High-risk security reports

V

Verschenkmarkt Gelsenkirchen

verschenkmarkt-gelsenkirchen.de

43

Verschenkmarkt Gelsenkirchen operates a regional non-profit online marketplace focused on facilitating the free exchange of goods to reduce waste and promote sustainability within the Gelsenkirchen area and surrounding regions. The platform offers users the ability to publish, edit, and delete listings without requiring registration or displaying advertisements, emphasizing community engagement and environmental responsibility. The website is built on the Osclass CMS platform with a technology stack including jQuery, Bootstrap, and FineUploader, providing a functional and moderately performant user experience with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced protection and regulatory compliance. The absence of explicit contact emails or phone numbers limits direct communication channels, relying solely on a contact form. No vulnerability disclosure or security policy pages are present, indicating room for improvement in transparency and incident response readiness. Overall, the website presents a trustworthy and professional image consistent with its non-profit mission, supported by clear navigation, relevant content, and GDPR-compliant privacy and terms pages. The lack of advertising and tracking scripts further strengthens its privacy posture. Strategic enhancements in security headers, cookie consent, and contact information would elevate its compliance and security maturity.

Kufer Software GmbH is a well-established German company specializing in intelligent software solutions for seminar and course management in adult education. With over 30 years of experience and a customer base exceeding 1,900 clients, the company offers products such as KuferSQL, KuferWEB, and KuferTools. Their business model focuses on software development, sales, and comprehensive customer support including training and updates. The website reflects a professional and consistent brand image targeting educational institutions and seminar organizers. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery. It integrates Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management. Hosting is provided by kasserver.com, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms. Remote support is facilitated via trusted third-party tools TeamViewer and pcvisit. However, explicit HTTP security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain WHOIS data aligns with the business claims, supporting legitimacy. The site poses low risk, but could enhance security posture by adding security headers and publishing security policies.

Demokratie leben is a local government-backed initiative based in Herten, Germany, focused on promoting democracy, diversity, and preventing extremism through community projects and funding. The website serves as an information hub and application portal for project funding under the federal program 'Demokratie leben!'. The target audience includes local citizens, civil society actors, and project applicants. The business model is non-profit and government-supported, emphasizing community engagement and democratic participation. Technically, the website uses standard web technologies including JavaScript, jQuery, and Font Awesome, hosted on INWX nameservers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The CMS is not explicitly identified but appears custom or proprietary. The website is secured with HTTPS and includes a cookie consent mechanism, though lacks advanced security headers and published security policies. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site does not use analytics or advertising scripts, minimizing privacy risks. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports its mission to promote democracy locally. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving mobile optimization and SEO for broader reach.

V

VHS – Deutscher Volkshochschul-Verband Herten

abschlussmachen.de

47

The website 'abschlussmachen.de' is an educational platform operated by the VHS – Deutscher Volkshochschul-Verband Herten, targeting individuals seeking to complete their school leaving certificates in several German cities. It offers information, consultation, and contact options including phone and WhatsApp, positioning itself as a regional adult education provider. The site is well-branded, consistent, and provides relevant content tailored to its audience. Technically, the site is built using RapidWeaver with UIkit framework, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting is likely provided by 1&1 IONOS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and a GDPR-compliant cookie consent mechanism (Usercentrics). However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the site presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include adding security headers, a terms of service page, and a vulnerability disclosure policy to enhance trust and security posture.

T

Ticketware SE

ticketware.sk

45

Ticketware SE operates a specialized ticket sales software platform targeting cinemas, cultural centers, theatres, museums, and castles primarily in Slovakia and the Czech Republic. The company offers a comprehensive SaaS solution including online ticket sales, seat reservation, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a mature business with a clear market position and a focus on cultural institutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA for security and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the website is trustworthy and professional but could improve transparency and security practices.

