High-risk security reports

K

Roundcube Webmail :: Welcome to Roundcube Webmail

klubk4.org

49

The website mail.kersnikova.org/roundcube hosts a Roundcube Webmail client interface, providing users with web-based email access. It is a technical service platform rather than a commercial business site, targeting users who require email access for the kersnikova.org domain. The site is minimalistic, focusing solely on login functionality without additional business or marketing content. The technical infrastructure is based on well-known open-source technologies including Roundcube 1.6.6, jQuery, jQuery UI, and Bootstrap, indicating a standard modern webmail deployment. The site is mobile optimized and uses secure form practices such as CSRF tokens and autocomplete off for password fields. However, no explicit security headers or privacy policies are present in the HTML content, which limits the security posture and privacy compliance. The WHOIS data for the domain is unavailable due to a malformed query response, which reduces confidence in domain legitimacy and registration transparency. Overall, the site serves its functional purpose but lacks business transparency and comprehensive security controls.

K

Kreatura

kreaturamedia.com

45

Kreatura is a specialized technology company focused on web design and development, best known for its flagship product, the LayerSlider plugin, which is widely used by over 1.5 million active websites daily. The company has an established market presence since 2010 and targets web designers, developers, and businesses seeking advanced animation and slider solutions. The website demonstrates a good level of digital maturity with modern JavaScript libraries and a custom animation platform, although mobile optimization and accessibility are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

K

Kambič d.o.o.

kambic.com

45

Kambič d.o.o. is a Slovenian manufacturing company specializing in laboratory and process equipment. Established since 2000, it serves industrial and laboratory clients with a focus on quality equipment solutions. The company maintains a professional online presence with a well-structured WordPress-based website, offering multilingual support in English, Slovenian, and German. Key services include supplying laboratory and process equipment, targeting B2B customers in manufacturing and industrial sectors. The website demonstrates consistent branding and provides clear contact information, including physical address and social media channels, enhancing trust and credibility. Technically, the website leverages WordPress CMS with popular plugins such as Yoast SEO and Smart Slider 3, ensuring good SEO and user experience. The site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC is not enabled, representing areas for improvement. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity in security governance. The domain's WHOIS data aligns well with the business claims, showing a long-standing registration since 2000, reinforcing legitimacy. Overall, Kambič d.o.o.'s website is professional and trustworthy, with solid business credibility and a good technical foundation. Strategic enhancements in security headers, DNSSEC, and formal security policies would further strengthen its security posture and compliance readiness.

I

Iskra PIO d.o.o.

iskra-pio.si

45

Iskra PIO d.o.o. is a well-established Slovenian manufacturing company specializing in clean room solutions, operator and product protection, decontamination, laboratory equipment, and related engineering services. With over 30 years of experience and ISO 9001 and 14001 certifications, the company serves pharmaceutical, healthcare, and industrial sectors with a strong market presence. The website is professionally designed using Drupal 8, featuring modern analytics and privacy compliance mechanisms such as GDPR-aligned cookie consent and privacy policies. Security posture is strong with HTTPS enforcement and use of reCAPTCHA, though additional security headers and a formal security policy could enhance protection. Contact information is clearly provided, and the site includes client logos and certifications that build trust. No blocking or WAF challenges were detected, allowing full content access and analysis.

B

BE ONE

radiobeone.be

31

BE ONE is a local Belgian radio station serving the coastal region with a fresh mix of pop, rock, and hits. The website offers live streaming, regional news, event information, and advertising opportunities. The digital infrastructure is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks some security headers and visible privacy policies. The WHOIS data is restricted due to registry policy, which is common for .be domains and does not raise immediate concerns. Overall, the website is legitimate, functional, and serves its local audience effectively.

D

Dominik Reichl

keepass.info

48

KeePass is a well-established free and open source password manager developed by Dominik Reichl. It offers secure password storage using strong encryption algorithms and is recognized in the security community for its transparency and reliability. The website serves as the official source for downloads, news, and support information, targeting general users who require secure password management solutions. The business model is based on free software distribution with optional donations and monetization through Google AdSense advertising. Technically, the website uses basic web technologies including JavaScript and Google AdSense scripts. The site is functional with moderate performance and basic mobile optimization. SEO and accessibility are adequate but could be improved. No CMS or advanced frameworks are detected. The WHOIS data is privacy protected, which is reasonable given the security focus of the project. From a security perspective, the site promotes strong cryptographic standards and open source transparency, which are key strengths. However, explicit security headers and incident response contacts are not evident, and cookie consent mechanisms are missing despite ad network usage. No vulnerabilities or suspicious content were detected. Overall, the security posture is good but could benefit from enhanced security best practices. The overall risk assessment is low with a trustworthy reputation in the open source security community. Strategic recommendations include improving security headers, adding explicit incident response information, and implementing cookie consent to enhance privacy compliance and user trust.

