High-risk security reports

M

M15 Restaurant Kft.

kiosk-budapest.hu

40

KIOSK Budapest is a well-established hospitality business operating a modern Hungarian restaurant located in the heart of Budapest. The company offers a range of services including dining, event hosting, catering, and online ordering, supported by a mature digital presence and multiple related brands. The website is professionally designed with good content quality and clear navigation, targeting both local and international visitors seeking authentic and contemporary Hungarian cuisine. Technically, the site leverages Webflow CMS, Cloudflare hosting, and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. While the SSL configuration is strong with TLS 1.3 support, security headers like HSTS are not enabled, representing an area for improvement. The site implements comprehensive cookie consent mechanisms and maintains GDPR compliance. Overall, the security posture is solid but could benefit from enhanced HTTP security headers and OCSP stapling. The domain is mature and consistent with the business claims, supporting high trustworthiness. Strategic recommendations include enabling HSTS, adding security headers, and improving performance to enhance user experience and security.

M

Mediarey Hungary Services Zrt.

forbes.hu

40

Forbes.hu is a mature Hungarian business media website operated by Mediarey Hungary Services Zrt., providing high-quality business, finance, lifestyle, and culture content targeted at Hungarian-speaking professionals and general readers. The site uses a WordPress CMS with React components and integrates multiple advertising and tracking technologies to support its business model, which includes advertising and premium subscriptions. Technically, the site is hosted behind Cloudflare and uses modern web technologies but lacks a valid SSL certificate, resulting in HTTP-only access which is a significant security concern. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism implemented via Cookiebot. The WHOIS data confirms the domain's maturity and legitimacy, consistent with the business claims. Overall, the site is professionally designed and content-rich but requires urgent security improvements to enable HTTPS and strengthen its security posture.

D

Duna Médiaszolgáltató Nonprofit Zrt.

dunanap.com

48

Dunanap.com is the official website for the DUNA NAPOK cultural festival scheduled for May 30 to June 1, 2025, in Hungary. The site promotes a variety of cultural and entertainment events including concerts, children's programs, exhibitions, running races, and culinary competitions. The business behind the site is Duna Médiaszolgáltató Nonprofit Zrt., a medium-sized media and nonprofit entity focused on cultural event organization. The website targets festival attendees, families, and cultural enthusiasts primarily in Hungary. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted by Websupport. While the site is mobile optimized and has good content quality, it suffers from slow load times and lacks advanced accessibility features. Security posture is weak due to an invalid SSL certificate, absence of HTTPS, no security headers, and no DNSSEC or domain protection locks. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Komáromi Jókai Színház operates an online ticketing platform focused on theatrical performances and cultural events in Komárno, Slovakia. The website provides event listings, ticket purchasing options, and voucher issuance primarily targeting local Hungarian and Slovak-speaking audiences. The business model centers on direct online sales with integrated payment processing via Barion. Technically, the site uses a custom CMS with jQuery, Foundation framework, and several third-party scripts for UI and payment integration. However, the site suffers from a lack of HTTPS, resulting in a critical security vulnerability. The absence of privacy and terms of service pages indicates compliance gaps. Performance is suboptimal with slow load times and a large page size. Security posture is weak due to missing SSL, no security headers, and no email authentication records. Contact information is available but no company emails are published. Overall, the site is functional but requires urgent security and compliance improvements.

I

Interticket.pl

interticket.pl

40

Interticket.pl is a mature Polish e-commerce platform specializing in online ticket sales for concerts, theater, festivals, museums, and cinemas. Established in 2004, it serves primarily Polish-speaking customers with a broad offering of event tickets. The website integrates multiple marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and maintains active social media profiles to engage its audience. However, the technical infrastructure shows signs of aging, with reliance on older JavaScript libraries and a custom CMS. Performance is suboptimal with slow page load times and a large page size. Critically, the site lacks a valid SSL certificate and does not enforce HTTPS, posing significant security risks.

