Security Directory

S

simple & co gmbh

pokus.ch

55

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

A

Astrom / Zimmer & Tereszkiewicz

azt.ch

62

Astrom / Zimmer & Tereszkiewicz is a small, specialized design and development studio based in Zurich, Switzerland. They focus on creating digital and analogue tools, interfaces, and data modeling solutions aimed at transforming information into knowledge. Their market position is niche, serving clients interested in archives, research, and data visualization projects. The website showcases a professional portfolio with multiple client projects and external references, indicating a credible and established presence in their field. Technically, the site uses modern web technologies including JavaScript and React, hosted likely on DigitalOcean, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Eric Parry Architects Ltd is a well-established architectural practice founded in 2000, with studios in London and Singapore. The company specializes in sustainable and creative architectural design, serving clients in commercial, cultural, healthcare, and hospitality sectors. Their website reflects a professional and consistent brand image, showcasing a portfolio of projects and providing clear contact information. The business targets clients seeking high-quality architectural services and maintains a reputable market position with an international presence. Technically, the website is built on WordPress with modern JavaScript libraries such as Glide.js and LazySizes, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

The website m2mserver.de is currently a minimal landing page with very limited content, primarily displaying the domain name in a styled header. There is no substantive business description, contact information, or interactive elements. The WHOIS data indicates the domain is registered with German name servers, consistent with the .de TLD, but lacks detailed registrant information. The absence of privacy policies, cookie consent mechanisms, and terms of service suggests the site is either under development or serves as a placeholder. From a technical perspective, the site uses basic HTML and CSS without any detected scripts, frameworks, or CMS platforms. Performance and mobile optimization are basic, with no advanced SEO or accessibility features. Security posture is minimal with no visible security headers or SSL configuration details provided. No analytics or tracking technologies are present, indicating minimal data collection or user tracking. Security-wise, the site does not exhibit any blocking mechanisms such as WAF or security challenges, and no vulnerabilities or exposed sensitive data were detected. However, the lack of security best practices and compliance documentation represents a risk if the site were to handle sensitive data or user interactions in the future. Overall, the site scores low on content quality, privacy compliance, and security posture, reflecting its minimalistic nature. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and enhancing technical SEO and accessibility to improve trust and user experience.

Worldsoft AG operates as a technology company specializing in smart internet business solutions, likely centered around content management systems and web services. The website currently displays a maintenance message with minimal content, including a user login form and a company contact email. The business appears to target other businesses or users seeking internet business solutions, positioning itself as a specialized provider in this niche. Technical infrastructure is basic, with HTML and CSS usage and no advanced frameworks or analytics detected. The site lacks modern security features such as HTTPS enforcement and security headers, which lowers its security posture. The absence of privacy and cookie policies indicates non-compliance with common data protection standards. Overall, the website presents a basic digital presence with room for significant improvements in security, compliance, and content richness.

H

Hannoversche Volksbank eG

hannoversche-volksbank.de

63

Hannoversche Volksbank eG is a regional cooperative bank in Germany focused on providing local banking and financial services. The website reflects a professional and consistent brand presence, targeting local customers with a clear business model centered on cooperative banking. The digital infrastructure uses modern web technologies including Angular framework and integrates marketing consent management and analytics tools such as Adobe Launch and OneTrust. Security posture is solid with HTTPS enforced and monitoring scripts in place, though explicit security headers and published security policies are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the website is trustworthy and well-positioned in its market segment, with room for improvement in transparency and security documentation.

A

Anne Schwalbe

anneschwalbe.de

57

Anne Schwalbe operates a professional photography portfolio website primarily targeting art enthusiasts and potential buyers in Berlin and beyond. The site features a curated gallery of photographic works, an online shop for art sales, and a newsletter subscription to engage visitors with updates on exhibitions and new works. The business is positioned as a niche artist portfolio with a small-scale operation, founded at least since 1995, reflecting a mature presence in the art community. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major CMS platforms or advanced frameworks. The site demonstrates good content quality, clear navigation, and basic mobile optimization. However, it lacks modern security headers and cookie consent mechanisms, which are important for compliance and user trust. Hosting is managed via UI-DNS name servers, indicating a stable but modest infrastructure. From a security perspective, the site uses secure form inputs with consent checkboxes for newsletter subscriptions but does not exhibit advanced security policies or incident response information. No blocking or WAF mechanisms are detected, and the domain WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration history. The absence of exposed sensitive data and minimal tracking enhances privacy compliance, though cookie consent should be improved. Overall, the website scores well in content quality and business credibility but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance.

