High-risk security reports

The website palais-hoertenberg.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is newly registered in September 2023 and lacks any visible business or contact information on the landing page. The absence of privacy, cookie, or terms of service policies, combined with no detectable scripts or analytics, indicates a very early or inactive stage of the website. The technical infrastructure shows no DNSSEC enabled and no security headers present, which are minor security gaps. Overall, the site’s security posture is weak due to lack of HTTPS information and blocked content. The business credibility is low given the lack of any business details or trust indicators. This severely limits the ability to assess the company’s market position or services. Strategic recommendations include enabling DNSSEC, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing accessible content with clear business information.

F

Fondazione Haydn di Bolzano e Trento

haydn.it

48

Fondazione Haydn di Bolzano e Trento is a cultural foundation dedicated to promoting classical music, opera, dance, and educational programs primarily in the Trentino-Alto Adige region of Italy. The website serves as a portal for event information, ticketing, and cultural engagement, positioning itself as a regional leader in the performing arts sector. The foundation targets a broad audience including classical music enthusiasts, families, and educational institutions. The business model is non-profit, focusing on cultural dissemination and community engagement through live performances and educational outreach. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, Matomo for privacy-conscious analytics, and various JavaScript libraries for enhanced user experience such as Flickity and Flatpickr. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. It uses Matomo analytics with cookies disabled by default to respect user privacy. However, there is no explicit security policy or incident response contact information published, and security headers are not evident. No critical vulnerabilities or suspicious activities were detected, indicating a solid security posture for a cultural foundation website. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include publishing a formal security policy, adding incident response contacts, enhancing security headers, and considering a vulnerability disclosure policy to further strengthen security and trust.

The website at casethemes.net is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents a full assessment of the business, services, or security posture. The domain is registered since 2018 with Tucows Domains Inc. and uses SiteGround nameservers, indicating a legitimate hosting setup. However, the lack of accessible content, absence of privacy or cookie policies, and no contact information severely limit trust and credibility. Technically, no scripts, analytics, or security headers are present in the provided HTML, and no HTTPS or SSL details are available. Overall, the site appears to be restricted or blocked rather than protected by a WAF challenge. This results in a very low AI score and an incomplete analysis.

Campus Nantes Terre Atlantique is a public educational institution specializing in agricultural education and training, serving the Nantes region and surrounding areas including Saint-Herblain, Guérande, and Nozay. The institution offers a variety of educational pathways including general and technological schooling, professional training, apprenticeships, and adult continuing education. The website reflects a well-structured and regionally focused educational campus with a clear mission to support agricultural career development.

É

École d'Ingénieurs de PURPAN

purpan.fr

49

École d'Ingénieurs de PURPAN is a French engineering school specializing in future-oriented sectors such as agriculture, food, and environment. It serves students and professionals seeking engineering education and training in these fields. The institution holds a solid market position in France as a reputable educational entity with a focus on innovation and sustainability. The website reflects a professional and consistent brand image, targeting prospective students and academic partners. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Yoast SEO, ensuring good performance and SEO readiness. Mobile optimization is good, though accessibility features could be improved. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, but lacks explicit security policies or incident response information. WHOIS data is unavailable, which slightly impacts trust but the overall site professionalism supports legitimacy. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the site is safe, professional, and well-suited for its educational purpose.

P

Pôle Sup Nature

polesupnature.fr

45

Pôle Sup Nature is an independent higher education institution based in Montpellier, France, specializing in environmental and sustainable development training. The website offers detailed information about their diploma and certificate programs, including BTSA Gestion et Protection de la Nature and a Bachelor in Expertise Naturaliste des Milieux. The institution targets students with a BAC or equivalent, professionals in reconversion, and those seeking specialized environmental education. The site is well-branded, professionally designed, and provides clear navigation and contact information, including social media channels. Technically, the website runs on WordPress with modern performance optimizations such as WP Rocket and lazy loading, hosted on reputable French providers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms. The domain registration is consistent with the business profile, enhancing trustworthiness.

