High-risk security reports

The website viacarpatia.eu serves primarily as a navigation portal linking to several related regional and community project websites in Slovakia. It appears to support initiatives such as small project funds and active aging centers, targeting local communities and stakeholders interested in these projects. The website is relatively simple, with basic content and navigation, and does not provide direct business or contact information on the landing page. Technically, the site is built on WordPress with a custom theme and hosted by a reputable Slovak registrar, WebSupport s.r.o. The technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is minimal, with no detected security headers or privacy policies, and no visible analytics or tracking scripts. The site uses HTTPS but lacks advanced security best practices. Overall, the site is safe for general audiences and does not contain any adult or explicit content. The domain registration is consistent with the website's regional focus and shows no suspicious patterns. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, adding contact information, and establishing a vulnerability disclosure policy to improve trust and compliance.

Remeselnícky inkubátor Gemer is a Slovak regional non-profit organization dedicated to supporting traditional folk craftsmen and folk-art producers in the Košice region. The website serves as a platform to promote cultural heritage through education, certification, and facilitation of sales and exhibitions. It is backed by regional government and cultural institutions, positioning itself as a key regional incubator for crafts. Technically, the website is built on Drupal 10, featuring a modern but basic design with good mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No visible vulnerabilities or exposed sensitive data were found. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

C

Centrum voľného času – Regionálne centrum mládeže

rcm.sk

0

Centrum voľného času – Regionálne centrum mládeže is a Slovak non-profit organization focused on professional support for youth work in the Košice region. The organization provides educational activities, supports youth initiatives, and organizes competitions and projects aimed at youth development. Their website reflects a regional leader position with a clear focus on youth and educational institutions. The business model is centered on community and educational services with a small organizational size and a well-established presence since 2009. Technically, the website is built on WordPress with modern plugins and frameworks like Bootstrap and Beaver Builder, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. Overall, the website is professional, trustworthy, and serves its target audience effectively.

I

IDS Východ, s.r.o.

idsvychod.sk

0

IDS Východ, s.r.o. operates as a regional integrated public transportation project in Eastern Slovakia, jointly initiated by the Prešovský and Košický self-governing regions. The company focuses on creating a seamless transport system combining rail, bus, and urban transit services to improve mobility and accessibility for residents and visitors. The website reflects a well-structured, government-backed initiative with clear communication channels and comprehensive information about tariffs, projects, and partner operators. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations, including GDPR-compliant cookie management and analytics integration. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust further. Overall, IDS Východ presents a credible, professional digital presence aligned with its public service mission.

The website geoportalksk.sk currently displays only a 404 error page, indicating that the content is inaccessible or missing. There is no metadata, structured data, or business information available on the site. The domain is registered since 2021 with a long expiry date and uses Microsoft Online nameservers, suggesting a legitimate registration. However, the lack of accessible content and absence of privacy, cookie, or contact information significantly limits the ability to assess the business or security posture. The technical infrastructure appears minimal with no detectable technologies or frameworks in use. Security posture cannot be properly evaluated due to missing data and lack of HTTPS or security headers. Overall, the site appears to be under development or misconfigured, resulting in a poor user experience and low trustworthiness.

The analyzed content corresponds to an internal Chrome browser error page, specifically the offline dinosaur game page, served under the 'chrome-error://chromewebdata/' URL. There is no external business or commercial website content available. The page is designed to provide a user experience when the browser is offline, featuring a simple game and error messaging. No privacy, cookie, or terms of service policies are present, nor is there any contact or security information. The technical infrastructure is based on HTML5, JavaScript, and Canvas API, embedded within the Chrome browser environment. Security posture is minimal due to the nature of the page being a local browser resource, with no external hosting or SSL considerations. Overall, this is not a public-facing website but an internal browser page with limited content and no business relevance.

T

Torstar Corporation

torstar.com

0

Torstar Corporation is a well-established Canadian holding company primarily invested in news and media, including the Toronto Star and other city and community news organizations. The website reflects a professional corporate presence with clear business descriptions and a focus on media services. The company targets a general audience interested in news and media content. Technically, the website is built on Joomla CMS with the Helix3 framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome. It is mobile-optimized and includes Google Analytics for user tracking. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is partially met with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with a domain age consistent with the company's history.

