High-risk security reports

D

D.I.SEVEN, a.s.

pult-centralizovane-ochrany.cz

42

D.I.SEVEN, a.s. operates a centralized security monitoring service (PCO) in the Czech Republic, providing professional security solutions for businesses and residential clients. The company boasts over 25 years of experience and monitors more than 1000 objects nationwide. Their services include integration of various security systems such as electronic security systems (EZS), video verification (Videofied), CCTV, and fire alarm systems (EPS), supported by a trained intervention team and modern monitoring infrastructure. Technically, the website is built on WordPress with common plugins like Yoast SEO and Slider Revolution, leveraging Google Fonts and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside a comprehensive cookie consent mechanism supporting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration transparency and legitimacy verification. The site lacks a dedicated privacy policy page and explicit security or incident response policies, which are important for compliance and trust. Security headers are not detected, indicating room for improvement in hardening the web server configuration. Overall, the website presents a professional and trustworthy front for a security services provider but should address transparency and security best practices to enhance trust and compliance. Strategic recommendations include publishing privacy and security policies, improving HTTP security headers, and clarifying domain registration details.

S

ScientiaMobile

scientiamobile.com

48

ScientiaMobile is a technology company specializing in device detection solutions that enable businesses to optimize their digital content for various devices. Founded in 2011, the company offers APIs and databases that help clients improve user experience and analytics by accurately identifying device capabilities. The website reflects a professional but basic digital presence with moderate technical infrastructure, hosted on AWS and registered via GoDaddy. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the business credibility is strong given the domain age and consistent WHOIS data, but the website could improve in transparency and security best practices.

S

ScientiaMobile

wurflcloud.com

49

ScientiaMobile is a technology company specializing in device detection solutions, notably the WURFL Cloud service. The company targets developers and enterprises seeking to optimize mobile experiences by accurately identifying device capabilities. The website content analyzed focuses on the deprecation and sunsetting of the WURFL Cloud service, indicating active product lifecycle management. The company appears established with a domain registered since 2011, consistent with its business history. Technically, the website is built on WordPress using Thrive Architect, hosted with DNS services on AWS, and registered via GoDaddy. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. No advanced security headers or DNSSEC are enabled, which suggests room for improvement in security hardening. From a security perspective, the site uses HTTPS (implied but not explicitly confirmed in provided data), but no security policies, incident response contacts, or vulnerability disclosures are published. The absence of privacy and cookie policies indicates potential compliance gaps with GDPR and other privacy regulations. No contact information or certifications were found on the analyzed page, limiting business credibility signals. Overall, the website is functional and moderately credible but requires enhancements in privacy compliance, security posture, and transparency to improve trust and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing clear contact and incident response information.

The website verifHy.de is a professional platform operated by DVGW Service & Consult GmbH, focused on providing a smart database solution for verifying the hydrogen readiness of gas network components. It serves as a critical technical tool supporting the transition of gas networks to climate-friendly hydrogen, targeting gas network operators, manufacturers, and international partners. The site is well-branded, consistent, and provides clear navigation and relevant content aligned with its energy sector focus. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Bootstrap, hosted via INWX. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is adequate with linked comprehensive privacy and cookie policies on the parent DVGW site, though no active cookie consent mechanism is present. Contact information is clearly provided via phone and a login portal for database access. No social media or analytics tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy and professional digital presence with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

L

Limes Netwerk Notarissen

limesnotarissen.nl

47

Limes Netwerk Notarissen is a Dutch notary office providing comprehensive legal services with a focus on both private individuals and entrepreneurs. The company emphasizes a personalized, total legal vision covering business law, real estate, and family law. Their market position is strengthened by affiliation with a large network of over 150 notaries, enhancing their expertise and service quality. The website reflects a professional and trustworthy business with clear contact channels and up-to-date content. Technically, the site is built on WordPress with the Divi theme and uses modern tools like Gravity Forms and Google reCAPTCHA to secure user interactions. SEO and accessibility are well addressed, contributing to a positive user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is low risk and professionally managed, suitable for its target audience.

