High-risk security reports

D

Département de la Meuse

meuse.fr

48

The Département de la Meuse website serves as the official digital presence of the regional government authority for the Meuse department in France. It provides comprehensive public service information, news, event listings, and resources for residents and local partners. The site is well-structured, primarily targeting local citizens and stakeholders, and offers services such as social support, cultural activities, tourism, and administrative procedures. The business model is governmental, focusing on public administration and community engagement. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, supplemented by modern JavaScript libraries like jQuery, Parsley.js for form validation, and Tarteaucitron.js for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a mature approach to GDPR compliance. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit HTTP security headers and a published security.txt file. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature of the domain and consistent branding. Overall, the security posture is solid but could be improved with additional headers and incident response information. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing HTTP security headers, publishing a security.txt file, providing incident response contacts, and adding a terms of service page to improve legal clarity and user trust.

B

Bílý kruh bezpečí, z.s.

domacinasili.cz

43

The website www.domacinasili.cz serves as an informational and support platform dedicated to victims of domestic violence in the Czech Republic. It is operated by the non-profit organization Bílý kruh bezpečí, z.s., which provides crisis telephone help, psychological support, legal and social counseling, and public awareness resources. The site is well-branded and targets individuals affected by or concerned about domestic violence, offering practical advice and contact information for assistance. Technically, the website is built on WordPress and uses modern web technologies including jQuery and Google Analytics for tracking. It employs HTTPS for secure communications and includes a cookie consent banner to comply with basic privacy regulations. The site is mobile-optimized and presents a clear navigation structure, although some accessibility features could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a published privacy policy page, which are important for compliance and user trust. No WHOIS data was retrievable, which limits domain registration trust analysis. No forms collecting personal data were found on the homepage, reducing immediate data protection concerns. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment indicates a trustworthy and professional non-profit website with some gaps in privacy compliance and domain transparency. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

N

Networm Studio

networm.cz

41

Networm Studio is a small Czech-based group of freelancers specializing in custom web development, SEO optimization, e-commerce solutions, and social media marketing. Operating since 2005, they focus on personalized client solutions rather than templated websites, targeting businesses seeking tailored online presence. The website is built on WordPress with common technologies like Bootstrap, jQuery, and Google reCAPTCHA, indicating a moderate level of technical maturity. Security posture is adequate with HTTPS and anti-bot measures but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact information appear professional and consistent with a legitimate business. Overall, the site is safe, well-structured, and serves its business purpose effectively.

Optimus is a Polish technology company specializing in IT hardware manufacturing and distribution, with a focus on business IT solutions and gaming computers. The website presents two main segments: business IT services and gaming computers, targeting both corporate clients and gamers. The company appears established, with a domain dating back to 1996, indicating a mature market presence in Poland. The business model revolves around a network of local partners providing IT services and hardware supply, alongside direct manufacturing of computers, including a gaming series designed for various skill levels. Technically, the website uses basic HTML5 and CSS3 with video elements to showcase its offerings. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. No CMS or advanced frameworks are detected, suggesting a simple custom-built site. Performance is moderate, with no evident use of analytics or tracking technologies. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are available, limiting transparency and trust. The WHOIS data confirms the domain's legitimacy and long-term registration but shows no DNSSEC or advanced security features. Overall, the security posture is basic and requires improvements to meet modern standards. The overall risk is moderate due to the absence of privacy and security policies and lack of contact information. Strategic recommendations include implementing HTTPS with proper SSL, adding privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.

I

inREAL realitná kancelária, s.r.o.

inreal.sk

45

inREAL realitná kancelária, s.r.o. is a Slovakian real estate agency specializing in property sales and searches across a wide range of locations in Slovakia. The website serves as a platform for clients to browse property listings and contact the agency for real estate services. The company targets individuals and businesses interested in real estate transactions within Slovakia, positioning itself as a local real estate service provider. The website features a professional design with clear navigation and mobile responsiveness, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with HTTPS enabled ensuring secure communications. However, there is room for improvement in security headers and privacy policy transparency. The security posture is moderate, with email obfuscation and cookie consent mechanisms implemented, but lacking explicit security policies or incident response contacts. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

T

TechnologyMountains

technologymountains.de

43

TechnologyMountains is a German-based technology collaboration network that aims to accelerate business progress by linking companies with technical expertise and bridging the gap between industry and science. The website presents a professional and consistent brand image focused on fostering technological leadership among its members. The technical infrastructure is built on WordPress with common plugins such as WooCommerce and caching mechanisms, providing moderate performance and good mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which lowers its overall security posture. No WAF or blocking mechanisms were detected, allowing full content accessibility. The WHOIS data is minimal but consistent with hosting providers, with no privacy protection or suspicious patterns identified. Overall, the site is safe for general audiences and serves a business-to-business market segment.