I

Ikanos GmbH

ikanos.de

47

Ikanos GmbH is a German-based small technology company specializing in designing and developing websites and applications with a strong focus on user experience, accessibility, and TYPO3 CMS expertise. The company positions itself as a trusted partner for businesses across various industries, emphasizing comprehensive consulting and technical excellence. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, jQuery, and the Yii framework, with TYPO3 as the CMS platform. The site is mobile optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS and CSRF tokens but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

The website kundenserver.de currently presents no accessible content, with an empty HTML body and no metadata, scripts, or visible elements. This lack of content prevents any meaningful analysis of the business, its services, or its compliance posture. The domain is hosted on 1&1 IONOS, a reputable hosting provider, and the WHOIS data indicates consistent registration with no privacy protection or suspicious patterns. However, the absence of HTTPS and security headers, as well as the lack of privacy or cookie policies, indicates a very low security and compliance maturity level. Overall, the site appears inaccessible or blocked, limiting the ability to assess its business or technical infrastructure.

E

ECOBAT Technologies Ltd.

ecobatgroup.com

46

ECOBAT Technologies Ltd. is a leading global company specializing in the production and recycling of lead, particularly from lead-acid batteries. They operate a closed recycling loop, ensuring sustainable and environmentally responsible lead production. The company holds multiple ISO and EMAS certifications, underscoring their commitment to quality and environmental standards. Their market position as the world's largest producer and recycler of lead highlights their industry leadership and extensive operational footprint across Europe and beyond. Technically, the website is built on the Weblication CMS platform using legacy JavaScript libraries such as jQuery and jQuery UI. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Hosting details are limited, but the domain is registered with NameCheap and has a stable history since 2011. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and visible security headers. There is no cookie consent mechanism or explicit privacy compliance features, which may pose regulatory risks. Contact information is primarily via web forms, with no direct emails or phone numbers visible. No incident response or vulnerability disclosure policies are published. Overall, the website is professional and trustworthy with good business credibility but could improve in privacy compliance and security best practices. Strategic enhancements in security headers, cookie consent, and transparency around incident response would strengthen their security posture and regulatory compliance.

R

RheinFit Sportakademie GmbH

adventure-minigolf-duisburg.de

40

Adventure Minigolf Duisburg, operated by RheinFit Sportakademie GmbH, is a small-scale recreational business offering a unique adventure minigolf experience in Duisburg, Germany. The website presents a family-friendly environment with 24 creatively designed minigolf courses and additional sports activities such as Fußballbillard. The business targets families and children aged six and above, positioning itself as a local leisure destination. Technically, the website is built on WordPress with the Divi theme, leveraging LiteSpeed caching and jQuery, hosted likely by Kasserver. The site is moderately performant, mobile-optimized, and SEO-friendly with structured data markup enhancing search visibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

BGHM is a German statutory accident insurance institution specializing in occupational safety, insurance protection, and health protection for employees in the wood and metal sectors. The website provides comprehensive information on membership, insurance benefits, occupational safety, and qualification seminars, targeting employers and employees in these industries. The organization maintains a strong market position as a statutory body with a professional online presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

DERTICKETSERVICE.DE GmbH & Co. KG operates as a leading regional ticketing and live entertainment marketing service provider in North Rhine-Westphalia, Germany. With over 35 years of experience, the company offers tailored ticket software solutions, marketing support, and access to a network of regional ticket platforms such as kölnticket, bonnticket, and westticket. Their services target event organizers and end customers, focusing on maximizing event success through technology and marketing expertise. The website is professionally designed using TYPO3 CMS and integrates modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are absent. The WHOIS data is privacy protected, which is justified for this business type, but limits direct verification of registrant details. Overall, the site demonstrates high trustworthiness and business credibility with strong regional partnerships and professional content.

S

SAS Ligne Web Services - LWS

sitebuilderpro.fr

43

SiteBuilder Pro is a French SaaS company offering an AI-powered website builder targeting small to medium-sized businesses and entrepreneurs. The platform provides an easy drag-and-drop interface, professional templates, and integrated hosting and domain services via its parent company SAS Ligne Web Services - LWS. The website is well designed, mobile optimized, and provides clear pricing and customer testimonials, positioning it as a trustworthy and accessible solution in the website creation market. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and hosted by LWS in France. Security posture is good with HTTPS and SSL certificates, but lacks visible security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and credible but could improve privacy compliance and security transparency.