G

Galéria Dobrá hračka

dobrahracka.sk

43

Galéria Dobrá hračka is a Slovak interactive children's gallery offering a variety of educational and entertaining attractions where children can role-play professions such as police officer, firefighter, archaeologist, and more. The business targets families and children, providing both on-site experiences and an online booking system, complemented by an e-shop for related products. The website is built on WordPress with modern plugins like Elementor and Slider Revolution, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and standard security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Spoločnosť TAKATA s.r.o.

poliankovo.sk

43

Poliankovo is a small hospitality and digital art business located in the High Tatras, Slovakia, operated by Spoločnosť TAKATA s.r.o. The company offers a unique combination of a digital gallery featuring modern technologies such as virtual reality and augmented reality, alongside a cafe serving Italian coffee and a gallery shop with souvenirs. The website is built on WordPress with Elementor and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy and security policies. No contact emails or phone numbers are provided, only a physical address in the footer. Overall, the website is professional and trustworthy, with room for improvement in privacy compliance and security headers.

S

Stadtmarketing Herne

cranger-kirmes.de

45

Cranger Kirmes is a major annual folk festival in North Rhine-Westphalia, Germany, organized by Stadtmarketing Herne. It is the largest family funfair in Germany, attracting millions of visitors with around 50 rides and various entertainment options. The website serves as an information portal for visitors, providing event details, schedules, ticketing options, and contact information. The site is well-branded, professionally designed, and targets families and general visitors interested in the event. Technically, the website is built on WordPress with WPBakery Page Builder and uses modern web technologies including lazy loading images and asynchronous scripts. It integrates analytics via Pirsch and manages advertisements with AdRotate. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Hosting details are not explicit, but the domain uses stable DNS providers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While no explicit security policies or incident response contacts are published, no vulnerabilities or exposed sensitive data were detected. Security headers could be enhanced for better protection. Overall, the site maintains a good security posture suitable for its business model. The domain WHOIS data aligns well with the website content, showing consistent registration and no privacy protection, which is appropriate for a public event. The site maintains transparency with clear contact details and social media presence, enhancing trustworthiness. No critical issues or blocking mechanisms were detected, allowing full content access and analysis.

S

Stadt Herne

inherne.net

46

inHerne.net is an established local online city magazine serving the community of Herne, Germany. It provides news, cultural content, and event information relevant to residents and visitors. The website is professionally designed using WordPress with a modern theme and plugins, offering a good user experience and mobile optimization. The content is well-structured, relevant, and trustworthy, supported by official city affiliation and contact information. Technically, the site uses standard web technologies and is hosted under a reputable registrar with a domain age consistent with its business history. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is reliable and serves its purpose effectively.

M

mediaprint infoverlag gmbh

total-lokal.de

46

mediaprint infoverlag gmbh operates the website total-lokal.de, providing regional and local informational brochures, news, and job listings across Germany. With over 50 years of experience, the company serves municipalities and local businesses by publishing both digital and print content focused on topics such as education, building, seniors, and local economy. The website is well-branded and targets residents and businesses seeking localized information. Technically, the site uses common JavaScript libraries and galleries, is mobile-optimized, and implements HTTPS with a DigiCert certificate, ensuring secure user interactions. Privacy compliance is addressed with a comprehensive privacy policy and a cookie consent mechanism. However, direct contact emails and phone numbers are not prominently displayed, relying mainly on contact forms. Security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and serves a niche media publishing market in Germany.

D

Das Abfallbündnis im Kreis Wesel

frag-mike.info

45

Frag Mike is a German local government initiative under the name 'Das Abfallbündnis im Kreis Wesel' focused on waste management, recycling, and environmental protection. The website serves as an educational and community engagement platform promoting proper waste disposal and recycling practices in the Kreis Wesel region. The business model is non-profit and government-oriented, targeting residents and workers in the local area. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website is built on WordPress CMS with common plugins such as Contact Form 7 for user interaction, Rank Math for SEO, and Matomo for privacy-conscious analytics. The site is hosted under a registrar consistent with the domain's German origin and uses HTTPS with good SSL configuration. Mobile optimization and accessibility are well addressed, though DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized changes, and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The privacy compliance is good, with clear privacy and cookie policies. Overall, Frag Mike presents a trustworthy, professional, and secure web presence for a local government environmental campaign. Strategic improvements could include adding security headers, publishing incident response and security policies, and enabling DNSSEC to enhance DNS security.

