern, business-oriented platform utilizing contemporary web technologies such as the Astro framework, Font Awesome icons, and Google Tag Manager for analytics and marketing purposes. The site includes a cookie consent mechanism indicating some level of privacy compliance, although no explicit privacy policy or terms of service pages were detected. The content appears minimal and primarily technical, with no direct contact information or detailed business descriptions available in the provided HTML content. The domain WHOIS data is notably absent, with the registry returning 'No match for domain', which raises concerns about the domain's registration status or privacy protection practices. This discrepancy between an active website and missing WHOIS data impacts the overall trustworthiness and legitimacy assessment.

L

Linop

linop.fr

41

Linop is a professional graphic and digital design service operated by Pauline Le Gal, offering art direction, web design, and training services primarily targeting entrepreneurs, associations, and artists in France. The website presents a well-structured portfolio with clear contact options and integrates GDPR-compliant cookie consent mechanisms. Technically, the site is built on WordPress with modern plugins and hosted by Infomaniak Network SA, ensuring reliable infrastructure. Security posture is good with HTTPS enabled and no evident vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

I

Innovation Acta S.r.l.

innovationacta.eu

56

Innovation Acta S.r.l. is a specialized consultancy firm based in Italy focused on supporting private and public organizations, researchers, and SMEs in securing EU research funding and managing multinational collaboration projects. Their services span from funding strategy and consortium building to project management, communication, and training. The company maintains a professional online presence with a well-structured website that is mobile optimized and regularly updated with relevant news and calls for proposals. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and published incident response policies. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. Overall, Innovation Acta demonstrates a credible and professional digital footprint appropriate for its niche consultancy business.

J

Jihočeská filharmonie

jcfilharmonie.cz

57

Jihočeská filharmonie is a regional cultural institution serving the South Bohemian Region of the Czech Republic, providing orchestral concerts, subscription series, and special cultural events. The website reflects a well-structured and professionally designed platform that supports multilingual content via Weglot, indicating a moderate level of digital maturity. The technical infrastructure is based on Webflow CMS with modern web technologies and integration of Google Analytics for visitor tracking. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and privacy policies. The absence of WHOIS data limits domain trust verification, though the presence of official partner logos and social media accounts supports legitimacy. Overall, the website is functional, user-friendly, and professionally presented but would benefit from enhanced privacy compliance and security transparency.

The analyzed URL is a 404 error page hosted on a subdomain of ffm.to, which is associated with feature.fm, a music marketing platform. The page serves as a standard 'Page Not Found' message with minimal content and no business or contact information. The technical infrastructure uses modern JavaScript frameworks such as Vue.js and Nuxt.js, delivered via a Fastly CDN, and includes tracking scripts like Google Tag Manager and AppNexus. However, the page lacks privacy, cookie, and terms of service policies, as well as any security or incident response information, which limits compliance and trustworthiness. The security posture is minimal with no detected security headers or explicit protections. Overall, the page is accessible and not blocked by any WAF or security challenge, but it provides no substantive business or security information.

F

FairPlé Music CLG-Company Limited by Guarantee

fairple.com

59

FairPlé Music CLG is a small non-profit organization dedicated to promoting gender balance in Irish traditional and folk music. The website serves as an advocacy platform providing resources, reports, and policy recommendations to support equal representation and safer environments within the music community. The organization is registered in Ireland with a clear company registration number and physical address, enhancing its credibility. The website is built on Squarespace, leveraging modern web technologies and standard integrations such as Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. WHOIS data is missing or not publicly available, which reduces trust somewhat but does not negate the legitimacy indicated by business information and content quality.