I

IFMST - International Federation of Municipalities Sports And Tourism

ifmst.org

48

IFMST is an international federation focused on promoting sports and tourism initiatives at the municipal level worldwide. The organization aims to improve quality of life, foster cultural exchange, and stimulate economic growth through local sports and tourism development. The website reflects a structured federation with departments, committees, and a calendar of events, targeting municipalities and stakeholders in sports and tourism sectors. Technically, the site is built on WordPress with Elementor and several plugins, hosted on a LiteSpeed server via Parspack. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security gap. The security posture is weak with no HSTS, no OCSP stapling, and missing security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact is primarily via social media and a contact form, with no explicit emails or phone numbers listed. Overall, the site is functional and content-rich but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

T

tafisa.org

tafisa.org

40

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

T

The Solomon R. Guggenheim Foundation

guggenheim-venice.it

38

The Peggy Guggenheim Collection website represents a well-established cultural institution focused on modern European and American art. It serves a diverse audience including tourists, art lovers, families, and educational groups. The site offers comprehensive information about exhibitions, tours, educational programs, and membership opportunities, positioning itself as a leading museum in Venice with strong brand recognition. Technically, the site uses a modern CMS (ProcessWire) and integrates caching and analytics tools, but lacks a valid SSL certificate, which is a critical security gap. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. The security posture is weak due to missing HTTPS and modern TLS protocols, exposing the site to potential risks. Overall, the site is professional and trustworthy but requires urgent security improvements to protect visitors and maintain credibility.

N

NISZ Nemzeti Infokommunikációs Szolgáltató Zrt.

nisz.hu

40

NISZ Nemzeti Infokommunikációs Szolgáltató Zrt. is a key Hungarian government IT and telecommunications service provider, supporting digital government infrastructure and public sector digital transformation. The company offers a range of services including mobile applications, telecommunication services, managed IT services, data center and cloud services, and videoconferencing platforms. The website reflects a mature and professional organization with clear business focus on government clients and public institutions. Technically, the site uses modern frontend technologies and integrates multiple analytics and marketing tools, but suffers from a critical security flaw due to the absence of a valid SSL certificate and lack of TLS support, which severely impacts its security posture. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to protect user data and trust.

N

Nemzeti Adatvédelmi és Információszabadság Hatóság

naih.hu

40

The Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) is the Hungarian national authority responsible for data protection and freedom of information enforcement. The website serves as an official government portal providing comprehensive information on data protection laws, GDPR compliance, public information access, and related regulatory activities. It targets data controllers, data subjects, legal professionals, and the general public in Hungary. The business model is that of a government regulatory authority with a medium organizational size and a mature domain age of 14 years, reflecting its established presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted behind Cloudflare DNS. The site is content-rich and well-structured, with good mobile optimization and accessibility features. However, performance is slow due to a large page size and many resources. The site lacks a valid SSL certificate and modern TLS protocols, which is a critical security shortfall. No advanced security headers or session management features are implemented, exposing the site to potential risks. Security posture is weak due to the absence of HTTPS and security headers, despite no detected vulnerabilities like Heartbleed or POODLE. Privacy compliance is strong with clear privacy and cookie policies and GDPR alignment. Contact information is transparent and comprehensive, including emails, phone numbers, and physical addresses. No advertising or tracking services are detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and authoritative but requires urgent security improvements, especially SSL/TLS implementation, to protect user data and maintain compliance. Strategic recommendations include deploying a valid SSL certificate, enabling modern TLS protocols, adding security headers, and optimizing performance to enhance user experience and security.