The Regenagentur Duisburg is a municipal service established in 2022 by the Wirtschaftsbetriebe Duisburg to provide citizens with information and support regarding sustainable rainwater management. The agency focuses on promoting natural rainwater handling, offering advisory services, and managing a related funding program. The website serves as an informational and contact platform for residents of Duisburg, Germany, with clear communication channels and official branding. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and uses modern front-end libraries such as AOS and Slick Slider. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. Hosting is managed via DomainControl nameservers, indicating a standard registrar setup. From a security perspective, the site enforces HTTPS and uses secure cookies for analytics. However, it lacks several recommended security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy linked externally, but no cookie consent mechanism is present. Overall, the website is trustworthy and professionally maintained, suitable for its public service role. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance.

D

Duisburg Live

duisburglive.de

43

Duisburg Live is an official event calendar platform for the city of Duisburg, Germany, providing comprehensive listings of cultural, sports, and community events. The website is well-branded and professionally designed, targeting residents and visitors interested in local activities. It operates on TYPO3 CMS with modern frontend technologies and integrates Matomo for analytics. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy and cookie policy present but no active cookie consent mechanism. Overall, the platform is trustworthy and serves as a key community resource.

E

EVENT FORUM Castrop-Rauxel

eventforum-castrop.de

49

EVENT FORUM Castrop-Rauxel operates as a regional event venue and organizer in the Ruhrgebiet area of Germany, offering multiple event locations including Stadthalle and Europahalle. The company provides comprehensive event planning support, ticket sales, and hospitality services, targeting event organizers and attendees in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on event hosting and services. Technically, the website is built on WordPress using Elementor and integrates popular event management plugins such as The Events Calendar and Events Calendar Pro. It employs modern web technologies including Google Tag Manager and hCaptcha for security on forms. Hosting is provided by Alfahosting, a reputable German hosting provider. The site is mobile optimized and SEO friendly with structured data for events. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP and X-Frame-Options are not evident, and no published security or incident response policies exist. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

The website at it-castrop-rauxel.de is currently minimalistic, consisting solely of a blank page with a centered base64-encoded image and no textual or metadata content. There are no privacy policies, cookie notices, terms of service, or contact information available, which significantly limits the ability to assess the business or security posture. The domain is hosted on servers associated with kasserver.com, but no registrant or organizational data is provided to verify legitimacy or business claims. Technically, the site lacks HTTPS and security headers, which are critical for secure web presence. Overall, the site appears to be either under construction or abandoned, with very low digital maturity and security readiness.

K

Kulturforum Witten

kulturforum-witten.de

42

Kulturforum Witten is a public cultural institution operating multiple cultural facilities and event venues in the city of Witten, Germany. It serves as a central hub for cultural activities including museums, libraries, music schools, and archives, supported by approximately 100 employees. The website reflects a well-established organization with a strong community and cultural focus, offering diverse programs and events. Technically, the site uses modern web technologies including Bootstrap, UIkit, and Matomo analytics, with good mobile optimization and accessibility features. Security practices include HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. The domain WHOIS data is minimal but consistent with a legitimate public institution. Overall, the website is professional, trustworthy, and well-maintained.

K

Kubus Software GmbH

vhs-wwh.de

42

The website www.vhs-wwh.de represents a regional adult education provider serving the Witten, Wetter, and Herdecke areas in Germany. It offers a broad portfolio of courses including languages, health, arts, and professional development, targeting lifelong learners and adults seeking continuing education. The business operates under the Kubus Software GmbH platform, leveraging TYPO3 CMS for content management and Matomo for privacy-conscious analytics. The site is well-structured with clear navigation and professional design, supporting a positive user experience. Contact information and legal pages such as privacy policy and terms of service are present, enhancing business credibility. Technically, the website uses a modern CMS and includes responsive design elements, with moderate performance and good SEO practices. Hosting is provided by kasserver.com, and the site is secured with HTTPS. However, there is no visible cookie consent mechanism, and security headers are not evident, which are areas for improvement. The presence of a demo login with credentials disclosed in a modal could pose a minor security risk if not properly managed. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no exposed sensitive data. The use of Matomo analytics aligns with privacy best practices. Nonetheless, the absence of incident response contacts and security policies limits transparency in security readiness. No vulnerabilities or suspicious patterns were detected in the WHOIS data or site content, supporting a trustworthy profile. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. Strategic improvements in cookie consent, security headers, and incident response transparency would enhance the security and compliance posture further.