A

Aj Ty v IT o.z.

ajtyvit.sk

40

Aj Ty v IT is a Slovak non-profit organization dedicated to empowering girls and women by providing education, motivation, and community support in the field of information technology. The organization offers workshops, courses, motivational events, and mentorship programs targeting various age groups including school girls, adult women, and educators. Their market position is strong within Slovakia as a recognized entity promoting women in IT. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and tracking tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

Galerija Kapelica is a small, niche art gallery website primarily focused on presenting cultural and artistic exhibitions through an interactive Adobe Flash experience. The website's market position is local and specialized, targeting general audiences interested in art and culture. The business model appears non-commercial or cultural with no visible e-commerce or transactional services. Technically, the site relies on outdated Flash technology, which severely limits accessibility and performance on modern devices. The site lacks mobile optimization, accessibility features, and modern SEO practices. Security posture is weak, with no HTTPS enforcement, no security headers, and no visible privacy or cookie policies despite using Google Analytics for tracking. The domain is old and registered with a reputable registrar, indicating legitimacy, but the technical and security aspects require significant modernization. Overall, the site presents a low trustworthiness profile and poor user experience.

BioTehna is a Slovenian platform dedicated to artistic research of living systems, fostering collaboration between artists and scientists to explore innovative intersections of nature and technology. The platform operates as a non-profit entity supported by governmental and European institutions, positioning itself as a niche cultural and scientific hub in Slovenia. The website provides information about projects, events, news, and opportunities, targeting artists, researchers, and the interested public. Technically, the site is built on WordPress with common plugins such as LayerSlider and WP Google Maps, and uses Google Maps API for geolocation features. The site is moderately performant, mobile-optimized, and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

S

Spinkids.cz

spinkids.cz

47

Spinkids.cz is a Czech Republic-based e-commerce retailer specializing in creative and interactive children's toys, including popular brands such as Tlapková patrola, Bakugan, Rubik, Batman, and Harry Potter. The website targets parents and children seeking branded toys with fast delivery services. The business is relatively new, founded in 2023, and operates on the PrestaShop platform with a moderate digital maturity level. The site employs multiple analytics and marketing tools including Google Analytics, Matomo, Microsoft Clarity, and CJ.com affiliate tracking, indicating a focus on data-driven marketing and customer insights. Security posture is adequate with HTTPS enforced and tokenized forms, but lacks explicit security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are directly available, which may impact customer support perception. Overall, the site is professionally designed, mobile-optimized, and safe for general audiences, but improvements in privacy compliance and security best practices are recommended.

VINCI is a global leader in concessions, energy services, and construction, operating in over 120 countries with a workforce of approximately 285,000 employees. The company focuses on sustainable development, energy transition, and social progress, positioning itself as a key player in infrastructure and mobility solutions. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and newsroom updates, supporting transparency and stakeholder engagement. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and includes cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response details are absent. The WHOIS data is unavailable, which slightly reduces transparency but does not detract from the site's legitimacy given the strong corporate branding and content. Overall, VINCI's website demonstrates professionalism, good technical implementation, and a strong business credibility profile.

L

La Corac

corac.fr

44

La Corac is a regional non-profit network coordinating international volunteer workcamps in the Provence-Alpes-Côte d’Azur region of France. The organization promotes cultural heritage preservation, ecological practices, and community engagement through volunteer projects involving participants from over 60 nationalities. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and integrates multimedia content such as Vimeo videos and Google Maps. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly reduces domain trust but the active social media presence and detailed content support legitimacy. Overall, the site effectively serves its target audience of volunteers and associations, providing clear navigation, contact information, and community testimonials.

P

Pricemania Academy

ecommerce-katalog.sk

42

Pricemania Academy operates the ecommerce-katalog.sk website, a Slovak-language online catalog of verified e-commerce suppliers and service providers. The site targets e-commerce businesses seeking trusted partners and offers detailed service descriptions, references, and benefits. The business model is a niche directory with a focus on quality and trust, leveraging over a decade of experience in online business. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google reCAPTCHA for form security, indicating moderate digital maturity. However, there is no visible privacy or cookie policy, and security headers are not detected, which are areas for improvement. Overall, the security posture is moderate with basic protections in place but lacking advanced security policies. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve compliance and trust.

