High-risk security reports

F

Fumedica Deutschland

fumedica.de

45

Fumedica Deutschland operates in the healthcare sector, providing medical-related products or services primarily targeted at the German market. The website presents basic information with limited interactive features and lacks comprehensive privacy, cookie, or terms of service policies. The technical infrastructure relies on older technologies such as jQuery 2.2.4 and Font Awesome 6 Pro, hosted on servers associated with kreativmedia.ch. Security posture is minimal with no evident security headers or advanced protections, and no contact or incident response information is available. Overall, the website serves as a basic informational platform with moderate digital maturity but requires improvements in security, privacy compliance, and user engagement features.

Coroneo is a specialized medical device company focused on innovative cardiac surgery implants and instruments, particularly for aortic valve repair. The company positions itself as a world leader with a history dating back to 1997, offering products that preserve native valves and improve surgical outcomes. Their market presence spans North America, Europe, and Asia through dedicated distributors. Technically, the website is built on WordPress with modern plugins and demonstrates good mobile optimization and user experience. Security measures include HTTPS and Google reCAPTCHA, but lack some advanced security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and certifications suggest a credible business. Overall, the site is professional and compliant with cookie consent regulations but would benefit from enhanced transparency and security disclosures.

The website kh-berlin.de represents Weißensee Kunsthochschule Berlin, a specialized public art university in Germany offering various art and design degree programs. The site is well-structured with detailed academic and institutional information targeting students, academics, and art professionals. The technical infrastructure is based on TYPO3 CMS with jQuery and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides good navigation clarity. Security posture is moderate with HTTPS implied but lacking visible security headers and updated libraries. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional but could improve in privacy compliance and security best practices.

H

Hochschule für Musik Hanns Eisler Berlin

hfm-berlin.de

42

Hochschule für Musik Hanns Eisler Berlin is a well-established public music university founded in 1950, recognized as one of Europe's leading music institutions. The website provides comprehensive information about its academic offerings, ensembles, events, and student services, targeting prospective and current students, faculty, and music professionals. Technically, the site is built on TYPO3 CMS and hosted by Hetzner, featuring a well-structured, accessible, and mobile-optimized design. Security posture is solid with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident, which could be improved to enhance trust and compliance. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security transparency.

H

Hochschule für soziale Arbeit und Pädagogik (HSAP)

hsap.de

47

Hochschule für soziale Arbeit und Pädagogik (HSAP) is a specialized higher education institution based in Berlin, Germany, focusing on social work, childhood pedagogy, and inclusive education. The institution offers a variety of bachelor and master degree programs, including dual and part-time study formats, often in cooperation with external partners such as the Paritätische Akademie. The website reflects a professional and well-maintained digital presence with clear navigation, relevant content, and active updates on news and publications. Technically, the website is built on TYPO3 CMS, utilizing common JavaScript libraries like jQuery and Slick Carousel for interactive elements. It employs Google Tag Manager for analytics with a strong emphasis on user consent and privacy compliance, including GDPR-aligned cookie management. The site is served over HTTPS with good SSL configuration, although some security headers are missing, which could be improved. From a security perspective, the website demonstrates a solid baseline with encrypted connections and consent management but lacks published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Overall, the site is trustworthy and suitable for its educational audience. Strategically, HSAP should consider enhancing its security posture by implementing recommended HTTP security headers and publishing a formal security policy and incident response information to further build trust and compliance.