Active, s.r.o. is a small Slovakian company established in 2004, operating under the domain active.sk. The website provides minimal content primarily focused on contact information and company registration details, with no explicit description of business activities or services. The digital presence is basic, relying on jQuery and Bootstrap for frontend functionality, with no detected CMS or advanced platform usage. The site lacks privacy, cookie, and terms of service policies, which limits its compliance posture. Security features such as HTTPS status and security headers are not explicitly confirmed, indicating potential areas for improvement. Overall, the website is functional but minimalistic, with moderate trustworthiness based on consistent WHOIS data and clear contact details.

S

SECCIÓN SINDICAL UGT BBVA

fesmcugt.online

0

SECCIÓN SINDICAL UGT BBVA is a union section representing employees of BBVA under the umbrella of the Unión General de Trabajadores (UGT) in Spain. The website serves as an information portal providing updates on labor rights, collective bargaining, union activities, and member services. It targets BBVA employees and union members, offering resources such as circulars, negotiation updates, and affiliation information. The business model is focused on union representation and member engagement within the finance sector. The website is medium-sized, founded in 2018, and maintains consistent branding aligned with UGT standards. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including GDPR Cookie Compliance, Contact Form 7, and The Events Calendar. It employs modern web technologies such as jQuery and Google Tag Manager for analytics. Hosting is provided by Dinahosting SL, a Spanish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized transfers or deletions. However, it lacks advanced security headers and DNSSEC is not enabled. The site includes a GDPR-compliant cookie consent mechanism and privacy policy but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and functional features. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

The website simonsignal.com is currently inaccessible, returning only a minimal JSON message indicating a missing authentication token. This suggests the site is either an API endpoint requiring authentication or is protected by a security mechanism blocking public access. Due to the lack of accessible content, no metadata, contact information, or business details are available for analysis. The domain is registered with Amazon Registrar, Inc. since 2017 and is active without privacy protection, indicating a legitimate registration but no public-facing business information. The technical infrastructure appears minimal with no detectable CMS, frameworks, or external links. Security posture cannot be fully assessed due to lack of content and headers, but the absence of visible HTTPS or security headers is a concern. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to blocked content and missing information.

A

Allianz ELIANT

eliant.eu

0

Allianz ELIANT is a European non-profit alliance focused on promoting and preserving anthroposophical cultural initiatives across the EU. Founded in 2006 and active as an NGO in Brussels since 2012, it advocates for cultural diversity, education, and integrative medicine. The website is built on WordPress with modern plugins and multilingual support, providing rich content and event information. Security posture is good with HTTPS and cookie consent, but lacks published privacy and security policies. Social media presence is strong, supporting community engagement.

S

SOL REPUBLIC

solrepublic.com

0

SOL REPUBLIC is a consumer audio brand presenting itself as 'Soldiers of Sound' with a focus on retailing audio products and providing customer support. The website offers basic contact information including a physical address in Commerce Township, MI, a phone number, and an email contact form. The site is modest in content and design, primarily serving as a support and brand presence portal. Technically, the website uses jQuery 3.6.0, Google Analytics for tracking, and a third-party form plugin (Halfdata Green Forms). The site is mobile responsive and uses HTTPS, but lacks advanced security headers and comprehensive privacy or cookie policies. SEO and accessibility features are basic, and performance is moderate. From a security perspective, the site shows no immediate vulnerabilities but lacks important security best practices such as security headers and explicit privacy compliance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. No evidence of WAF or blocking mechanisms was found, indicating full accessibility. Overall, the website is functional for its purpose but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and professionalism.

H

HMDX Audio

hmdxaudio.com

0

HMDX Audio operates a website primarily focused on providing customer support and contact information for its audio products. The site presents a straightforward business model centered on consumer support with a physical address and phone contact details located in Commerce Township, Michigan, USA. The website's market position appears to be that of a consumer audio product support provider, targeting customers seeking assistance with HMDX audio products. Technically, the website uses a basic but functional technology stack including jQuery 3.6.0, Google Analytics for tracking, and a third-party form plugin for contact forms. The site is mobile optimized and includes standard meta tags but lacks advanced SEO and accessibility features. Performance is moderate, with no major technical issues detected. From a security perspective, the website uses HTTPS as indicated by canonical URLs but lacks visible security headers such as Content-Security-Policy or HSTS. No privacy or cookie policies are present, which impacts compliance with data protection regulations. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is functional and provides essential contact information but lacks comprehensive privacy, security, and compliance features. Strategic improvements in security headers, privacy disclosures, and WHOIS transparency are recommended to enhance trust and compliance.