G

Gentlemen Brothers Brno

rezerver.cz

48

Gentlemen Brothers Brno operates an online reservation system for a local barbershop in Brno, Czech Republic, offering a variety of grooming and haircut services. The website is designed to facilitate easy booking of services such as classic cuts, beard styling, and traditional shaving. The business targets male customers seeking professional barber services in the region. The platform is functional and integrates modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel for tracking and marketing purposes. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced but lacking important security headers and cookie consent mechanisms. Privacy policy is present and appears GDPR compliant, but no explicit cookie or terms of service policies were found. Overall, the website provides a good user experience with clear navigation and relevant content but could improve in security and privacy compliance areas.

T

TESTCAR s.r.o.

testcar.cz

46

TESTCAR s.r.o. operates a network of vehicle technical inspection stations across the Czech Republic, providing services such as regular technical inspections for road vehicles, ADR inspections, individual vehicle imports, and sales of ecological stickers. The company is well-established since 2007 and maintains multiple branch locations, indicating a solid market presence in the transportation sector. The website is built on WordPress using Elementor and JetEngine, with integration of Google Maps API for branch location display, although the map currently has an API key issue preventing proper loading. Security posture is moderate with HTTPS enabled but lacking security headers and formal security or privacy policies. Contact information is comprehensive and clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed.

S

STK RITZ s.r.o.

stk-novyjicin.cz

44

STK RITZ s.r.o. is a Czech Republic based company specializing in vehicle technical inspections, emission measurements, and related regulatory services. Established in 1996, the company operates a certified technical inspection station with ISO 9001:2009 certification and partnership with DEKRA, serving personal, commercial, and special vehicles. The website presents a professional and well-structured digital presence, targeting vehicle owners and operators requiring compliance with Czech vehicle regulations. The business model focuses on service provision for mandatory vehicle inspections and technical data issuance. Technically, the website is built on WordPress using Elementor and Slider Revolution plugins, with jQuery as a JavaScript library. The site is mobile optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate, with good SEO and accessibility basics, though security headers are not evident in the provided data. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of WHOIS transparency and missing security headers suggest areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy and cookie policy in Czech language. Contact information is clearly provided, including phone numbers, email, physical address, and a contact form. Overall, the website and business appear legitimate and professional, though the lack of WHOIS data transparency slightly reduces trust. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving WHOIS transparency to strengthen domain trustworthiness.

K

KAR

kar.cz

45

KAR is a well-established Czech company founded in 2011, specializing in comprehensive service solutions for truck and bus transportation. The company operates multiple modern service centers across Czech regions and acts as a dealer for IVECO BUS, offering sales, maintenance, and custom manufacturing services. Their website reflects a mature digital presence built on WordPress with Elementor, optimized for performance and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the company demonstrates high business credibility and trustworthiness with clear contact information and certifications.

Č

ČSAD Ostrava a.s.

cova.cz

40

ČSAD Ostrava a.s. is a well-established transportation and logistics company in the Czech Republic with a history dating back to 1992 and roots from 1949. The company offers a broad range of services including international truck transport, spedition, logistics, vehicle servicing, and management of bus stations and real estate. The website reflects a professional and consistent brand presence targeting business clients and job seekers in the transport sector. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Maps API, and includes privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be improved. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, secure, and compliant with GDPR, providing a trustworthy digital presence for the company.

Č

ČSAD LOGISTIK Ostrava a.s.

csadlogistik.cz

36

ČSAD LOGISTIK Ostrava a.s. is a Czech logistics and transportation company offering a wide range of services including domestic and international trucking, warehousing, customs services, and combined transport solutions. The company is part of the OSTRA GROUP holding, indicating a stable market position within the transportation sector in the Czech Republic. Their website presents a professional image with clear service offerings and contact information, targeting businesses requiring logistics solutions. Technically, the website is built on WordPress using Elementor and several JetPlugins, supported by modern SEO and GDPR compliance tools such as Yoast SEO and Complianz GDPR plugin. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a mature digital infrastructure. Analytics and marketing tools like Google Tag Manager and Leady are used for tracking and retargeting, balanced with user privacy considerations. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent banners. However, additional security headers could be implemented to enhance protection. No exposed sensitive data or vulnerabilities were detected in the content. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and security posture. Strategic improvements in security headers and domain transparency could further strengthen trust and resilience.