The website schoenearbeit.de represents a small-scale design service operated by Christine Massuthe, a diploma designer based in Berlin, Germany. The site provides basic contact information and a simple presentation of the business but lacks comprehensive business or security policies. The business appears to be a freelance or consultancy service targeting local clients seeking design expertise. Technically, the website is built with basic HTML, CSS, and a small JavaScript file for image swapping. There is no evidence of a CMS or modern frameworks, and the site shows minimal mobile optimization and SEO efforts. Hosting is likely provided by the nameserver operator Warenform.de. No analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks HTTPS information and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or incident response policies are present, which raises compliance concerns especially under GDPR. The contact information is clearly displayed, but no formal security or data protection measures are evident. Overall, the website is functional but basic, with moderate trustworthiness due to clear contact details but limited security and compliance features. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

S

sinma GmbH

sinma.de

60

sinma GmbH is a small German telecommunications company specializing in providing full-service internet solutions tailored for business customers. Their offerings include fiber optic leased lines, DSL with fixed IPs, web hosting, server housing, virtual servers, backup solutions, VPN networks, and related services such as domain management and firewalls. The company emphasizes high availability and security in their network solutions and has been operating since 1991, indicating a long-standing presence in the market. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting German business clients. From a technical perspective, the website employs basic web technologies including JavaScript and CSS without modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile optimization. There is no evidence of analytics or tracking scripts, which suggests minimal user tracking. However, the absence of security headers and explicit SSL/TLS information indicates room for improvement in technical security measures. Security posture evaluation reveals gaps such as missing privacy and cookie policies, lack of security headers, and limited contact information. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The WHOIS data shows partial consistency with the website's claims but lacks detailed registrant information, limiting full legitimacy verification. Overall, the site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or questionable content. The overall risk assessment suggests the company maintains a moderate security and compliance posture suitable for its business scale but should prioritize implementing privacy policies, enhancing security headers, and expanding contact information to improve trust and regulatory compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enforcing HTTPS with proper security headers, and establishing clear incident response and vulnerability disclosure channels.

I-ST.net is a German system house providing IT services and products primarily targeting business customers. The company has a long-established domain since 1997, indicating a stable presence in the IT sector. The website offers customer login functionality and support modules, reflecting a service-oriented business model. However, the site content is basic and lacks modern design and mobile optimization. Technically, the site uses standard HTML, CSS, and JavaScript with external scripts for chat and remote support. Security posture is weak due to lack of HTTPS, missing security headers, and insecure login form implementation. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the business credibility is moderate given the domain age and contact transparency, but technical and security improvements are needed.

I

innovationen-sachsen.de

innovationen-sachsen.de

44

The website at wisawi-vernetzt.de currently presents only a minimal loading spinner with no accessible content, indicating that the site is either under construction, blocked, or improperly configured. The domain is hosted on agenturserver nameservers and uses assets from the Innoloft platform, but no business or contact information is available on the site. This severely limits the ability to assess the business model, market position, or services offered. Technically, the site uses modern JavaScript modules and CSS but lacks visible SEO, accessibility, or performance optimizations. Security posture is weak due to absence of HTTPS confirmation and missing security headers. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site is not currently functional or informative, posing a risk for trust and credibility.

D

Domain-Bestellsystem

domain-bestellsystem.de

58

The website domain-bestellsystem.de serves as a login portal for a domain order system targeted primarily at resellers and partners. The site provides a basic interface for reseller users to enter their credentials and access the ordering system. The business model appears to be a B2B reseller platform within the technology sector, focusing on domain management services. The site content is minimal and functional, lacking detailed business or contact information, privacy policies, or terms of service. The target audience is clearly resellers or partners rather than general consumers. From a technical perspective, the website uses legacy JavaScript libraries such as jQuery 1.4.4 and related plugins, which are outdated and pose potential security risks. The HTML and CSS are basic but functional, with moderate performance and basic mobile optimization. There is no evidence of a modern CMS or advanced frameworks. The site lacks visible security headers and there is no explicit confirmation of HTTPS usage in the provided data, which raises concerns about secure data transmission. The login form uses POST and masks passwords, but overall security posture is moderate due to outdated libraries and missing headers. Security evaluation reveals several areas for improvement. The use of outdated JavaScript libraries is a significant vulnerability. The absence of security headers and unclear SSL/TLS configuration further reduce security confidence. No privacy or cookie policies are present, indicating poor privacy compliance. No contact or incident response information is provided, limiting transparency and trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. WHOIS data is limited but shows professional DNS hosting with no privacy protection, suggesting moderate legitimacy. Overall, the website scores in the average range with notable deficiencies in privacy compliance, security best practices, and business transparency. Strategic recommendations include upgrading all JavaScript libraries, implementing HTTPS with strong SSL/TLS, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

C

Circus Pikard

circus-pikard.at

45

Circus Pikard is a small family circus based in Austria, offering live circus entertainment including artists, clowns, jugglers, and animal acts. The website promotes their 2025 tour and ticket reservation options, targeting a general family audience. The business operates regionally with a focus on live performances and seasonal events such as a winter circus. Technically, the website uses older web technologies like PHP, MySQL, Prototype.js, and Scriptaculous, with a basic but functional design. The site lacks modern CMS or advanced frameworks and shows moderate performance and SEO optimization. Security posture is weak, with no visible HTTPS enforcement or security headers, and no cookie consent mechanism, which raises compliance concerns under GDPR. Contact information is minimal, limited to a phone number and a Facebook page link. Overall, the site is trustworthy for its business purpose but requires improvements in security and privacy compliance.