J

JAM Audio

jamaudio.com

0

JAM Audio operates as an established e-commerce retailer specializing in consumer audio products such as Bluetooth speakers, wireless headphones, earbuds, and turntables. The company targets general consumers seeking affordable and quality audio devices. The website serves as the official brand store, reflecting a consistent and professional brand presence with clear product offerings and social media integration. The domain age and WHOIS data support the legitimacy and long-standing market presence of the brand. Technically, the website leverages modern web technologies including Bootstrap 5, Jekyll CMS, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate rather than fast. Hosting is inferred to be via GoDaddy, consistent with the registrar information. From a security perspective, the site uses HTTPS with proper domain status locks but lacks DNSSEC and explicit security headers. No security policy or incident response contacts are published, which limits transparency in security governance. Tracking and advertising scripts are present, with moderate user tracking levels and basic privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, JAM Audio's website is a credible, professionally maintained retail platform with good business credibility and technical implementation. Security posture is adequate but could be improved by enabling DNSSEC, publishing security policies, and enhancing security headers. Privacy compliance is basic but present. The site is safe for general audiences with no adult or questionable content.

The website ww1.amfirst.com is effectively inaccessible or blocked, presenting minimal content consisting primarily of an invisible tracking pixel and an embedded iframe sourced from an unrelated external domain. The WHOIS query for this subdomain returned no registration data, indicating that ww1.amfirst.com is either unregistered or inactive. There is no identifiable business information, contact details, or privacy policies available on the site. Technically, the site lacks modern web standards, security headers, and proper SSL configuration, and it appears to serve primarily as a tracking or redirect mechanism rather than a functional business website. The security posture is weak due to the absence of standard protections and the presence of external tracking elements. Overall, the site presents a high risk and low trustworthiness profile, with critical gaps in compliance and transparency.

KOLOC oil, operated by PROTEGO s.r.o., is a regional fuel station operator in the Czech Republic offering a variety of quality fuels including unleaded gasoline and diesel variants, along with premium fuel options. The company also provides convenience store goods, refreshments, parking, and accepts multiple payment cards, positioning itself as a comprehensive service provider for motorists. The website reflects a medium-sized business with consistent branding and a clear focus on customer service. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and likely Bootstrap and jQuery for UI components. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site employs a Content-Security-Policy header but weakens it by allowing unsafe inline scripts and eval, which could be improved. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site scores well in business credibility and content quality but has room for improvement in privacy compliance and security hardening.

R

Realitní kancelář Pubec

pubec.cz

0

Realitní kancelář Pubec is a Czech real estate agency specializing in property sales and rentals primarily in Plzeň and its surrounding region. Established since 1990, the company offers a comprehensive portfolio including residential and commercial properties, legal services, market valuations, auctions, and mortgage assistance. The website reflects a professional and customer-focused business with strong trust indicators such as high ratings on Google and Firmy.cz, and numerous positive client testimonials. Technically, the website employs modern web technologies and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. However, the absence of WHOIS registration data and explicit privacy and cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks visible security headers and detailed security policies. Overall, the website presents a credible and professional real estate business with room to enhance privacy compliance and security best practices.

W

Wolf Waagen GmbH & Co. KG

wolf-waagen.de

0

Wolf Waagen GmbH & Co. KG operates a specialized website focused on manufacturing and selling precise beehive scales, related software, and accessories to support modern beekeeping practices. The company targets beekeepers and agricultural professionals seeking digital monitoring solutions for their bee colonies. The website demonstrates a niche market position with a clear business model centered on hardware and software integration for beekeeping. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Slider Revolution, Yoast SEO, and WPML for multilingual support. Hosting is provided by 1&1 IONOS as inferred from the nameservers. The site shows good mobile optimization, moderate performance, and solid SEO practices, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and a cookie consent mechanism compliant with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted but not uncommon for small businesses. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively supports the company's business goals and provides a positive user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

The website awsstatreporter.com is registered since 2017 and hosted on Amazon AWS infrastructure as inferred from its DNS nameservers. However, the website content is completely empty with no metadata, no visible content, no forms, no contact information, and no security or privacy policies published. This indicates a minimal or placeholder site with no active business presence or customer engagement. The lack of HTTPS information and security headers further reduces the trustworthiness and security posture of the site. Overall, the site appears to be inactive or under development with no meaningful digital maturity or business presence.

