High-risk security reports

A

ARTE Radio

arteradio.com

42

ARTE Radio is a well-established French podcast platform affiliated with the ARTE media group, offering a rich catalog of cultural and documentary audio content. The website demonstrates a high level of content quality, professional design, and user experience, targeting a broad audience interested in podcasts related to culture, society, and music. Technically, the site uses modern frameworks such as Next.js and React, ensuring good mobile optimization and accessibility. However, the security posture is moderate due to the absence of visible security headers and privacy policies. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the strong brand association with ARTE. Overall, the site is trustworthy and professional but would benefit from improved transparency in privacy and security practices.

B

Bunkers de l'Île d'Oleron de la Seconde Guerre Mondiale

bunkers-oleron.fr

43

The website 'Bunkers de l'Île d'Oleron de la Seconde Guerre Mondiale' serves as an informational platform dedicated to the historical WWII bunkers on Île d'Oléron, France. It targets history enthusiasts, researchers, and tourists interested in cultural heritage. The site offers rich content including audio guides, photo galleries, and detailed historical descriptions, positioning itself as a niche regional heritage resource. Technically, the website is built on WordPress using the Kadence theme and blocks, hosted by OVH, and employs modern web technologies ensuring good mobile responsiveness and user experience. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally presented but could improve in security and privacy transparency.

M

moulin-de-la-bree

moulin-de-la-bree.fr

37

The Moulin de La Brée is a recently established cultural museum located on the Ile d'Oléron, France, dedicated to preserving and showcasing the island's cereal traditions and historic windmills. The museum offers interactive exhibits, guided visits, workshops, and an on-site restaurant, targeting families, school groups, and tourists including those with disabilities. The website reflects a professional and consistent brand presence, supported by certifications such as 'Tourisme et Handicap' and 'Famille Plus', and positive customer reviews. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by OVH, and incorporates privacy-respecting analytics and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers and a formal security policy are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

M

maison-eco-paysanne

maison-eco-paysanne.fr

41

La Maison éco-paysanne is a cultural and educational establishment located on the Île d'Oléron, France, managed by the local community of communes. It focuses on traditional architecture, sustainable habitat, and eco-citizenship, offering guided visits, workshops, events, and eco-construction training to a broad audience including families, schools, and groups. The website reflects a well-maintained digital presence with clear branding and comprehensive content that supports its mission. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is well addressed with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust assessment but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and CMS.

L

Le Port des Salines

port-des-salines.fr

40

Le Port des Salines is a regional tourism and cultural heritage site located on the Île d'Oléron in France. It offers visitors a rich experience centered around the traditional salt marshes, including an ecomuseum, guided tours, boat rides, educational workshops, and group activities. The website is well-structured and provides clear contact information, social media presence, and detailed descriptions of services, targeting tourists, families, and educational groups. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user engagement, showing a moderate to good level of digital maturity. Security measures include HTTPS and Google reCAPTCHA, though some security headers are missing and no explicit incident response information is provided. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for visitors interested in the natural and cultural heritage of the region.

M

musee-ile-oleron

musee-ile-oleron.fr

38

The Musée de l’île d’Oléron is a regional cultural institution dedicated to preserving and showcasing the heritage and traditions of the Oléron island. The museum offers a rich collection of over 500 objects spanning from prehistory to modern times. Currently closed for renovations with a reopening planned in 2027, it maintains engagement through temporary exhibitions, educational programs, and a mobile app for virtual tours. The website reflects a well-maintained digital presence with clear visitor information and official certifications, positioning the museum as a trusted cultural destination in the region. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Ultimate Addons for Gutenberg. It employs HTTPS, Google reCAPTCHA v3 for form security, and a cookie consent mechanism via Axeptio, indicating a mature approach to privacy and security. Analytics are handled by Matomo, supporting privacy-conscious tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS and form protections, but lacks explicit security headers and published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and not suspicious for this type of institution. Overall, the site demonstrates good security hygiene and compliance with GDPR requirements. Strategically, the museum should consider publishing detailed security policies and incident response plans to enhance trust and transparency. Implementing security.txt and improving accessibility compliance would further strengthen its digital maturity. The website effectively supports the museum’s mission and audience engagement, with room for incremental security and technical improvements.