Living MS is a healthcare information website focused on Multiple Sclerosis, providing educational content, support resources, and service information for MS patients and their families. The site is branded and operated by Merck GmbH, a pharmaceutical company, indicating a strong market position in healthcare and patient support. The platform targets German-speaking users in Austria and offers comprehensive information on MS symptoms, diagnosis, therapies, and living with the disease. It also provides a dedicated service line for medication injection device replacement. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, supported by modern analytics tools like Google Tag Manager and Adobe Analytics. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Cookie consent and privacy compliance are well implemented, reflecting adherence to GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no security.txt or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a professional, trustworthy, and compliant digital presence for a healthcare information service. The lack of WHOIS data limits domain trust verification, but the strong branding and external partnerships support legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and maintaining regular security audits.

M

Mladí lékaři z.s.

mladilekari.cz

41

Mladí lékaři z.s. is a Czech non-profit association founded in 2010 that unites young doctors concerned with the Czech healthcare system. The website serves as an informational and community platform, reflecting a well-established position in the healthcare sector in the Czech Republic. The organization operates independently and voluntarily, targeting young medical professionals and stakeholders. Technically, the website is built on WordPress using the Divi theme and several common plugins, hosted by Active24. The site demonstrates good SEO practices, mobile optimization, and basic accessibility. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, but lacks explicit privacy and terms of service pages and security headers. Overall, the site is professional and trustworthy with clear contact information and social media presence. Recommendations include enhancing security headers, publishing privacy and terms policies, and adding vulnerability disclosure information to improve compliance and trust.

The website interakcieliekov.sk is a Slovak healthcare informational platform dedicated to providing a drug interaction database for patients and pharmacists. It is part of a social responsibility initiative by the Slovak Pharmaceutical Chamber, aiming to enhance patient safety and public knowledge about pharmacotherapy. The platform offers tools to evaluate drug combinations and potential risks, along with educational content and pharmacist consultation options. The site is targeted primarily at Slovak patients and healthcare professionals. Technically, the site is built using modern React and Material-UI frameworks, hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure and reliable user experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information for security or data protection matters, which are areas for improvement. Overall, the domain registration data aligns well with the website's purpose and origin, supporting its legitimacy and trustworthiness.

T

TRIMA NEWS, s.r.o.

budejckadrbna.cz

48

Budějcká Drbna is a regional news media portal operated by TRIMA NEWS, s.r.o., focused on delivering authentic news and stories from České Budějovice and the South Bohemia region. It offers a variety of news categories including society, crime, sports, and culture, targeting local residents and interested audiences. The site supports user engagement through registration, article saving, and subscription to daily news summaries. Technically, the website employs a modern JavaScript stack with integrations for analytics, advertising, and consent management, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable transparency gap but does not detract from the professional presentation and operation of the site. Overall, the site is a trustworthy and well-maintained regional news source.

O

OLÚp Predná Hora

olup-prednahora.sk

40

OLÚP, n. o. Predná Hora is a well-established non-profit specialized psychiatric healthcare institution in Slovakia, founded in 2006. The organization offers a range of services including inpatient and outpatient psychiatric care, family therapy, and aftercare treatments. The website reflects a professional and trustworthy presence with comprehensive information targeted at patients and interested parties. It maintains a consistent brand identity and demonstrates compliance with GDPR and cookie regulations, enhancing user trust. The institution also actively engages users through social media channels and a dedicated mobile application.

W

Winning Group a.s.

winninggroup.cz

45

Winning Group a.s. is a Czech investment company focused on advancing its portfolio of firms primarily in manufacturing, construction, real estate, hospitality, and premium food sectors. The company positions itself as a strategic partner ready for long-term growth and acquisitions, targeting investors and industry professionals. The website reflects a mature digital presence with multilingual support and comprehensive corporate content including annual reports and press releases. Technically, the site is built on WordPress with modern JavaScript libraries and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

The analyzed URL is a 404 error page hosted on a subdomain of ffm.to, which is associated with feature.fm, a music marketing platform. The page serves as a standard 'Page Not Found' message with minimal content and no business or contact information. The technical infrastructure uses modern JavaScript frameworks such as Vue.js and Nuxt.js, delivered via a Fastly CDN, and includes tracking scripts like Google Tag Manager and AppNexus. However, the page lacks privacy, cookie, and terms of service policies, as well as any security or incident response information, which limits compliance and trustworthiness. The security posture is minimal with no detected security headers or explicit protections. Overall, the page is accessible and not blocked by any WAF or security challenge, but it provides no substantive business or security information.