Ciberpyme Barcelona S.L. is a small technology company based in Spain, specializing in internet solutions including web design, digital marketing, SEO, hosting, and e-commerce services. With over 25 years in IT and 15 years focused on internet solutions, they serve a diverse clientele from small businesses to public entities primarily in the Barcelona region. The website is built on WordPress with Elementor, reflecting a moderate level of digital maturity and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and formal privacy documentation. Overall, the business appears legitimate and well-established with a professional online presence but should improve privacy compliance and security best practices.

3

3Cat

3cat.cat

0

3Cat is a digital media platform focused on delivering quality Catalan language content including exclusive digital premieres, original programs, and live streams from TV3, Catalunya Ràdio, and SX3. It serves a regional audience with a strong cultural focus and operates under the umbrella of CCMA, a known Catalan media corporation. The platform uses a modern technology stack including React (Next.js), Bitmovin Player, and various analytics and advertising tools. Security posture is strong with HTTPS and security headers properly configured, and a consent management platform is implemented to comply with cookie regulations. However, the absence of publicly available WHOIS data and lack of explicit privacy policy or contact information pages reduce trust from a compliance and transparency perspective. Overall, the site is professional, well-branded, and technically sound but could improve privacy disclosures and domain registration transparency.

The website pistolo1.com/de/ appears to be a newly created site with minimal content and limited business information. The domain was registered in January 2025, consistent with the website's build date in October 2025. The site uses Cloudflare DNS and Google Fonts but lacks common business trust indicators such as privacy policies, contact information, or social media presence. The technical infrastructure is basic with no detected CMS or frameworks. Security posture is limited, with no security headers or advanced configurations detected, and no GDPR compliance indicators present. Overall, the site appears to be in an early development or placeholder stage, with low business credibility and limited content quality.

The website tikitaka9.com/de/ is a newly registered domain (October 2024) with minimal content primarily consisting of font and style definitions. The site lacks any visible business description, contact information, or legal policies such as privacy or cookie policies. The technical infrastructure shows use of Cloudflare DNS and Google Fonts, but no CMS or advanced frameworks are detected. Security posture is weak due to absence of HTTPS, security headers, and privacy compliance indicators. Overall, the site appears to be in early development or a placeholder with low trustworthiness and limited business credibility.

The website digitalconcept.de currently serves only a Contao CMS default error page indicating that no root page is configured for the domain or language requested. There is no substantive business content, marketing information, or service descriptions available. The site appears to be under development or misconfigured. The technical infrastructure is minimal, with the site running on Contao Open Source CMS and hosted via DomainControl nameservers. No advanced technologies, analytics, or security features are detected. Security posture is weak due to lack of HTTPS, security headers, and privacy compliance. The site does not provide privacy or cookie policies, nor does it offer contact information beyond a single webmaster email in the error message. Overall, the site is not currently functional as a business website and presents low trust and credibility.

A

ACHAVA Festspiele Thüringen

achava-festspiele.de

0

ACHAVA Festspiele Thüringen is a regional cultural festival organizing concerts and dialogues primarily in the German state of Thuringia. The website presents event highlights for 2025 and showcases awards such as the Margot-Friedländer-Preis 2025, indicating recognition in the cultural sector. The organization operates as a non-profit entity focused on media and cultural events, targeting a general audience interested in arts and culture. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Flickity for carousels and the Facebook SDK for social media integration. Hosting is provided by a known German hosting provider (kasserver.com). The site is moderately optimized for mobile devices and has basic SEO and accessibility features. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is not directly visible on the main page, which may impact user trust and support accessibility. Overall, the website is functional, professionally designed, and trustworthy for its cultural event purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

A

amo/Debus Group

amo-debus.de

0

The amo/Debus Group is a well-established family-owned company founded in 1946, specializing in the supply and logistics of building materials such as asphalt, natural stone, slate, and recycling services. Operating primarily in Northern Bavaria, Thuringia, and Saxony, the company maintains over 20 locations, positioning itself as a significant regional player in the construction materials sector. The website reflects a professional and consistent brand image, targeting construction industry professionals and regional customers. Technically, the site is built on the TYPO3 CMS platform, incorporating modern web technologies and consent management tools to comply with GDPR requirements. Security posture is moderate, with HTTPS implied and consent mechanisms in place, though explicit security headers and incident response policies are absent. Overall, the site is accessible, well-structured, and trustworthy, with clear contact information and compliance with privacy regulations.