The analyzed website autostore.com is a parked domain page managed by GoDaddy, LLC, a well-known domain registrar and parking service provider. The page contains no active business content, products, or services, and is primarily designed to offer the domain for sale. The presence of a Trustpilot widget and TrustArc cookie consent banner indicates some level of trust and privacy compliance, but the overall content is minimal and targeted at domain buyers rather than end consumers. Technically, the site uses standard web technologies including JavaScript, CSS, and third-party widgets for consent management and reviews. It is hosted on GoDaddy's infrastructure and shows basic mobile optimization and accessibility features. However, no advanced CMS or frameworks are detected, and SEO optimization is poor due to lack of meaningful content. From a security perspective, the site lacks visible security headers and detailed security or incident response policies. The domain is registered with Tucows Domains Inc. and managed by GoDaddy, with no suspicious WHOIS patterns. DNSSEC is not enabled, which is a minor security gap. Overall, the security posture is basic but acceptable for a parked domain. The overall risk is low given the lack of active content or user interaction, but the site offers limited business credibility or user engagement. Strategic recommendations include improving security headers, enabling DNSSEC, and providing clearer business or contact information if the domain is to be developed into an active site.

Design by Ewa is a specialized small business focused on providing custom web design and graphic design services tailored to dog and cat breeders, kennels, catteries, and the equestrian industry. The company has a long-standing presence since 2001 and offers a range of services including website packages, logo design, magazine publication, and advert design. Their market position is that of a niche specialist with a professional and artistically driven approach. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

A

Acro Jarmila Podzemská

acro-farm.cz

52

ACRO FARM is a small family-operated breeder specializing in colorful miniature horses and Irish cobs, emphasizing healthy animals with excellent character and active participation in driving, jumping, and therapy activities. The website showcases champion horses and provides detailed descriptions of their breeding goals and achievements. Technically, the site is built on the Webnode CMS platform, uses Cloudfront CDN, and integrates Google Analytics for visitor tracking. The site is accessible without WAF or blocking mechanisms but lacks advanced security headers and privacy compliance features. No WHOIS data is available, limiting domain legitimacy verification. Overall, the site serves a niche equestrian audience with basic but functional digital infrastructure.

JS Equitana Martinice is a small equestrian society based in the Czech Republic focused on organizing horse riding competitions, training camps, and related equestrian activities. The website serves as an information hub for event calendars, online results, galleries, and partner information. The business operates regionally with a clear target audience of equestrian sports enthusiasts and competitors. The parent company is RUBILIS, s.r.o., indicating a formal business structure. Technically, the website uses a mix of older and modern JavaScript libraries, a custom CMS (IPO), and integrates Matomo analytics for user tracking. The site is mobile responsive and provides a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Security posture is moderate with HTTPS enforced and use of Google reCAPTCHA, but missing security headers and no published security or incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website content and partner ecosystem support legitimacy. Overall, the site is functional, moderately secure, and serves its niche audience effectively.

K

Kestria ry

kestria.com

68

Kestria ry operates as the world’s largest executive search alliance, connecting boutique executive search firms globally to provide leadership recruitment services across multiple industries and functions. Founded in 2020, the organization has established a strong market position with offices spanning 6 continents, 40+ countries, and 90+ cities, targeting companies seeking executive talent and search firms wishing to join the alliance. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, jQuery, and Google Maps API, likely running on a Django backend. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Privacy and cookie policies are well implemented with explicit consent mechanisms, indicating good compliance with GDPR. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no public security policy or incident response information, nor a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kestria’s website presents a trustworthy and professional digital presence with strong business credibility and privacy compliance. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

C

CBS spol, s.r.o.

malovanemapy.sk

43

CBS spol, s.r.o. operates the website malovanemapy.sk, specializing in the creation and sale of hand-painted maps tailored for municipalities, microregions, sports centers, hotels, and resorts primarily in Slovakia. Their unique business model combines traditional artistic craftsmanship with modern technology to produce accurate and visually appealing maps that serve both tourists and local residents. The company leverages sponsorship and advertising partnerships to support the costly production process, enhancing community involvement by including local children in the artwork. The website reflects a niche market position with a strong local cultural focus and trust signals such as testimonials and FSC certification.