D

Deutsche Film- und Fernsehakademie Berlin GmbH

dffb.de

43

The Deutsche Film- und Fernsehakademie Berlin GmbH (DFFB) is a well-established educational institution specializing in film and television training. The website presents a professional and comprehensive digital presence, targeting aspiring filmmakers and media professionals globally. It offers detailed information about its academic programs, events, and film projects, positioning itself as a leading film academy in Germany with international outreach. Technically, the site is built on WordPress with modern SEO and cookie compliance tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and a public security policy. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

The website my-mensa.de is currently non-functional, displaying only a minimal error message indicating a missing critical Magento application file (app/Mage.php). This suggests the site is either under maintenance, incomplete, or abandoned. No business information, metadata, or structured data is present to provide insight into the company's operations or services. The domain uses generic GoDaddy nameservers with minimal WHOIS data, lacking registrant details to verify legitimacy or business claims. Technically, the site lacks any detectable CMS functionality, security headers, or performance optimizations. Security posture is weak due to missing files and lack of HTTPS information. No privacy or cookie policies are found, indicating non-compliance with GDPR and related regulations. Overall, the site presents a poor professional image and low trustworthiness.

The website represents a small German software provider specializing in solutions for Studentenwerke, offering products such as inventory management, dormitory management, accounting, and cash register systems. The business positions itself as the leading provider in its niche within Germany. The technical infrastructure is basic, relying on legacy HTML standards and a CMS named 'web to date 8.0'. There is no evidence of modern SEO, accessibility, or mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no visible privacy or cookie consent mechanisms. Contact information and incident response details are absent, limiting trust and compliance. Overall, the site is functional but outdated and lacking in security and privacy best practices.

S

Application stopped - Scalingo

schlouk-map.com

48

The website www.schlouk-map.com is currently non-functional and displays a generic 'Application has been stopped' message hosted on the Scalingo platform. There is no accessible business content, metadata, or contact information available. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or expired. Consequently, the website lacks any visible business presence or digital maturity. The technical infrastructure is minimal, with no scripts, analytics, or security headers detected. The security posture is poor due to the absence of HTTPS and security best practices. Overall, the site presents a high risk of being inactive or abandoned, with no compliance or trust indicators.

The website at opentech-ux.org currently serves only a GitHub Pages 404 error page indicating that no active content is published. The domain is newly registered in January 2023 via Gandi SAS and uses GitHub Pages as its hosting platform. There is no business or contact information, no privacy or cookie policies, and no visible security or compliance documentation. Technically, the site has minimal security headers and lacks DNSSEC, but no WAF or blocking mechanisms are detected. Overall, the site is not operational and provides no meaningful content or services.

C

Churchill

agence-churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders and businesses in France. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced SEO and marketing strategies to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with strong trust signals including high Google review ratings and notable client logos. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as WP Rocket and lazy loading. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by strong business and branding indicators. Overall, the website presents a professional, trustworthy, and technically sound digital presence.

The website newsgang.com currently serves as a placeholder 'Site en construction' page hosted by OVH. It lacks substantive business content, contact information, or any privacy and security policies. The site primarily provides links to OVH hosting support and resources, indicating it is not yet operational or publicly launched. The domain is registered since 2000 with OVH sas as the registrar, which aligns with the hosting provider references on the site, but the lack of content suggests the business or service is not active at this time. From a technical perspective, the site uses basic HTML and CSS with no detected modern frameworks or CMS. There is no evidence of HTTPS or security headers, and no forms or scripts are present. The site is not optimized for mobile or accessibility and has poor SEO characteristics due to minimal content and metadata. The hosting provider is OVH, a reputable provider, but the site itself is minimal and under construction. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No incident response or vulnerability disclosure information is available. The site does not collect user data or track visitors, which reduces privacy risks but also indicates a lack of business maturity. No contact emails, phone numbers, or social media links are provided, limiting user trust and engagement. Overall, the website is low risk but also low value in its current state. It is recommended to implement HTTPS, add privacy and cookie policies, provide clear contact information, and develop substantive content to improve trust, compliance, and user experience.