F

Fagskolen Vestfold og Telemark

fagskolen-vestfoldogtelemark.no

0

Fagskolen Vestfold og Telemark is a vocational higher education institution in Norway, founded in 2024 and operated under Telemark fylkeskommune. The website presents a professional and comprehensive digital presence, offering various study programs, industry-specific courses, and student support services. The institution targets students and professionals seeking flexible and practical education aligned with labor market needs. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Analytics and Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy educational organization.

M

Minel Teledata Øst Lillehammer AS

teledataost.no

0

Minel Teledata Øst Lillehammer AS is a small regional business based in Norway specializing in providing technical solutions for enterprises, including security and camera surveillance, fiber and cabling solutions, meeting room and videoconferencing setups, and telecom and IT services. The company operates under the parent company Minel and targets business customers requiring telecom and IT infrastructure support. The website reflects a professional and consistent brand presence with clear contact information and service offerings. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tracking tools such as HubSpot and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and business information appear legitimate. Overall, the site presents a trustworthy and professional business presence with room for improvement in security and privacy practices.

The website at savethewaves.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or user engagement features. The domain is long-established, registered since 2001 with a reputable registrar, indicating a legitimate entity behind the domain. However, the lack of accessible content, absence of privacy or cookie policies, and no visible contact or security information significantly limit the ability to assess the organization's digital maturity or security posture. The technical infrastructure appears minimal with only Google Fonts and SVG graphics loaded, hosted on SiteGround. Security posture cannot be fully evaluated due to lack of data, but no DNSSEC is enabled and no security headers are detected. Overall, the site is currently non-functional for external users, representing a critical issue for trust and usability.

O

Otto Bohuš

ottobohus.cz

0

Otto Bohuš is a Czech-based personal brand specializing in copywriting services, educational courses, audiobooks, and blog content aimed at helping businesses and individuals improve their text marketing and sales through compelling writing. The website is built on Drupal 7, hosted on Websupport infrastructure, and incorporates modern web technologies such as jQuery and SVG icons. It features a professional design with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy or cookie policies. Tracking is implemented via Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate, well-maintained, and targets a niche market with a small business scale.

C

Click2Claim s.r.o.

click2claim.eu

0

Click2Claim s.r.o. is a Czech-based company specializing in assisting air passengers with claims for compensation related to flight delays, cancellations, missed connections, and denied boarding. The company offers an online platform for submitting claims and managing the compensation process, targeting primarily Czech and European Union customers. Their market position is that of a niche service provider in the air passenger rights sector, supported by partnerships with various insurance and financial institutions. Technically, the website employs a traditional web stack with jQuery and jQuery UI, integrated with multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Smartlook, and Clixtell. Cookie consent is managed via CookieYes, ensuring GDPR compliance. The site is mobile-optimized and provides a secure login area for clients. However, some technologies like jQuery are outdated and could benefit from modernization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible HTTP security headers and explicit security policies or incident response contacts. No critical vulnerabilities were detected in the HTML content. The absence of WHOIS registrant data is due to EURid privacy policies, but the website content and partner ecosystem support legitimacy. Overall, the website presents a professional and trustworthy front for a small service company in the transportation sector, with good privacy compliance and a moderate to good security posture. Recommendations include updating libraries, enhancing security headers, and publishing explicit security policies to improve trust and compliance.

R

Red Peppers

red-peppers.cz

0

Red Peppers is a Czech Republic based creative agency specializing in branding, web design, mobile applications, virtual reality, and 3D graphics. The company targets businesses seeking innovative digital and print media solutions. Their website showcases a professional design with rich multimedia content including video showreels and client references, indicating a mature digital presence. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap framework, and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, but the website content and design suggest a legitimate business. Strategic improvements in privacy policy transparency, security headers, and contact information would enhance trust and compliance.