Acconsento.click is a website providing a login portal for a service named Acconsento, likely related to privacy or consent management given the name. The website is relatively new, with domain registration dating back to 2020, and uses modern web technologies including Laravel backend and Vue.js frontend with Element UI components. The site is hosted behind Cloudflare DNS but lacks DNSSEC and visible security headers, indicating room for improvement in security hardening. No public privacy, cookie, or terms of service policies are present on the login page, and no contact or incident response information is provided, which limits user trust and compliance transparency. The content is minimal and focused solely on authentication, with no marketing or descriptive business information available.

The website kulturnacht-ulm.de serves as the official portal for the Kulturnacht Ulm/Neu-Ulm 2025 cultural event, providing visitors with information about the event's schedule, partners, and participation opportunities. The site targets a broad audience including families and culture enthusiasts in the Ulm and Neu-Ulm region. The business model centers on event organization and cultural promotion, positioning itself as a regional cultural event organizer. Technically, the site uses traditional web technologies including JavaScript and CSS with custom scripts for image galleries and UI elements. The site lacks modern CMS or frameworks and shows basic mobile and accessibility support. Security posture is limited with no detected security headers or cookie consent mechanisms, and no explicit contact or incident response information is available on the main page. The domain's WHOIS data and name servers indicate local institutional hosting, supporting legitimacy. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy compliance measures.

The domain agonyshark.com currently serves a 404 Not Found error page with embedded information describing services provided by Admiral, a company specializing in copyright access control and privacy consent management for digital publishers. The site lacks any actual business content, contact information, or interactive features, indicating it is either inactive or used solely as a service endpoint. The technical infrastructure is minimal, hosted on Google Cloud Platform with AWS DNS servers, and uses HTTPS with frequent certificate rotation. Security practices are described as industry standard, with no executable files hosted and continuous scanning in place. However, the absence of DNSSEC and security headers reduces the overall security posture. The domain registration is recent but consistent with a service domain, registered via NameCheap, Inc. Overall, the site is safe but lacks substantive content and business credibility, resulting in a low AI score and limited insights.

The Petrucci Music Library - Canada (PML-CA) is a specialized portal providing access to music scores stored on Canadian servers, targeting users in Canada and countries with similar copyright laws. It operates as a non-commercial digital library, distinct from but aligned in objectives with IMSLP. The website content is static and informational, with basic design and limited interactivity, focusing on delivering free access to music scores within legal boundaries. The portal links to related IMSLP resources and forums, enhancing its utility for music enthusiasts. Technically, the website uses simple HTML and CSS without modern frameworks or CMS detected. Hosting is provided by Project Leonardo Limited. The site lacks mobile optimization and advanced SEO or accessibility features, indicating a basic digital maturity level. No analytics, tracking, or advertising scripts are present, reflecting a privacy-conscious approach but also limiting insights into user engagement. From a security perspective, the site does not display security headers or evidence of HTTPS from the provided data, and DNSSEC is not enabled, which are areas for improvement. No forms or user input fields reduce attack surface, but the absence of published security policies or incident response contacts suggests limited formal security governance. WHOIS data shows a domain created in 2013 with privacy protection, consistent with the non-commercial nature and no suspicious patterns detected. Overall, the site is safe and trustworthy for its niche audience but would benefit from enhanced security practices, privacy compliance improvements, and technical modernization to improve user experience and resilience.

E

ELDAT EaS GmbH

eldat.de

45

ELDAT EaS GmbH is a German technology company specializing in the development and manufacturing of radio control systems, data radio, and microcontroller-based products. The company targets a professional audience interested in wireless communication and control technologies, maintaining a niche market position with a focus on product development and production. The website content is primarily in German with an English option, reflecting a global outreach. The company maintains an active presence with regular product updates and social media engagement on platforms such as Facebook, Instagram, and LinkedIn. Technically, the website is built with standard HTML and CSS, hosted on German-based servers (rzone.de). The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS indications. SEO is basic but sufficient, with well-structured meta tags. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. There is no published security policy or incident response contact, and no cookie consent mechanism is present, indicating gaps in GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the company's German location and business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced security measures, GDPR compliance improvements, and transparency in security policies to strengthen its risk posture and user trust.

The domain libraryfacts.com currently serves as a 404 Not Found error page with no accessible business content. It is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The domain is hosted on Google Cloud Platform and employs HTTPS with good SSL practices, but lacks DNSSEC and security headers. No privacy or cookie policies, contact information, or business details are present on the site, limiting its transparency and user trust. The domain registration is consistent and legitimate, registered via NameCheap since 2020, with no privacy protection enabled. Overall, the site appears to be a placeholder or service endpoint rather than a customer-facing website.