C

C & K člen skupiny AUTO UH a.s.

ckauto.cz

43

C & K člen skupiny AUTO UH a.s. operates as an authorized automotive dealership and service provider specializing in Toyota, Lexus, Subaru, and CFMOTO brands. The company serves customers primarily in the Czech Republic with physical locations in Brno and Uherské Hradiště. Their business model focuses on new and used vehicle sales, vehicle servicing, and financing solutions, positioning them as a reputable regional player within the automotive retail sector. The website reflects a professional and consistent brand image aligned with their market presence. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Seznam Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, the absence of explicit security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The main limitation is the lack of WHOIS data, which restricts domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

J

Jardin Botanique de Bordeaux

jardin-botanique-bordeaux.fr

49

Jardin Botanique de Bordeaux is a public botanical garden institution located in Bordeaux, France, providing cultural, educational, and scientific services related to plant biodiversity and conservation. The website serves as an informational portal for visitors, researchers, and the general public, offering details on garden locations, events, exhibitions, and practical information. The institution is positioned as a local government-supported entity with a focus on public outreach and education. Technically, the website is built on Drupal 7 CMS with standard web technologies including jQuery and a cookie consent manager (Tarteaucitron). The site uses HTTPS and integrates AT Internet analytics for visitor tracking. While the site is functional and moderately optimized, there is room for improvement in mobile responsiveness, accessibility, and modern security headers. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and preparedness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, CMS updates, and accessibility would further strengthen its posture and user experience.

The website www.canalplusbrandsolutions.fr is currently inaccessible due to a security or WAF challenge, presenting an 'Access Denied' message with minimal content. This prevents a full assessment of the business, compliance, and security posture. The visible content is limited to a branded logo and a message indicating request processing, with no privacy, cookie, or contact information available. The technical footprint is minimal, with only a single external domain serving static assets. No analytics, advertising, or tracking scripts are detected, and no forms or user input mechanisms are present. The site appears to be mobile responsive at a basic level but lacks SEO and accessibility features. The domain is privacy protected in WHOIS, consistent with a media brand's typical privacy practices, but detailed registrant information is unavailable. Overall, the site scores low on content quality, security posture, and privacy compliance due to the blocking mechanism.

3

366

366.fr

48

366 is a French advertising media agency specializing in local and regional media, offering services across print, digital, multiscreen, and magazines. The company positions itself as an expert in territorial advertising, reaching millions daily. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, jQuery, and performance tools like WP Rocket. Analytics are handled via Matomo, and privacy tools are partially integrated. Security posture is good with HTTPS enforced and lazy loading implemented, but lacks explicit security headers and visible privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

S

Slovenské múzeum máp

muzeummap.sk

45

Slovenské múzeum máp is a specialized experiential museum in Slovakia dedicated to the history and modern practice of cartography. The museum offers interactive exhibits, educational activities, a flight simulator experience, and a retail shop selling maps, books, and related fashion items. It targets tourists, families, students, and map enthusiasts, positioning itself as a unique cultural attraction in Slovakia. The website is professionally designed using WordPress with modern plugins and themes, providing good user experience and mobile optimization. However, it lacks formal privacy and cookie policies, and no explicit security or incident response policies are published. The site uses HTTPS and Google Analytics for tracking, but security headers are missing, which could be improved to enhance security posture. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

Redenge solutions s.r.o. is a small Czech technology company specializing in custom web and e-commerce solutions integrated with Helios Inuvio, Orange, and Green information systems. Their offerings include scalable B2C/B2B e-shop platforms, SaaS e-shop services, and tailored web applications for medium-sized businesses. The company positions itself as an experienced and agile partner with over 14 years of domain expertise. Technically, the website is built on WordPress with common plugins such as LayerSlider and Slider Revolution, indicating a mature but standard digital infrastructure. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used, but no explicit security headers were detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.

M

Magyar IO-Link Közösség

io-link.hu

49

The website io-link.hu represents the Hungarian IO-Link Community, focusing on organizing IO-Link User Workshops to educate industrial sector participants about IO-Link technology. The site positions itself as a niche community leader in Hungary, providing event organization and technology education services. The technical infrastructure is based on WordPress with modern plugins and a professional theme, offering a good user experience with mobile optimization and cookie consent mechanisms. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and security headers. Overall, the site is legitimate and trustworthy but could improve compliance and security transparency.