P

Pricemania s.r.o.

pricemania.cz

46

Pricemania.cz is a well-established Czech price comparison platform operated by Pricemania s.r.o., providing consumers with access to millions of product offers from hundreds of online stores. The website offers services including price comparison, e-shop quality verification, and advertising programs, positioning itself as a trusted intermediary in the Czech e-commerce market. The platform targets general consumers seeking to find the best prices and reliable sellers. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, and Bootstrap, with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is basic with visible cookie and privacy policies, but no explicit security or incident response policies are found. WHOIS data is privacy protected, which is common but reduces transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Mucha Foundation

muchafoundation.org

45

The Mucha Foundation is a well-established non-profit organization dedicated to preserving and promoting the legacy of Alphonse Mucha, a renowned Czech Art Nouveau artist. The foundation operates a comprehensive website offering access to its extensive art collection, educational timelines, exhibitions, and news updates. It targets art enthusiasts, cultural institutions, and the general public interested in Mucha's work and Art Nouveau. The foundation's market position is that of a leading authority and custodian of Mucha's legacy, supported by a consistent brand presence and active social media engagement. Technically, the website employs a custom or proprietary CMS with a technology stack including jQuery, Nivo Slider, Google Analytics, and social media SDKs. The site is hosted under the domain registered with IONOS SE since 2000, indicating a mature digital presence. Performance is moderate with basic mobile optimization and accessibility features. SEO practices are good, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and modern security headers, and it uses an outdated jQuery version that could pose vulnerabilities. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No explicit incident response or security policy pages are found. The site does not expose sensitive data and uses secure forms with validation. Overall, the website is professional, trustworthy, and content-rich, with minor technical and security improvements recommended. The risk level is low, but upgrading libraries, enabling DNSSEC, and adding security headers would enhance the security posture and compliance further.

A

ADAM VELKOOBCHOD, s.r.o.

adam-velkoobchod.cz

45

ADAM VELKOOBCHOD, s.r.o. is a Czech Republic-based company specializing in wholesale and retail distribution of food, alcoholic beverages, non-alcoholic drinks, tobacco products, confectionery, and small drugstore items. The company primarily serves the Moravian region with a network of retail stores and a delivery system. Their website reflects a mature business with a clear market position in regional retail and wholesale sectors, supported by partnerships with numerous well-known suppliers and brands. The company maintains an active social media presence and offers customer engagement through newsletters and promotions. Technically, the website is built on WordPress using Bootstrap and jQuery, with additional plugins for contact forms and responsive image galleries. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. Performance and mobile optimization are good, though accessibility features are basic. Analytics are implemented via Google Analytics, and marketing tools include Facebook SDK for retargeting. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the website content and business operations appear legitimate and professional. Overall, the website presents a solid business presence with good technical implementation and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the security posture and user trust.

F

FLOSMAN a.s.

flosman.cz

39

FLOSMAN a.s. is a Czech Republic-based medium-sized company specializing in wholesale food distribution and operating its own retail network including brands like Flop and Potraviny CZ. Established in 2000, it serves southern, western, and central Czech regions as well as Vysočina and southern Moravia. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, it is built on WordPress with a range of plugins and uses Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its market niche.

E

e-BAAN Net s.r.o.

banan.cz

49

Banan.cz is a Czech-based small business specializing in comprehensive web services including custom website and eshop creation, webhosting, domain management, SEO, and internet marketing. The company positions itself as a full-service provider offering tailored solutions with ongoing support and content management. Their market presence is regional with a focus on small to medium enterprises seeking professional digital solutions. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, OwlCarousel, and Google Tag Manager, indicating a moderate level of digital maturity and performance optimization. The site is mobile responsive and well-structured for SEO. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the website content and contact information suggest legitimate business operations. Overall, the site is professional and trustworthy but would benefit from enhanced security disclosures and WHOIS transparency.

Z

Zoologická zahrada a botanický park Ostrava, p.o.

zooostrava.cz

42

Zoo Ostrava is a large, well-established zoological garden and botanical park located in the Czech Republic, serving as a major regional attraction and educational resource. The website provides comprehensive information about the zoo's animal exhibitions, botanical collections, educational programs, events, and conservation efforts. It targets families, schools, and nature enthusiasts, offering online ticket sales and an e-shop for donations and supplies. The domain age and WHOIS data confirm the legitimacy and consistency of the business presence online. Technically, the website uses a modern tech stack including jQuery, bxSlider, FancyBox, Google Tag Manager, Google Analytics, Facebook SDK, and reCAPTCHA. The site is hosted by a reputable provider and uses HTTPS, ensuring secure communication. The design is professional, mobile-optimized, and offers good navigation and content relevance. However, it lacks explicit privacy and cookie policies and does not implement a cookie consent mechanism, which are compliance gaps. From a security perspective, the site employs HTTPS and reCAPTCHA, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The site uses tracking and advertising services such as Google Analytics and DoubleClick, with moderate user tracking levels but limited transparency regarding data retention and privacy compliance. Overall, Zoo Ostrava's website is trustworthy, content-rich, and professionally maintained, but would benefit from enhanced privacy compliance and security header implementation to improve user trust and regulatory adherence.