S

STIEFEL EUROCART s.r.o.

stiefel.sk

0

STIEFEL EUROCART s.r.o. is a Slovak company specializing in providing comprehensive educational solutions and didactic aids for kindergartens, primary, and secondary schools. Their offerings include digital interactive tools, educational materials, and workshops, targeting educational institutions and parents. The website reflects a niche market position focused on supporting modern teaching methods through digital technologies. Technically, the website employs common web technologies such as jQuery, Facebook SDK, and Google Tag Manager, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and published privacy or incident response policies, suggesting room for improvement in security posture. Overall, the website is professional and functional with clear contact information, but enhancing privacy compliance and security best practices would strengthen trust and compliance.

Mateřská škola Borohrádek operates as a local preschool educational institution in the Czech Republic, providing early childhood education services with a focus on a natural environment. The website serves primarily parents and guardians seeking information about the school, its classes, events, and admission procedures. The business model is community-focused education with a small organizational size and a founding date around 2010. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, likely managed via the WebConfig CMS platform. The site is moderately optimized for mobile devices and offers a clear navigation structure. However, performance and accessibility are basic, and there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS (inferred but not explicitly confirmed), includes cookie consent mechanisms, and employs common tracking tools such as Google Analytics and Facebook Pixel. There is a lack of advanced security headers and no visible incident response or security policy pages. WHOIS data is missing, which reduces domain trustworthiness, though the website content and structure suggest a legitimate educational entity. Overall, the website is functional and provides relevant content for its audience but would benefit from enhanced security practices, improved transparency in contact information, and better technical optimization to strengthen trust and compliance.

Truhlářství Roman Vodehnal is a small Czech woodworking business specializing in custom furniture manufacturing, including kitchens, interior doors, built-in wardrobes, and bedrooms. Established in 1992, the company serves customers primarily in Eastern Bohemia, near cities such as Pardubice and Hradec Králové. The website presents a professional image with clear service descriptions and regional focus but lacks detailed contact information and formal privacy or security policies. Technically, the site uses standard web technologies including Google Analytics and Google Fonts, but does not demonstrate advanced security configurations or compliance features. The absence of WHOIS data reduces domain trustworthiness, although the business appears legitimate based on content and longevity claims.

ZŠ TGM Borohrádek is a Czech elementary school providing educational services to the local community. The website offers detailed information about school schedules, staff, cafeteria, after-school programs, and various projects. The site targets students, parents, and school staff, serving as an informational portal for the school community. The business model is that of a public educational institution with a local market position. Technically, the website is built on a CMS platform identified as RWBC, using standard HTML, CSS, and JavaScript. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced frameworks or hosting provider details were detected. The website design is professional and consistent with the school's branding. From a security perspective, the site lacks visible security headers and advanced security practices. HTTPS presence and SSL configuration could not be confirmed from the provided data. Privacy and cookie policies are present, indicating some compliance with GDPR, but no cookie consent mechanism is implemented. No contact emails or phone numbers were found, limiting direct communication channels. No WHOIS data was available, which reduces the ability to fully verify domain legitimacy. Overall, the website is functional and serves its educational purpose well but would benefit from improved security measures, enhanced privacy compliance, and clearer contact information to strengthen trust and compliance posture.

FajnCom s.r.o. is a small Czech telecommunications company specializing in internet and television services, targeting residential and small business customers primarily in Prague. The website promotes key offerings such as free installation and promotional discounts, positioning the company as a local service provider with a membership in the Tlapnet group, indicating some business network affiliation. The digital presence is functional with a professional design but lacks advanced interactive features such as forms or user accounts. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and Font Awesome. However, some external resources are loaded over HTTP, posing mixed content risks. The site lacks visible security headers and there is no evidence of HTTPS enforcement in the provided data, which are critical for securing user interactions and building trust. Mobile optimization and accessibility are basic but functional. From a security perspective, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or security contact information is provided, and no vulnerability disclosure or security certifications are evident. The WHOIS data is consistent and supports the legitimacy of the domain and business, with a domain age of over 15 years. Overall, the security posture is moderate but requires improvements to meet modern standards. The overall risk is moderate with no critical vulnerabilities detected in the visible content, but the lack of HTTPS and privacy compliance are significant issues. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, securing external resources, and enhancing security headers to improve trust and compliance.