kozadattar.hu is an official Hungarian government website supporting the Közadat program, which mandates public institutions to publish metadata about public interest data sets online. The platform facilitates registration and data provision for these institutions and offers free applications to assist in compliance. The target audience includes government bodies and citizens interested in transparency and public data access. The website is operated under the auspices of NISZ Nemzeti Infokommunikációs Szolgáltató Zrt., a government-affiliated entity. Technically, the website is built on Drupal 7 with jQuery and related modules. It is hosted on government infrastructure with DNS and mail servers under gov.hu domains. However, the site suffers from slow performance and lacks modern web optimizations. Mobile responsiveness and accessibility are basic, and SEO features are minimal. From a security perspective, the site has critical deficiencies: it lacks a valid SSL certificate and does not support any TLS protocols, exposing users to insecure connections. No security headers or DNS security features are implemented. The outdated Drupal 7 CMS may pose additional risks if not properly maintained. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Overall, while the site fulfills an important government transparency function, its technical and security posture is weak. Immediate improvements in SSL deployment, security headers, and privacy compliance are recommended to enhance trust and protect users.

M

Magyar Rádió Művészeti Együttesei

mrze.hu

40

The website represents the official online presence of the Magyar Rádió Művészeti Együttesei, a Hungarian cultural organization focused on classical music ensembles including symphonic orchestra, choir, and children's choir. It serves as a platform for concert information, ticket sales, media content, and organizational news, targeting classical music enthusiasts and concert attendees primarily in Hungary. The site is built on WordPress with a variety of custom plugins and integrates media streaming services. However, a critical security gap exists as the site lacks a valid SSL certificate and does not support HTTPS, exposing users to potential risks. The site includes a cookie consent mechanism and links to a comprehensive privacy policy hosted on the parent MTVA domain, indicating good privacy compliance. No direct contact emails or phone numbers are visible, but a contact form is available. Overall, the site is professionally designed with good accessibility and SEO practices but requires urgent security improvements.

H

Címlap | Hungary matters

hungarymatters.hu

40

Security assessment completed with an overall score of 0/100 (unknown risk). 1 critical issues require immediate attention. Total of 28 security findings identified across all modules.

M

Meraki Marketing Kft.

meraki.hu

40

Meraki Marketing Kft. is a Hungarian digital marketing agency specializing in services such as web development, SEO, videomarketing, branding, and digital campaigns. The company targets businesses aiming for growth and international market entry, positioning itself as an innovative and fast-growing agency with a strong client portfolio and testimonials. The website is professionally designed, content-rich, and provides clear contact information and GDPR-compliant privacy policies. Technically, the site uses Joomla CMS with UIkit framework and integrates common marketing and analytics tools like Google Analytics, Facebook Pixel, and Google Tag Manager. However, the website suffers from critical security issues due to an invalid or missing SSL certificate and disabled TLS protocols, which undermines secure communications. Performance is also a concern with slow load times and large page size. Overall, the site demonstrates good privacy compliance and business credibility but requires urgent security improvements to protect user data and enhance trust.

H

HRmaster

hrmaster.ro

40

HRmaster.ro is a Romanian-based HR software provider offering a modular and scalable solution for companies of all sizes to automate and manage human resources processes. The company positions itself as a recognized player in the European HR Tech market with a focus on recruitment, employee management, training, and performance evaluation. The website is built on Joomla CMS with modern UIkit frontend framework and integrates Google services for analytics and bot protection. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy compliance is partially addressed with a privacy policy and GDPR consent on forms, but lacks cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site demonstrates good content quality and business legitimacy but requires urgent security improvements.

I

Interticket Kft.

jegy.hu

40

Jegy.hu is a well-established Hungarian online ticketing platform specializing in cultural events such as theater, concerts, festivals, and sports. Founded in 2000, it serves a large audience primarily in Hungary with some regional presence. The platform offers extensive event listings, search and filtering capabilities, and supports affiliate marketing and gift vouchers. Technically, the site uses a custom CMS with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. However, a critical security gap is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive privacy policies. Overall, the site is professional and trustworthy but requires urgent security improvements.