V

Vernalis

vernalis.fr

47

Vernalis Interactive is a French digital agency specializing in providing digital communication services to public sector entities such as municipalities, intercommunalities, and mixed syndicates. With over 20 years of experience, the company offers website creation, extranet development, and mobile application services tailored to the needs of public institutions. The website reflects a professional and consistent brand image targeting French public organizations. Technically, the site is built on WordPress, leveraging modern libraries like jQuery and Popper.js, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and social media presence support its credibility. Overall, Vernalis Interactive presents as a trustworthy and specialized digital agency serving the French public sector.

L

Le Mouvement associatif

lemouvementassociatif.org

45

Le Mouvement associatif is a French non-profit organization dedicated to representing and supporting associative life. The website serves as a comprehensive platform offering news, events, publications, and resources tailored to associations and their stakeholders. It holds a significant position in the French non-profit sector, acting as a key voice and resource hub. Technically, the website is built on WordPress with a modern plugin ecosystem including event management, analytics, and form handling. The site is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Security practices include the use of Google reCAPTCHA for forms, but lack DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is limited, with no explicit privacy or cookie policies detected in the provided content. Overall, the website is professional, content-rich, and trustworthy, but could improve in privacy transparency and security hardening.

The website for zeste.coop is currently inaccessible, returning a 500 Internal Server Error with no visible content or metadata. The domain is registered to Societe Financiere de La NEF, a French entity established in 2015, indicating a legitimate business presence in the energy sector. However, the lack of accessible website content severely limits the ability to assess the company's services, market position, or digital maturity. The technical infrastructure shows use of Cloudflare DNS but lacks DNSSEC and visible security headers, suggesting room for improvement in security configuration. The security posture is weak due to the server error and absence of privacy or cookie policies, which also impacts compliance with GDPR and other regulations. Overall, the site’s current state poses a risk to user trust and business credibility.

S

SCIC On passe à l’acte Ecosystème

onpassealacte-coop.fr

42

SCIC On passe à l’acte Ecosystème is a French cooperative dedicated to accelerating societal revolutions by inspiring individuals, supporting impactful project leaders, assisting organizations, and empowering territories. The cooperative leverages a network of 600 pioneers and over 15 years of experience to provide tools, consulting, and community engagement services. The website is professionally designed using WordPress with a focus on clear navigation and mobile responsiveness. Hosting is provided by Infomaniak Network SA, a reputable French hosting provider. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a basic privacy policy present but no cookie consent mechanism or GDPR compliance details. Social media presence is strong across major platforms, enhancing trust and outreach.

P

Kurzy a školení PRVNÍ POMOCI

pomahej-kvalitne.cz

44

The website pomahej-kvalitne.cz represents a small Czech business specializing in first aid training courses and workshops. Their offerings include basic and extended first aid courses, specialized training for schools and families, and AED defibrillator usage training. The business targets firms, schools, and individuals, positioning itself as a niche educational provider in the Czech Republic. The website is built on WordPress and hosted by cesky-hosting.eu, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact information is minimal, limited to a Facebook social media link without explicit emails or phone numbers on the main page. The domain registration is consistent with the business profile and founded in 2022, indicating legitimacy. Overall, the site is professional and relevant but could improve compliance and security practices.

S

STAFIN

stafin.cz

45

STAFIN is a Czech Republic-based real estate developer specializing in modern residential buildings. The company emphasizes technology and quality in its construction projects and has completed over 100 buildings, indicating a solid market presence. The website is professionally designed using WordPress with Elementor and SEO plugins, providing a good user experience and mobile optimization. However, the absence of WHOIS registration data and lack of explicit privacy and terms policies reduce transparency and trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

V

Výtahy VOTO s.r.o.

vytahy-voto.cz

46

Výtahy VOTO s.r.o. is a Czech Republic-based company specializing in the manufacturing, installation, modernization, and servicing of various types of elevators and elevator shafts. Founded in 1995, the company serves a diverse clientele including residential customers, building managers, and persons with mobility challenges. Their product portfolio includes personal and freight elevators, vertical platforms, and stair lifts, with a focus on compliance with European standards. The company maintains regional offices in Plzeň and Prague, enhancing its market reach. Technically, the website employs a range of established web technologies including jQuery, Bootstrap, Google Analytics, and Facebook SDK, indicating a moderate level of digital maturity. The site is mobile responsive and well-structured, though it lacks some modern security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, the absence of security headers and privacy policies represents areas for improvement. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain registration legitimacy, though the website content and business information appear professional and trustworthy. Overall, the website presents a solid business presence with good content quality and user experience but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