C

CUBESPACE

cubespace.eu

40

CUBESPACE is a Czech company specializing in the design, manufacture, rental, and servicing of modular buildings for a wide range of uses. With over 17 years of market presence, the company offers comprehensive services including site selection, architectural studies, and turnkey modular construction solutions. Their market position is supported by a substantial client base and a portfolio of completed projects. Technically, the website is built on WordPress with Elementor and Jet plugins, featuring modern design and good mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are absent. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy and security disclosures.

A

ADIP, spol. s r. o.

adip.cz

42

ADIP, spol. s r. o. is a well-established distributor of automotive spare parts and accessories operating primarily in the Czech Republic and Slovakia. With over 34 years in the market, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence targeting automotive industry clients including truck, bus, and passenger vehicle operators. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces domain trustworthiness.

C

Centre national de la musique

cnm.fr

48

The Centre national de la musique (CNM) is a French national institution dedicated to supporting professionals in the music and variety sectors. Established in 2005, it provides financial aids, training, research, and consulting services to foster the development of the music industry in France. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content tailored to its target audience of music professionals and stakeholders. Technically, the site is built on WordPress with modern performance optimizations and accessibility considerations, hosted by OVH, a reputable provider. Security posture is solid with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response details are not publicly disclosed. Overall, the CNM website demonstrates high business credibility and digital maturity appropriate for a government agency.

A

Ariadne Network

ariadne-network.eu

44

Ariadne Network is a European non-profit organization serving as a peer-to-peer network for over 600 funders and philanthropists focused on social change and human rights. The organization provides a variety of services including a community hub, grant-making skills development, resource sharing, and networking opportunities both online and offline. The website reflects a mature and professional presence with clear messaging targeted at philanthropic funders in Europe. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. Overall, the site demonstrates a trustworthy and credible digital presence.

S

Slovenský Červený kríž

redcross.sk

45

Slovenský Červený kríž is a well-established non-profit humanitarian organization in Slovakia, providing a wide range of social services including first aid training, blood donation, crisis preparedness, and migration support. The organization is affiliated with the International Red Cross Movement and maintains a strong presence through partnerships and social media engagement. The website reflects a professional and consistent brand image targeted at the Slovak public and vulnerable groups. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading and asynchronous script loading. It uses Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site uses HTTPS and implements several best practices but lacks explicit security headers like a full Content-Security-Policy and does not publish security or incident response policies. No vulnerabilities or exposed sensitive data were detected. GDPR compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional with a strong business credibility score. Strategic improvements include enhancing privacy compliance, publishing security policies, and improving accessibility to further strengthen the security posture and user trust.

V

Vimec Polska

vimecpolska.pl

41

Vimec Polska is a specialized company providing mobility and accessibility solutions primarily targeting seniors and individuals with disabilities. Their product range includes stairlifts, vertical platforms, stair climbers, and home lifts, designed to improve mobility within residential and public buildings. The company is part of the larger Vimec group, with a strong international presence indicated by multiple regional websites. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation. Privacy and cookie policies are implemented with Iubenda, reflecting GDPR compliance. However, WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. The site uses HTTPS and modern web technologies but lacks some security headers and formal security policies.

V

Vimec Srl

vimec.es

44

Vimec Srl is a medium-sized Italian company specializing in manufacturing and providing customized mobility solutions such as stairlifts, home elevators, and platform lifts primarily targeting elderly and disabled individuals. The company has a strong market presence with over 150,000 installations worldwide, emphasizing safety, comfort, and design. Their website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern plugins and services such as Yoast SEO, Google Tag Manager, and Iubenda for cookie consent management. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is basic with cookie consent but lacks a clearly accessible privacy policy page. Contact information is clearly provided, enhancing business credibility. WHOIS data is unavailable due to registrar restrictions common for .es domains, slightly reducing transparency but not indicating suspicious activity.