M

Minecraft-France

minecraft-france.fr

49

Minecraft-France is a specialized French-language website dedicated to providing a comprehensive range of Minecraft-related content including mods, maps, shaders, guides, and news. Founded in 2011 by an individual named Ezral, it has established itself as the largest francophone Minecraft resource hub with an active community presence, including a popular Discord server. The site targets Minecraft players within the French-speaking community, offering daily updated content and fostering community engagement. Technically, the website is built on WordPress using popular plugins such as Yoast SEO Premium and Elementor for content management and design. It integrates Google Fonts and Google Adsense for typography and monetization respectively, and uses Swiper.js for interactive elements. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers that could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial; a privacy policy is present and appears comprehensive and GDPR compliant, but no cookie consent banner or detailed data retention policies were found. Contact information is limited to an email address, with no phone numbers or physical addresses publicly listed. Overall, Minecraft-France presents a trustworthy and professional online presence for its niche audience, though the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic improvements in security headers, cookie consent, and transparency around data protection would enhance its compliance and user trust.

A

Apecita

agrorientation.com

48

Agrorientation.com is a specialized French portal operated by Apecita, focusing on careers and training in agriculture, agro-food, and environmental sectors. It serves students, professionals, and job seekers by providing comprehensive information on métiers, formations, events, and employment opportunities. The site is well-branded, consistent, and integrates partner content from Apecita and Apecita Media. Technically, the site uses modern JavaScript libraries such as jQuery, Select2, and Magnific Popup, with asynchronous script loading and cookie consent managed via axept.io, ensuring GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices and structured data markup. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are absent. WHOIS data confirms legitimacy with consistent registrant information matching the business entity. Overall, the site is professional, trustworthy, and well-suited for its educational and career guidance purpose.

B

Biscuits, Gâteaux et Panifications de France

biscuitsgateauxpanifications.fr

34

Biscuits, Gâteaux et Panifications de France is a French industry syndicate representing companies involved in biscuits, cakes, and bakery products. The organization focuses on promoting the diversity of products, valorizing métiers and savoir-faire, and enhancing the French gourmet heritage. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. It integrates modern technologies such as Google Analytics and Mapbox for enhanced user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies are absent. The absence of WHOIS data limits domain trust verification, but the website's professional content and social media presence support its legitimacy. Overall, the site is a credible and well-maintained digital presence for the syndicate.

GRIZZLY design is a small Czech Republic based business specializing in corporate website creation and online marketing services including social media and advertising campaign management. The website presents a local market focus with clear contact information but lacks comprehensive digital maturity features such as privacy policies, security headers, and HTTPS enforcement. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. Technically, the site is basic with minimal SEO and accessibility optimizations. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site is functional for its business purpose but requires significant improvements in security, compliance, and technical sophistication to enhance trust and protect user data.

The website bionicpartner.co.uk currently serves only a minimal error page with the message 'Cannot GET /', indicating that the main content is inaccessible or not deployed. The domain is registered with Fasthosts Internet Ltd in the UK since 2020, which aligns with a small business age profile. No metadata, structured data, or business information is present on the site, limiting the ability to assess the company's market position or services. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS status is provided, suggesting poor technical maturity. Security posture is weak due to the absence of HTTPS and security best practices, and no privacy or cookie policies are found, indicating non-compliance with GDPR and related regulations. Overall, the site is not currently functional or professional, resulting in a very low AI score and high risk from a security and compliance perspective.

P

Postradali.com

postradali.com

45

Postradali.com is a Bulgarian website dedicated to providing information, comparison, and support services for victims of road traffic accidents and their families. The platform aggregates offers from associations, NGOs, and lawyers to help users find legal assistance and claim compensation. The site is focused on the Bulgarian market and is presented in Bulgarian language. Technically, the website is built on WordPress with several plugins for forms, ratings, and filtering. It uses Google Analytics and Adsense for tracking and monetization. However, the site lacks HTTPS, which is a critical security shortcoming. There is no visible security policy or incident response information, and contact details are limited to a web form. The domain is registered since 2015 with consistent data and local hosting, indicating legitimacy. Overall, the website serves a niche audience with relevant content but requires significant security improvements.

V

Vzemi Credit

vzemicredit.com

44

VzemiCredit.com is a Bulgarian online platform specializing in fast loan comparison and referral services. Established in 2016, it aggregates offers from multiple financial companies to provide users with quick access to credit options. The website targets Bulgarian consumers seeking rapid online loans without the need for guarantors or complex procedures. The business model is primarily affiliate-based, earning commissions from partner loan companies such as Credissimo, Smile Credit, and CrediNet. The platform positions itself as a convenient and time-saving tool for loan seekers in Bulgaria.