V

Vorwerk Thermomix®️

vorwerk.com.tw

46

Vorwerk Taiwan operates a professional website focused on marketing and selling smart kitchen and home cleaning appliances, primarily Thermomix® and Kobold products. The site targets Taiwanese consumers interested in innovative home solutions and provides product information, experience booking, and links to official e-commerce platforms. Technically, the website is built on WordPress with Elementor and uses modern front-end libraries and tracking tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and no visible vulnerabilities, but lacks published privacy and cookie policies, which are critical for compliance. Overall, the site is well-branded, user-friendly, and trustworthy but should improve privacy transparency and contact accessibility.

A

association Autour du 1er mai

base-tessa.net

37

The website base-tessa.net represents a small non-profit project launched in 2021 by the association Autour du 1er mai, focused on cataloging and promoting films related to the social and solidarity economy (ESS) and ecological transition. The platform serves a niche audience interested in social innovation and sustainability through cinema. Technically, the site is built on the SPIP CMS, hosted by OVH sas, and uses Matomo for analytics. The site is accessible, with a good content structure and moderate performance, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the credibility of the project.

L

Librairie Utopia

librairie-utopia.org

35

Librairie Utopia is a small, Paris-based bookstore specializing in ecological and political literature, including feminism, decolonialism, antiracism, antifascism, and anticapitalism. The business model combines retail sales of new and used books with event hosting such as debates, author presentations, and exhibitions. The website also supports publishing activities under Éditions Utopia and offers podcasts of events. The target audience is French-speaking individuals interested in social and ecological activism. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, hosted by OVH sas. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some accessibility features. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and social media presence.

The website synergie-europe.fr currently returns a 404 error page with no accessible content, indicating it is either inactive or under construction. The domain is registered with OVH since 2020, which aligns with a relatively new business entity. Due to the lack of website content, no business description, services, or contact information can be extracted. The technical infrastructure appears minimal with no detectable technologies, scripts, or security headers. The absence of HTTPS information and security policies suggests a weak security posture. Overall, the website lacks fundamental elements required for trust, compliance, and user engagement.

The domain meru.international currently serves a 403 Forbidden error page, indicating that access to the website content is blocked or restricted. No business-related content, metadata, or structured data is accessible, preventing a detailed understanding of the company's operations or services. The WHOIS data is not publicly available due to TLD restrictions and privacy policies, limiting the ability to verify domain ownership or age. The technical infrastructure appears minimal, with only Google Fonts loaded and no visible CMS or frameworks. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS information. Overall, the site is inaccessible and lacks publicly available information, resulting in a low trust and credibility score.

QS I-GAUGE is a credible Indian education rating platform operated by Quixta, providing comprehensive ratings for universities, colleges, and schools to assist students and parents in making informed educational choices. The platform leverages a robust methodology overseen by the QS Intelligence Unit, ensuring independent and quality assessments. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact/security policies.

RAWEN STUDIO is a small design and marketing studio based in Norway, offering services such as visual solutions, branding & identity, advertising, and communication for digital and print media. The website is currently under construction and provides minimal content, primarily a contact email and a brief description of services. The technical infrastructure appears basic with no detected CMS or advanced frameworks, and no evidence of HTTPS or security headers was found. The website lacks privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is weak due to missing HTTPS and absence of security best practices. Overall, the site presents a low risk but also low trustworthiness due to incomplete domain registration data and minimal content.

The website at cancarka.cz is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or similar bot mitigation mechanism, which blocks full content delivery and limits the ability to analyze the site's business or security posture comprehensively. The domain is very new, registered in April 2024, consistent with a newly launched or under-development site. No business information, contact details, or privacy policies are available on the accessible page, which restricts trust and credibility assessment. From a technical perspective, the site uses modern frontend libraries such as Bootstrap 5.3.3 and integrates Google reCAPTCHA for security. However, no explicit security headers or HTTPS confirmation were found in the provided data, and the content is minimal, consisting solely of a bot verification challenge. This results in a low content quality and poor user experience. Security-wise, the use of Google reCAPTCHA is a positive measure against automated threats, but the absence of visible security headers and policies, combined with the blocking mechanism, suggests an immature security posture. The lack of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. Overall, the site currently presents a high risk for users and visitors due to lack of transparency, minimal content, and blocking by security mechanisms. Strategic improvements in content availability, security headers, privacy compliance, and business transparency are recommended to enhance trust and usability.