Lausuntopalvelu.fi is an official Finnish government digital platform maintained by the Ministry of Justice (Oikeusministeriö). It facilitates electronic submission and management of public consultation requests, allowing all public authorities to publish consultation requests and enabling organizations and citizens to provide statements. The service is well-positioned as a trusted government resource with a clear target audience of public sector entities and the general public. The website content is professionally presented, bilingual (Finnish and Swedish), and includes user support contact information.

The website at ww1.mistresskawaii.com appears to be either unregistered or parked, as indicated by the absence of WHOIS data and the minimal content available. The site content is primarily an iframe embedding external content from a third-party domain, accompanied by tracking pixels and ad-related scripts. There is no original content, no privacy or cookie policies, and no contact or business information provided. The domain name and embedded content strongly suggest adult-oriented services, likely escort or similar adult services, targeting an adults-only audience. Technically, the site lacks HTTPS, security headers, and any modern web best practices, resulting in a poor security posture and low trustworthiness.

The website fitandmuscular.com operates as a niche adult video content platform specializing in videos featuring fit and muscular women wearing skimpy outfits such as thongs and thong bikinis. The business model appears to be subscription or membership-based access to video content with regular updates and preview videos. The site targets an adult audience interested in this specific content genre. Technically, the site is built with basic HTML and CSS, hosted by DreamHost, and lacks modern web frameworks or CMS. There is no evidence of analytics, tracking, or advertising technologies in use. Security posture is weak, with no HTTPS or security headers detected and no privacy or cookie policies present. WHOIS data is suspicious due to a domain creation date set in the future and lack of registrant details, which undermines trust. Overall, the site is functional but basic, with significant gaps in security and compliance.

C

Czech Soles Production

czechsoles.com

40

CzechSoles.com operates as a niche adult entertainment website specializing in foot fetish content, offering a large catalog of videos, photo galleries, custom clips, and live webcams. The site targets an adults-only audience with explicit disclaimers and age verification statements. The business model is subscription-based with additional custom content sales, positioning itself as a specialized media provider within the adult entertainment industry. The website demonstrates consistent branding and a professional presentation with a focus on quality multimedia content. Technically, the site uses common JavaScript libraries and integrates Google reCAPTCHA Enterprise for bot protection, but lacks advanced security headers and explicit privacy consent mechanisms. Payment processing is handled by a reputable third party, CCBill, enhancing transactional trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency.

A

Andomark, LLC

brattyfootgirls.com

29

XBrats Femdom Videos operates as a niche adult entertainment platform specializing in femdom fetish video content. Founded in 2021, the company offers subscription-based and pay-per-view access to original HD videos, targeting an adult-only audience. The business leverages a third-party payment processor, Segpay.com, ensuring secure transactions and compliance with industry standards. The website presents a consistent brand image with clear navigation and mobile optimization, catering to its specialized market segment.

C

This website is for ADULTS ONLY

cruel-mistresses.com

45

The website cruel-mistresses.com is an adult content portal requiring users to affirm they are at least 18 years old before entering. It hosts sexually explicit material with fetish and bondage themes, targeting an adult-only audience. The site references Mood-Universe.com as the copyright holder but provides minimal business or contact information. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Mobile responsiveness is present but basic. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided data. The domain is aged since 2011 and registered with a reputable registrar, Rebel Ltd, but lacks detailed registrant information. Overall, the site lacks privacy, cookie, and terms of service policies, which impacts compliance and trustworthiness.

C

ClubDom.com

clubdom.com

45

ClubDom.com is a niche adult entertainment platform specializing in FemDom, BDSM, and fetish video and photo content. Established in 1997, it offers a subscription-based business model with exclusive content including thousands of videos and photo sets. The website targets an adult audience with explicit content and includes legal disclaimers and age verification mechanisms. Technically, the site uses a custom CMS with common JavaScript libraries such as jQuery, OneSignal for push notifications, and Jssor Slider for media display. Hosting is provided by mojohost.com, and the domain registration is consistent and longstanding, indicating legitimacy. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with a basic privacy policy but no cookie consent or GDPR mechanisms. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is functional and professionally presented but could improve security and privacy compliance.