Team-SOFT s.r.o. is a Slovak technology company specializing in ERP solutions, mobile and web application development, and consulting services primarily targeting small and medium-sized enterprises. Established in 1995, the company has a long-standing presence in the Slovak market and offers a range of products including ERP systems and mobile apps tailored to business needs. The website reflects a professional business with clear service offerings and contact information. Technically, the website uses modern web technologies such as Bootstrap and jQuery, supports mobile platforms, and integrates Google Analytics for user tracking. However, it lacks visible privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security posture. The domain registration data aligns well with the company's claims, indicating legitimacy and stability. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

S

Slovenská komora fyzioterapeutov

komorafyzioterapeutov.sk

48

Slovenská komora fyzioterapeutov is a professional chamber representing physiotherapists in Slovakia, providing services such as registration, licensing, education, and ethical oversight. The website serves as an information and service portal for members and the public, with a focus on healthcare professionals in the physiotherapy sector. The domain is well-established since 2008, indicating a stable presence in the market. Technically, the site is built on WordPress using common libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is good regarding cookie consent, but a dedicated privacy policy page is not clearly found in the provided content. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, serving its target audience effectively.

A

Adam Žitník

adamzitnik.cz

41

Adam Žitník is a small independent design and web development service provider based in Ostrava, Czechia, founded in 2014. The website showcases a professional portfolio of client projects, emphasizing custom web design, CMS development, SEO, and consultation services. The business targets artists and companies seeking unique and creative digital presentations. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA for form protection, but lack explicit security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and supports the legitimacy of the business.

C

Centre National de la Musique

whatthefrance.org

48

What The France is a culturally focused media platform created by the Centre National de la Musique to promote French music internationally. It offers curated playlists, video content, news, and branded events to highlight the French music scene. The website is well-positioned as a niche cultural promoter with a clear target audience of music enthusiasts and industry professionals. Technically, the site is built on WordPress with modern plugins and technologies, optimized for performance and SEO, and includes multilingual support. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site demonstrates a professional and trustworthy presence with strong branding and compliance with privacy regulations.

C

Centre national de la musique

cnmwork.fr

49

CNMwork is a professional portal operated by the Centre national de la musique (CNM) focused on providing a directory and job, internship, and service offers within the French music sector. It serves as a national platform connecting music industry professionals and job seekers, positioning itself as a key resource in the French music employment ecosystem. The website is well-branded with official logos and government affiliation, enhancing its credibility. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility compliance could be improved. Performance is moderate, with no blocking or WAF detected, indicating reliable availability. Security posture is solid with HTTPS enforced and secure cookie settings, but lacks explicit security headers and documented security policies or incident response information. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, CNMwork presents a trustworthy and professional digital presence for the French music sector, though improvements in security headers and accessibility would enhance its posture. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its official backing.

V

Vlasy z Turecka – transplantace vlasů v Turecku

vlasyzturecka.cz

44

Vlasy z Turecka is a Czech Republic-based medical tourism service specializing in hair transplantation procedures performed in Turkey, specifically representing the Istanbul Medipol faculty hospital. The website targets Czech-speaking individuals seeking advanced hair transplant methods such as FUE Sapphire and DHI, complemented by PRP therapy and comprehensive pre- and post-operative care. The business operates as a small entity with a clear focus on facilitating medical travel and treatment arrangements. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap, jQuery, FancyApps UI, and Splide.js. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good design and navigation, although accessibility features are basic. Hosting is provided by WEDOS, consistent with the domain registration data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and publicly available privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Tracking scripts indicate extensive user monitoring without visible consent mechanisms, posing privacy compliance risks. Overall, the website is professionally presented and trustworthy for its niche market but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