И

Ипотечен и жилищен кредит

ipotechen.com

43

Ipotechen.com is a Bulgarian online platform specializing in mortgage and housing loan information, offering users access to multiple financial institutions including banks and non-bank lenders. The site provides detailed guidance on loan types, required documentation, and application procedures, targeting individuals seeking property financing in Bulgaria. The platform supports lead generation by enabling users to apply for loans via a single request sent to multiple companies, enhancing user convenience and market reach. Technically, the website is built on WordPress with Visual Composer, leveraging Google Fonts, Google Analytics, and Google Adsense for content presentation, analytics, and monetization respectively. The hosting is provided by superhosting.bg, with domain registration dating back to 2014, indicating a mature and stable presence. Security-wise, the site uses HTTPS and has domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is evident. Overall, the site presents a professional and functional digital presence with moderate security and privacy posture.

K

Kabelna.com - Доставчици|Пакети|Интернет|Телевизия|Домашен телефон

kabelna.com

44

Kabelna.com is a Bulgarian telecommunications comparison website established in 2013, offering users a comprehensive platform to find and compare providers and packages for cable, satellite, digital television, internet, and home phone services. The site targets consumers in Bulgaria seeking detailed information and filtering options by price, channel count, internet speed, and location. Technically, the site is built on WordPress with common plugins for SEO, live chat, and UI enhancements, hosted on SuperHosting.bg. It uses HTTPS and integrates Google services for analytics and advertising. Security posture is moderate with room for improvement, notably the lack of DNSSEC, security headers, and outdated WordPress version. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is functional and relevant but would benefit from enhanced security and compliance measures.

E

Edition Raetia

raetia.com

48

Edition Raetia operates as an independent book publisher and online retailer based in Bolzano, South Tyrol, specializing in German and Italian language books with a regional cultural focus. The website is built on the PrestaShop platform, featuring a professional design, multilingual support, and e-commerce capabilities including a newsletter subscription protected by Google reCAPTCHA. The technical infrastructure incorporates modern tracking and marketing tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and privacy policies are lacking. The absence of public WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, the website presents a functional and professional front for a small regional publisher but would benefit from enhanced privacy compliance and security disclosures.

F

Film Association of South Tyrol (FAS)

fas-film.net

46

The Film Association of South Tyrol (FAS) is a professional organization representing film industry professionals in South Tyrol, Italy. It serves as a hub for filmmakers, actors, production companies, and service providers, promoting the region as a film-friendly location and supporting local film productions with international aspirations. The website is well-structured, bilingual (German and Italian), and provides clear information about the association's mission, membership, and news. The presence of partner logos and a newsletter subscription indicates active community engagement. Technically, the website is built on WordPress using WPBakery Page Builder and common JavaScript libraries such as jQuery and MediaElement.js. It employs HTTPS with a valid SSL certificate and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and does not provide visible security policies or incident response contacts. The WHOIS data for the domain is unavailable, which is unusual but the website content and professional presentation suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a trustworthy and professional front for the Film Association of South Tyrol, with minor improvements recommended in security headers and transparency around security policies. The missing WHOIS data warrants monitoring but does not currently indicate malicious intent.

The website raai.it is currently inaccessible beyond a security challenge page implemented by BitNinja.IO, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily serves as a redirect and security check, preventing direct access to business-related information. The domain is registered since 2021 with DNSSEC enabled, suggesting some level of DNS security, but no registrant details or business claims are visible to verify legitimacy. The site uses very outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities, raising concerns about the underlying platform's security posture. No privacy, cookie, or terms of service policies are found, and no contact information or social media links are available, limiting trust and compliance evaluation.

T

TRANSART FESTIVAL

transart.it

33

TRANSART FESTIVAL is a well-established multidisciplinary cultural festival based in Italy, founded in 2002. The festival focuses on contemporary arts including music, dance, visual arts, and performance, targeting a general audience interested in modern cultural expressions. The website reflects a professional and consistent brand image with multilingual support and multimedia content to engage visitors. Technically, the site uses modern JavaScript libraries such as jQuery and Keen Slider, with custom Bootstrap styling and Google Analytics for visitor tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, and no vulnerability disclosure mechanisms are evident. The WHOIS data is consistent and transparent, with a long domain age supporting legitimacy. Overall, the security posture is moderate with room for improvement in headers and policy transparency. The business credibility is high due to clear contact information, privacy and cookie policies, and a professional web presence. No suspicious or malicious content was detected, and the site is safe for general audiences. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing security policies, and auditing third-party scripts to improve security and compliance posture.