V

Vimec

vimec.de

43

Vimec is a medium-sized company specializing in home lifts and platform lifts, with a strong international presence evidenced by 150,000 lift installations worldwide. The website targets the German market but is part of a broader international ecosystem with localized partner sites in multiple countries. The business model focuses on manufacturing and distributing accessibility and mobility solutions for residential environments. Technically, the website is built on WordPress using Elementor and Astra theme, with modern SEO and tracking tools implemented. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism via Iubenda, but lack explicit security headers and published security policies. Overall, the site demonstrates good professionalism and moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

A

Awesome Projects SRL

sahiavintage.ro

42

Sahia Vintage is a Romanian digital platform dedicated to preserving and showcasing documentary films produced by the Alexandru Sahia Studio between 1950 and 1990. Operated by Awesome Projects SRL since 2019, it serves a niche cultural audience interested in historical film archives. The website employs a standard WordPress CMS with common web technologies such as Bootstrap and jQuery, hosted on Romanian infrastructure. It features a bilingual interface (Romanian and English) and integrates Google Analytics for visitor tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms but lacks advanced security headers and DNSSEC. Privacy compliance is basic, relying on a PDF terms document rather than a dedicated privacy policy page. Contact information is not directly available on the homepage, limiting user engagement channels.

Ö

Österreichisches Kulturforum Prag

oekfprag.at

43

The Österreichisches Kulturforum Prag is a government-affiliated cultural institution dedicated to promoting Austrian culture in Prague and the Czech Republic. It offers a diverse range of cultural events including exhibitions, music festivals, film screenings, theater, literature, and scientific lectures. The website reflects a well-structured cultural portal targeting a general audience interested in Austrian arts and culture. Technically, the site uses traditional JavaScript libraries such as MooTools, integrates Google Analytics and Piwik for visitor tracking, and loads content over HTTPS, indicating a moderate level of digital maturity. However, the site lacks modern CMS indicators and advanced accessibility features. Security posture is adequate with HTTPS but lacks visible security headers and published policies. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data is missing, which reduces domain trustworthiness, but the website content and domain usage align with a legitimate government cultural entity. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening.

M

Modern Times Review

moderntimes.review

46

Modern Times Review is a European niche media publication specializing in cinepolitical documentary and nonfiction book reviews through original essays. The website targets a general audience interested in documentary film and nonfiction literature, positioning itself as a specialized magazine in this domain. Technically, the site is built on WordPress with WooCommerce and several plugins for SEO, analytics, advertising, and push notifications, reflecting a moderate level of digital maturity. The site is mobile optimized and uses modern web technologies but lacks some advanced accessibility features. Security-wise, the site enforces HTTPS and does not expose sensitive data, but lacks explicit security headers and formal security or privacy policies, which are areas for improvement. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer contact and security information to improve trust and compliance.

G

grandfilm produktion gmbh

grandfilm-produktion.de

42

Grandfilm Produktion GmbH is a small German media company specializing in international auteur film production and distribution. Founded in 2014, it operates primarily in Frankfurt and Nürnberg, focusing on festival-premiered films and co-productions with notable filmmakers. The website is built on WordPress using Elementor and jQuery, reflecting a modern but basic technical infrastructure. While the site is accessible and professionally designed, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact information is clearly provided, enhancing business credibility. Overall, the website serves its niche audience well but could improve compliance and security practices.

V

VIDIA-DESIGN s.r.o.

vidia-design.cz

40

VIDIA-DESIGN s.r.o. is a Czech Republic based small business specializing in online marketing, creative design, and internet advertising services. The company emphasizes effective marketing solutions including logo creation, web development, and SEO optimization, targeting businesses seeking to enhance their online presence. The website reflects a professional and consistent brand image with clear navigation and relevant content showcasing their expertise and client projects. Technically, the site uses Bootstrap 3.3.7, Google Fonts, Google Tag Manager, and a cookie consent mechanism, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are good, though some technical modernization could be beneficial. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected, and no incident response or security policies are published. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trust. Privacy compliance is good with a clear cookie consent banner and a privacy policy page. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer business contact information.