Radio NABA is a university-affiliated radio station operated by Latvijas Universitāte, serving a Latvian audience with music, news, and cultural programming. The website reflects a well-established media outlet with a clear focus on alternative and cultural content, supported by a medium-sized educational institution. The site is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Technically, it is built on TYPO3 CMS and integrates modern web technologies and analytics tools, ensuring moderate performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the site is a credible and professional digital presence for a university radio station.

The website kopkatalogs.lv serves as a shared electronic catalog platform for nine national-level libraries in Latvia, leveraging the Ex Libris ALEPH integrated library system. It targets library users including students, researchers, and the general public seeking access to Latvian library resources. The platform is positioned as a key national service facilitating unified catalog access and user authentication. Technically, the site employs JavaScript, Matomo, and Google Analytics for tracking, and is hosted with DNS services on Microsoft Azure. The site uses HTTPS for secure login but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements. The privacy policy is linked to an official government domain, supporting GDPR compliance, though cookie consent is absent. Overall, the site is functional with moderate technical maturity and basic content quality, suitable for its educational sector role.

The website indica.org.in/lander is currently a minimal placeholder or parking page with very limited content. It primarily loads a React-based frontend with no visible business information, contact details, or policies. The presence of Google Adsense scripts indicates an intent to monetize traffic, but no substantive content or services are offered. The technical infrastructure is basic, relying on React and hosted on WSImg's platform, with no detected CMS or advanced SEO features. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No forms or user data collection mechanisms are present, reducing immediate privacy risks but also indicating low engagement. Overall, the site lacks credibility and trust signals, making it unsuitable for business or user interaction in its current state.

C

Centre For Shaiva Studies

shaivastudies.in

48

The Centre For Shaiva Studies is a small, specialized academic research institute based in India, focusing on the advanced study of Shaiva traditions. It offers fellowships, publishes critical editions, and conducts lectures to promote scholarly understanding of Shaivism. The website is professionally designed using WordPress with the Avada theme and Yoast SEO, providing a good user experience and clear navigation. Contact information and physical address are clearly presented, enhancing business credibility. However, the site lacks published privacy and cookie policies, security policies, and incident response contacts, which are important for compliance and trust. The security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and formal policies. Overall, the site is safe, accessible, and trustworthy, serving its academic and cultural mission effectively.

I

Institute of Indic Wisdom

iiwisdom.org

49

Institute of Indic Wisdom (IIW) is a small non-profit organization founded in 2023, focused on translating timeless Indic wisdom into contemporary leadership and personal growth practices. The website presents a professional and consistent brand with clear navigation and relevant content targeting leaders, entrepreneurs, and individuals seeking transformational learning. Technically, the site is built on WordPress with modern libraries like Bootstrap and Swiper, hosted by GoDaddy. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, matching the organization's founding timeline.

I

Indic Today

indica.today

39

Indic Today is a niche educational and cultural media platform focused on publishing content related to Shastraas, Indic Knowledge Systems, and Indology. It serves scholars, researchers, and enthusiasts interested in Indic studies. The website operates on WordPress with a professional design, structured content categories, and uses modern web technologies including Bootstrap and Owl Carousel. The platform integrates Google Analytics with opt-out capabilities, indicating moderate user tracking. Security posture is good with HTTPS enabled, but lacks explicit security headers and privacy/cookie policies, which are recommended for compliance and trust. WHOIS data is unavailable or privacy protected, which is common for small educational sites but reduces transparency. Overall, the site is trustworthy and professionally maintained but can improve privacy compliance and security best practices.

