High-risk security reports

V

Vasárnap.hu

vasarnap.hu

29

Vasárnap.hu is a Hungarian Christian conservative news portal established in 2020, providing news, opinion pieces, and multimedia content targeted at a Hungarian-speaking conservative Christian audience. The website leverages WordPress CMS with a modern tech stack including Bootstrap, Vue.js, and various plugins for analytics, polls, and newsletters. It maintains an active social media presence across major platforms such as Facebook, YouTube, Instagram, Spotify, and TikTok. The site enforces HTTPS and uses Google Analytics with opt-out capabilities, but lacks a cookie consent mechanism and comprehensive security headers. Privacy and legal pages are present, indicating basic GDPR compliance, though no explicit security or incident response policies are published. Overall, the website demonstrates a good level of professionalism and content quality suitable for its niche audience.

H

HWSW Informatikai Hírmagazin

hwsw.hu

40

HWSW.hu is a Hungarian IT news magazine providing comprehensive coverage of information technology topics including news, product tests, videos, podcasts, and career opportunities. The website targets IT professionals and technology enthusiasts primarily in Hungary. It operates as an online media platform with advertising and event promotion as key revenue streams. The site is well-established with consistent branding and good content quality. Technically, it employs standard web technologies such as Google Analytics and Disqus for comments, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though lacking explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Médiapiac

mediapiac.com

28

Médiapiac is a Hungarian media and advertising platform established in 2008, providing news articles and advertising services primarily targeting a general Hungarian audience. The website uses WordPress CMS with the Bricks theme builder and is hosted with Cloudflare DNS services. The technical infrastructure is modern and supports mobile optimization and SEO best practices. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled and domain registration consistent with the website's Hungarian focus, but DNSSEC is not enabled and security headers are missing. Advertising and tracking scripts are present, including Google AdSense and Microsoft Clarity, with some analytics scripts commented out. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Coloré

colore.hu

46

Coloré.hu is a Hungarian lifestyle media website targeting modern women with content spanning health, fashion, family, culture, and entertainment. Founded in 2021, it operates as a medium-sized online media publisher with a business model based on advertising and sponsored content. The site features a professional design, clear navigation, and a comprehensive content offering that is regularly updated. Technically, it is built on WordPress with WooCommerce and Elementor, integrating multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and PubMatic. Privacy compliance is well addressed with a visible cookie consent mechanism and a detailed privacy policy in Hungarian. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements.

F

Femina Média Kft.

femina.hu

49

Femina.hu is a well-established Hungarian online women's lifestyle magazine founded in 2000, operated by Femina Média Kft. The site offers a broad range of content including celebrity news, health, beauty, psychology, parenting, recipes, and quizzes, targeting primarily Hungarian-speaking women interested in lifestyle topics. The website demonstrates a mature digital infrastructure with extensive use of third-party analytics, advertising networks, and a GDPR-compliant consent management platform. Security posture is solid with HTTPS enforced and anonymized analytics, though some security headers could be improved. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences. Contact mechanisms rely on a third-party authentication service (Indapass), with no direct emails or phone numbers publicly listed. Overall, Femina.hu presents a professional, trustworthy, and content-rich media platform with good compliance and security practices.

H

HungaroMet Magyar Meteorológiai Szolgáltató Nonprofit Zrt.

met.hu

29

HungaroMet Magyar Meteorológiai Szolgáltató Nonprofit Zrt. is the official Hungarian government meteorological service, providing comprehensive weather forecasts, climate data, air quality monitoring, and specialized meteorological services for sectors such as aviation and agriculture. The organization holds a strong market position as the national authority in meteorology, serving a broad audience including the general public, government agencies, and specialized industries. The website reflects this role with rich, relevant content and consistent branding. Technically, the website employs a custom or legacy CMS with jQuery 1.6.2 and Font Awesome for UI elements, alongside Google Analytics for visitor tracking. While the site is functional and moderately optimized, there is room for modernization, particularly in updating JavaScript libraries and enhancing mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating compliance with GDPR. However, additional security headers are absent, and the use of an outdated jQuery version could pose vulnerabilities. No exposed sensitive data or critical security issues were detected. Incident response information and vulnerability disclosure mechanisms are not explicitly provided, representing an area for improvement. Overall, HungaroMet's website is a trustworthy and authoritative source for meteorological information in Hungary, with a solid security posture and good privacy compliance. Strategic enhancements in security headers, library updates, and incident response transparency would further strengthen its resilience and user trust.

V

vesilta.hu

twn.hu

28

TWN.hu is a Hungarian media website offering a broad range of news and entertainment content including daily news, celebrity updates, lifestyle articles, crime reports, and sports news. The site targets a general Hungarian-speaking audience and operates primarily on an advertising-supported business model. The website is branded consistently and provides a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are present, indicating basic GDPR compliance. Technically, the site uses a modern technology stack including jQuery, Bootstrap, Owl Carousel, and Video.js, alongside multiple advertising and analytics scripts such as Google Analytics and Facebook SDK. The site is served over HTTPS, but lacks explicit security headers in the provided data, which could be improved. Performance is moderate, and SEO optimization is basic but present. From a security perspective, the site demonstrates a moderate security posture with HTTPS and cookie consent mechanisms but lacks visible security policies or incident response information. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data is consistent with the website's Hungarian media focus, supporting legitimacy. Overall, TWN.hu is a functional and moderately secure media website with room for improvement in security headers and explicit incident response policies. The site is suitable for general audiences and maintains a professional online presence.