T

The Moth

themothcontact.org

45

The Moth is a recognized storytelling non-profit organization offering live events, educational workshops, and community engagement programs. Their website focuses on providing a contact form for inquiries related to ticketing, events, donations, and other services. The organization targets a general audience interested in storytelling and cultural events. Technically, the website is built using React.js and integrates Salesforce Web-to-Case for contact management. Hosting is provided via GoDaddy, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data shows suspicious domain creation date in the future, which reduces trustworthiness but does not necessarily indicate malicious intent. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

The analyzed website autostore.com is a parked domain page managed by GoDaddy, LLC, a well-known domain registrar and parking service provider. The page contains no active business content, products, or services, and is primarily designed to offer the domain for sale. The presence of a Trustpilot widget and TrustArc cookie consent banner indicates some level of trust and privacy compliance, but the overall content is minimal and targeted at domain buyers rather than end consumers. Technically, the site uses standard web technologies including JavaScript, CSS, and third-party widgets for consent management and reviews. It is hosted on GoDaddy's infrastructure and shows basic mobile optimization and accessibility features. However, no advanced CMS or frameworks are detected, and SEO optimization is poor due to lack of meaningful content. From a security perspective, the site lacks visible security headers and detailed security or incident response policies. The domain is registered with Tucows Domains Inc. and managed by GoDaddy, with no suspicious WHOIS patterns. DNSSEC is not enabled, which is a minor security gap. Overall, the security posture is basic but acceptable for a parked domain. The overall risk is low given the lack of active content or user interaction, but the site offers limited business credibility or user engagement. Strategic recommendations include improving security headers, enabling DNSSEC, and providing clearer business or contact information if the domain is to be developed into an active site.

G

Global Sign and Design, Inc.

global-sign.com

47

Global Sign and Design, Inc. is a small business specializing in digital signage and LED display solutions primarily serving the Pennsylvania region. The company acts as a premier distributor and installer for top manufacturers in the visual communication industry, offering products such as outdoor and indoor LED displays, scoreboards, and custom signage. Their market position is regional with a focus on retail and manufacturing sectors requiring digital signage solutions. Technically, the website infrastructure is outdated, relying on deprecated Flash technology and lacking modern security features such as HTTPS enforcement and security headers. The site is hosted by Bluehost Inc. and uses basic JavaScript and CSS without modern frameworks or CMS. Performance and mobile optimization are poor, and accessibility features are minimal. From a security perspective, the website shows significant gaps including absence of privacy and cookie policies, no visible security headers, and no DNSSEC enabled on the domain. The use of Flash presents security and compatibility risks. Contact information is provided but limited, and no incident response or security policies are disclosed. Analytics tools like StatCounter and Google Analytics are used without clear privacy compliance disclosures. Overall, the website presents moderate business credibility but requires urgent technical and security improvements to enhance user experience, compliance, and trustworthiness. Strategic recommendations include modernizing the website technology stack, implementing HTTPS and security headers, adding privacy and cookie policies, and removing deprecated Flash content.

M

MYJO, s.r.o. - REZEO

rezeo.cz

44

REZEO is a Czech Republic based SaaS company specializing in an online reservation system tailored for small accommodation providers. The platform aims to simplify online booking processes, enhance guest comfort, and improve rental efficiency. The company operates under MYJO, s.r.o., founded in 2021, positioning itself as a niche player in the hospitality sector. The website reflects a professional and consistent brand image with a clear focus on its target audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and consent management tools, hosted by Active24. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers and formal policies like privacy and terms of service are missing, representing areas for improvement. Overall, the website is trustworthy and functional, with moderate user tracking and marketing integration.

G

Guía de la Industria Química

guiaquimica.mx

48

Guía de la Industria Química is a specialized online platform focused on providing comprehensive information, business directories, and advertising opportunities for the chemical industry and related sectors in Mexico. Established in 2011, it serves industry professionals and companies by offering detailed articles, supplier listings, and sector-specific insights. The website positions itself as an important resource within the Mexican chemical manufacturing sector, supporting business decision-making and networking. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, Google Fonts, and interactive libraries such as Swiper and AOS for animations. It integrates Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Hosting details are limited but the domain registrar is consistent with the business location. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms to mitigate spam. However, it lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust. Overall, the website is professional, content-rich, and trustworthy for its target audience but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear incident response contacts to improve compliance and security posture.