The website indica.pictures/lander is currently a minimal placeholder or parking page with very limited content. It primarily loads a React-based JavaScript bundle and includes Google Adsense scripts for advertising. There is no visible business information, metadata, or structured data to describe the company or its services. The lack of contact details, privacy policies, or terms of service indicates a very low level of digital maturity and business presence. Technically, the site uses modern JavaScript frameworks but lacks SEO optimization, accessibility features, and security headers. There is no evidence of HTTPS or SSL configuration from the provided data. The WHOIS information is unavailable due to unsupported TLD, preventing verification of domain ownership or legitimacy. From a security perspective, the site shows no signs of advanced security measures or compliance with privacy regulations such as GDPR. The absence of contact information and security policies further reduces trustworthiness. No vulnerabilities or malicious indicators were detected, but the minimal content limits comprehensive security assessment. Overall, the site presents a low-risk profile due to its minimal content but also a low trust and credibility level. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear business and contact information, and improving SEO and accessibility to enhance user trust and compliance.

I

Indica Books

indicabooks.org

41

Indica Books is a niche educational and cultural publishing platform focused on promoting Indic civilisational knowledge through books, workshops, and events. The platform supports authors and researchers by providing publishing assistance, book loans, and community engagement. Technically, the website is built on WordPress with modern libraries and SEO tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and cookie consent mechanisms. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration details. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security hardening.

I

Indica Academy

indica.events

45

Indica Events is a specialized platform dedicated to curating and conducting a variety of cultural and educational events centered around Indic Civilisational Thought. The website serves as a hub for conferences, seminars, workshops, retreats, and festivals, targeting an audience interested in Indic studies and related cultural activities. The platform is part of a broader Indica ecosystem, linking to related academic and cultural sites. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is mobile-optimized and provides a user-friendly event filtering and registration experience. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data is privacy protected, which is justified given the non-profit educational nature of the platform. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

V

Vojtěch Nedvěd

vn1.cz

47

Vojtěch Nedvěd operates a professional web development service primarily focused on creating websites and e-shops for a variety of clients. The business is positioned as a small independent developer based in the Czech Republic, with a portfolio showcasing diverse projects including programming, coding, design, and copywriting services. The website is well-structured, visually consistent, and targets local Czech businesses and individuals seeking custom web solutions. Technically, the site employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Fonts and Font Awesome for styling. It uses Google Analytics and Tag Manager for visitor tracking, hosted on Wedos, a reputable Czech hosting provider. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no formal security or privacy policies are published. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy compliance and security best practices.

T

The EpochTimes Türkiye

epochtimestr.com

49

The Epoch Times TR is a Turkish-language online media company established in 2010, providing news, opinion, and cultural content focused on Turkey and global affairs. The website is well-structured, uses WordPress CMS with popular plugins, and integrates social media channels to engage its audience. It targets Turkish-speaking readers interested in current events and cultural topics. Technically, the site employs modern web technologies, including HTTPS, Google Analytics, and Google AdSense for monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced DNS security and published security policies. Privacy compliance is basic, with privacy and cookie policies present but no explicit GDPR compliance indicators. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security and privacy transparency.

The website at epochtimes.nl is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the content is blocked or restricted, preventing any meaningful analysis of the site's business, content, or security posture. The page contains no metadata, forms, external links, or contact information. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are present. The absence of scripts or analytics further limits the ability to assess the technical infrastructure or marketing practices. Overall, the site appears to be either restricted by server configuration or access control mechanisms, resulting in a very low AI score and no trust or credibility indicators.

Е

Епок Медия Груп - България

epochtimes.bg

45

Epoch Times Bulgaria is an independent Bulgarian news media outlet providing fact-based, unbiased news free from governmental, corporate, or political influence. The website targets Bulgarian-speaking audiences interested in national and international news, culture, science, and lifestyle. Established around 2019, it operates primarily as an online news publisher with a medium-sized digital presence. The company uses WordPress CMS with modern plugins and SEO tools to maintain a professional and accessible platform. Hosting is provided by DigitalOcean, ensuring reliable infrastructure and performance. The site employs HTTPS and standard security headers, reflecting a good security posture, though it lacks some advanced security policies and incident response disclosures. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Advertising and analytics are managed through common platforms such as Facebook Pixel and Google Tag Manager. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy and security transparency.