V

VÍTKOVICE ARÉNA, a.s.

arena-vitkovice.cz

47

VÍTKOVICE ARÉNA, a.s. operates as a key regional manager of multifunctional sports and event venues in Ostrava, Czech Republic. The company manages several prominent facilities including Ostravar Aréna, Městský stadion, Atletická hala, Multifunkční hala, Areál Bazaly, and also provides hospitality services through Hotel Puls. Their market position is significant within the regional sports and event hosting sector, targeting event organizers, sports clubs, and the general public. The business model centers on facility management and event hosting, supported by a medium-sized organizational structure with a history dating back to 1999. Technically, the website is built on a modern WordPress platform utilizing Elementor and JetEngine plugins, hosted by vas-hosting.com. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Google Analytics is used for visitor tracking, though no cookie consent mechanism is present. The site is accessible, well-structured, and professionally designed, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security or incident response policy page. GDPR compliance is indicated via a dedicated GDPR page, but cookie consent and other privacy mechanisms could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website and business present a low-risk profile with strong legitimacy and professional standards. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

S

Statutární město Havířov

havirov-city.cz

49

Statutární město Havířov operates an official municipal website providing comprehensive information and services to its residents and visitors. The site covers a wide range of topics including city history, administration, social services, culture, education, and urban planning. It serves as a central hub for city news, public notices, and access to municipal resources. The website targets local citizens and stakeholders, positioning itself as the authoritative source for city-related information. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as Google Analytics for visitor tracking and Klaro for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting appears stable with a reputable registrar and nameserver provider. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and no vulnerability disclosure or incident response information is publicly available. The site does not expose sensitive data and uses anonymized IP tracking in analytics, indicating a reasonable security posture. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the city’s communication and service delivery objectives. Strategic improvements in security headers and transparency around security policies could further enhance its security maturity and user trust.

Centrum experimentálního divadla, p.o. is a public cultural institution based in Brno, Czech Republic, dedicated to fostering professional and experimental live theater arts. It operates several theaters including Divadlo Husa na provázku, HaDivadlo, and Terén, and publishes a quarterly magazine called CEDIT. The institution is supported financially by the city of Brno and the Ministry of Culture of the Czech Republic, positioning it as a key player in the regional cultural landscape. The website reflects this mission with rich content about performances, projects, and educational activities targeting a general audience interested in experimental theater and culture. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and Mapbox GL JS for interactive maps. It features a responsive design with good mobile optimization and basic accessibility features. The site includes a cookie consent mechanism and uses Google Analytics for traffic analysis, indicating moderate digital maturity. However, the absence of a privacy policy and terms of service pages represents a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and does not provide incident response or vulnerability disclosure information. The WHOIS data for the domain is unavailable, which limits the ability to verify domain legitimacy and age, slightly reducing trustworthiness. Nonetheless, the presence of official city support logos and consistent branding enhances credibility. Overall, the website is professionally designed and functional, serving its cultural mission effectively. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and security posture, supporting long-term institutional credibility and user confidence.

L

Le Sens Du Web

lesensduweb.com

44

Le Sens Du Web is a small, local web design and development service provider based in Ardèche, France, founded in 2014. The company offers a range of services including custom website creation, graphic design, responsive design, SEO optimization, content writing, and translation services. Additionally, it provides automated receipt mailing services for associations. The website demonstrates a professional and consistent brand presence with a clear focus on serving local businesses and associations seeking to enhance their online presence. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and reCAPTCHA v3 protecting the contact form, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Overall, the site is trustworthy and functional but could improve compliance and security practices.

B

Bouvet

bouvet.se

48

Bouvet is a Scandinavian publicly listed IT consultancy specializing in system development, business development, and design, with a strong focus on healthcare, public sector, and energy sectors. The company emphasizes creating digital solutions that contribute to societal benefits such as stable energy supply, efficient public services, and improved public health in Sweden. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation, targeting business and public sector clients. Technically, the site uses modern web technologies including Google Fonts, YouTube embeds, Matomo analytics, and LinkedIn Insight tags, hosted likely behind Cloudflare CDN, and built on the Enonic CMS platform. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and ISO 27001 certification, though some security headers could be improved and incident response contacts are not publicly detailed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting Bouvet's market position as a leading IT consultancy in Scandinavia.