The website jb-fotografie.de represents a small photography business specializing in family photos, passport photos, portrait, and wedding photography services primarily targeting a German-speaking audience. The site content is minimal but relevant to the business domain, with basic branding and a simple user interface. The technical infrastructure is based on a shared hosting platform (hpage), utilizing standard HTML, CSS, and JavaScript without advanced frameworks or CMS beyond the hosting provider's platform. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies, which impacts compliance and trust. No contact information or forms are present, limiting user engagement and transparency. Overall, the site is functional but basic, with moderate risk due to missing security and privacy best practices.

AVC Music is an e-commerce business focused on music products, offering a multilingual online shop experience. The website is relatively basic, featuring outdated Flash content and minimal interactive or modern web features. The domain has been registered since 2004, indicating a longstanding presence, but the lack of detailed business contact information and policies reduces its perceived professionalism and trustworthiness. Technically, the site lacks modern security practices such as HTTPS enforcement and security headers, and it does not provide privacy or cookie policies, which are critical for compliance and user trust. Overall, the website's digital maturity is low, with significant room for modernization and security improvements.

B

Benedikt IT Services e.U.

bits.at

59

Benedikt IT Services e.U. (BITS) is a small Austrian IT service provider specializing in personal programming and professional website development. The company targets graphic designers, agencies, and clients seeking pixel-accurate, SEO-friendly, and responsive websites. Their business model focuses on custom web development, ongoing maintenance, and content management support, leveraging a network of collaborators for graphic and textual services. The website presents a professional portfolio showcasing various projects, indicating a solid market presence within its niche. Technically, the website is built on WordPress using the Elementor framework, with a modern tech stack including PHP, JavaScript, and MySQL. The site is mobile-optimized and performs moderately well, though some accessibility and SEO enhancements could be made. Security-wise, HTTPS is enforced, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and hardening. Overall, the security posture is moderate with no critical vulnerabilities detected, but the lack of explicit security policies and incident response contacts suggests limited formal security governance. The domain WHOIS data aligns well with the business identity, supporting legitimacy. The site uses minimal tracking via Plausible Analytics, respecting user privacy. Strategically, BITS should enhance its security headers, implement GDPR-compliant cookie consent, and publish clear security and incident response policies to strengthen trust and compliance. These steps will improve their security posture and business credibility in a competitive IT services market.

Project Leonardo operates as an internet service provider specializing in hosting online libraries that distribute free content in arts and sciences. The website serves as a portal linking affiliated libraries such as IMSLP-EU and PML-CA, focusing on copyright-compliant content distribution. The business model centers on providing optimized hosting resources tailored to legal and performance requirements. The market position is niche, catering to a specialized audience of online library users and contributors. Technically, the website is simple and static, built with basic HTML and CSS without modern frameworks or CMS detected. There is no evidence of advanced analytics, tracking, or dynamic content. The site lacks mobile optimization and accessibility features, indicating a low level of digital maturity. Hosting details are not explicit, but server locations are optimized for copyright compliance. From a security perspective, the domain is well-registered with a reputable registrar and has a long history, which supports legitimacy. However, the site lacks DNSSEC, security headers, and visible HTTPS enforcement, which are notable gaps. No incident response or security policies are published, and no cookie consent mechanism is present. These factors reduce the overall security posture and privacy compliance. Overall, the website is functional and trustworthy for its niche purpose but would benefit from modern security and privacy enhancements. Strategic improvements in HTTPS enforcement, security headers, and privacy policies would strengthen its risk profile and user trust.

The IMSLP Journal website is a small-scale educational content site focused on music performance and the cultural value of studying music. It features a single article highlighting a university orchestra's outdoor concert experience. The site lacks comprehensive business information, contact details, or interactive features, indicating a limited digital presence. Technically, the site is basic HTML and CSS hosted behind Cloudflare DNS but lacks modern security features such as DNSSEC, HTTPS enforcement, and security headers. There are no privacy or cookie policies, and no forms or tracking scripts are present, suggesting minimal data collection and user interaction. The security posture is weak due to missing HTTPS and security headers, and the site does not demonstrate compliance with GDPR or other privacy regulations. Overall, the site is low risk but also low maturity in terms of security and privacy compliance.

LeCambresien.tv is a local media outlet providing a television magazine focused on the city of Cambrai, France. The website primarily distributes video content through embedded YouTube videos and maintains a presence on Facebook. The business operates as a small media entity founded around 2012, delivering local news and information to residents and interested viewers. The content is basic but relevant to its target audience, with a straightforward web presence and moderate branding consistency. Technically, the website uses standard HTML, CSS, and JavaScript with integrations for Facebook SDK, Google Analytics, and AddThis social sharing tools. Hosting is provided by OVH sas, a reputable provider. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS usage. SEO and accessibility are basic, with legacy charset encoding and minimal meta tags. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. No contact information or incident response channels are provided, limiting transparency and trust. The domain registration is consistent and stable, with protective domain status flags and an appropriate age for the business. Overall, the website is functional for its purpose but requires improvements in privacy compliance, security hardening, and user trust elements to enhance its digital maturity and reduce risk exposure.