D

D.I.SEVEN SERVICE

disevenservice.cz

43

D.I.SEVEN SERVICE is a professional security and cleaning service provider operating throughout the Czech Republic since 2004. The company offers a broad range of services including physical security, personal protection, event security, cleaning services, and substitute fulfillment (náhradní plnění) to help clients meet legal employment obligations for persons with disabilities. The website is well-structured, professionally designed, and targets businesses and organizations seeking reliable security and compliance services. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Google Tag Manager for tracking. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security headers and vulnerability disclosure policies are absent. The domain WHOIS data is unavailable, which limits trust analysis, but the website content and social media presence support legitimacy. Overall, the site demonstrates a solid digital presence with room for improvement in privacy and security transparency.

D

D.I.SEVEN FACILITY

disevenfacility.cz

47

D.I.SEVEN FACILITY is a Czech Republic-based facility management service provider specializing in security, cleaning, and substitute fulfillment services. The website presents a professional and consistent brand image targeting general business audiences in the facility management sector. The technical infrastructure includes common web analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible privacy or cookie policies suggest gaps in transparency and compliance. Security posture is moderate with HTTPS implied but lacking security headers and explicit security policies. Overall, the site is accessible without WAF or blocking mechanisms, but domain legitimacy cannot be fully verified due to missing WHOIS information.

S

Středisko výchovné péče Orlíček Přední Chlum, o. p. s.

orlicekprednichlum.cz

38

Středisko výchovné péče Orlíček Přední Chlum, o. p. s. is a Czech non-profit organization providing ambulant and residential educational care services primarily targeting children, parents, and educators. Their offerings include counseling, social-educational activities, and support for sports, cultural, and leisure projects for youth. The organization appears to serve a local or regional community with a focus on social welfare and education. Technically, the website is built on WordPress 4.9.26 with jQuery 1.12.4 and uses Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized with a responsive design and basic accessibility features. Performance is moderate, and SEO is basic but functional. However, the WordPress and jQuery versions are outdated, which may pose security risks. From a security perspective, the site enforces HTTPS and implements a cookie consent banner with detailed user options, indicating some privacy awareness. However, no security headers are detected, and there is no privacy policy or incident response information published. The absence of WHOIS data reduces trust in domain legitimacy, although the website content and contact details appear genuine and professional. Overall, the website is safe and suitable for general audiences, with no adult or explicit content. The main risks relate to outdated software and missing security best practices. Strategic improvements in security headers, privacy documentation, and software updates would enhance the site's security posture and compliance.

M

Accueil | Médiathèques Plaine Commune

mediatheques-plainecommune.fr

47

The website www.mediatheques-plainecommune.fr serves as the online presence for Médiathèques Plaine Commune, a public media library network likely serving the Plaine Commune area in France. The site provides cultural and educational resources to the general public, positioning itself as a government or public service entity. The website is built on Drupal 10 CMS and utilizes Matomo Analytics with DoNotTrack enabled, reflecting a moderate level of digital maturity and privacy awareness. However, the absence of visible privacy and cookie policies, as well as the lack of security headers, indicates room for improvement in compliance and security practices. The WHOIS data is not publicly available, suggesting privacy protection, which is common for public institutions but reduces transparency. Overall, the site is functional and safe but would benefit from enhanced security and privacy disclosures.

M

Muzeum Těšínska

muzeumct.cz

46

Muzeum Těšínska is a regional museum and cultural institution operating under the Moravskoslezský kraj government in the Czech Republic. The website serves as an information portal for museum exhibitions, educational programs, publications, and events targeting the general public interested in regional history and culture. The institution holds a stable market position as one of four regional museums in the area, offering a variety of services including virtual tours and club memberships. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating modern web technologies such as Google Analytics and Facebook Pixel for visitor tracking with user consent. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in security headers and performance optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the official affiliation and consistent branding support legitimacy. No explicit security policies or incident response contacts are published. Overall, the website presents a professional and trustworthy digital presence for a government-affiliated cultural institution. Strategic recommendations include enhancing HTTP security headers, publishing vulnerability disclosure and incident response information, and improving technical performance to further strengthen security and compliance posture.