The website at https://laborumgebung.de/ is currently inaccessible, returning a 404 Not Found error page with no content or metadata available. This prevents any meaningful analysis of the business, services, or security posture. The domain is hosted on Amazon AWS DNS infrastructure, which is a legitimate hosting environment. However, the lack of accessible content and absence of privacy, cookie, or contact information indicates the site is either under construction, misconfigured, or abandoned. Without content, no assessment of business model, market position, or technical maturity can be made. Security posture is poor due to missing HTTPS and security headers, and no compliance policies are present. Overall, the site presents a high risk of being non-operational or untrustworthy in its current state.

H

HikeOrders

hikeorders.com

49

HikeOrders is a technology company specializing in cloud-based software solutions aimed at enriching businesses of all sizes. Their product portfolio includes tools for eCommerce enhancements, accessibility compliance, and trust-building solutions. The company positions itself as a niche provider with innovative and unique offerings, supported by a professional website that highlights customer logos and certifications such as the Accessibility Initiative Certificate. Technically, the website is built on WordPress, hosted on DigitalOcean, and employs modern web technologies including Bootstrap and FontAwesome. Performance and mobile optimization are good, with SEO and accessibility considerations evident. Security posture is adequate with HTTPS enforced and domain protections in place, though improvements are recommended in security headers and DNSSEC implementation. Privacy and cookie policies are present, indicating a baseline compliance with GDPR, though no explicit cookie consent mechanism is detected. Overall, the website is professional, trustworthy, and well-maintained, with a legitimacy score reflecting consistent domain registration and transparent business information.

F

Fédération Cinov

cinov.fr

48

Fédération Cinov is a well-established French federation representing 15 professional syndicats and over 4,000 member companies in the intellectual services sector, including consulting, engineering, and digital services. The organization provides a broad range of services including legal assistance, insurance, training, events, and advocacy, positioning itself as a key representative body within the BETIC branch. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its professional audience. Technically, the site is built on Drupal 10, employs modern analytics (Matomo), and integrates Google reCAPTCHA v3 for form security, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is trustworthy, professional, and well-aligned with the federation's business objectives.

F

France Villes et territoires Durables

francevilledurable.fr

44

France Villes et territoires Durables is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, government entities, companies, and experts to collaborate on sustainable urban development. The website reflects a professional and well-established organization with a clear mission and a strong network of reputable partners. The digital infrastructure is based on WordPress with modern plugins and technologies, hosted by OVH and utilizing Cloudflare DNS services. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections in place, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

S

SOARE SEKT a.s.

muchasekt.cz

49

Mucha Sekt is a Czech-based producer and retailer of premium sparkling wines inspired by the art of Alfons Mucha. The company operates a well-designed, modern website built on Nuxt.js, showcasing a diverse product portfolio including Brut, Demi Sec, Rosé, Ice variants, and Prosecco. Their market presence is supported by distribution through major Czech retail chains and online platforms. The website demonstrates a mature digital infrastructure with mobile optimization, modern JavaScript frameworks, and integrated marketing tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement and an age verification popup to restrict underage access, reflecting compliance with alcohol sales regulations. However, the absence of explicit privacy policy and terms of service pages indicates areas for compliance improvement. Overall, the website and domain registration data reflect a legitimate, stable business with a strong brand identity and good technical implementation.

D

Display

display.cz

41

Display is a small non-profit association based in Prague, Czech Republic, focused on research and collective practice in cultural and educational domains. The website presents a well-structured platform showcasing events, projects, and publications, targeting a general audience interested in cultural research and collective activities. The organization appears established with a domain age since 2000 and active social media presence, enhancing its market position within its niche. Technically, the website is built on GravCMS, a modern flat-file CMS, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The use of Mailchimp for newsletter subscriptions shows integration with common marketing tools. However, there is a lack of visible advanced analytics or tracking services, suggesting minimal user tracking. From a security perspective, the site uses HTTPS and secure form handling but lacks visible security headers and published security policies. No privacy or cookie policies are found, representing compliance gaps with GDPR and related regulations. The WHOIS data is consistent and supports the legitimacy of the domain and organization. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve its risk posture and user trust.

Zavod Kersnikova is a Slovenian cultural institution dedicated to contemporary research-based art, operating through its gallery Kapelica and laboratories Rampa and BioTehna. The website serves as an information hub for events, news, and artistic activities, targeting artists, researchers, and the cultural community. The institution is well-established with a domain age since 2011, reflecting its ongoing presence in the cultural sector. Technically, the website is built on modern JavaScript frameworks such as Nuxt.js and uses external libraries like FontAwesome and Google Fonts. It incorporates a cookie consent mechanism and complies with GDPR regulations, demonstrating attention to privacy and user rights. However, some mixed content issues and lack of security headers indicate areas for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, though it could benefit from enhanced security practices and explicit policy documentation.