The International Music Score Library Project - Europe (IMSLP-EU) is a regional portal dedicated to providing free access to music scores stored on servers physically located in Europe. It operates independently from the main IMSLP project but shares similar objectives, focusing on compliance with European copyright regulations. The website offers access to scores, a music blog (IMSLP Journal), and forums for community engagement. The hosting is provided by Project Leonardo Limited, an Italian-based service provider, aligning with the European focus of the project. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced accessibility features, and no analytics or tracking technologies are present. Security measures such as HTTPS and security headers are not confirmed in the provided data, indicating room for improvement in security posture. Privacy compliance is minimal, with a privacy policy linked externally but no cookie policy or consent mechanism. From a security perspective, no WAF or blocking mechanisms are detected, and the content is fully accessible. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosures suggests a low maturity level in security governance. The domain registration is consistent with the business purpose and geographic focus, enhancing trustworthiness. Overall, IMSLP-EU serves a niche audience interested in European-hosted music scores with a straightforward, functional website. Strategic improvements in security, privacy compliance, and technical modernization would enhance trust and user experience.

IREN.IT is a website offering personalized email address services under the iren.it domain and a collection of related personal domains. The site targets individuals seeking memorable and personalized email addresses, providing webmail access and configuration tutorials. The business appears to be related to the energy sector in Italy, with a domain age dating back to 2010, indicating a mature presence. However, the domain is currently expired, which poses risks to service continuity and trust. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks HTTPS enforcement and security headers, which weakens its security posture. No privacy or cookie policies are present, and no analytics or tracking scripts are detected, indicating minimal user tracking but also a lack of compliance transparency. Security evaluation reveals critical issues such as the expired domain status and absence of DNSSEC, which could expose the domain to hijacking or DNS attacks. The site does not provide direct contact emails or phone numbers, relying solely on a contact form. Overall, the security posture is weak, and privacy compliance is poor. The overall risk assessment is moderate to high due to the expired domain and missing security best practices. Strategic recommendations include immediate domain renewal, enabling HTTPS with valid certificates, implementing DNSSEC, publishing privacy and cookie policies, and adding security headers to improve trust and compliance.

P

.BZH - L'extension internet de la Bretagne

pik.bzh

52

The website www.pik.bzh serves as a regional internet domain extension portal for Brittany, France, promoting the .bzh domain. It is built on WordPress using the Divi theme and optimized with WP Rocket. The site targets a general audience interested in Brittany and regional internet identity. Technically, the site employs modern web fonts and lazy loading scripts but lacks advanced security headers and visible privacy or cookie policies. No contact or business registration information is explicitly provided, which limits trust and compliance assessment. Security posture is basic with no evident vulnerabilities but also no advanced protections or disclosures. Overall, the site is functional and moderately optimized but requires improvements in privacy, security, and business transparency to enhance credibility and compliance.

Domain Union AG operates as a small-sized domain registration and web hosting provider primarily serving German-speaking customers. The company offers affordable .de domain registrations with additional services such as email hosting, FTP access, and SSL certificates. Their market position is focused on cost-effective solutions with quick domain registration turnaround times, supported by customer testimonials emphasizing speed and service quality. Technically, the website is built on basic HTML and CSS without modern frameworks or CMS, showing moderate performance but lacking mobile optimization and accessibility features. Security posture is limited with no visible HTTPS enforcement or security headers, and privacy compliance is minimal despite the presence of a privacy policy page. Overall, the website is functional but could benefit from modernization and enhanced security practices.

The website mairie-venoy.fr serves as the official online presence for the Mairie de Venoy, a local government entity in France. It provides residents and visitors with municipal information, administrative procedures, community news, and contact details. The site targets local citizens and those interested in the commune's affairs, offering a basic but functional information portal. The business model is typical of government websites, focusing on public service and information dissemination rather than commercial activities. From a technical perspective, the website employs traditional web technologies including HTML, CSS, and JavaScript libraries such as Prototype.js and Scriptaculous, alongside LightboxJS2 for image display. Hosting is provided by OVH, a reputable provider. However, the site lacks modern CMS frameworks and shows signs of aging technology, with limited mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are minimal. Security posture is moderate but could be significantly improved. The site uses HTTPS and includes Google Analytics for visitor tracking but lacks critical security headers and modern security practices. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and trustworthy as a local government portal but requires updates to its security, privacy compliance, and technical infrastructure to meet modern standards and improve user experience. Strategic improvements in these areas will enhance trust, compliance, and operational resilience.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

ABCproZDRAVÍ.cz is a Czech Republic-based small e-commerce business specializing in health products, dietary supplements, and cosmetics. Operating since 1995, the company offers a range of products focused on healthy nutrition, immunity strengthening, and weight management. The website provides product listings, descriptions, and an online shopping cart, targeting health-conscious consumers in the Czech market. The business model centers on direct online sales with expert advisory services. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. Security posture is average; HTTPS is assumed but no advanced security headers or anti-CSRF protections are evident. Privacy compliance is basic, with cookie consent implemented but no detailed GDPR policy found. The absence of WHOIS data limits domain trust verification, though the website content and business claims appear consistent and legitimate. Overall, the site is functional but would benefit from technical and security enhancements to improve trust and user experience.