Design by Ewa is a specialized small business focused on providing custom web design and graphic design services tailored to dog and cat breeders, kennels, catteries, and the equestrian industry. The company has a long-standing presence since 2001 and offers a range of services including website packages, logo design, magazine publication, and advert design. Their market position is that of a niche specialist with a professional and artistically driven approach. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

A

a-net group a.s.

cavalletto.cz

49

Cavalletto.cz is an established Czech e-commerce retailer specializing in equestrian products, including horse carts, riding equipment, apparel, stable supplies, and related services. The business targets horse owners, riders, and stable operators primarily within the Czech Republic. The website presents a comprehensive product catalog with clear navigation and a professional design, supporting a good user experience. Technically, the site uses jQuery and video.js libraries and appears to be built on a custom or Nette-based e-commerce platform hosted on Czechland.net servers. Mobile optimization is good, and basic accessibility features are present. Security measures include HTTPS usage, CSRF tokens in forms, and a cookie consent mechanism with opt-in for analytics and advertising cookies. However, explicit security headers and privacy policies are missing, representing areas for improvement. WHOIS data confirms the domain's legitimacy and long-standing presence since 2009. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

J

Jezdecké centrum Královický dvůr

kralovickydvur.cz

46

Jezdecké centrum Královický dvůr is a hospitality and equestrian service provider located near Prague, Czech Republic. The business offers a restaurant, accommodation in a historic building, corporate event hosting, and a comprehensive equestrian center. Their target audience includes horse enthusiasts, tourists, families, and corporate clients seeking unique event venues. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Typekit fonts, with a CMS likely based on Nette framework. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Contact information is clearly presented with phone numbers and a contact form, but no privacy or cookie policies were found, indicating compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

E

ESC Olomouc

escolomouc.cz

46

ESC Olomouc operates as a modern equestrian center in the Czech Republic, specializing in hosting show jumping and dressage competitions. The website positions the center as the most exclusive equestrian venue in the country, targeting equestrian sports enthusiasts and competitors. Key services include event hosting, live streaming, and hospitality offerings such as a restaurant. The business is small-sized, founded in 2012, and maintains partnerships with local financial institutions and sports organizations. Technically, the website uses modern frontend technologies like Alpine.js and Swiper.js, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are visible, which may impact user engagement and trust. Overall, the site is professional and content-rich but could enhance privacy compliance and security transparency.

JS Equitana Martinice is a small equestrian society based in the Czech Republic focused on organizing horse riding competitions, training camps, and related equestrian activities. The website serves as an information hub for event calendars, online results, galleries, and partner information. The business operates regionally with a clear target audience of equestrian sports enthusiasts and competitors. The parent company is RUBILIS, s.r.o., indicating a formal business structure. Technically, the website uses a mix of older and modern JavaScript libraries, a custom CMS (IPO), and integrates Matomo analytics for user tracking. The site is mobile responsive and provides a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Security posture is moderate with HTTPS enforced and use of Google reCAPTCHA, but missing security headers and no published security or incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website content and partner ecosystem support legitimacy. Overall, the site is functional, moderately secure, and serves its niche audience effectively.

Chuchle Arena Praha, s.r.o. operates a historic and prominent horse racing and equestrian sports venue located in Prague, Czech Republic. The company offers a multifaceted business model including horse racing events, show jumping competitions, event space rental, accommodation services, and a riding academy. The website reflects a well-established business with a strong market position in the Czech equestrian and sports hospitality sector. The target audience includes horse sports enthusiasts, families, tourists, and event organizers. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA. The site is built on the IPO CMS platform and demonstrates good mobile optimization and SEO practices. However, some technical debt is noted with the use of older JavaScript libraries and missing security headers. From a security perspective, the site enforces HTTPS and implements user consent mechanisms for cookies and tracking, aligning with GDPR requirements. The absence of WHOIS data reduces domain trustworthiness, and the lack of security headers and outdated libraries present moderate security risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and compliant with privacy regulations, but improvements in security headers, updated libraries, and domain registration transparency are recommended to enhance trust and security posture.