Bonelli Bus s.a.s. is a well-established transportation company based in Italy, offering a variety of bus services including interregional lines, shuttle services, school transport, excursions, and bus rentals. The company targets tourists, commuters, and groups requiring transportation primarily in the Italian regions of Rimini, San Marino, Urbino, and Torino. The website is built on WordPress using Elementor and integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Despite a professional design and comprehensive content, the website lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present and appear GDPR compliant, with a functional consent mechanism. The domain is mature and consistent with the business profile, enhancing trustworthiness. However, the absence of HTTPS and security headers, along with the presence of a suspicious external script domain, pose security risks that should be addressed promptly.

The website is.cc is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content or business information. The technical infrastructure is protected by Cloudflare but lacks a valid SSL certificate and HTTPS support, resulting in a poor security posture. Performance is slow and no privacy or contact information is available. Due to the blocking mechanism, a full analysis of the website's business model, services, and compliance cannot be performed.

I

International Beach Tennis IFBT

ifbt.eu

33

International Beach Tennis IFBT is a small, specialized sports federation focused on promoting and organizing beach tennis events globally. The organization operates a multilingual WordPress website providing comprehensive event information, player rankings, and membership services. The technical infrastructure is based on WordPress with several plugins and a custom theme, hosted by CDmon in Spain. While the website content and business information are well presented and consistent with the organization's mission, the security posture is weak due to lack of a valid SSL certificate and absence of modern TLS protocols. Privacy compliance is addressed with clear policies and consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

F

FUNDACION DEL MUSEO GUGGENHEIM BILBAO

guggenheim-bilbao.eus

31

The Museo Guggenheim Bilbao is a prominent non-profit cultural institution based in Bilbao, Spain, managed by the FUNDACION DEL MUSEO GUGGENHEIM BILBAO. The website serves as a comprehensive portal for visitors to plan their visits, explore exhibitions, and access educational resources. It targets a broad audience interested in art, culture, and museum experiences. The museum holds a strong market position as an internationally recognized art venue with strategic partnerships and sponsorships from government and corporate entities. Technically, the website leverages modern web technologies including Next.js and React, with a headless WordPress CMS backend. It integrates accessibility tools and multimedia content hosted on Vimeo. The site is mobile-optimized and SEO-friendly, providing a good user experience and navigation clarity. From a security perspective, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Other security headers and best practices are partially implemented, but the absence of HTTPS significantly lowers the security posture. Overall, the website is professionally designed and content-rich, but the lack of HTTPS is a major risk. Strategic recommendations include immediate SSL/TLS deployment, enabling HSTS, and improving certificate management to enhance security and user trust.

E

Evolution Consulting Kft.

hrmaster.hu

40

HRmaster.hu is the online presence of Evolution Consulting Kft., a mature Hungarian company founded in 2012, offering modular HR software solutions tailored for small to large enterprises. The website presents a comprehensive portfolio of HR management modules and payroll services, positioning itself as a top European HR Tech provider. The technical infrastructure is based on Joomla CMS, PHP, ASP.NET, and Microsoft IIS, with modern JavaScript frameworks enhancing user experience. However, the site lacks a valid SSL certificate, exposing it to security risks and reducing trustworthiness. Contact information and business credibility are well established with testimonials and certifications. Overall, the website is professional and content-rich but requires urgent security improvements to enable HTTPS and enhance privacy compliance.

M

Magyar Rádió Művészeti Együttesei

radiomusic.hu

40

radiomusic.hu is the official website for the Hungarian Radio's Artistic Ensembles, providing information about their symphonic orchestra, choir, children's choir, and related cultural events. The site serves a Hungarian-speaking audience interested in classical music and concert attendance, offering ticket sales, event calendars, galleries, and news updates. The organization is well-established with a history of over 80 years, supported by the parent media entity MTVA. Technically, the site is built on WordPress with a variety of plugins and JavaScript libraries to enhance user experience and functionality. However, the absence of a valid SSL/TLS certificate is a critical security shortfall, exposing users to potential risks and reducing trust. The site implements cookie consent mechanisms and links to legal and privacy pages, but lacks explicit security or incident response policies. Overall, the website is content-rich and professionally maintained but requires urgent security improvements to meet modern standards.