S

sictom

sictom-pezenas-agde.fr

44

The SICTOM Pézenas-Agde website represents a local public service organization focused on waste collection and ecological transition in the Pézenas-Agde region of France. The site provides comprehensive information on waste sorting, collection schedules, recycling points, and community news, targeting residents and local businesses. The business model is that of a government or non-profit entity delivering essential environmental services with a strong community engagement focus. Technically, the website is built on WordPress using the Divi theme, incorporating modern JavaScript libraries such as jQuery and Leaflet for interactive maps. It integrates Google Analytics via MonsterInsights and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit advanced security headers. No exposed sensitive data or vulnerabilities were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and consistent branding support legitimacy. Overall, the site is well-structured, informative, and trustworthy for its intended audience. Strategic improvements in security headers and ongoing maintenance would enhance its security posture. The lack of WHOIS transparency is a minor concern but does not detract significantly from the site's credibility.

L

Les Compotes

lescompotes.fr

49

Les Compotes is a small hospitality and coworking business located in Strasbourg, France, offering shared office spaces and a specialty coffee café experience. The website is professionally designed using modern web technologies such as Vue.js and Nuxt.js, hosted by a reputable provider, and includes a cookie consent mechanism. However, it lacks explicit privacy and terms of service policies, which are important for GDPR compliance and user trust. Contact information is limited to a contact form without direct email or phone contacts. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures.

The website marchconservationfund.org is currently inaccessible, returning a 403 Forbidden error page which blocks access to any substantive content. The domain is registered with GoDaddy.com, LLC since 2014 and appears legitimate from a registration standpoint. However, the lack of accessible content, absence of privacy, cookie, or terms of service policies, and no visible contact information severely limit the ability to assess the business or security posture. The technical infrastructure shows basic hosting with no DNSSEC and no advanced security headers, indicating room for improvement. Overall, the site’s security posture is minimal, and the blocked content status results in a low AI score and poor trustworthiness.

I

Internet Society (ISOC) France

isoc.fr

43

Internet Society France is the French chapter of the global Internet Society, dedicated to protecting internet users and promoting an open, accessible, and neutral internet. The organization operates as a non-profit, engaging in advocacy, education, and community building within France and internationally. Their website reflects a professional presence with clear mission statements, event information, and membership opportunities. The organization is well-established with a domain age consistent with its founding date and maintains active social media channels for outreach. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Smart Slider 3, with integration of SEO tools like Yoast. Hosting appears to be through OVH with DNS managed via AWS, indicating a robust infrastructure. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO practices are good, with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No vulnerability disclosure or security.txt files are present. Overall, the security posture is adequate but could be improved with additional best practices. The risk assessment is low given the organization's non-profit nature, clear contact information, and consistent domain registration. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

C

CENTRALNIC CANADA INC

roulette-en-ligne.ca

47

The website roulette-en-ligne.ca is a French-language Canadian online casino review platform specializing in roulette games. It provides detailed casino reviews, bonus offers, and game listings targeted at Canadian players interested in online gambling. The business operates primarily as an affiliate marketing site, promoting various reputable online casinos. The domain is registered in Canada with a consistent registrant and appropriate domain age, supporting its legitimacy. Technically, the site is built on WordPress and uses common web technologies such as jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. Hosting is behind Cloudflare DNS, ensuring reliable delivery, though no active WAF challenge is detected. The site is moderately optimized for mobile and SEO, with good navigation and content quality. From a security perspective, the site uses HTTPS and includes tracking via Google Analytics and Yandex Metrika but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which reduces trust and compliance posture. There are no detected vulnerabilities or exposed sensitive data, but improvements in security headers and privacy compliance are recommended. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures, security hardening, and transparent contact information to improve trust and compliance with data protection regulations.

TAKT Fest is a cultural festival and traditional singer-songwriter competition based in Novi Sad, Serbia. The website provides detailed information about the event's program segments including music, theater, standup, circus, movies, and creative workshops. The festival targets artists and cultural enthusiasts, positioning itself as a niche event with international participation. The domain is registered since 2020 and is consistent with the festival's recent editions. Technically, the site uses Joomla CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has a good design and user experience. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via a form and social media links. Overall, the site is trustworthy and professional but could improve compliance and security practices.