E

EQS magazín

eqsmagazin.cz

42

EQS magazín is a Czech-language online media platform dedicated to equestrian topics including horse care, nutrition, health, equipment, and interviews with riders and trainers. The website targets horse enthusiasts and riders primarily in the Czech Republic. It operates on a WordPress CMS infrastructure with common plugins and technologies such as Smart Slider 3, jQuery, Google Fonts, and Font Awesome. The site is well-structured with good content quality and consistent branding. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and safe for general audiences, with moderate tracking via Google Analytics.

G

GSG Berlin GmbH

gsg.de

46

GSG Berlin GmbH is a well-established real estate company specializing in leasing office, commercial, and warehouse spaces primarily in Berlin. With over 60 years of experience and a portfolio exceeding 1 million square meters, it serves a diverse clientele including startups, craftsmen, and SMEs. The company emphasizes flexibility in space usage and offers value-added services such as highspeed fiber internet and electric vehicle charging stations. The website reflects a strong market position with multiple locations and a broad tenant network. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for performance and mobile responsiveness. It integrates analytics and marketing tools like Google Tag Manager and HubSpot, and employs a cookie consent mechanism compliant with GDPR. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and professional content. The domain registration data is minimal but consistent with the business claims. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Regular security audits of third-party scripts and further accessibility improvements would strengthen the security posture and user experience.

CPI Hungary Kft. is a prominent real estate investor, developer, and operator in Hungary, managing a substantial portfolio exceeding 600,000 square meters with a valuation over €1.3 billion. The company operates primarily in office, hotel, and retail sectors and is a member of the CPI Property Group. The website reflects a mature digital presence with comprehensive investor materials, clear contact information, and active social media engagement. Technically, the site employs modern web technologies, including Google Tag Manager and responsive design, ensuring good performance and user experience. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and trustworthiness.

M

Přírodní vonné svíčky od Ewy Farne | Mmntshop.cz

mmntshop.cz

40

The website mmntshop.cz is a small e-commerce platform specializing in natural scented candles, notably associated with the celebrity Ewa Farna. It targets general consumers interested in natural home fragrance products within the Czech Republic. The site is built on WordPress using WooCommerce and Elementor, indicating a standard modern e-commerce infrastructure. Hosting appears to be provided by exon.io based on DNS information. The website demonstrates good design quality, mobile optimization, and SEO practices but lacks explicit privacy and terms of service documentation. Security posture is moderate with no advanced security headers detected and no visible vulnerability disclosure or incident response policies. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the domain registration data is consistent and appropriate for the business age and type, supporting legitimacy.

C

CBS spol, s.r.o.

malovanemapy.sk

43

CBS spol, s.r.o. operates the website malovanemapy.sk, specializing in the creation and sale of hand-painted maps tailored for municipalities, microregions, sports centers, hotels, and resorts primarily in Slovakia. Their unique business model combines traditional artistic craftsmanship with modern technology to produce accurate and visually appealing maps that serve both tourists and local residents. The company leverages sponsorship and advertising partnerships to support the costly production process, enhancing community involvement by including local children in the artwork. The website reflects a niche market position with a strong local cultural focus and trust signals such as testimonials and FSC certification.

A

AFM Productions

afmproductions.fr

49

AFM Productions is a specialized audiovisual production company founded in 1997 by the AFM-Téléthon association, focusing on creating documentaries and educational content about rare genetic diseases and medical research. The company targets a general audience interested in health, science, and social issues, leveraging storytelling to raise awareness and inform the public. The website reflects a professional and consistent brand identity aligned with its mission. Technically, the website is built on Drupal 10 with Bootstrap and uses modern libraries such as Swiper.js for UI components. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism via CookieYes, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and has implemented cookie consent but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy entity. Overall, the site presents a low-risk profile with good compliance and technical standards, though improvements in security headers and transparency policies are recommended.

I

Institut des cellules Souches pour le Traitement et l'Étude des maladies Monogéniques

istem.eu

47

I-Stem is a French research institute specializing in stem cell therapy and the study of rare and ultra-rare monogenic diseases. It operates as a medium-sized organization with approximately 80 staff members, including scientists and support personnel. The institute is well-positioned in the European healthcare research sector, collaborating with notable partners such as AFM-Telethon and Genethon. Their key services include fundamental and clinical research, clinical trial sponsorship, and providing advanced technological platforms to support their scientific endeavors. Technically, the website is built on WordPress with modern plugins for SEO, search, and form management. It employs Google reCAPTCHA for security and Tarteaucitron for cookie consent management, reflecting a mature digital infrastructure. The site is optimized for mobile and accessibility, with good SEO practices and moderate performance. From a security perspective, the site uses HTTPS with strong SSL configuration and includes security headers. It integrates anti-bot measures and cookie consent mechanisms, but lacks a dedicated security policy or incident response contact details. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of direct contact emails or phone numbers suggests a preference for controlled communication via contact forms. Strategic recommendations include publishing explicit security and incident response policies and considering a vulnerability disclosure program to enhance transparency and trust.