A

AGITPROP

agitprop.bg

37

AGITPROP is a small Bulgarian media production company specializing in creative documentaries, art, and advertising photography. The website content focuses on explaining the term 'AGITPROP' and showcases categories of their work including film, video, campaigns, photography, and graphic design. The company appears to target a general audience interested in artistic and documentary media. The technical infrastructure is basic, relying on custom JavaScript and CSS with hosting inferred to be StableHost. The website lacks modern CMS or frameworks and shows limited mobile optimization and accessibility features. Security posture is minimal with no visible HTTPS or security headers in the provided data, and privacy compliance is poor due to absence of privacy and cookie policies. No contact information or social media links are provided, which limits business credibility. Overall, the site is functional but basic, with room for improvement in security, privacy, and user engagement.

8horses GmbH is a small, Switzerland-based arthouse film production company composed of a group of artists, filmmakers, writers, and cinematographers. Their website showcases a portfolio of artistic film projects and emphasizes their collaborative creative approach. The company targets a niche audience interested in arthouse and artistic films, positioning itself as a specialized media production entity within the Swiss market. Technically, the website is built on the Indexhibit CMS platform and uses jQuery for scripting. It employs HTTPS for secure communication but lacks advanced security headers and modern tracking or analytics tools. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design quality. From a security perspective, the site has a basic posture with HTTPS enabled but missing critical security headers and no visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security hardening. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and provide vulnerability disclosure information to enhance trust and compliance.

CESK, s.r.o., operating under the brand Frigomat, is a Czech-based company specializing in the sale, rental, and servicing of Italian ice cream and confectionery machines. With a history spanning over 40 years, the company positions itself as a trusted provider for professional confectioners and ice cream makers, offering high-quality machinery and comprehensive support services. Their website reflects a professional and well-structured digital presence, targeting B2B customers in the manufacturing and food service sectors. Technically, the website employs modern web technologies including jQuery, Bootstrap, and integrates marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks some security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain reduces trust from a domain registration perspective, though the website content and business information appear legitimate and professional. Overall, the site scores well in content quality, privacy compliance, and business credibility, with moderate technical and security posture scores.

CreativWerkstatt Herten is a local educational and creative workshop provider based in Herten, Germany. The organization offers a variety of courses spanning creative arts, environmental education, dance, theater, science, and media, targeting a broad audience including schools and the general public. The website is professionally designed using WordPress and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the website and domain registration details are consistent and legitimate, reflecting a trustworthy and credible educational service provider.

The Seniorenbeirat Holzwickede website serves as an informational platform for the senior advisory council of the Holzwickede community in Germany. It provides basic information and community engagement resources targeted at senior citizens and local residents. The site is built on WordPress using the Nirvana theme and hosted on netcup servers, reflecting a modest technical infrastructure suitable for a small local government entity. The website employs HTTPS and a cookie consent mechanism, demonstrating basic privacy compliance. However, it lacks comprehensive security policies, incident response contacts, and terms of service, which limits its security maturity. The content is minimal but relevant, with no signs of tracking or advertising beyond cookie management. Overall, the site is functional and moderately trustworthy but could benefit from enhanced security and privacy features.

VABANQUE, spol. s r.o. is a Czech Republic based full-service advertising and communication agency with over 15 years of experience. The company offers a broad range of marketing and branding services including 3D modeling, packaging design, web development, video production, and event promotion. Their client portfolio includes notable brands and they emphasize tailored marketing solutions to strengthen client market positions. The website is professionally designed with clear navigation and contact information, reflecting a stable and credible business presence. Technically, the site uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager, with moderate performance and basic mobile optimization. Security posture is average with HTTPS usage but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but could improve in privacy and security transparency.

A

ADIP, spol. s r. o.

adipsk.sk

46

ADIP SLOVAKIA, spol. s r. o. is a well-established distributor of automotive spare parts and accessories primarily serving the transportation sector in Slovakia and the Czech Republic. With over 28 years of market presence, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence with clear navigation, relevant content, and legal compliance documents. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. Security measures include HTTPS, cookie consent with granular controls, and Google reCAPTCHA integration, although some security headers and policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, with room for improvement in formal security policies and accessibility.