S

spoilercentrum.cz

spoilercentrum.cz

48

Spoilercentrum.cz is a Czech Republic-based online retailer specializing in automotive tuning parts and accessories. The website offers a wide range of products including spoilers, filters, suspension components, and custom carbon fiber parts targeting car enthusiasts and vehicle owners interested in aftermarket modifications. The business operates primarily as an e-commerce platform with a niche focus on automotive tuning. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery 1.7.2, with some legacy components such as an older jQuery version. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and uses outdated libraries which could pose risks. The absence of WHOIS data limits domain trust assessment, though the website provides clear contact information and integrates trusted Czech e-commerce widgets. Overall, the site is functional and professional but could benefit from technical and security improvements to enhance trust and compliance.

The website www.deky.eu is a Czech e-commerce platform specializing in the sale of bedding products including blankets, pillows, bed sheets, and mattress protectors. It emphasizes Czech manufacturing and quality products suitable for allergy sufferers. The site is structured with clear navigation and product categorization, targeting general consumers in the Czech Republic seeking home textile products. Technically, the site uses standard web technologies such as jQuery and custom JavaScript, with basic mobile optimization and SEO practices. However, there is no evidence of HTTPS enforcement or advanced security headers, which poses a moderate security risk. Privacy compliance is limited, with no explicit privacy policy page found, though a cookie consent mechanism is implemented. Contact information is not clearly provided, which may impact user trust and support accessibility. Overall, the site appears legitimate and functional but would benefit from enhanced security and privacy measures.

M

- MojeNákupy.cz

mojenakupy.cz

40

MojeNákupy.cz is a Czech online retail store specializing in a broad assortment of household, garden, and tool products. The website offers shopping without mandatory registration and free shipping for orders exceeding 10,000 CZK. The business targets Czech consumers seeking convenient online access to diverse product categories including cleaning supplies, electronics, and pest control. The market position appears to be a niche local e-commerce retailer with a basic but functional online presence. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Facebook SDK, and Heureka widgets for social and marketing integration. The site lacks advanced CMS or modern frameworks and shows basic mobile optimization and SEO practices. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Privacy and cookie policies are not found, indicating compliance gaps. WHOIS data is missing, reducing trust and raising concerns about domain legitimacy. Overall, the site is functional for retail but requires improvements in security, privacy compliance, and transparency to enhance business credibility and user trust.

A

ALTER s.r.o.

alter-hk.cz

49

ALTER s.r.o. is a Czech Republic-based company specializing in the wholesale and manufacturing of cleaning, disinfecting, and hygiene products. With over 24 years of market presence, the company serves primarily registered business customers, offering a broad range of products including cleaning agents, packaging materials, and gastro supplies. The website reflects a well-established regional wholesaler with a clear B2B business model and a focus on professional clientele. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, but uses an outdated jQuery version which poses security risks. The site is moderately optimized for performance and mobile use, with basic accessibility and good SEO practices. Security posture is moderate; HTTPS is used, and cookie consent mechanisms are implemented, but there is a lack of modern security headers and the use of outdated libraries. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from technical and security updates.

L

Lékárna Srdcovka

lekarnasrdcovka.cz

45

Lékárna Srdcovka operates as a local and online pharmacy based in Prostějov, Czech Republic, offering a wide range of health-related products including over-the-counter medicines, supplements, and cosmetics. The business targets Czech-speaking customers seeking convenient access to pharmaceutical products both online and in physical stores. The website supports e-commerce transactions and provides services such as e-prescription reservations, positioning itself as a trusted regional healthcare retailer. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information suggest a legitimate business. Overall, the site maintains a moderate security posture with recommendations to improve privacy and security practices. The overall risk assessment is moderate with a score of 74 out of 100, reflecting good content quality and business credibility but some technical and compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trustworthiness.