K

Közszolgálati Médiaakadémia Alapítvány

media-akademia.hu

40

The Média Akadémia website represents a Hungarian non-profit foundation dedicated to media education and talent development, primarily targeting future television and radio professionals. The site is well-structured with rich content including news articles, event information, and educational program details. It leverages WordPress CMS with a variety of plugins to deliver multimedia content and interactive features. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. The site implements a cookie consent mechanism but lacks comprehensive privacy and security policies. The domain registration is consistent and aligns with the organization's public media affiliations, indicating legitimacy. Strategic improvements in security posture and privacy compliance are necessary to enhance overall trustworthiness and compliance.

D

Duna Médiaszolgáltató Nonprofit Zrt.

dunamsz.hu

40

Duna Médiaszolgáltató Nonprofit Zrt. operates as a Hungarian public media service provider delivering television, radio, and online content primarily targeting Hungarian-speaking audiences. The website serves as a portal for accessing media services and related information, reflecting a nonprofit business model with a strong public service orientation. The company is positioned as a key player in Hungary's media landscape, supported by partnerships with official entities such as MTVA. Technically, the website is built on WordPress with a modern set of JavaScript libraries and plugins to support multimedia content delivery and user interaction. However, the absence of a valid SSL certificate and HTTPS support represents a critical security gap, exposing users to potential risks. The site includes a cookie consent mechanism but lacks explicit privacy, security, and incident response policies, which may affect compliance with GDPR and other regulations. Overall, the site is functional and professionally designed but requires urgent security enhancements to protect user data and improve trust.

Security assessment completed with an overall score of 0/100 (unknown risk). 1 critical issues require immediate attention. Total of 25 security findings identified across all modules.

S

San Marino Welcome

sanmarinowelcome.com

47

San Marino Welcome is a small Destination Management Company specializing in organizing events, meetings, and customized experiences in San Marino. The company collaborates with local hospitality, catering, and leisure providers to deliver exclusive and memorable events. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. However, the site suffers from a lack of HTTPS support, which significantly impacts its security posture. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating gaps in compliance. Contact information and social media presence are clearly provided, supporting business credibility. Overall, the website provides good content and user experience but requires urgent security improvements.

C

Consorzio Terra di San Marino

terradisanmarino.com

49

Consorzio Terra di San Marino is a small-sized cooperative consortium focused on protecting and promoting typical agro-food products from the Republic of San Marino. The website serves as a platform to showcase their products, events, and cultural heritage, targeting local consumers and enthusiasts of traditional food and rural culture. Technically, the site is built on Drupal 7 with common web libraries and Google Analytics for tracking. However, the site suffers from critical security shortcomings, notably the absence of HTTPS and a valid SSL certificate, which exposes users to risks and undermines trust. Privacy compliance is basic, with a cookie policy and consent mechanism but no explicit privacy or security policies. The domain is mature and consistent with the business claims, enhancing credibility. Overall, the site provides good content and user experience but requires urgent security improvements to protect visitors and enhance trust.