Ž

Život dětem o.p.s.

zivotdetem.cz

49

Život dětem o.p.s. is a Czech non-profit organization dedicated to supporting seriously ill children through financial aid, medical equipment, and community support. The website reflects a mature and professional presence with clear calls to action for donations via multiple channels including SMS, online platforms, and an e-shop. The organization has a solid market position within the Czech charitable sector, targeting donors, families, and volunteers. Technically, the site is built on WordPress with common third-party integrations such as Google Analytics and Hotjar, hosted by ACTIVE 24. While the site is mobile optimized and user-friendly, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data is due to privacy protection and does not detract from the site's legitimacy. Overall, the site demonstrates good business credibility and technical implementation but could improve its security posture and privacy compliance.

T

TROPICANA - La Plage | Restaurant de plage par la Tarte Tropézienne

tropicanalaplage.com

38

The website 'TROPICANA - La Plage' represents a beach restaurant business associated with the Tarte Tropézienne brand, targeting general public and tourists in France. The site provides information about their hospitality and food services but lacks detailed business and contact information. Technically, the site is built on WordPress using the Divi theme, with moderate performance and good mobile optimization. However, the security posture is weak due to missing security headers and lack of HTTPS verification in the provided data. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR compliance indicators. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible and safe for general audiences but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

U

U Labutě

ulabute.com

40

U Labutě is a small hospitality business based in Říčany, Czech Republic, offering a restaurant with burgers, Mexican and Czech cuisine, alongside related businesses including a wine and delicacy shop, cultural refreshment zone, and cultural center. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard technologies such as jQuery. The site is accessible, mobile-optimized, and presents consistent branding and relevant content for its local audience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to physical addresses without emails or phone numbers. Overall, the website is functional and trustworthy for its business scope but would benefit from improved security and compliance measures.

The website www.ricansko.eu is currently non-functional, returning a PHP fatal error related to deprecated syntax in the script-loader.php file. This prevents access to any meaningful content or business information. The lack of HTTPS and security headers further weakens the site's security posture. WHOIS data is inaccessible, likely due to privacy protection or data redaction by the EURid registry, which limits the ability to verify domain legitimacy or ownership details. Overall, the site appears to be either abandoned or under maintenance with critical technical issues preventing normal operation. From a technical perspective, the site lacks modern web standards compliance, including secure transport (HTTPS), error handling, and content delivery. No metadata, structured data, or external links are present, indicating minimal or no active digital presence. The absence of privacy, cookie, or terms of service policies suggests non-compliance with GDPR and other privacy regulations. Security-wise, the site exposes a fatal error message, which can leak internal implementation details and increase risk. The absence of security headers and HTTPS further exposes visitors to potential risks. The WHOIS data unavailability and domain registration opacity add to concerns about the site's trustworthiness and operational status. Given these factors, the overall risk assessment is high. The site should urgently address the PHP errors, implement HTTPS, and publish necessary compliance policies. Until then, it should be considered unreliable and potentially insecure.

R

Ramaja s. r. o.

zahadyzivota.cz

41

Záhady života is a Czech media publication focused on mysteries, health, esoterics, and historical curiosities. It operates primarily as a magazine with both printed and online content, targeting a general audience interested in these topics. The website is built on WordPress and integrates common web technologies such as jQuery, Google Analytics, and Facebook SDK for social media engagement and analytics. The site is well-structured with good SEO practices and mobile optimization, providing a positive user experience. However, the absence of privacy and cookie policies indicates a compliance gap, especially under GDPR regulations. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

The website novinyvm.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information from the site. The domain is registered since 2007 with a Czech registrar REG-WEDOS and uses Cloudflare name servers, indicating a legitimate and established domain. However, the lack of visible content and policies limits the ability to assess the business model, services, or compliance posture. Technically, the site uses Cloudflare's security and CDN infrastructure, but no additional security headers or frameworks are evident in the HTML content. Privacy and cookie policies are absent, and no contact information or forms are present beyond the security challenge. The site does not contain any adult or questionable content based on the available data. Overall, the site appears to be protected by Cloudflare's WAF, but this also restricts content visibility and analysis.

N

Nová Večerní Praha

vecerni-praha.cz

48

Nová Večerní Praha is a local news media website focused on providing daily and evening news for Prague and its surroundings. The site covers a broad range of topics including culture, economy, travel, cars, and lifestyle, targeting residents and visitors interested in regional news and events. The business operates under Stellar Media s.r.o., with a clear digital presence supported by social media channels and regular content updates. Technically, the website is built on WordPress with common plugins and scripts such as jQuery, Smart Slider 3, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy/cookie policies represents areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly limits trust verification but is common for media websites. Overall, the site is legitimate, professional, and serves its target audience effectively.