Ukraine Fringe is a small-scale cultural theatre festival based in Ukraine, focusing on bringing international fringe theatre culture to Ukrainian audiences and raising global awareness about Ukraine. The festival operates both live in Kyiv and online via the SceneSaver platform, featuring diverse international performances and workshops. The website is built on WordPress with Elementor and related plugins, presenting a professional and well-structured event site with good design and navigation. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its compliance and security posture. The domain uses privacy protection, which is common for small cultural organizations, and no suspicious indicators were found. Overall, the site is functional and credible but requires improvements in privacy, security, and transparency to enhance trust and compliance.

В

Вокс Попули ООД

selectra.bg

41

Selectra Bulgaria, operating under the legal entity Вокс Попули ООД, is a prominent Bulgarian branch of the European Selectra group, specializing in providing comparison portals for utilities, telecommunications, and financial services. Since its establishment in 2013, it has positioned itself as a market leader in Bulgaria by offering free, user-friendly platforms that empower consumers to make informed decisions. The company operates multiple niche websites covering internet, mobile, electricity, loans, forex brokers, security services, and legal assistance, reflecting a diversified portfolio tailored to Bulgarian consumers. Technically, the website is built on WordPress CMS with a Bootstrap framework and integrates common web technologies such as jQuery and Google Analytics. Hosting is provided by a reputable Bulgarian hosting provider, SuperHosting.BG, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, although accessibility and SEO could be improved. The presence of Google Analytics and Tag Manager indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. No vulnerability disclosures or incident response information are provided, indicating potential gaps in security transparency. The WHOIS data is redacted due to GDPR, which is standard and justified for this business type. Overall, the domain appears legitimate and consistent with the business claims. The overall risk assessment suggests a stable and credible business with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and maintaining up-to-date software to mitigate vulnerabilities.

K

Kolowratovy sady s.r.o.

kolowratovysady.cz

47

Kolowratovy sady s.r.o. is a Czech-based medium-sized company specializing in the cultivation and sale of fruit such as apples, pears, cherries, and potatoes, along with the production of apple juice, cider, lemonade, honey, and mead. The company operates a retail store located in Velké Dvorce near Přimda and holds certifications including SISPO and GLOBALG.A.P, indicating adherence to quality and safety standards. The website reflects a well-established regional producer with a strong local presence and a clear business model focused on both wholesale and retail markets. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, featuring responsive design and moderate performance. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site implements GDPR-compliant cookie consent with an opt-out mechanism and obfuscates email addresses to reduce spam risks. However, there is room for improvement in security headers and explicit security policies. From a security perspective, the site uses HTTPS with good SSL configuration and follows basic best practices such as cookie consent and email obfuscation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency could further enhance the security posture and user trust.

V

Connexion Visimodif

visimodif.fr

37

The website visimodif.fr serves primarily as an administration login portal for Visimodif, likely related to Visicod.com. The site is minimalistic, focusing on user authentication for internal or administrative users, with no public-facing business descriptions or contact information. The domain is well-established, registered since 2010 with OVH, a reputable French registrar, indicating a stable presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript with jQuery and validation plugins, hosted on OVH infrastructure. Mobile optimization is adequate, but accessibility and SEO features are basic. Security posture is moderate; while client-side validation is implemented, there is no visible HTTPS enforcement or security headers in the provided HTML content, and no advanced security policies or incident response information is available. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is functional but lacks comprehensive security and privacy measures, and public business information is minimal.

T

Tanec Praha z.ú.

tanecpraha.org

49

Tanec Praha z.ú. is a well-established non-profit organization based in the Czech Republic, dedicated to promoting dance and movement theater through festivals, events, and educational programs. The organization operates multiple related entities including the TANEC PRAHA festival, Czech Dance Platform, and Ponec theater, targeting both professional artists and the general public interested in dance culture. The website reflects a consistent brand and provides relevant content and contact information to its audience. Technically, the website is built on Drupal 7 with a variety of modern front-end libraries and frameworks such as Bootstrap and jQuery. It uses HTTPS with a good SSL configuration and implements cookie consent via Cookiebot, indicating awareness of privacy compliance. The site performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site has HTTPS enabled and secure forms with GDPR consent checkboxes, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website is professional, secure, and compliant with basic privacy standards, serving its cultural mission effectively. Strategic improvements in security headers and privacy policy publication would further enhance its posture.