O

Oasis21

oasis21.org

48

Oasis21 is a small community-oriented social economy shared space located in Paris, France, founded around 2018. The website serves primarily as an informational and reservation portal for the space, targeting local community members and organizations interested in social and solidarity economy initiatives. The business model revolves around providing a physical venue for events and activities aligned with social economy values. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH sas, and includes minimal external dependencies. There is no evidence of advanced CMS or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no visible security headers or privacy policies, and DNSSEC is not enabled. The domain registration is consistent with the business timeline and shows standard protections against unauthorized transfers or deletions. Overall, the site is functional but lacks advanced security and privacy features, which could be improved to enhance trust and compliance.

I

Interventions Numériques

interventions-numeriques.fr

46

Interventions Numériques is a French-based small educational and mediation service focused on digital autonomy, offering a variety of training courses and mediation services to individuals and organizations. The business operates under the cooperative Oxalis, which is Qualiopi certified, indicating recognized quality in training services. The website is professionally designed using WordPress with a modern tech stack and SEO optimizations, providing good user experience and mobile responsiveness. Security posture is solid with HTTPS and no evident vulnerabilities, though some improvements in privacy compliance and security policy transparency are recommended. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive legitimacy assessment.

F

Friends Of OpenPGP

foopgp.org

49

Friends Of OpenPGP is a small non-profit association founded in 2020 focused on promoting OpenPGP technologies among businesses and citizens. The organization facilitates adoption through events, training, workshops, and community support. Their website reflects a niche market position with a clear mission to educate and support OpenPGP users and developers. Technically, the site is built with modern static site generator Hugo and uses popular frontend libraries such as Bootstrap and jQuery, hosted by OVH sas. The website is mobile responsive and well-structured, though it lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

M

Media Modern Creative

mediamc.cz

44

Media Modern Creative is a Czech digital media agency specializing in digital marketing, online news portals, and web development services. They operate a network of over 100 newspapers and portals, providing clients with media exposure and marketing solutions. Their business model includes partnerships and special offers for non-profits and startups, positioning them as a medium-sized player in the regional media sector. Technically, the website uses a custom CMS (PublicMC), modern JavaScript libraries, and integrates analytics and marketing tools such as Google Analytics, SmartLook, and Facebook Pixel. The site is mobile-optimized and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is good with HTTPS and session management, but could be improved with additional security headers and clearer incident response contacts. WHOIS data is missing, which reduces transparency and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced compliance documentation and contact information.

A

Akademie AI

akademieai.cz

48

Akademie AI is a Czech-based educational platform specializing in artificial intelligence training, offering workshops and webinars primarily focused on ChatGPT and AI tool usage. The website positions itself as a niche provider targeting individuals and professionals seeking to enhance their AI skills. Technically, the site employs modern frontend technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy based on content and external references. Overall, Akademie AI demonstrates a solid digital presence with room for security and compliance enhancements.

E

EVENT media s.r.o.

run4help.cz

45

RUN4HELP is a Czech-based charity event organizer specializing in night running events that support non-profit causes such as NO FOOT NO STRESS. The organization operates primarily in Prague and targets runners, families, and charity supporters. The website presents a professional image with clear event information, partner listings, and registration links. Technically, the site uses modern JavaScript libraries like jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing, hosted on Czech hosting providers. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