I

iRights.Lab

irights-lab.de

44

iRights.Lab is a German non-profit organization dedicated to promoting digital rights, digital literacy, and digital ethics. The organization provides educational resources, workshops, and advocacy initiatives aimed at civil society, educators, and public administration. Their digital presence includes projects like the Enter-Award and the iRights.Lab Academy, positioning them as a recognized entity in the digital rights and education sector in Germany. The website is professionally designed, mobile-optimized, and offers content primarily in German with English support.

K

Kristamedia

kristaonline.com

41

Kristamedia operates a business matching platform under the website kristaonline.com, primarily targeting business professionals seeking connections and partnerships. The platform appears to be a small-scale operation founded around 2019, with a focus on facilitating business matching services. The website uses modern frontend technologies such as Nuxt.js and Bootstrap, hosted on Amazon AWS infrastructure, indicating a moderate level of technical maturity. However, the site lacks comprehensive privacy, cookie, and terms of service policies, and does not provide explicit contact or incident response information, which limits its compliance and trustworthiness. Security posture is basic with no detected security headers or advanced protections, and no analytics or tracking services are evident, suggesting minimal user tracking. Overall, the site is accessible without WAF or blocking mechanisms and contains safe, business-oriented content.

A

Aquitaine Blue Energies

aquitaine-blue-energies.fr

37

Aquitaine Blue Energies (ABE) is a regional association founded in 2021, focused on promoting and developing offshore wind and marine renewable energy sectors in the Nouvelle-Aquitaine region of France. The organization acts as a cluster to federate local companies and professionals around a common economic development project in the marine energy field. The website reflects a professional and consistent brand presence with clear messaging about its mission, values, and activities. Technically, the site is built on WordPress with modern plugins and themes, hosted by OVH, and demonstrates good SEO and mobile optimization. Security posture is adequate with HTTPS and no obvious vulnerabilities, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, including a company email and physical address in La Rochelle, along with active social media channels on Twitter and LinkedIn. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

C

Churchill

churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders in Paris and Lyon. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced tools and third-party services to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with a strong focus on SEO and user experience. Technically, the website is built on a modern WordPress platform with performance optimizations via WP Rocket, analytics through Matomo and Google Tag Manager, and cookie consent managed by Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, explicit security headers are not visibly configured, and no public security policy or incident response information is provided. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data limits domain trust verification. Privacy compliance is strong with comprehensive policies and consent mechanisms. Overall, the site demonstrates professionalism and trustworthiness, though domain registration transparency is lacking. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

A

Agence tactee

seoh.fr

49

Tactee is a French digital agency founded in 2014, specializing in SEO, SEA, inbound marketing, and website creation and redesign. The agency targets SMEs, startups, and large groups seeking to enhance their digital presence and conversion rates. With multiple agency locations across France and a portfolio of notable clients, Tactee positions itself as a trusted partner in digital marketing. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and marketing automation via Plezi, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing vulnerability disclosure information.

E

EQUINET s.r.o.

jezdeckainzerce.cz

42

Jezdeckainzerce.cz is an established Czech online classified ads portal specializing in equestrian products and services. Operated by EQUINET s.r.o., it serves a niche market of horse owners, riders, and equestrian service providers. The platform offers free and premium listings, supported by advertising revenue and partnerships with related equestrian media projects such as Jezdci.cz and EquiTV.cz. The website features a modern design with responsive elements and integrates Google Analytics and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security measures include HTTPS enforcement and form validation with reCaptcha, though some security headers are missing. The absence of WHOIS data reduces transparency but does not negate the professional presentation and business legitimacy. Overall, the site is a valuable resource within its niche, with room for improvement in security and privacy disclosures.

E

EQUINET s.r.o.

equitv.cz

47

EquiTV.cz is a specialized internet television platform focused on equestrian sports and related content, operated by EQUINET s.r.o. The website offers live streaming, video and audio content, podcasts, and news targeting horse enthusiasts primarily in the Czech Republic. The business operates as a niche media provider with advertising and fan club engagement as key revenue streams. Technically, the site uses modern web technologies including jQuery, Bootstrap, and media players, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which reduces transparency but the site content and business information appear legitimate. Overall, the site is professional and trustworthy within its niche.