M

MK software, s.r.o.

mkweb.cz

47

MK software, s.r.o. is a Czech-based small technology company specializing in custom e-commerce solutions, web design, and bespoke software development primarily targeting B2B and B2C clients. The company offers tailored internet shops, CMS-based websites, and integrated information systems with a focus on SEO and online marketing services. Their market position is supported by multiple client references and a partnership with ESET antivirus solutions. Technically, the website is built on standard web technologies including HTML, CSS, JavaScript, PHP, and SQL, with a custom CMS implied. The site demonstrates good content quality and SEO optimization but lacks modern security practices such as HTTPS enforcement and security headers. Privacy compliance is minimal, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is implemented. The absence of WHOIS data limits domain legitimacy verification, but the website content and client references suggest a legitimate business presence. Overall, the site scores moderately on AI evaluation with room for improvement in security and privacy compliance.

S

Svaz kulturistiky a fitness České republiky

skfcr.cz

43

The Svaz kulturistiky a fitness České republiky (SKFČR) is the official national federation for bodybuilding and fitness in the Czech Republic. The website serves as an information portal for athletes, clubs, and enthusiasts, providing event calendars, competition results, regulatory information, and educational content. The federation maintains partnerships with fitness nutrition brands and media outlets, reinforcing its position in the national sports community. The website content is primarily in Czech and targets the local bodybuilding and fitness community. Technically, the site uses standard web technologies with embedded Google Analytics and Facebook Pixel for user tracking. However, the site lacks modern CMS features and advanced mobile optimization.

M

Mgr. Marek Sivčo

mareksivco.sk

56

The website mareksivco.sk represents the personal and professional portfolio of Mgr. Marek Sivčo, a Slovak teacher, web developer, poet, and podcaster. The site highlights his extensive experience in web development, teaching engagements, creative works, and supported projects. It targets individuals interested in IT education, Slovak geek culture, and creative arts. The business model is centered on personal branding and educational content delivery, with a niche market position in Slovakia and the broader Slovak-speaking community. Technically, the website employs a modern tech stack including PHP, WordPress, JavaScript, and various Adobe creative tools. Hosting is provided by Websupport, with DNSSEC enabled and HTTPS properly configured, indicating a secure and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks security headers and formal security policies. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies are found, which are notable compliance gaps. The absence of forms reduces attack surface but also limits user interaction. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

N

Le coin de web de Renaud - Illustrations et dessins divers ...

noche.fr

45

The website noche.fr is a personal portfolio site for an artist named Renaud, showcasing a variety of illustrations, drawings, and animation backgrounds. The site targets art enthusiasts and fans of fantasy and animation art. It operates primarily as a showcase without visible commercial transactions or e-commerce features. The domain is registered since 2005 with OVH, a reputable French registrar, consistent with the site's French language and content. Technically, the site uses classic web technologies including HTML, CSS, JavaScript, and jQuery 1.4.2, with integrations for Google Analytics and social media widgets. The design and navigation are basic but functional, with moderate performance and limited mobile optimization. Security posture is modest, with no visible security headers and use of outdated JavaScript libraries, which may pose risks. Privacy and cookie policies are absent, indicating poor privacy compliance. Overall, the site is moderately trustworthy but would benefit from security and compliance improvements.

The website at yfdnzfa.com presents minimal accessible content, primarily consisting of an invisible tracking pixel and an embedded iframe sourced from unrelated external domains. There is no visible business information, contact details, or user-facing content. The domain WHOIS data is suspicious, showing a creation date in the future (July 2025) and listing the registrar as PDR Ltd., a domain registrar service, without any registrant organization details. This raises concerns about the legitimacy and purpose of the domain. Technically, the site uses basic HTML and JavaScript but lacks modern security headers, DNSSEC, and privacy compliance mechanisms. The embedded third-party content suggests potential user tracking and profiling. Overall, the site appears to be a placeholder or a tracking intermediary rather than a legitimate business website.

H

Helexia

helexia.com.br

55

Helexia is a Brazilian company specializing in energy solutions with a focus on sustainable and renewable energy projects. The website is professionally designed using WordPress with Elementor and optimized with Yoast SEO, targeting business clients in the energy sector. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a credible business presence but would benefit from enhanced security and compliance documentation.

T

TROPICANA - La Plage | Restaurant de plage par la Tarte Tropézienne

tropicanalaplage.com

38

The website 'TROPICANA - La Plage' represents a beach restaurant business associated with the Tarte Tropézienne brand, targeting general public and tourists in France. The site provides information about their hospitality and food services but lacks detailed business and contact information. Technically, the site is built on WordPress using the Divi theme, with moderate performance and good mobile optimization. However, the security posture is weak due to missing security headers and lack of HTTPS verification in the provided data. Privacy compliance is minimal, with no visible privacy or cookie policies, and no GDPR compliance indicators. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible and safe for general audiences but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

The website roseaux-dansants.org is a small, community-focused platform dedicated to honoring Joanna Macy, a prominent figure in deep ecology. It primarily serves as a memorial and educational resource for individuals interested in ecological and spiritual teachings. The site content is minimalistic and static, with basic HTML and CSS, lacking modern web design and mobile optimization. There are no interactive elements, forms, or data collection mechanisms present. Technically, the site is hosted on servers associated with phpnet.org and uses no advanced frameworks or CMS. Security posture is weak, with no HTTPS enforcement, no security headers, and no DNSSEC enabled. Privacy compliance is absent, with no privacy or cookie policies found. The domain is legitimate, registered since 2008 with Tucows Domains Inc., and shows no suspicious registration patterns. Overall, the site is safe but lacks professional polish, security best practices, and privacy compliance.