The website crew-united.com is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, business information, or policies. The domain is long-established, created in 1997, and registered with a reputable registrar, indicating legitimacy. However, no business or contact information is available from the accessible content. The technical infrastructure includes Cloudflare protection but lacks DNSSEC and visible security headers. Due to the access block, a full security and compliance assessment cannot be performed.

The website vitajte.tricklandia.sk serves as a simple introductory landing page for Tricklandia, a local Slovak entity. The page contains minimal content, primarily images and links to partner or related sites, and redirects users to the main Tricklandia website after 10 seconds. The business appears to be small-scale with limited digital presence on this subdomain. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS. There is no evidence of analytics, advertising, or user tracking technologies. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is privacy protected, which is common for small or personal websites but limits transparency. Overall, the site is safe for general audiences but lacks professional security and compliance features.

S

Slovenský ľudový umelecký kolektív

sluk.sk

45

Slovenský ľudový umelecký kolektív is a professional artistic ensemble focused on the artistic processing and interpretation of traditional Slovak folk culture. The organization appears to hold a national cultural position, offering performances and cultural events primarily targeting a general audience interested in Slovak folk arts. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The presence of GDPR cookie consent mechanisms shows awareness of privacy compliance, although explicit privacy and terms of service documents are not found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy transparency and security hardening.

K

Kino Lumière

kino-lumiere.sk

47

Kino Lumière is a Slovak cinema focused on providing a comprehensive film program, online ticket sales, and cultural events. The website serves as a portal for film enthusiasts, families, and seniors, offering specialized programs such as BABY kino and SENior kino. The business operates primarily in the media sector with a local market focus. Technically, the website uses a specialized cinema CMS platform with integrations for Google Analytics and Facebook SDK, supporting multimedia content and online ticketing. The site is secured with HTTPS and includes a cookie consent mechanism, though it lacks explicit privacy and terms of service pages, which are important for GDPR compliance. Security headers are not evident, indicating room for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, but could enhance compliance and security practices.

M

MLYNY CINEMAS spol. s r.o.

mlyny-cinemas.sk

47

MLYNY CINEMAS spol. s r.o. operates a professional cinema chain in Slovakia, offering comprehensive movie programs, online ticket sales, and event information. The website is well-branded and targets general cinema audiences with family-friendly content. The business holds a solid regional position with partnerships supporting Slovak film culture. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Facebook SDK, integrated with Ticketware's ticketing platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is mostly met with accessible privacy and terms pages, but cookie consent mechanisms could be enhanced. Overall, the site is trustworthy and professionally maintained, with room for security and privacy enhancements.

C

CarbonAct | Nous accompagnons votre organisation dans l'action face aux enjeux climatiques

carbonact.fr

49

CarbonAct is a French consulting organization focused on assisting other organizations in addressing climate change challenges. The website presents a professional appearance with a clear focus on climate action and sustainability consulting services. The technical infrastructure is based on WordPress with the Divi theme, utilizing common web technologies such as jQuery and Google Fonts. The site is accessible without any WAF or security challenge blocking content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website appears legitimate and professional but would benefit from enhanced privacy and security practices.

S

SPEDIDAM

myspedidam.fr

36

My SPEDIDAM is a French media rights management platform focused on providing artists with tools to manage their accounts and royalty declarations. The website serves as a secure login portal for artists and associated members, reflecting a specialized business model in the media sector. The company appears established with a domain age of over six years and consistent WHOIS data, indicating legitimacy and operational stability. Technically, the website employs a modern technology stack including jQuery, Kendo UI, Bootstrap, and ASP.NET MVC framework. While the site is mobile optimized and uses Google Analytics for tracking, there is room for improvement in accessibility and SEO optimization. The performance is moderate, and the design quality is good, providing a professional user experience. From a security perspective, the site enforces password complexity and includes CSRF tokens in forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No cookie consent mechanism is present, which is a GDPR compliance gap. The absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and trust. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and clearer terms of service documentation to strengthen its security posture and regulatory adherence.