Č

Čermná nad Orlicí

cermna-n-orl.cz

0

The website www.cermna-n-orl.cz serves as the official online presence for the municipality of Čermná nad Orlicí in the Czech Republic. It provides residents and visitors with information about local government, community events, public announcements, and municipal projects. The site is designed to support the local population with relevant news and administrative resources, reflecting a small government entity focused on community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with additional integration of a Smart App Banner to promote a mobile application. The CMS appears to be WebConfig, a platform commonly used for municipal websites in the region. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content relevance. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy. No forms or direct contact information are present on the site, limiting user interaction and support channels. Overall, the website is functional and serves its purpose as a municipal information portal but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

I

Irving Shipbuilding Inc.

shipsforcanada.ca

0

Irving Shipbuilding Inc. operates the Halifax Shipyard as a key partner in Canada's National Shipbuilding Strategy, focusing on constructing naval combatant ships for the Royal Canadian Navy. The company has invested heavily in modernizing its facilities and emphasizes Canadian economic impact, supplier engagement, and career opportunities. The website reflects a professional and consistent brand image targeting government stakeholders, suppliers, and potential employees. Technically, the site uses modern web technologies including JavaScript frameworks, social media integrations, and video content, hosted under a reputable registrar with HTTPS enabled. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

Bubufabrics.pl is an e-commerce website specializing in the sale of fabrics, haberdashery, and materials sold by the meter, primarily targeting the Polish market. The website presents a professional and consistent brand image with a good quality design and user experience. The business model is retail-focused, catering to general consumers interested in textile products. The site uses modern web technologies including Bootstrap 4 and integrates marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and SalesManago to support its digital marketing efforts. From a technical perspective, the website is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data. However, there is a lack of visible security headers and no explicit SSL configuration details available, which suggests room for improvement in security hardening. Privacy compliance is basic, with a cookie consent mechanism implemented but no visible privacy policy or terms of service pages, which could impact user trust and regulatory compliance. Security posture is moderate but limited by the absence of WHOIS data, which raises concerns about domain registration legitimacy and transparency. No contact information or incident response channels are clearly provided, which could hinder trust and responsiveness in case of security incidents. Overall, the website is functional and professional but would benefit from enhanced security measures, clearer privacy documentation, and verified domain registration information to improve credibility and compliance.

Bubufabrics.si is an e-commerce platform specializing in the retail of fabrics, haberdashery, and meter goods primarily targeting the Slovenian market. The website presents a professional and user-friendly interface built on Bootstrap 4, with moderate mobile optimization and SEO practices. The business appears to be a small-sized retail operation with a network of related regional partner sites across Central Europe. Technically, the site integrates multiple marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and SalesManago, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service pages, as well as missing security headers, suggests room for improvement in compliance and security posture. The WHOIS data shows inconsistencies, including a future domain creation date and a registrant country mismatch, which lowers the trust score but does not necessarily indicate malicious intent. Overall, the site is functional and safe for general audiences but would benefit from enhanced security and privacy transparency.

Bubufabrics.hr is an online retail platform specializing in fabrics, haberdashery, and fabric sold by the meter, targeting primarily the Croatian market. The website is part of a broader network of regional sites under the Bubufabrics brand, serving multiple European countries with localized versions. The business model is e-commerce focused, catering to consumers and small businesses interested in textile products. The site presents a professional design using Bootstrap 4 and integrates common marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and SalesManago, indicating a moderate level of digital maturity. From a technical perspective, the website employs modern frontend frameworks and asynchronous loading of scripts to optimize performance. Hosting is provided by websupport.sk, with DNS and name servers consistent with the registrar Gransy d.o.o. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Security evaluation reveals no immediate vulnerabilities or malware indicators, but the absence of privacy and terms of service pages, as well as missing security headers, represent compliance and security gaps. WHOIS data shows inconsistencies, notably a domain creation date set in the future and a registrant country differing from the website's target country, which may warrant further verification. Overall, the website is safe for general audiences and does not contain adult or questionable content. Strategically, the site would benefit from publishing comprehensive privacy and security policies, enhancing security headers, and clarifying WHOIS information to improve trustworthiness and compliance. These improvements will strengthen the site's security posture and business credibility in the competitive e-commerce textile market.

Bubufabrics is an Italian-based e-commerce retailer specializing in fabrics, haberdashery, and fabric sold by the meter. The website targets general consumers interested in textile products and operates multiple localized sites across Europe, indicating a niche but geographically diverse market presence. Technically, the site uses Bootstrap 4 for responsive design and integrates marketing and analytics tools such as Google Tag Manager, SalesManago, and Facebook Pixel, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of explicit privacy and cookie policies suggests room for compliance improvement. Overall, the site is functional and professional but would benefit from enhanced transparency and contact information to improve trust and regulatory compliance.