F

FullAtelier.cz

fullatelier.cz

38

FullAtelier.cz is a professional Czech-based photography and videography service specializing in social events such as graduation balls, corporate events, weddings, and festivals. The company offers a comprehensive range of services including drone aerial filming by licensed pilots, video shooting and editing, and mobile photo studios. The website reflects a focused business model targeting event organizers and individuals seeking high-quality media coverage of their events. The domain age and registrar information align well with the business profile, indicating a legitimate and established presence since 2013. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, leveraging modern web technologies and Google Fonts. It employs HTTPS with a valid SSL certificate and integrates Google reCAPTCHA v3 for form security. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed through meta tags and structured data. Security posture is solid with HTTPS and form protection, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is clearly presented, enhancing business credibility. No suspicious or malicious content was detected, and the site is fully accessible without WAF interference. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

MojeRuka.cz is an informational and educational website dedicated to diseases and conditions of the hand and upper limb, targeting the general public primarily in the Czech Republic. The site offers comprehensive content on anatomy, acute and chronic diseases, prevention, treatment advice, and a directory of medical specialists. It also links to related healthcare projects and magazines, enhancing its value as a niche healthcare resource. The business model is non-commercial, focusing on education and community building for patients with upper limb conditions. Technically, the website is built on the LuckyWonder CMS 3.0 platform and utilizes a range of JavaScript libraries including jQuery, Owl Carousel, Fancybox, LayerSlider, and Google reCAPTCHA v3 for spam protection. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. There is no evidence of advanced analytics or tracking beyond reCAPTCHA. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect its contact form. However, no security headers were detected, and there is a lack of explicit privacy and cookie policies, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the website provides valuable healthcare information with a professional design and good user experience but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and security posture.

C

Centrum léčby bolesti

bolestbrno.cz

29

Bolest Brno is a specialized healthcare center focused on the treatment of acute and chronic pain, located in Brno, Czech Republic. The website presents a professional image with detailed descriptions of their key services including pharmacotherapy, acupuncture, nerve blocks, and infusion therapies. The center targets patients suffering from pain and offers treatments covered by general health insurance without the need for a referral. Technically, the website uses common frontend libraries such as Bootstrap, jQuery, and Slick slider, providing a moderate performance and basic mobile optimization. However, the absence of privacy and cookie policies and missing WHOIS data reduce the overall trust and compliance posture. Security headers and SSL configuration details are not evident from the provided data, indicating room for improvement in security practices. Overall, the website is functional and informative but would benefit from enhanced security, privacy compliance, and transparency regarding domain registration.

Strabic.fr is a French niche media website focused on design, DIY, architecture, and cultural topics. It offers editorial content, a digital library, and supports its operations through donations and newsletter subscriptions. The website is built on the SPIP CMS and hosted by OVH, a reputable French hosting provider. Technically, it uses common web technologies including jQuery, Google Analytics, Typekit fonts, MailChimp for newsletters, and PayPal for donations. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content for its target audience. From a security perspective, the website uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or security policy information is provided. The WHOIS data is consistent with the website's French origin and domain age supports legitimacy. No WAF or blocking mechanisms are detected, and no suspicious or malicious content is present. Overall, the site is a small but credible cultural media outlet with moderate technical maturity and some gaps in privacy compliance and security best practices. Strategic improvements in privacy disclosures, cookie consent, and security headers would enhance trust and compliance.

The website www.artyfarty-gallery.com is currently inaccessible to normal users due to a Cloudflare Turnstile security challenge page. This challenge blocks access to the actual website content, preventing any meaningful analysis of the business, services, or detailed technical infrastructure. The domain WHOIS data is unavailable, indicating the domain may not be registered or is newly created and not propagated in the registry. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible on the page. The technical infrastructure relies on Cloudflare's security services, but no further technologies or CMS platforms are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the presence of a WAF challenge indicates some level of security protection. Overall, the website's legitimacy and business credibility are questionable due to the absence of WHOIS data and content access.

The website urbaner.it is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered in Italy since 2020 and appears legitimate based on WHOIS data, but the lack of accessible content severely limits the ability to assess the business or its services. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the page. Technically, the site uses Google Fonts but no other detectable technologies or analytics. Security posture is minimal with no DNSSEC and no security headers detected. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.