H

Henrich Kubík

hk-photo.cz

41

HK-PHOTO is a small professional photography business based in Brno, Czech Republic, specializing in newborn, children, maternity, wedding, portrait, and reportage photography. The website presents a well-structured portfolio and client testimonials, positioning the business as a trusted local service provider. The domain age and WHOIS data align with the business history, indicating legitimacy and consistency. Technically, the website is built on WordPress using the Divi theme, with common plugins and Facebook integration. While the site is mobile optimized and visually appealing, some video playback issues and lack of security headers slightly detract from the user experience. Security posture is moderate with HTTPS enabled and copy protection scripts in place, but missing standard security headers and privacy compliance elements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

P

Prefa Brno a.s.

prefa.cz

48

Prefa Brno a.s. is a leading Czech manufacturer specializing in concrete, reinforced concrete, and prestressed concrete building components. Established in 1992, the company serves a broad construction market with a comprehensive product portfolio including prefabricated elements for sewage, decorative concrete products, building structures, tanks, and related services such as project design, assembly, and transportation. The company maintains a strong market position in the Czech Republic with a medium-sized workforce and several subsidiaries supporting its operations. Technically, the website is built on a modern WordPress platform with a well-integrated technology stack including jQuery, Google Analytics, NextGEN Gallery, and GDPR-compliant cookie consent tools. The site demonstrates good SEO practices, mobile optimization, and accessibility features, providing a professional user experience. The presence of structured data and Open Graph tags enhances search engine visibility and social media integration. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. While no explicit security headers were detected in the provided data, the site avoids exposing sensitive information and uses reputable plugins to manage privacy and analytics. The absence of WHOIS data limits domain registration trust verification, but the website content and business information appear legitimate and consistent with a professional manufacturing entity. Overall, Prefa Brno a.s. presents a credible and professional online presence with solid technical infrastructure and compliance posture. Strategic improvements in security headers and incident response visibility could further enhance trust and resilience.

Z

Zahradnictví s tradicí

zahradnictvi-u-masku.cz

38

The website 'Zahradnictví s tradicí' represents a small gardening business based in the Czech Republic, offering gardening services and products. The site is built on WordPress and uses common plugins such as Slider Revolution and Booked for appointments, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness and transparency. Overall, the site is functional and safe but would benefit from improved privacy compliance and security practices.

T

Tero Radio

teroradio.com

47

Tero Radio is a Thai-based online radio and entertainment platform offering multiple radio stations, podcasts, music charts, event promotions, and video content. The website targets a general Thai audience interested in contemporary hits, Asian music, and entertainment news. The platform is moderately mature with a domain age of approximately 3.5 years and a consistent brand presence across social media and partner subdomains. Technically, the site uses modern web technologies such as Next.js and React, with integrations for Google Tag Manager and advertising via Google DoubleClick. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is legitimate and professionally maintained but would benefit from enhanced security and privacy transparency.

P

ProVenkov, spol. s.r.o.

provenkov.cz

45

ProVenkov, spol. s.r.o. is a Czech Republic based small company specializing in consultancy and financing advisory services related to wastewater treatment and potable water supply for small municipalities. Their website presents a professional image with clear descriptions of their services, target audience, and business model focused on municipal water management. The company has been established since 2006, which aligns with the domain age and registration data. Technically, the website is built on WordPress with common plugins and frameworks such as Bootstrap and Yoast SEO, providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but the use of outdated WordPress and plugins, along with missing security headers, presents potential vulnerabilities. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from security and compliance improvements.

A

ASIO NEW, spol. s r.o.

mzi.cz

40

The website www.mzi.cz represents ASIO NEW, spol. s r.o., focusing on modro-zelená infrastruktura (blue-green infrastructure) which integrates water and green elements harmoniously with nature to address climate challenges, water retention in cities, air quality improvement, and microclimate mitigation. The site targets professionals and stakeholders interested in sustainable architecture and environmental infrastructure solutions. The business operates in a niche environmental sector within the Czech Republic, offering informational content and consulting-like services related to building exteriors, interiors, green and blue spaces. Technically, the website is built on Topinfo CMS and uses legacy JavaScript libraries such as jQuery 1.12.4 and Fancybox 3.3.5, alongside Google Analytics for user tracking. The site is mobile-optimized with good SEO practices but lacks modern security headers and updated libraries, which could pose risks. The absence of visible privacy and cookie policies indicates a gap in GDPR compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or show signs of vulnerabilities in the provided content. However, the lack of WHOIS data and security policies reduces trustworthiness. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the site scores moderately on AI evaluation with strengths in content quality and business credibility but weaknesses in privacy compliance and domain registration transparency. Strategic improvements in security headers, privacy disclosures, and updated technology stacks are recommended to enhance trust and compliance.