Bubufabrics.ro is an e-commerce website specializing in the sale of fabrics and haberdashery products targeted primarily at the Romanian market. The site offers an online shopping experience for customers interested in sewing and crafting materials. The business appears to be a small-scale online retailer with a focus on textile products. Technically, the website is built using Bootstrap 4 and integrates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and SalesManago, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies suggests gaps in compliance with data protection regulations such as GDPR. Security posture is moderate with no detected WAF or blocking mechanisms, but the lack of security headers and unknown SSL configuration indicate room for improvement. Overall, the website is functional and professionally designed but would benefit from enhanced security and privacy practices to improve trust and compliance.

The website www.bubufabrics.com operates as an e-commerce platform specializing in the sale of fabrics and haberdashery products. It targets a general audience interested in textile and sewing supplies. The site presents a professional design using Bootstrap 4 and integrates common marketing and analytics tools such as Google Tag Manager, SalesManago, and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. No privacy, cookie, or terms of service policies were detected, which impacts compliance and trustworthiness. Security posture is weak due to lack of security headers and unclear SSL configuration. Overall, the site is functional and safe for general users but lacks critical trust and security indicators.

The website www.bubulakovo.cz is an e-commerce platform specializing in the sale of fabrics and haberdashery products, targeting primarily the Czech Republic market. The site presents a professional design using Bootstrap 4 and integrates multiple marketing and analytics tools such as Google Analytics and SalesManago. However, the absence of publicly available WHOIS data limits the ability to fully verify the domain's registration legitimacy and ownership details. The website lacks visible privacy and cookie policies, which impacts its privacy compliance posture. Security headers are not detected, and SSL configuration details are unknown, indicating potential areas for security improvement. Overall, the site appears functional and well-structured but would benefit from enhanced transparency and security practices.

B

Bubustoffe

bubustoffe.de

0

Bubustoffe.de is a small retail business specializing in fabrics, ribbons, and haberdashery products, targeting primarily German-speaking customers. The website presents a colorful and well-structured e-commerce platform with good design quality and mobile optimization. The technical infrastructure leverages modern frameworks such as Bootstrap 4 and integrates multiple marketing and analytics tools including Google Analytics, Hotjar, and SalesManago, indicating a mature digital marketing approach. Security posture is adequate with HTTPS enabled and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The absence of a privacy policy and terms of service reduces compliance maturity. WHOIS data is minimal and domain status is unusual, which slightly impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy and security transparency.

B

Ein Geschäft voller Liebe zum nähen | Bubustoffe.at

bubustoffe.at

0

Bubustoffe.at is a small retail business specializing in colorful fabrics, ribbons, haberdashery, and sewing supplies, targeting general consumers interested in crafting and sewing. The website presents a professional and consistent brand image with good design quality and mobile optimization. The technical infrastructure includes modern frontend frameworks such as Bootstrap 4 and integrates multiple marketing and analytics tools including Google Analytics, SalesManago, and Facebook Pixel. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in security best practices. Overall, the website is functional and relevant for its retail purpose but would benefit from enhanced privacy compliance and security measures.

B

Commerce de tissus, mercerie en ligne | Bubutissus.fr

bubutissus.fr

0

Bubutissus.fr is an e-commerce website specializing in the retail of fabrics, ribbons, and haberdashery supplies, targeting primarily the French market. The site presents a colorful and well-structured online store experience, catering to customers interested in textile crafts and related products. The business appears to be a small retail entity with regional sister sites in various European countries, indicating a localized but multi-national retail group. Technically, the website employs modern front-end frameworks such as Bootstrap 4 and integrates multiple marketing and analytics tools including Google Tag Manager, SalesManago, and Facebook Pixel, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and has implemented cookie consent mechanisms, but lacks several recommended security headers and explicit privacy or terms of service pages, which are important for compliance and trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical setup do not raise immediate red flags. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

The website at inmateria.net is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this, no business description, contact information, or policy documents are available for analysis. The domain is registered since 2006 with Tucows Domains Inc. and uses SiteGround nameservers, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. Security posture cannot be fully evaluated due to the absence of accessible content and security headers. Overall, the site appears to be blocked or restricted, resulting in a very low AI score and limited insights.