F

Fotokino

fotokino.org

49

Fotokino is a well-established cultural arts organization based in Marseille, France, specializing in visual arts exhibitions, workshops, conferences, and publishing. The organization operates a physical venue and an online presence that includes an e-shop and a rich events calendar. Their market position is niche, focusing on contemporary design and visual arts with a strong local and regional cultural impact. The website reflects a professional and consistent brand image with clear contact information and active social media engagement. Technically, the site is built on WordPress with modern plugins and libraries, hosted by Infomaniak, and optimized for mobile users. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, serving a general audience interested in arts and culture.

F

French Data Network

fdn.org

49

French Data Network (FDN) is a pioneering French non-profit Internet Service Provider established in 1992, recognized as the oldest ISP in France still operating. The organization operates on a volunteer basis, providing internet access services including ADSL, VDSL, FTTH, and VPNs, primarily targeting members and organizations aligned with digital rights and internet neutrality. FDN is deeply involved in advocacy and supports initiatives related to fundamental freedoms in the digital space, also playing a key role in the Fédération FDN, a federation of associative ISPs in France. Technically, the website is well-structured, mobile-optimized, and uses modern web standards with no detected security vulnerabilities or tracking technologies. The site integrates with the Fediverse via Mastodon and provides various member and public services. However, some security headers are missing, and no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no exposed sensitive data. The absence of WHOIS data is noted but likely due to AFNIC policies or privacy protection, which is common for French domains. No vulnerability disclosure or incident response information is published, which could be improved to enhance trust. Overall, FDN presents a trustworthy, professional, and ethically driven organization with a solid digital presence. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving transparency around incident response and vulnerability disclosure.

AV your day svatby&eventy is a specialized wedding and event planning agency based in Brno, Czech Republic, founded in 2014. The company offers a comprehensive range of services including turnkey wedding planning, partial services, coordination, floral arrangements, decoration rental, wedding cakes, and event organization. The website reflects a professional and well-established business with a strong local presence and international experience. The target audience primarily consists of couples planning weddings and clients organizing events in the Brno region. Technically, the website is built on WordPress with WooCommerce and Elementor, utilizing modern plugins and frameworks to deliver a responsive and user-friendly experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the website is trustworthy and professional, but enhancing privacy compliance and security best practices would strengthen its position.

C

Color Library

colorlibrary.ch

44

Color Library is a specialized technology service provider focused on automated color separation for printing devices. The website presents a professional and consistent brand image, targeting printing professionals and businesses requiring advanced color profiles. The business operates primarily in Switzerland and leverages WordPress CMS with integrated payment processing via Stripe. The technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and published security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

W

Webfusion

webfusion.cz

40

Webfusion is a Czech Republic-based technology service provider specializing in professional web development, e-commerce solutions, online marketing, mobile and web application development, and graphic design services. Established in 2015, the company targets businesses and entrepreneurs seeking to enhance their online presence and digital marketing effectiveness. Their website showcases a strong portfolio and case studies, indicating a solid market position among small to medium enterprises and corporates. Technically, the website is built on WordPress using the Salient theme and various plugins, including WPBakery Page Builder and Quform, reflecting a mature digital infrastructure. The site is mobile-optimized and employs modern web technologies, although performance is moderate. Security posture is good with HTTPS enforced and cloud backups mentioned, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

H

HZ Hotel s.r.o.

hranicnizamecek.cz

48

Chateau de Frontiere is a luxury hospitality business located in South Moravia, Czech Republic, offering a 4-star hotel resort, fine dining restaurants, wellness and spa services, and event hosting in a UNESCO heritage area. The website is professionally designed with rich multimedia content and integrates a third-party booking system. The technical infrastructure includes modern libraries and marketing tools, though some outdated components like jQuery 1.11.1 pose security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks some security headers and uses older libraries. WHOIS data is unavailable, which reduces domain trust transparency. Overall, the site is suitable for its target audience of tourists seeking luxury experiences, with good privacy compliance and business credibility.