E

EQUINET s.r.o.

jezdci.cz

46

Jezdci.cz is a Czech media platform specializing in equestrian sports, providing news, event schedules, live streaming information, and community engagement through fan clubs and applications. Operated by EQUINET s.r.o., the website serves a niche audience of equestrian enthusiasts primarily in the Czech Republic. The site demonstrates a solid market position within this specialized media sector, offering advertising opportunities and partnerships with related equestrian media entities. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and media presentation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, though there is room for improvement in security headers and explicit policy disclosures. The absence of WHOIS data is a notable concern for domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site is a well-maintained media resource with moderate technical maturity and a good user experience.

S

Sedlářství Libich

sedlarstvi-libich.cz

46

Sedlářství Libich operates as a specialized retail business focused on equestrian products, offering a catalog of saddles, riding apparel, horse care items, and accessories. The website functions primarily as a product catalog with orders processed via telephone or email, targeting equestrian enthusiasts in the Czech Republic. The business appears small and niche-focused with moderate market presence. Technically, the website uses older JavaScript libraries and the Prado PHP framework, with no detected CMS or modern hosting details. The site lacks mobile optimization and advanced SEO features, indicating room for digital maturity improvement. Security posture is basic; no HTTPS enforcement or security headers are evident, and outdated libraries pose potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is accessible and functional but requires modernization and enhanced security measures to improve trust and compliance.

E

EquiRadar - The EquiRadar platform has been discontinued

equiradar.com

47

EquiRadar was a digital platform aimed at the equestrian community, designed to provide next-generation services for equestrians. The website currently displays a clear notice that the platform has been discontinued, indicating that the business is no longer operational. The site content is minimal and primarily serves as an informational placeholder with a contact email for inquiries. Technically, the website uses standard HTML, CSS, and JavaScript without any detected advanced frameworks or CMS. The site is mobile optimized and loads with moderate performance but lacks comprehensive SEO and accessibility features. Security posture is weak due to absence of security headers and no visible SSL configuration details. No privacy or cookie policies are present, indicating poor privacy compliance. The WHOIS data is missing, suggesting the domain may be unregistered or expired, which severely impacts the trustworthiness and legitimacy of the domain. Overall, the site is safe with no adult or explicit content but offers limited business credibility and technical sophistication.

E

Equinet s.r.o.

equinet.cz

44

Equinet s.r.o. is a specialized media and publishing company focused on equestrian sports in the Czech Republic. Operating since 2013, it offers a range of services including PR, media production, TV broadcasting, and online streaming through proprietary platforms such as Jezdci.cz and EquiTV.cz. The company has established itself as a niche player with strong ties to the equestrian community and reputable partners. Technically, the website uses legacy JavaScript libraries and basic web technologies, with moderate performance and basic mobile optimization. Security posture is average, with no visible advanced security headers and use of outdated libraries posing potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly presented, supporting business credibility. WHOIS data is unavailable, which slightly reduces trust but does not negate legitimacy given the detailed business content and references.

CLIP Group S.A. is a well-established logistics company based in Poland, specializing in intermodal container terminal operations, storage, and transport services including rail and road. The company holds a strong market position as a leading operator in intermodal transport within Europe, supported by certifications and active participation in EU projects. Their website reflects a professional and comprehensive digital presence with clear service offerings and active communication channels. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates high credibility and operational maturity with room for enhancing privacy and security transparency.

dp.Plattform is a German digital platform dedicated to supporting small and medium-sized enterprises (KMU) in their digital transformation initiatives. The platform facilitates project implementation through partnerships with Mittelstand-Digital centers, providing access to digitalization projects, practical examples, and collaborative opportunities. The website is professionally designed with consistent branding and clear navigation, targeting primarily German SMEs interested in digital innovation. Technically, the site employs modern JavaScript modules, jQuery, and third-party analytics tools such as eTracker and Signalize, hosted on a Plesk environment. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the platform demonstrates a trustworthy and professional online presence with moderate technical sophistication and compliance with GDPR requirements.