T

TRISIA, a.s.

trisia.cz

48

TRISIA, a.s. is a cultural and educational center located in Třinec, Czech Republic, offering a variety of services including cultural events, educational programs, venue rentals, and subscription-based event packages. The website presents a professional and well-structured platform targeting the general public interested in culture and community activities in the Beskydy region. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette, and Owl Carousel, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, though it lacks some security headers and a published privacy policy. The absence of WHOIS data is a notable concern, reducing domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site scores well on content quality, business credibility, and security, with room for improvement in privacy compliance and technical security headers.

S

SEVEN SPORT s.r.o.

insportline.bg

48

SEVEN SPORT s.r.o. operates the Bulgarian e-commerce website insportline.bg, specializing in retailing fitness and sports equipment. The website targets Bulgarian consumers with a broad product range including fitness machines, sports accessories, and outdoor equipment. The company maintains a consistent brand presence across multiple regional domains, indicating a strong market position in Central and Eastern Europe. The site features a modern technical infrastructure leveraging jQuery, Bootstrap, and Swiper.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and standard security headers, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, suitable for its retail business model.

Czech Virtuosi, z.s. is a non-profit cultural organization based in the Czech Republic that organizes classical music concerts and international music competitions. The organization is supported by local government entities such as the city of Brno and the South Moravian Region, reflecting a strong regional presence and community engagement. Their website serves as a portal for event information, ticket sales, and news updates, targeting classical music enthusiasts and cultural event attendees. The business model relies on sponsorships, government funding, and ticket sales to sustain its activities. Technically, the website is built using modern web technologies including React and slick carousel for interactive content presentation. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Google Analytics is used for visitor tracking, though privacy compliance could be improved by implementing cookie consent mechanisms. The website lacks explicit security headers and incident response policies, which are areas for enhancement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership transparency. No critical vulnerabilities or security issues were detected in the visible content. The organization should consider publishing security policies and improving GDPR compliance measures to strengthen trust. Overall, Czech Virtuosi presents a professional and trustworthy online presence for a small non-profit cultural entity. Strategic improvements in security posture and privacy compliance will enhance their digital maturity and stakeholder confidence.

M

MVIA s.r.o.

moraviapropag.cz

48

MVIA s.r.o. is a Czech Republic-based company with over 30 years of experience specializing in merchandising, POSM, gastro technology, and modern shading solutions. The company serves a global clientele including local love brands, delivering a broad range of products and services. Their market position is strong, supported by a medium-sized workforce and operations spanning over 120 countries. The website reflects a professional and modern brand image with clear business information and multiple service offerings. Technically, the website is built on ASP.NET WebForms with modern tracking and marketing tools integrated, including Google Tag Manager and Microsoft Clarity. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data limits domain registration trust analysis. Overall, the website and business appear legitimate and professionally managed.

C

CESK, s.r.o.

cesk.cz

46

CESK, s.r.o. is a Czech company specializing in the sale and servicing of professional gastronomic equipment, including ice cream machines, coffee machines, dispensing technology, and kitchen appliances. With over 30 years of market presence, CESK serves a broad audience ranging from confectioneries, cafes, and restaurants to home users. The company operates an e-shop, offers professional servicing, and organizes training courses, positioning itself as a trusted partner in the hospitality retail sector. The website reflects a mature digital presence with comprehensive product offerings and partner collaborations with reputable brands such as Plzeňský Prazdroj and Heineken. Technically, the website employs modern web technologies including Google Tag Manager, SmartEmailing, and Foxentry for marketing and user interaction. The site is mobile-optimized with good SEO practices and uses HTTPS with secure form handling. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security and compliance perspective, the site demonstrates good GDPR compliance with a detailed privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. No critical vulnerabilities or suspicious activities were detected. Overall, CESK's website is professional, secure, and compliant, supporting its business operations effectively. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