Cukrárna a kavárna U tří císařů s.r.o. operates a local confectionery and café business in Slavkov u Brna, Czech Republic, specializing in homemade cakes, pastries, and specialty coffee. The business emphasizes quality and local production, offering custom cakes and a pleasant café environment with daily opening hours. The website reflects a small hospitality business with clear contact details and company registration information, targeting local customers. Technically, the website uses standard HTML, CSS, and JavaScript technologies including jQuery 1.12.0 and a cookie consent library. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS. Security measures are basic, with no visible security headers and use of an outdated JavaScript library posing potential risks. The cookie consent mechanism and privacy policy link indicate awareness of privacy compliance. Security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are needed in updating libraries, adding security headers, and enhancing form protections. The site is fully accessible without WAF or blocking mechanisms, and no suspicious or malicious content was found. Overall, the website is professional and trustworthy for its business scope but would benefit from technical and security enhancements to improve resilience and compliance.

K

Kozlovna Alfa

kozlovnaalfa.cz

46

Kozlovna Alfa is a small hospitality business located in Třebíč, Czechia, specializing in traditional Czech cuisine, quality tank beer, and accommodation services. The website presents a professional image with clear descriptions of their offerings, including food, beverages, and lodging. The business targets local residents and tourists seeking authentic Czech pub experiences. Technically, the site is built on WordPress with modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy policies, which could be improved to enhance compliance and trust. The absence of WHOIS data is a notable gap in domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

S

SuperOffice

superoffice.de

47

SuperOffice is a well-established European CRM software provider offering cloud-based customer relationship management solutions aimed at helping businesses convert relationships into revenue. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Microsoft Application Insights. Hosting and infrastructure leverage Microsoft Azure and Cloudflare, ensuring robust performance and security. The security posture is strong with HTTPS enforcement, reCAPTCHA protection, and comprehensive cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site reflects a mature digital presence with good privacy compliance and trustworthy domain registration.

L

Les Licoornes

licoornes.coop

49

Les Licoornes is a French cooperative network focused on radically transforming the economy through an entirely cooperative model. The organization collaborates with multiple cooperative partners across sectors such as renewable energy, telecommunications, shared mobility, ethical banking, and ethical commerce. Their platform aims to empower citizens to choose cooperative economic alternatives and build systemic change. The website is professionally designed, mobile-optimized, and eco-conceived, reflecting their ecological and social mission. Technically, the site runs on WordPress with privacy-conscious Matomo analytics and uses modern web standards. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and explicit security headers are absent. Privacy compliance is strong with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is trustworthy, transparent, and aligned with its cooperative mission.

M

Maison de L'Environnement

maison-environnement.fr

45

Maison de L'Environnement is a well-established non-profit association founded in 1994, focused on promoting ecological transition within the Lyon metropolitan area. The organization coordinates about fifty partner associations and offers services including event organization, a mediathèque, training, and cooperative projects. The website reflects a professional and consistent brand image, targeting both citizens and professionals interested in environmental issues. Technically, the site is built on WordPress, uses modern web technologies, and is optimized for performance and mobile devices. Privacy-conscious analytics via Matomo is implemented, though cookie consent mechanisms are absent. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response policies. Overall, the website is trustworthy, accessible, and aligns well with the organization's mission and domain registration data.

M

Mon séjour en montagne - Location vacances hiver et été, guides et conseils

mon-sejour-en-montagne.com

46

The website 'Mon séjour en montagne' is a French-language platform focused on mountain vacation rentals and travel advice for winter and summer holidays. It targets French-speaking vacationers interested in mountain tourism, providing rental listings, guides, and tips. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices. However, the absence of WHOIS data raises questions about domain registration transparency. Security posture is moderate with no visible security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professionally designed but lacks critical trust and compliance elements.