B

bezDodavatele, a.s.

bezdodavatele.cz

42

bezDodavatele, a.s. operates as an alternative energy supplier in the Czech Republic, specializing in green electricity and gas with transparent, floating tariffs that avoid long-term commitments. The company positions itself as a customer-friendly, eco-conscious provider leveraging market opportunities to offer competitive pricing. Their services include electricity and gas supply, smart electricity tariffs, photovoltaic surplus buyback, and online calculators for savings estimation. The website is professionally designed, mobile-optimized, and provides clear navigation and multiple contact channels including forms, email, and phone support. Social media presence is active across major platforms, enhancing customer engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Highcharts for interactive content. It integrates Google Tag Manager and CookieYes for analytics and cookie consent management, respectively. The site uses HTTPS with good SSL configuration, though additional security headers could improve its security posture. Forms are implemented securely using Gravity Forms, with consent mechanisms in place for data privacy compliance. Security-wise, the site demonstrates good practices including HTTPS enforcement and cookie consent, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is privacy protected, which is justified for this business type, though it limits domain age and registrant transparency. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and improving accessibility compliance. These steps will strengthen trust and security culture, supporting long-term business growth and customer confidence.

C

Caplaser

caplaser.fr

47

Caplaser is a well-established IT service provider founded in 1996, operating primarily in the Occitanie region of France. The company offers a comprehensive range of IT solutions including cloud services, infrastructure deployment, business management software, software development, and consulting. Their market position is that of a regional integrator with multiple physical sites and a focus on SMEs and enterprises. The website reflects a professional and consistent brand image with clear service descriptions and client engagement portals such as extranet and supervision platforms. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses reputable libraries such as FontAwesome and Gravity Forms. Security measures include HTTPS, Google reCAPTCHA v3 for forms, and a cookie consent mechanism compliant with GDPR. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with no critical vulnerabilities detected in the content. However, some security headers are not explicitly present and could be added to enhance protection. The domain WHOIS data is consistent with the business identity and shows a long registration history, supporting legitimacy. Privacy and cookie policies are comprehensive and clearly presented. Overall, Caplaser presents a trustworthy and professional digital presence with strong compliance and security awareness. The risk level is low, and the company is well-positioned in its regional market. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a dedicated security policy to further build trust.

BENEKOV ENERGY SYSTEM operates a specialized energy monitoring platform branded as BENEKOV ENERGY MONITOR, focusing on photovoltaic energy systems. The website serves primarily as a login portal for users to access monitoring data, indicating a B2B or B2C service model centered on energy management. The company appears to be a small-sized entity based in the Czech Republic, founded around 2021, with a niche market position in energy monitoring services. Technically, the website employs standard JavaScript libraries such as jQuery, SweetAlert2, and ECharts for UI and data visualization. Hosting is managed via Czech providers, with domain registration consistent with the business timeline. However, the site lacks modern security headers, explicit HTTPS confirmation, and comprehensive SEO or accessibility features, indicating room for technical maturity improvements. From a security perspective, the site includes a basic login form but lacks advanced protections such as CSRF tokens, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, and contact information is limited to a single email address. These factors suggest a low to moderate security posture with significant opportunities for enhancement to meet compliance and best practice standards. Overall, the website is functional but minimalistic, with moderate trustworthiness based on domain legitimacy and business consistency. Strategic improvements in security, privacy compliance, and content richness are recommended to enhance user trust and regulatory adherence.

E

EVmate s.r.o.

evmate.cz

43

EVmate s.r.o. is a Czech-based company specializing in configurable home electric vehicle chargers, offering customers tailored wallbox solutions through an online configurator and e-commerce platform. The company targets electric vehicle owners seeking convenient and certified home charging options, positioning itself as a niche player in the Central European EV charging market. The website is professionally designed with good content quality, clear navigation, and multi-language support, reflecting a mature digital presence. Technically, the site leverages modern technologies including nopCommerce, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility with transparent contact information, customer testimonials, and CE certification. The domain WHOIS data aligns well with the business claims, enhancing trustworthiness.

T

triangl web

triangl-web.cz

37

The website triangl-web.cz represents a small Czech web design and development company offering services including website creation, e-commerce solutions, CMS integration, SEO optimization, and custom internet applications. The business appears to be established since 2007 and targets local businesses and individuals seeking professional web services. The site content is primarily in Czech and provides a clear overview of services but lacks detailed contact information and compliance documentation. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms detected. The site performance and mobile optimization are basic, and no advanced accessibility features are evident. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating potential compliance gaps. From a security perspective, the site lacks HTTPS enforcement and security headers, which significantly lowers its security posture. The partner login form is present but no visible security measures are implemented. The absence of WHOIS data reduces domain trustworthiness, although the website content itself appears legitimate and professional. Overall, the site scores moderately on content and business credibility but poorly on security and privacy compliance. Strategic improvements in HTTPS implementation, privacy policies, and contact transparency are recommended to enhance trust and compliance.