STARKL is a well-established family gardening business operating since 1912, specializing in the cultivation and sale of plants suitable for the Czech climate. The company operates both physical garden centers and an e-commerce platform, serving customers primarily in the Czech Republic and neighboring EU countries. Their brand is recognized with the prestigious Superbrands award, indicating strong market presence and trust. Technically, the website uses a traditional tech stack with jQuery and Google Tag Manager, and it is well-optimized for mobile and SEO. Security measures include HTTPS and Google reCAPTCHA, but could be improved with additional security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but does not negate the company's legitimacy given the rich content and certifications. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

Nanxia is a French software development agency specializing in creating customized software solutions and digital platforms for various sectors including event management, construction project tracking, energy optimization, and artisan web services. The website showcases multiple partner projects and platforms, indicating a diversified portfolio and a focus on B2B clients. The company positions itself as a specialized agency delivering tailored software products to professional audiences. Technically, the website employs modern frontend technologies such as Bootstrap 4.3.1 and jQuery 3.3.1, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks advanced accessibility features and explicit privacy or cookie policies. The absence of security headers and WHOIS data reduces the overall security posture and trustworthiness. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected. There are no visible forms collecting sensitive data, reducing immediate risk, but the lack of privacy and cookie consent mechanisms is a compliance gap. The WHOIS query returned no registration data, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, Nanxia's website is professional and business-focused with good content quality and technical implementation. However, improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security posture.

G

GRANDFILM

grandfilm.de

48

Grandfilm is a German-based film distribution and production company specializing in independent and art-house cinema. Their website showcases a broad portfolio of films currently in cinemas, upcoming releases, and educational film content, targeting film enthusiasts, cinema operators, and educators. The business operates primarily in the media sector with a small company size and a niche market position in Germany. Technically, the website is built on WordPress with modern analytics and marketing integrations such as Google Analytics, Google Tag Manager, and Facebook Pixel, all implemented with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security policy pages and some security headers, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fünferfilm

fuenferfilm.de

37

Fünferfilm is a small independent film production company based in Hamburg, Germany, founded in 2016. The company focuses on producing artistic and narrative films by dedicated filmmakers, with a strong presence in film festivals and collaborations with various partners in the film industry. Their website showcases a portfolio of films, upcoming projects, and festival participations, targeting film enthusiasts and industry professionals. Technically, the website uses a straightforward tech stack including HTML5, CSS3, jQuery, and Swiper.js for interactive elements. It is hosted on a German hosting provider (kasserver.com) and uses HTTPS, ensuring secure communication. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the website enforces HTTPS but lacks important security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.

P

Port au Prince Film & Kultur Produktion GmbH

port-prince.de

40

Port au Prince is a specialized film production and distribution company based in Germany, operating through multiple GmbH entities focused on production, distribution, and media agency services. The company targets film professionals and enthusiasts, positioning itself as an award-winning niche player in the German film industry. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins and tracking tools, and hosted on RZone servers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Déjà-vu film UG is a small German film distribution company specializing in art-house and cinephile films. The website showcases current and repertory films with detailed descriptions and festival accolades, targeting film enthusiasts and cultural institutions. The company maintains partnerships with several VoD platforms, enhancing its distribution channels. Technically, the website uses legacy JavaScript libraries such as jQuery and custom carousel and lightbox scripts, hosted on 1blu.de servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS assumed but no visible security headers or modern protections. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, supporting business credibility.

R

RED BALLOON FILM GMBH

redballoonfilm.de

47

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

L

Liga Vozíčkářů

ligavozic.cz

45

Liga Vozíčkářů is a Czech non-profit organization dedicated to supporting wheelchair users and people with disabilities. Established since 2000, the organization provides various activities and advocacy services to its target audience. The website is built on WordPress using the Avada theme and several common plugins, including Contact Form 7 and Cookie Notice, indicating a moderate level of digital maturity. The site implements HTTPS and cookie consent mechanisms, reflecting basic compliance with privacy standards. However, it lacks explicit privacy and terms of service policies, which are important for full GDPR compliance. Security posture is adequate with no evident vulnerabilities or exposed sensitive data, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security documentation.