The website peaksys.com is currently a parked domain with no original business content, serving primarily as a domain sale landing page. The domain is registered since 2005 with Megazone Corp., a Korean registrar, but the website content is generic and lacks any company or product information. The site embeds multiple third-party advertising and tracking scripts and an iframe redirecting to an external URL, indicating monetization through ads rather than active business operations. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or modern frameworks. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with privacy regulations. No contact information or business credentials are provided, reducing trust and credibility.

J

Jacob Stoy

jacobstoy.de

50

Jacob Stoy's website serves as a personal portfolio for a German musician and graphic designer, showcasing artistic projects including performances, books, installations, and websites. The business operates in a niche creative market with a small scale and targets a general audience interested in arts and culture. The website is built using modern technologies such as SvelteKit and Sanity CMS, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, the site lacks advanced SEO and accessibility features. Security posture is minimal with no detected HTTPS confirmation or security headers, and privacy compliance is basic with only a privacy policy page present but no cookie consent mechanism. No contact information or social media links are provided, limiting direct engagement and trust signals. Overall, the site is functional and professionally designed but requires improvements in security, privacy, and contact transparency to enhance credibility and compliance.

K

Kristamedia

kristaonline.com

41

Kristamedia operates a business matching platform under the website kristaonline.com, primarily targeting business professionals seeking connections and partnerships. The platform appears to be a small-scale operation founded around 2019, with a focus on facilitating business matching services. The website uses modern frontend technologies such as Nuxt.js and Bootstrap, hosted on Amazon AWS infrastructure, indicating a moderate level of technical maturity. However, the site lacks comprehensive privacy, cookie, and terms of service policies, and does not provide explicit contact or incident response information, which limits its compliance and trustworthiness. Security posture is basic with no detected security headers or advanced protections, and no analytics or tracking services are evident, suggesting minimal user tracking. Overall, the site is accessible without WAF or blocking mechanisms and contains safe, business-oriented content.

E

Europe Jacques Delors - Thinking Europe

europejacquesdelors.eu

52

The website 'Europe Jacques Delors - Thinking Europe' appears to be a European political or cultural platform, likely focused on European integration or related topics. The site uses modern web technologies such as Nuxt.js and integrates Google Tag Manager for analytics. However, the site lacks visible contact information, privacy policies, and security headers, which limits its trustworthiness and compliance posture. The absence of WHOIS data due to EURid privacy restrictions prevents a full domain legitimacy assessment, but the domain's .eu TLD aligns with the European focus. Overall, the website is accessible and functional but requires improvements in security and privacy compliance to enhance trust and user confidence.

The website bicis.com is a parked domain page primarily used for domain resale through the Sedo platform. The domain is registered to Soluciones Corporativas IP, SL, a company specializing in domain management and resale. The site contains minimal content, mostly advertising the domain for sale, with no original business or product information. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with embedded Sedo and Google advertising scripts. There is no evidence of a CMS or advanced frameworks. Security posture is limited; no HTTPS or security headers are evident from the provided data, and no security or incident response policies are published. Privacy compliance is minimal but includes a basic cookie consent mechanism and a link to Sedo's privacy policy. Overall, the site serves as a domain parking page with low business credibility and limited user engagement.

E

EquiRadar - The EquiRadar platform has been discontinued

equiradar.com

47

EquiRadar was a digital platform aimed at the equestrian community, designed to provide next-generation services for equestrians. The website currently displays a clear notice that the platform has been discontinued, indicating that the business is no longer operational. The site content is minimal and primarily serves as an informational placeholder with a contact email for inquiries. Technically, the website uses standard HTML, CSS, and JavaScript without any detected advanced frameworks or CMS. The site is mobile optimized and loads with moderate performance but lacks comprehensive SEO and accessibility features. Security posture is weak due to absence of security headers and no visible SSL configuration details. No privacy or cookie policies are present, indicating poor privacy compliance. The WHOIS data is missing, suggesting the domain may be unregistered or expired, which severely impacts the trustworthiness and legitimacy of the domain. Overall, the site is safe with no adult or explicit content but offers limited business credibility and technical sophistication.