Rádio Regenerace is a Czech-language cultural and lifestyle internet project focused on podcasts, articles, and multimedia content covering topics such as style, dialogue, speeches, reading, exhibitions, relaxation, music, and documentaries. The website targets a Czech-speaking audience interested in cultural enrichment and personal well-being. It operates primarily as a content publisher supported by voluntary donations, positioning itself as a niche media provider within the Czech Republic. Technically, the site uses standard web technologies including JavaScript, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. The site is moderately optimized for mobile devices and has a clear navigation structure, though accessibility features could be improved. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and a published privacy policy. The absence of WHOIS data limits domain trust assessment, though the site content and presentation suggest legitimacy. Overall, the site is safe for general audiences and provides valuable cultural content.

I

inpublic group s.r.o.

bustv.cz

37

BUS TV is a Czech Republic based advertising media company specializing in digital advertising campaigns on information panels within public transport vehicles across multiple regional cities. The company operates under the parent entity inpublic group s.r.o. and targets advertisers seeking regional reach in public transit environments. The website is built on WordPress CMS with standard plugins and integrates Google Analytics and Microsoft Clarity for user behavior tracking. Contact information is comprehensive with multiple named representatives and direct email addresses, enhancing business credibility. However, the absence of WHOIS data limits domain trust assessment. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and cookie consent mechanisms. Overall, the website is professional, content-rich, and serves its business purpose effectively.

M

MEDIA CLUB, s.r.o.

signalradio.cz

40

Signál Rádio is a Czech regional radio station specializing in broadcasting the best music from the 1980s. The company MEDIA CLUB, s.r.o. operates the station, targeting listeners interested in nostalgic 80s music culture. The website provides program schedules, contests, online streaming, and promotional events, positioning itself as a niche media outlet within the Czech Republic. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, and integrates multiple third-party analytics and advertising platforms with a consent management system to comply with privacy regulations. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS registration data limits domain legitimacy verification, though the website content and company information appear professional and consistent with a small media business. Overall, the site is well-designed, mobile-optimized, and user-friendly, serving its target audience effectively.

F

FTV Prima, spol. s r.o.

radio1.cz

43

Radio 1 is a well-established Czech radio station operating since 1998, specializing in alternative music and cultural programming. It serves a general audience in the Czech Republic and positions itself as a unique alternative media outlet. The website supports online streaming and provides rich content related to its radio programs and DJs. Technically, the site is built on WordPress and leverages modern web technologies including Google Tag Manager and Gemius analytics, with a consent management platform (Didomi) ensuring GDPR compliance. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Business credibility is supported by consistent WHOIS data and comprehensive privacy policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

D

DAVE LOG s.r.o.

davelog.cz

41

DAVE LOG s.r.o. is a Czech Republic based logistics company specializing in international and domestic freight forwarding and transport services. Their offerings include road transport, express delivery, air and sea freight, and specialized transport solutions. The website is professionally designed, targeting businesses and individuals requiring comprehensive logistics services. The company emphasizes building long-term relationships and customer satisfaction. Technically, the website uses modern web technologies such as jQuery and Fancybox, with good mobile optimization and SEO practices. However, there is no detected CMS or hosting provider information, and performance is moderate. Security posture is limited due to absence of HTTPS verification in the provided data, lack of security headers, and no published privacy or cookie policies. The WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is accessible and safe but would benefit from improved security and compliance transparency.

I

International Maharishi AyurVeda Foundation (IMAVF)

imavf.org

45

The International Maharishi AyurVeda Foundation (IMAVF) operates as a non-profit organization dedicated to supporting Maharishi AyurVeda health professionals and enthusiasts worldwide. The website serves as an educational and community platform offering professional training, research dissemination, webinars, and publications related to AyurVeda. The organization targets health professionals and supporters interested in integrative health and AyurVeda practices. Technically, the website is built on WordPress with common plugins for membership management and interactive content, providing a moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but the absence of advanced security headers and vulnerability disclosure policies indicates room for improvement. The lack of visible privacy and cookie policies suggests partial privacy compliance. Overall, the website is professional and trustworthy, though the absence of WHOIS data limits domain registration transparency.