K

Kontroll

kontroll.hu

29

Kontroll.hu is a Hungarian online media platform delivering news, opinion pieces, and video content primarily targeting Hungarian-speaking audiences interested in current affairs and societal issues. The site also operates a webshop, indicating a diversified business model combining media content with e-commerce. The platform positions itself as an independent media outlet aiming to bridge opinion bubbles and provide a voice to diverse perspectives. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO and mobile optimization. It employs consent management tools and integrates advertising and analytics services like InMobi and Google Tag Manager, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, includes standard security headers, and uses a consent platform, but lacks explicit published security policies or incident response contacts. Overall, Kontroll.hu demonstrates a solid security posture with room for improvement in transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts.

S

Selly Sp. z o.o.

selly.pl

29

Selly Sp. z o.o. operates a modern e-commerce SaaS platform primarily targeting Polish online retailers and wholesalers. The platform offers comprehensive services including store setup, B2B wholesale capabilities, custom graphic templates, and extensive integrations with payment and accounting systems. The company emphasizes SEO optimization and marketing support, positioning itself as a competitive player in the Polish e-commerce market since 2015. Technically, the website is built on WordPress with the Flatsome theme, leveraging modern JavaScript libraries and Google Tag Manager for analytics. The site is well-optimized for performance and mobile devices, with clear navigation and professional design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be better documented. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. The absence of public WHOIS data for the domain slightly reduces trust but is mitigated by the company's visible certifications, client logos, and professional content. Overall, the website presents a trustworthy and mature digital presence suitable for its business model.

F

financialmedia

10x10.ch

46

10x10.ch is a specialized online media platform operated by financialmedia, focusing on ETFs, index funds, Bitcoin, and cryptocurrency investment education primarily for German-speaking investors. The website offers regularly updated news articles, columns, and partner content, supported by a subscription-based PDF magazine and event offerings. The platform leverages WordPress CMS with modern SEO and advertising integrations, including Google Analytics and DoubleClick. Security posture is solid with HTTPS and security headers, though improvements are recommended in privacy compliance and vulnerability disclosure. Overall, the site is professionally maintained, trustworthy, and serves a niche finance audience effectively.

L

Lagooni

lagooni.com

49

Lagooni is a specialized healthcare company based in the Netherlands, providing custom shower and toilet wheelchairs tailored for adults and children. Their business model focuses on personalized fitting, comfort, and safety, serving individuals with mobility needs as well as healthcare professionals and advisors. The website demonstrates a strong market position within its niche, supported by detailed product offerings, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Divi theme, incorporating modern web technologies and multilingual support. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS and security headers, but lacks a publicly available security policy or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which slightly impacts overall trust. Strategic recommendations include publishing security and incident response policies and improving accessibility features.

W

Weimarnetz

weimarnetz.de

45

Weimarnetz is a community-driven initiative based in Weimar, Germany, focused on providing free wireless internet access as part of the broader Freifunk movement. The website serves as an informational and engagement platform for local community members and technology enthusiasts interested in free and open wireless networks. It offers resources such as firmware development, network monitoring, and community news. The business model is non-commercial and relies on volunteer contributions and donations, positioning Weimarnetz as a small but important player in the local technology and non-profit sector. Technically, the website is built on October CMS and leverages modern web technologies including JavaScript libraries like Moment.js, Leaflet.js for mapping, and Converse.js for anonymous chat functionality. Hosting is provided by a German hosting provider (in-berlin.de), and the site uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization, though accessibility and SEO optimizations are basic. Analytics are implemented via Piwik/Matomo, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security policies or incident response contacts. There is no cookie consent mechanism, which is a compliance gap under GDPR. No vulnerabilities or suspicious patterns were detected, but improvements are recommended in security headers, privacy compliance, and transparency. Overall, Weimarnetz presents a trustworthy and community-focused web presence with good technical foundations but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to strengthen trust and compliance.

M

MMOnline

mmonline.hu

46

MMOnline is a Hungarian media and marketing news portal established in 2010, providing industry news, insights, and podcasts targeted at marketing and media professionals. The website operates on a WordPress CMS platform with modern SEO and analytics tools integrated, including Google Analytics, Gemius, and Quantcast. The site employs a cookie consent mechanism compliant with GDPR regulations, ensuring user privacy preferences are respected. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. The site is well-branded and professionally designed, offering a good user experience with clear navigation and mobile optimization.

S

Swisscham Hungary

swisscham.hu

39

Swisscham Hungary is a well-established chamber of commerce focused on fostering economic and trade cooperation between Swiss and Hungarian companies. The organization offers its members business information, partner search opportunities, and networking events to deepen bilateral relations. The website reflects a professional and consistent brand image, targeting business professionals and companies interested in Swiss-Hungarian economic ties. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO and Google Analytics, indicating a mature digital presence. Security-wise, the site enforces HTTPS and uses reCAPTCHA for forms but lacks explicit security headers and published incident response policies. Overall, the site is accessible, GDPR compliant, and trustworthy, with room for improvement in security best practices and transparency.