24xtra.hu is a user authentication portal associated with the Hungarian media brand 24.hu, providing login and registration services including social login options via Facebook, Apple, and Google. The site targets Hungarian-speaking users of 24.hu services and acts as a gateway for accessing content or services requiring user authentication. The business model centers on user identity management for a media platform. Technically, the site is hosted on Amazon AWS infrastructure using CloudFront CDN and employs Keycloak for single sign-on capabilities. The technology stack includes modern JavaScript modules and standard web technologies, but performance metrics are unavailable or minimal, indicating potential areas for improvement. Mobile optimization and accessibility are basic but functional. From a security perspective, the site implements several important HTTP security headers and enforces HSTS with preload. However, the absence of a valid SSL certificate and lack of HTTPS support critically undermine the security posture. No OCSP stapling or session resumption is configured, and no privacy or cookie policies are published, indicating compliance gaps. No contact or business information is provided on the site, limiting transparency. Overall, the site is functional as a login portal but requires urgent improvements in SSL/TLS configuration and privacy compliance to enhance trust and security. The domain registration is consistent with the 24.hu brand, supporting legitimacy. Strategic recommendations include obtaining a valid SSL certificate, publishing privacy and cookie policies, and improving performance and accessibility.

M

Médiaszolgáltatás-támogató és Vagyonkezelő Alap (MTVA)

mtva.hu

40

MTVA.hu is the official website of the Hungarian public media organization Médiaszolgáltatás-támogató és Vagyonkezelő Alap (MTVA), providing a wide range of media services including television, radio, and online content. The site is well-structured, content-rich, and targets the Hungarian public with news, press releases, and organizational information. The business model is public service media, supported by government funding, positioning MTVA as a leading media broadcaster in Hungary. Technically, the site is built on WordPress with modern JavaScript libraries and accessibility features, hosted on Telekom.hu infrastructure. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS, exposing users to potential risks. The site implements proper email security with SPF and DMARC records and includes a cookie consent mechanism compliant with GDPR. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

I

IDIMweb

idimweb.com

40

IDIMweb is a small, specialized web agency operating primarily in France and the Caribbean, with over 15 years of experience in custom website creation, development, SEO, and digital marketing. The company targets professionals, institutions, and individuals seeking tailored web solutions, leveraging Joomla CMS and modern frontend technologies. The website reflects a professional and consistent brand image with clear contact channels and a portfolio of client references. Technically, the site uses Joomla with Bootstrap and jQuery, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security shortfall. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Social media integration and analytics usage are moderate and transparent.

T

TEMPESTA MEDIA, S.L.

latempesta.cc

40

La Tempesta is a small Spanish company specializing in digital transformation and consulting services for cultural heritage and social innovation organizations. Founded in 2019, it offers a range of services including digital storytelling, web development, 3D virtualisation of heritage, knowledge management, and digital strategy. The company has a strong market position within its niche, supported by reputable clients and industry awards. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and multilingual support. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. Overall, the business presents a professional and trustworthy image but must urgently address its SSL/TLS configuration to improve security and user trust.

L

Log In ‹ CEATL members — WordPress

ceatl-members.eu

32

The website ceatl-members.eu serves as a WordPress-based login portal for CEATL members, indicating a restricted access platform likely intended for a specific user group. The site lacks publicly accessible business descriptions, contact information, or policy documents, which limits transparency and user trust. Technically, the site runs on WordPress with jQuery libraries and is hosted by Budget Webhosting. However, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which exposes users to potential data interception risks. The security posture is weak, with minimal security headers and no modern TLS protocols enabled. Privacy compliance is also lacking, with no visible privacy or cookie policies or GDPR indicators. Overall, the site appears to be a basic, small-scale member login portal with limited public-facing content and significant security and compliance gaps.

R

Repubblica di San Marino

gov.sm

47

The website gov.sm serves as the official digital portal for the Republic of San Marino, providing citizens and public administration users with access to government services, news, and administrative information. It is positioned as the primary government interface for public sector communication and service delivery. The site targets residents, businesses, and government employees within San Marino. Technically, the website uses older but stable technologies such as jQuery 1.12.4 and Bootstrap, with a custom or unknown CMS. However, performance is slow with a load time exceeding 12 seconds, and SEO and accessibility features are basic. Security posture is weak due to the absence of a valid SSL certificate, lack of HTTPS, missing security headers, and no DNSSEC or CAA records, exposing the site to potential risks. Privacy compliance is minimal, with no cookie consent mechanism and only a basic privacy policy present. Business credibility is moderate given the official government branding and domain, but the lack of contact information and security best practices reduces trust. Overall, the site requires urgent security improvements and enhanced privacy compliance to meet modern standards.