P

Accueil

parispectacles.fr

49

Parispectacles.fr is an online platform dedicated to promoting and selling tickets for a wide range of cultural events in Paris, including comedy shows, concerts, classical music performances, dance, improvisation, and family-oriented events. The website targets a general audience interested in live entertainment and cultural experiences in the Paris region. The business model revolves around online ticket sales and event information dissemination, positioning itself as a niche regional player in the hospitality and entertainment sector. Technically, the website employs modern web technologies such as the Uikit CSS framework, Google Tag Manager for analytics, and a cookie consent mechanism compliant with European regulations. The site is mobile-optimized and provides a good user experience with clear navigation and event categorization. However, some technical aspects such as security headers and SEO optimization could be improved. From a security perspective, the site uses HTTPS and integrates Google Tag Manager for tracking, but lacks visible security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content itself appears professional and consistent with a legitimate business. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and domain registration transparency. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers, and verifying domain registration details to bolster trust and compliance.

The website represents the Základní organizace Odborového svazu KOVO Třinecké železárny, a trade union organization serving employees of the Třinecké železárny steelworks in the Czech Republic. It provides information about the union's structure, leadership, member benefits, recreational facilities, and news updates. The site targets union members and employees, offering resources and contact channels to support their interests. The organization appears well-established with a consistent brand presence and active social media engagement. Technically, the site is built on WordPress 6.7.2, utilizing common plugins such as Contact Form 7 and GDPR Cookie Compliance. The technology stack includes jQuery, Google Fonts, and Font Awesome. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. GDPR compliance is addressed through a cookie consent mechanism, though no explicit privacy policy page was found. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the website's claimed identity, showing consistent registration details without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy for its purpose but could improve by publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen its security posture and compliance.

S

Střední odborná škola Třineckých železáren

sostrinec.cz

40

Střední odborná škola Třineckých železáren is a vocational secondary school located in Třinec, Czech Republic, affiliated with the steel company TŘINECKÉ ŽELEZÁRNY, a. s. The institution offers a variety of technical and vocational study programs, lifelong learning courses, and extracurricular activities aimed at students and prospective students interested in technical education. The website reflects a medium-sized educational institution with a consistent brand presence and a strong connection to local industry. Technically, the website is built using Nicepage CMS with standard web technologies such as HTML5, CSS3, and jQuery. It is hosted by Active24 and shows moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed but lacking explicit security headers and privacy compliance documentation. No forms collecting sensitive data are present on the homepage, reducing immediate risk. The domain registration data is consistent with the business and shows a long-standing presence since 2005, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences, but it lacks important privacy and security policy disclosures.

M

Muzeum Beskyd Frýdek-Místek, příspěvková organizace

muzeumbeskyd.com

46

Muzeum Beskyd Frýdek-Místek is a regional cultural institution operating under the Moravian-Silesian Region, managing the Frýdek castle and Hukvaldy castle as its branches. The museum offers exhibitions, educational programs, guided tours, and event hosting primarily targeting local visitors, families, and tourists interested in regional history and culture. The website reflects a well-structured and content-rich platform with clear navigation and relevant information about museum services and events. Technically, the website uses a traditional tech stack including jQuery 1.12.4, Google Tag Manager, and jQuery UI, with custom CSS and JavaScript. While the site is functional and moderately optimized for performance and mobile devices, there is room for improvement in modernizing the technology stack and enhancing accessibility and SEO features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. However, the absence of explicit security headers and the use of an outdated jQuery version present potential vulnerabilities. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and external references support its authenticity. Overall, the website is professional and trustworthy for its intended audience but would benefit from technical and security enhancements to improve resilience and compliance.