The website workspace-solution.com represents a small French technology company named Addona Editions offering customizable web management solutions including CRM, invoicing, email marketing, websites, and mobile/web applications. The business targets organizations seeking modular ERP and management tools tailored to their specific needs. The site is professionally designed with consistent branding and clear navigation, providing good user experience and relevant content for its audience. Technically, the site uses a variety of modern front-end libraries such as Bootstrap, jQuery, Font Awesome, and Ionicons, but lacks evidence of a CMS or backend framework. Performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the site is functional and business-focused but requires improvements in security, compliance, and domain registration transparency.

V

VDA-online

vda-online.de

41

VDA-online.de represents the Verband Deutscher Vereine für Aquarien- und Terrarienkunden, a well-established non-profit association founded in 1911, serving aquarium and terrarium enthusiasts in Germany with approximately 250 clubs and 9,000 members. The website is professionally built on WordPress using Elementor and related plugins, featuring good SEO and structured data implementations. The technical infrastructure is moderate in performance and well-optimized for mobile devices. Security posture is adequate with HTTPS usage but lacks explicit security headers and incident response disclosures. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and serves its niche audience effectively but would benefit from enhanced security and privacy transparency.

L

LWS

lws-hosting.com

48

LWS operates a professional and content-rich blog focused on web hosting, domain registration, VPS, dedicated servers, and WordPress hosting services. The company has a strong market presence in France with over 20 years of experience, offering accessible and quality hosting solutions. The blog serves as an educational and marketing platform targeting website creators, small to medium businesses, and e-commerce users. Technically, the website is built on WordPress with modern technologies including Google Analytics, Google Tag Manager, and caching plugins. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia content such as videos. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is not available, which is expected, and the main domain is presumed legitimate based on branding and business presence. Overall, the website is trustworthy and professional, but could enhance compliance and security transparency by publishing privacy policies, terms of service, and security incident response information.

I

Site Unavailable

iucngreenlist.org

39

The website iucngreenlist.org is currently inaccessible and displays only a minimal 'Site Unavailable' placeholder page. There is no visible content, metadata, or business information available on the site. The domain is registered with GoDaddy.com, LLC since 2019 and is set to expire in 2026, indicating a legitimate registration history. Hosting appears to be provided by SiteGround based on the nameservers. Due to the lack of accessible content, no meaningful technical or business insights can be derived from the website itself. From a technical perspective, the site lacks any detectable scripts, analytics, or security headers. DNSSEC is not enabled, and there is no indication of HTTPS or SSL configuration from the provided data. The absence of privacy, cookie, or terms of service policies further indicates a lack of compliance readiness. No contact information or forms are present, limiting user engagement and trust. Security posture is weak due to the absence of HTTPS and security headers, and the site is currently unavailable which may indicate operational issues or maintenance. The domain registration is consistent and not privacy protected, which is positive for transparency. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include restoring site availability, implementing HTTPS with proper SSL certificates, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

I

IUCN

iucncontributionsfornature.org

47

The website iucncontributionsfornature.org is a platform operated by IUCN aimed at enabling members to document conservation and restoration actions aligned with global environmental frameworks such as the Nature 2030 Programme. The platform targets conservation organizations and stakeholders interested in biodiversity and climate-related nature-based solutions. The business model is non-profit and focused on environmental data collaboration. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, with Cloudflare DNS and uses Fathom Analytics for minimal tracking. However, the site currently suffers from a critical server-side issue returning a 500 Internal Server Error on the /get-started page, significantly impacting user experience and content accessibility. Security posture is moderate with HTTPS enabled but lacks security headers and DNSSEC. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is limited to an email address. Overall, the site demonstrates consistent branding and alignment with IUCN's mission but requires urgent technical fixes and security enhancements.

R

RheinFit Sportakademie GmbH

adventure-minigolf-bochum.de

40

Adventure Minigolf Bochum is a small local hospitality and leisure business offering a unique adventure minigolf experience with 24 themed courses, hand-carved sculptures, and additional activities such as football billiards. The company operates under RheinFit Sportakademie GmbH and targets families, friends, and children aged six and above. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and SEO practices. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the business's local market position.

A

ASEAG

aseag.de

49

ASEAG is the largest mobility service provider in Aachen and the surrounding StädteRegion Aachen, Germany. The company offers comprehensive public transportation services including timetable information, ticket sales, and customer support. The website reflects a well-established public transport business with a clear focus on serving local residents and visitors. ASEAG maintains a strong digital presence with integrated journey planners and departure monitors, leveraging partner services such as auskunft.avv.de. The site is built on TYPO3 CMS and incorporates modern web technologies and analytics tools such as Matomo and Google Tag Manager, ensuring a robust technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, ASEAG's website demonstrates professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible transportation service provider.