U

Ufficio del Turismo

visitsanmarino.com

46

The website visitsanmarino.com serves as the official tourism portal for the Republic of San Marino, providing comprehensive information on events, travel planning, cultural experiences, shopping, and outdoor activities. It targets tourists and visitors interested in exploring San Marino, positioning itself as the authoritative source for tourism-related content in the country. The business model is government-driven, focusing on promoting tourism and cultural heritage. Technically, the site is built on Magnolia CMS and served via Apache, utilizing JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing. The site is multilingual and mobile-optimized, though performance data suggests potential slowness. Accessibility and SEO are basic but functional. From a security perspective, the site lacks a valid SSL certificate and HTTPS support, which is a critical vulnerability. Security headers are minimal, and no advanced security policies or incident response information are published. Cookie consent mechanisms are absent despite the use of tracking tools, indicating privacy compliance gaps. Overall, the site is legitimate and trustworthy as an official government tourism resource but requires urgent improvements in security and privacy compliance to protect users and enhance trust.

The website pa.sm serves as the official government portal for the Republic of San Marino, providing citizens and businesses with access to public administration services, news, and information. It targets local users and offers key services such as online public services, recruitment notices, and departmental information. The site is branded consistently with government logos and domain usage, reinforcing its official status. Technically, the website employs older but widely used technologies like jQuery 1.12.4 and Bootstrap, with some external libraries loaded from CDNs. However, the site suffers from slow performance with a load time exceeding 12 seconds and lacks modern security configurations. Notably, there is no valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. The absence of security headers and cookie consent mechanisms further weakens its security and privacy posture. From a security perspective, the lack of HTTPS and security headers exposes users to potential risks, and the site does not demonstrate compliance with GDPR or other privacy regulations. No incident response or vulnerability disclosure information is provided. WHOIS data confirms the domain's legitimacy and government ownership, supporting the trustworthiness of the site despite technical shortcomings. Overall, while the website fulfills its role as a government information portal with good content quality and professional design, significant improvements in security, privacy compliance, and performance are necessary to enhance user trust and protect sensitive data.

M

MédiaKlikk

mediaklikk.hu

40

MédiaKlikk is a Hungarian media platform offering live streaming of multiple TV and radio channels, program guides, and media archives primarily targeting Hungarian-speaking audiences. It operates under the umbrella of MTVA, the Hungarian public media organization, and serves as a central hub for national media content. The platform leverages WordPress CMS with a variety of plugins and integrates social login options and user account management features. The website demonstrates a consistent brand presence and good content relevance for its target audience. Technically, the site uses a modern web stack including jQuery, jQuery UI, Video.js, and ElasticPress, hosted on Telekom Hungary infrastructure. While the site is mobile-optimized and includes accessibility features, performance metrics are not explicitly available. SEO practices are implemented with proper meta tags and structured data. However, the absence of HTTPS is a critical security gap, significantly impacting the site's security posture. From a security perspective, the site lacks a valid SSL certificate, HSTS, and other modern security headers, exposing users to potential risks. It employs reCAPTCHA for form protection and uses third-party analytics and tracking services such as Facebook Pixel, Hotjar, and Gemius, indicating extensive user tracking. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Incident response and vulnerability disclosure information are not found. Overall, while MédiaKlikk is a reputable media platform with solid business credibility and content quality, its security posture requires urgent improvement, especially regarding HTTPS implementation and enhanced privacy compliance. Strategic recommendations include securing the site with SSL, enabling security headers, and implementing a cookie consent mechanism to align with GDPR requirements.