A

ARES, spol. s r.o.

ares.sk

45

ARES, spol. s r.o. is a Slovak company specializing in barrier-free accessibility solutions, including lifting devices for disabled and seniors, automobile modifications for disabled persons, custom elevator manufacturing, gift basket production, and magazine distribution. The company operates multiple related domains, indicating a diversified business model under the parent company ALTECH. The website is professionally designed, well-structured, and targets customers requiring mobility and accessibility products and services. It holds ISO9001 certification, demonstrating commitment to quality standards. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Google Analytics, and Google Tag Manager, ensuring good SEO and analytics capabilities. The site is mobile-optimized and provides a cookie consent mechanism, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie banner. Business credibility is high due to transparent contact information, certifications, and consistent branding. Overall, the website presents a trustworthy and professional digital presence for ARES, with recommendations to enhance security headers and publish incident response contacts to further strengthen security and compliance.

L

Lehner Lifttechnik GmbH

lehner-lifttechnik.at

46

Lehner Lifttechnik GmbH is a family-run Austrian company specializing in the design and manufacture of accessibility lifts including stairlifts, platform lifts, vertical platform lifts, and special lifts. With over 30 years of experience, the company focuses on enabling independent living for mobility-challenged individuals by providing safe, reliable, and innovative lifting solutions. Their market position is supported by a comprehensive product range and international presence. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Adobe Typekit fonts. The site is well-structured, mobile-optimized, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not clearly found, indicating room for improvement in compliance. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but is common for privacy-protected domains. Overall, the website presents a professional and trustworthy front with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, implementing security headers, and improving WHOIS transparency to strengthen trust and security posture.

W

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG

weigl.at

49

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG is a well-established Austrian family-owned company specializing in the manufacturing, planning, installation, and servicing of elevators, stairlifts, homelifts, and related mobility solutions. With a history dating back to 1899, it holds a leading market position in Austria as the largest elevator producer and market leader for stairlifts and wheelchair lifts. The company targets both end consumers and businesses seeking high-quality mobility and lift solutions, offering a broad product portfolio and regional presence in Austria, Germany, Slovenia, and Switzerland. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including asynchronous JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. There is no visible security policy or incident response information on the site, and no WHOIS data is available for the domain, which slightly reduces trustworthiness. The company demonstrates trust through certifications, state awards, and detailed contact information. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy digital presence for a mature manufacturing business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, and publishing explicit security and incident response policies to strengthen the security posture and user trust.

O

OpenSolution.org

opensolution.org

42

OpenSolution.org is a small technology company specializing in providing free and commercial PHP-based content management and shopping cart systems, targeting webmasters and small to medium businesses. The company has a long-standing presence since 2004 and supports a user base of over 32,000 websites. Their business model includes software distribution, professional extensions, and partnerships with web design companies. Technically, the website uses a PHP backend with jQuery and Google Analytics for tracking. The site is moderately optimized for mobile and SEO, with a clean and professional design. Security posture is moderate; while HTTPS usage is assumed, no advanced security headers or explicit security policies are present. Privacy compliance is basic, with cookie notices but no consent mechanism and a basic privacy policy. Overall, the website is trustworthy and professional but could improve in security and privacy compliance to enhance user trust and regulatory adherence.

O

One World Romania

oneworld.ro

47

One World Romania is a well-established non-profit organization dedicated to promoting documentary films through its flagship One World Romania festival and related cultural activities such as workshops and film tours. The organization targets documentary enthusiasts, educators, and the general public interested in socially relevant cinema. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted on a Romanian hosting provider, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no detailed privacy or incident response policies. Social media integration and newsletter subscription indicate active community engagement. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

I

Ing. Radek Balon

radek-balon.cz

44

Ing. Radek Balon operates a professional videography and photography business primarily focused on wedding videos, music videos, and event coverage in the Olomouc region of the Czech Republic. The website serves as a portfolio and contact point, showcasing extensive video references and detailed service descriptions. The business is positioned as a small local service provider with a friendly and optimistic approach to client collaboration. Technically, the website is built on WordPress with modern plugins such as Elementor and WooCommerce, hosted by REG-WEDOS, and includes SEO and accessibility considerations. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with GDPR and cookie policies present and consent mechanisms active. Overall, the site is professional, trustworthy, and well-suited for its target audience.