The Slovak-Czech Women's Fund is a small non-profit organization dedicated to advancing women's rights and gender equality in Slovakia and the Czech Republic. Their website provides information about their mission, grant programs, projects, and ways to support their cause. The organization maintains a clear presence with contact details, social media links, and a consistent brand identity. The website content is primarily in Slovak with options for Czech and English, targeting women and supporters of women's rights in the region. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Slick Carousel, and Underscore.js. It employs Google Fonts and FontAwesome for styling and icons. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Google Analytics is used for visitor tracking, but no explicit cookie consent mechanism is present despite having a cookie policy page. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms or input fields were detected on the main pages, reducing attack surface. There is no vulnerability disclosure or incident response information available. The site appears safe with no adult or questionable content. Overall, the website is professional, trustworthy, and fulfills its informational role well. However, improvements in security headers, privacy compliance mechanisms, and transparency around security policies would enhance its security posture and user trust.

N

Nadace BLÍŽKSOBĚ

blizksobe.cz

48

Nadace BLÍŽKSOBĚ is a Czech non-profit foundation dedicated to supporting organizations and individuals that enhance social quality of life, focusing on education, democracy, and civil society. The website presents a professional and consistent brand image with clear mission statements and support for known social initiatives such as Člověk v tísni. Technically, the site is built on WordPress with Bootstrap and uses modern web technologies including Google Analytics and reCAPTCHA for security. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and anti-bot measures, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a compliance gap given GDPR relevance. WHOIS data is unavailable, which limits domain trust verification and reduces overall credibility. No signs of WAF or content blocking were detected, and the site content is safe for general audiences.

S

SAS RESO

captairsolaire.com

39

Capt'air solaire is a specialized importer and exclusive distributor of SolarVenti solar air collectors in France, operating since 2010. The company targets both individual consumers and professional clients, positioning itself as the third largest SolarVenti distributor in the country. Their key services include product sales, installation advice, and customer support, with a strong emphasis on quality Danish manufacturing and European market leadership. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and a GDPR-compliant cookie consent mechanism, although some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Simple et Solaire

simple-et-solaire.com

47

Simple et Solaire is a French company specializing in the sale and support of autonomous solar energy kits and equipment, targeting individuals, professionals, NGOs, and communities both in France and internationally. Established since 2008, the company offers a range of photovoltaic kits, batteries, solar lamps, and related services including technical advice, training, and after-sales support. Their market position is that of a trusted expert in solar autonomy, with a particular focus on solutions for isolated sites and the African market. Technically, the website is built on the PrestaShop CMS platform, utilizing jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, some modern security best practices such as security headers and cookie consent mechanisms are missing, which could impact compliance and security posture. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registration details. Overall, the website presents a professional and trustworthy front for a small energy sector business, but improvements in security policies, privacy compliance, and domain registration transparency are recommended to enhance trust and reduce risk.

P

Partner & Co

semence-biologique.fr

39

SemBio, operated by Partner & Co, is a French e-commerce business specializing in the sale of certified organic seeds and seed mixtures for agricultural use. The website targets French-speaking agricultural professionals and organic farmers, offering a range of products including pure seeds and specialized blends for various farming sectors. The company positions itself as a niche supplier within the organic agriculture retail market in France. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Sendinblue for newsletter and marketing automation. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers, reflecting a good security posture. However, it lacks a publicly available security policy or incident response contact information. The domain WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

The website www.filmrenaissance.cz is currently inaccessible, serving an HTTP 429 Too Many Requests error page generated by nginx. This indicates that the site is either under heavy traffic load or protected by rate limiting or a web application firewall (WAF) that is blocking access. Due to the lack of accessible content, no metadata, business information, or technical details could be extracted. The WHOIS query returned no registration data, suggesting the domain may not be properly registered or is protected by privacy mechanisms that prevent data disclosure. This severely limits the ability to assess the business, technical infrastructure, or security posture of the website. From a technical perspective, the absence of accessible content and metadata means no analysis of technology stack, frameworks, or hosting provider is possible. The website performance, SEO, and accessibility cannot be evaluated. Security headers and SSL configuration are unknown. The site’s security posture is considered very low due to the inability to verify any security best practices or policies. The overall risk assessment is high due to the lack of transparency and accessibility. The domain’s legitimacy is questionable given the missing WHOIS data and the blocking of access. Strategic recommendations include resolving the rate limiting issues to restore access, verifying domain registration status, and implementing clear security and privacy policies to build trust with users and stakeholders.