The website neurabot.de is currently non-functional, displaying a database connection error which prevents access to any meaningful content or business information. The site lacks any metadata, privacy or cookie policies, contact details, or security features. The domain is hosted on servers managed by kasserver.com, but no registrant or company information is available to verify legitimacy or business operations. Due to the lack of content and accessibility, the technical infrastructure appears immature or improperly maintained, with no evidence of modern web technologies or security best practices. The security posture is weak, with no HTTPS or security headers detected, exposing the site to potential risks. Overall, the site presents a high risk due to unavailability and lack of transparency, and it is recommended to restore database functionality, implement HTTPS, and add essential security and compliance policies to improve trust and security.

The website at westfalenfahrplan.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is hosted on Amazon AWS infrastructure, indicating a professional hosting environment. However, the lack of accessible content severely limits the ability to assess the company's services, market position, or compliance posture. No privacy, cookie, or terms of service policies are detectable, nor is there any contact or incident response information available. The security posture cannot be evaluated due to the absence of content and headers. Overall, the site appears to be blocked or restricted, which significantly impacts trust and usability.

Datenportal Münsterland is a regional data portal focused on providing access to data and services related to the Münsterland region in Germany. The platform is associated with Münsterland e.V. and DREIKON GmbH & Co. KG, indicating a collaboration between regional organizations and technology partners. The website offers API documentation and a query builder tool, targeting government entities, businesses, researchers, and citizens interested in regional data. The business model appears to be a service-oriented platform supported by regional stakeholders, aiming to enhance data transparency and accessibility. Technically, the website employs a simple and clean design using custom fonts and basic CSS styling. There is no evidence of advanced JavaScript frameworks or CMS usage. The site is accessible over HTTPS, but lacks visible security headers and modern SEO or accessibility features. Performance is moderate with basic mobile optimization. No analytics or advertising technologies are detected, indicating a privacy-conscious approach or minimal tracking. From a security perspective, the site shows basic good practices such as HTTPS usage and a login portal for managers. However, it lacks explicit security headers, privacy policies, cookie consent mechanisms, and incident response information. No forms are present on the main page, reducing attack surface, but also limiting user interaction. The WHOIS data is minimal but consistent with the regional focus, with no privacy protection or suspicious patterns detected. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security hardening, and richer content to improve user trust and regulatory adherence.

N

NETZCOCKTAIL

netzcocktail.de

49

NETZCOCKTAIL is a German-based small business specializing in the development of successful websites with professional features aimed at optimizing Google search rankings. The company targets businesses seeking comprehensive website development and SEO services, positioning itself as a niche player in the technology sector. The website demonstrates a professional design with consistent branding and good content quality, although explicit privacy and terms of service policies are not present in the analyzed content. Technically, the site uses modern technologies including jQuery and Usercentrics for cookie consent management, and it is built on the AmphiCMS platform. HTTPS is enabled, and reCAPTCHA is used to enhance security. However, the absence of security headers and detailed contact information limits the overall security posture and trustworthiness. The site is accessible without any WAF or security challenges, indicating good availability.

G

Gastronomie Delic Zoo Gastronomie Zoo Krefeld

zoogastronomie-krefeld.de

46

Gastronomie Delic Zoo Gastronomie Zoo Krefeld is a small hospitality business operating within the Krefeld Zoo in Germany, offering food and beverage services in a family-friendly environment. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, providing a good user experience and SEO optimization. The site includes a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and published security policies. Contact is primarily via a contact form, and social media presence is limited to Facebook. Overall, the website is professional and trustworthy for its business scope but could improve in privacy and security transparency.

Zoofreunde Krefeld e.V. is a well-established non-profit association dedicated to supporting the Krefeld Zoo through memberships, donations, and sponsorship programs. With over 50 years of history, the organization plays a vital role in enhancing animal welfare and zoo infrastructure. The website reflects a professional and consistent brand image, targeting zoo visitors, animal lovers, and local community members interested in supporting the zoo. Technically, the site is built on TYPO3 CMS, hosted via Rheinmedia, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policy and incident response information. The presence of Meta Pixel tracking is disclosed and controlled via consent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.