The website permaculture.fr serves as the French network for permaculture, promoting ecological design principles and supporting permaculture projects and education in France. It acts as a hub connecting various French permaculture actors and organizations, including associations and educational institutions. The site provides information about permaculture, links to partner organizations, and contact via email. The domain is well-established since 2008 and hosted by Infomaniak Network SA, a reputable provider. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking. The site lacks advanced frameworks or CMS and shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No forms collecting sensitive data are present, reducing risk exposure. From a security perspective, the site uses HTTPS (implied by URL), but no security headers were detected in the provided data. There is no visible privacy or cookie policy, nor GDPR compliance indicators, which is a compliance gap. No incident response or vulnerability disclosure information is provided. The site does not appear to be behind a WAF or security challenge, and no suspicious WHOIS patterns were found, indicating a legitimate and stable domain. Overall, the site is safe and suitable for general audiences, with content focused on permaculture education and networking. Strategic improvements include adding privacy and cookie policies, enhancing security headers, improving mobile responsiveness, and publishing GDPR compliance information to strengthen trust and compliance posture.

L

Léo Chiron

leochiron.fr

57

Léo Chiron is a freelance full-stack web developer and webmaster based in France, with over 8 years of experience. The website serves as a professional portfolio showcasing his expertise in web development, SEO, WordPress, and site maintenance. The business targets clients needing custom website creation, e-commerce platforms, and ongoing site support. Technically, the site uses a modern tech stack including PHP, JavaScript, SQL Server, and integrates Google services such as Maps, reCAPTCHA, and Tag Manager. The hosting is provided by o2switch, a French hosting provider. Security posture is solid with HTTPS and reCAPTCHA protection on forms, but lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Agentura Bora operates the website pronajemchalup.net, a specialized online catalog offering rental listings for cottages, chalets, and pensions primarily in the Czech Republic, with a focus on southern Bohemia and mountain regions such as Šumava and Krkonoše. The business targets families and tourists seeking vacation accommodations, providing a searchable database with photos, pricing, and booking forms. The company has a long-standing presence since 2004, reinforcing its market credibility in the regional hospitality sector. Technically, the website is built on a custom stack using basic HTML, CSS, and JavaScript, with integration of third-party analytics and retargeting scripts. However, it lacks modern security features such as HTTPS, DNSSEC, and security headers, which exposes it to potential risks. The site is not mobile optimized and has limited accessibility features, indicating room for technical modernization. From a security and compliance perspective, the site does not provide privacy or cookie policies, nor GDPR compliance statements or a data protection officer contact. The absence of HTTPS and security headers further weakens its security posture. Contact information is available via phone and a contact form, but no company email addresses are published. The site does maintain a terms of service page. Overall, while the business model and content quality are solid for its niche, the website requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user safety.

WP channel is a specialized business focused on providing expert services and content related to WordPress and WooCommerce platforms. Established in 2009 and based in France, it targets WordPress users, developers, and businesses seeking professional guidance and solutions. The website presents a professional design with good content relevance and user experience, catering well to its niche audience. Technically, the site is built on WordPress CMS, hosted by Scaleway SAS, and uses Cloudflare DNS services, indicating a modern and reliable infrastructure. Performance and mobile optimization are adequate, though there is room for improvement in accessibility and SEO features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is legitimate and trustworthy but would benefit from improvements in privacy compliance and security best practices.

A

Affinity Fundraising Registration

afrportal.com

53

The website afrportal.com hosts a customer login portal titled 'Affinity Fundraising Registration' for the Affinity Single Portal® service. The portal appears to be designed for customers to access fundraising management services. The domain was registered in early 2022 and is currently active with Cloudflare DNS services. The site uses basic web technologies including HTML, CSS, JavaScript, and jQuery, with a slider captcha (QapTcha) implemented to prevent automated login attempts. The content is minimal and focused solely on login functionality without additional business or policy information. From a technical perspective, the site employs standard web technologies but lacks advanced security headers and visible HTTPS enforcement details in the provided data. The use of Cloudflare DNS and a reputable registrar adds some trustworthiness. However, the absence of privacy, cookie, or terms of service policies, as well as lack of contact information, limits the site's compliance and transparency. Security posture is moderate with some anti-bot measures but missing critical security headers and no visible multi-factor authentication. The domain registration data is consistent with the business purpose and shows no suspicious patterns. Overall, the site is functional but basic, with room for improvement in security, privacy compliance, and user trust signals. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, improving form security, and providing clear contact information to enhance trust and compliance.