I

Institut français de Prague

festivalff.cz

40

The website www.festivalff.cz represents the 28th Festival francouzského filmu (French Film Festival) organized by the Institut français de Prague. It serves as a cultural platform promoting French cinema in the Czech Republic, featuring film screenings, premieres, tributes, and regional events. The site targets film enthusiasts and the general public interested in French culture. Technically, the site uses a traditional web stack with jQuery and integrates multiple third-party tracking tools such as Google Tag Manager and Facebook Pixel. The website is mobile-optimized and offers good user experience with clear navigation and professional content presentation. Security-wise, the site enforces HTTPS and uses asynchronous loading for tracking scripts but lacks advanced security headers and privacy/cookie policies, which are compliance gaps. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, though the affiliation with a reputable cultural institute mitigates trust issues. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

The website www.filmfestivalacademy.net currently serves only a 404 error page indicating that the requested document was not found. The domain appears to be unregistered or inactive as per WHOIS data, which returned no match for the domain. There is no business content, metadata, or structured data available to analyze. The site lacks any privacy, cookie, or terms of service policies, and no contact information beyond a default administrative email is present. Technically, the site does not use HTTPS and lacks security headers or modern web technologies. Overall, the website is non-functional and does not represent an active business presence. From a technical infrastructure perspective, the site is minimal and does not employ any detectable CMS, frameworks, or analytics tools. The absence of HTTPS and security best practices indicates a very low digital maturity level. The lack of content and metadata also negatively impacts SEO and user experience. Security posture is weak due to missing HTTPS, no security headers, and no visible incident response or data protection policies. The domain's WHOIS status further undermines trustworthiness, as it appears unregistered or inactive. There are no indications of vulnerabilities or malicious content, but the overall risk is high due to lack of legitimate presence and security controls. Given these findings, the overall risk assessment is critical. The domain should be monitored for potential misuse or cybersquatting. Strategic recommendations include registering the domain properly if intended for use, implementing HTTPS, adding comprehensive privacy and security policies, and developing legitimate website content to establish trust and compliance.

T

Ticketware SE

cinemaware.eu

39

Ticketware SE operates a specialized ticket sales software platform targeting cultural institutions such as cinemas, theaters, museums, and cultural centers primarily in Slovakia and the Czech Republic. The company offers an integrated solution for online ticket sales, seat reservations, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a professional business presence with clear branding and relevant content tailored to its target audience. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and uses HTTPS with a good SSL configuration. However, it lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration but misses formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the website’s business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

L

LEPOR s.r.o.

lepor.cz

41

LEPOR s.r.o. is a well-established Czech advertising agency founded in 2000, providing a range of services including copyshop, signmaking, graphic design, printing, and promotional product sales. The company targets local businesses and consumers primarily in the Czech Republic, leveraging partnerships with specialized online catalogs and product providers. The website reflects a solid local market presence with clear contact information and a focus on customer service. Technically, the site uses a combination of popular JavaScript libraries and frameworks such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA Enterprise integration on the contact form, but lack visible advanced security headers or published security policies. Privacy compliance is basic, with a cookie consent banner but no privacy policy or terms of service pages. Overall, the site is functional and professional but could improve in security and compliance transparency.

K

Kutnohorsko Kolínsko Turistická Oblast

kutnohorskokolinsko.cz

43

The website www.kutnohorskokolinsko.cz serves as an informational portal promoting the Kutnohorsko and Kolínsko tourist regions in the Czech Republic. It targets tourists and visitors interested in exploring these areas, providing regional information and event announcements. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. However, the absence of contact details, privacy policies, and WHOIS registrant data limits the business credibility and transparency. Security posture is basic with HTTPS enabled but lacking advanced security headers and vulnerability disclosures. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and clearer business information to improve trust and security.

W

Werich Villa

werichovavila.cz

41

Werichova vila is a cultural and historical center located in the heart of Prague, dedicated to preserving and promoting the legacy of notable Czech personalities such as Jan Werich and Vladimír Holan. The website serves as an official portal offering information about permanent exhibitions, cultural programs, theatrical performances, concerts, and workshops aimed at a broad audience including families, schools, and the general public. The organization positions itself as a small but significant cultural institution with a focus on arts and heritage preservation. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under a Czech registrar and uses SSL encryption, ensuring secure communications. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks explicit security headers and a published security or incident response policy. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's claims and location, supporting its legitimacy. Overall, Werichova vila's website is a well-maintained cultural portal with good content quality and technical implementation. Enhancements in privacy compliance, security policy transparency, and security headers would further strengthen its security posture and user trust.

M

Městys Jince

jince.cz

48

Městys Jince operates an official municipal website serving the local community of Jince, Czech Republic. The site provides comprehensive information including news, public notices, event calendars, and contact details for municipal offices. It targets residents and visitors seeking local government services and updates. The business model is a governmental service portal with a focus on transparency and community engagement. Technically, the website uses a custom CMS platform likely provided by Galileo Corporation, leveraging technologies such as jQuery, Bootstrap, Swiper, and Highslide for UI components. The site is mobile optimized and accessible, with a clean navigation structure and good SEO practices. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and cookie consent mechanisms are in place. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which reduces domain registration trustworthiness, but the website content and contact information strongly indicate legitimacy as a municipal government site. Overall, the site is well-structured and serves its purpose effectively, but improvements in security headers and public security policies are recommended to enhance trust and compliance.

V

Výměník1

vymenik1.cz

33

Výměník1 is a small cultural and community center based in the Czech Republic, offering event space rental and hosting various cultural projects and community events. The website serves as a hub for local cultural activities, providing an event calendar and information about ongoing projects. Technically, the site is built on WordPress with WooCommerce integration, using common libraries such as jQuery and Swiper.js for UI components. The hosting provider is Wedos, a reputable Czech hosting company. Security posture is moderate with HTTPS properly configured and Google reCAPTCHA implemented on forms, but lacks important security headers and explicit cookie consent mechanisms. Privacy policy and terms of service pages are present and appear GDPR compliant. Contact information is primarily via forms, with no explicit emails or phone numbers listed. Overall, the site is professionally designed with consistent branding and good user experience, targeting local community members and cultural event attendees.

Z

Zámek Osečany BUDE!

zamekbude.cz

48

Zámek Osečany BUDE! is a small-scale cultural heritage and tourism project focused on the restoration and promotion of the Osečany Castle in the Czech Republic. The website serves as an information portal for visitors, offering details about the castle's history, upcoming events, guided tours, and accommodation options. The business model is primarily non-profit with revenue streams from ticket sales and merchandise. The site is built on WordPress with WooCommerce integration, indicating a moderate level of digital maturity. Technical infrastructure includes modern plugins and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and well-targeted to its audience, with room for improvement in security and incident response transparency.

M

Město Dačice

dacice.cz

43

The website www.dacice.cz serves as the official online presence for the town of Dačice in the Czech Republic, providing comprehensive municipal information, news, and public services to residents and visitors. The site is well-structured with clear navigation and a broad range of content covering local government, community programs, and practical information. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, with a custom CMS indicated by versioned assets. The site is mobile-optimized and includes accessibility features, though these could be improved further. From a security perspective, the website enforces HTTPS and includes several important security headers, contributing to a good security posture. A cookie consent mechanism is implemented, supporting GDPR compliance to some extent. However, the absence of a publicly accessible privacy policy, terms of service, and incident response information represents gaps in compliance and transparency. The WHOIS data for the domain is unavailable, which reduces domain trustworthiness and transparency, although the website content and official nature mitigate some concerns. Overall, the site is a reliable and professional municipal resource with good technical implementation and security practices, but it would benefit from enhanced privacy documentation and domain registration transparency to strengthen trust and compliance.

Divadlo na Vinohradech is a prominent repertory drama theatre located in Prague, Czech Republic, with a rich history dating back to the early 20th century. The theatre offers a wide range of Czech and international plays, focusing on quality dramatic works and strong storytelling. It serves a general audience interested in cultural and theatrical experiences, providing ticket sales, subscriptions, club memberships, and gift vouchers as part of its business model. The website reflects a well-established cultural institution with consistent branding and professional content.

F

Festival Povaleč z.s.

povalec.cz

47

Festival Povaleč is a well-established cultural festival based in Valeč, Karlovy Vary region, Czech Republic, operating since 2006. The festival offers a diverse multi-genre program including music, theater, lectures, and children's activities, targeting local and regional audiences interested in cultural enrichment. The website reflects a professional and consistent brand image with strong multimedia content and social media integration. Technically, the site is built on WordPress with modern plugins and embeds, providing good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the festival's public presence and history.

M

Městský úřad Nymburk

mesto-nymburk.cz

47

The website www.mesto-nymburk.cz serves as the official online portal for the city of Nymburk, Czech Republic. It provides residents and visitors with comprehensive municipal information including news updates, event calendars, administrative services, and contact details. The site is well-structured to cater to the local community's needs, offering online appointment systems and access to official documents. The presence of social media links and a citizen portal enhances engagement and service accessibility. Technically, the site employs a custom CMS (vismoWeb5) with modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google services like reCAPTCHA and Translate for security and accessibility. The website is mobile-optimized and includes accessibility features, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is addressed with privacy and cookie policies, though the cookie consent mechanism could be improved for explicit user consent. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain trust verification, but the official nature and consistent branding support legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance the security posture and compliance.