I

Interferenza s.r.l.

offertissime.shop

35

Offertissime.shop is an Italian e-commerce price comparison platform operated by Interferenza s.r.l., founded in 2016. The website offers a product search engine aggregating offers from multiple e-shops, targeting Italian online shoppers seeking the best prices. The business model focuses on guiding users to convenient purchases through comparison and curated e-shop listings. The site is positioned as a niche player in the Italian e-commerce market with a small company size and consistent branding. Technically, the website uses a traditional Apache server with Bootstrap and jQuery for frontend components. DNS is managed via Cloudflare, but only for DNS services, not for security or CDN. The site lacks HTTPS encryption, which is a critical security shortfall. Performance data is missing, but the site appears to have basic mobile optimization and SEO practices. The cookie consent mechanism and privacy policy indicate some GDPR compliance awareness. From a security perspective, the absence of SSL/TLS is a major vulnerability, exposing users to data interception risks. No advanced security headers or modern TLS protocols are implemented. DNSSEC and CAA records are missing, reducing domain security. No incident response or vulnerability disclosure policies are published. The security posture is weak and requires urgent improvements to protect user data and enhance trust. Overall, the website is functional and provides relevant content for its target audience but suffers from critical security deficiencies. Strategic recommendations include immediate deployment of HTTPS, enhancement of security headers, enabling DNSSEC, and publishing security policies. These steps will improve user trust, compliance, and reduce risk exposure.

C

Central Médiacsoport Zrt.

24.hu

40

24.hu is a leading Hungarian news portal operated by Central Médiacsoport Zrt., offering a wide range of news content including domestic and international news, culture, sports, and lifestyle. The site features multimedia content such as videos and podcasts, and supports subscription services. Technically, the site is built on WordPress with WPBakery Page Builder and hosted on AWS infrastructure with CloudFront CDN and Redis caching for performance optimization. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks for user data protection and trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect users and maintain credibility.

REO AG is a medium-sized German company specializing in the manufacturing and supply of innovative resistive and inductive electrical components, including transformers, reactors, and power controllers. The company targets industrial sectors such as energy, transportation, and medical technology, emphasizing sustainability and technological innovation. Their website is multilingual and professionally designed, supporting a global B2B audience. Technically, the website is built on WordPress with Elementor and several plugins for SEO and multilingual support, hosted on kasserver.com. However, the site lacks a valid SSL certificate and HTTPS support, representing a critical security vulnerability. While privacy and legal documents are linked, no cookie consent mechanism is present, which may affect GDPR compliance. Social media presence and clear contact information enhance business credibility. Overall, the site is functional and content-rich but requires urgent security improvements.

REO AG is a medium-sized German company specializing in the manufacturing and supply of electromagnetic components such as EMV components, chokes, transformers, and power control devices. The company positions itself as a global supplier with a strong emphasis on innovation and sustainability, targeting industrial and technological sectors. The website is built on WordPress with Elementor and includes multilingual support, reflecting a mature digital presence. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security weakness that undermines user trust and data protection. Privacy policies and terms of service are present on the main corporate domain, indicating compliance awareness, though cookie consent mechanisms are lacking. Social media engagement and structured data usage enhance the company's online credibility. Overall, the site offers good content quality and user experience but requires urgent security improvements.

REO AG is a medium-sized German company specializing in the manufacture and supply of electromagnetic compatibility components, chokes, transformers, and resistors primarily for industrial and energy sectors. The company emphasizes innovation and sustainability in its product offerings and maintains a global presence with multiple language-specific websites. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS approach with SEO optimization. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. While contact information and legal pages are well presented, the lack of cookie consent mechanisms and security policies indicates partial privacy compliance. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

REO AG is a medium-sized German company specializing in the manufacturing and supply of innovative resistive and inductive electrical components, including EMV components, transformers, power controllers, and vibratory conveyor technology. The company targets industrial clients globally, emphasizing sustainability and technological innovation. Their website is built on WordPress with Elementor and optimized for Spanish-speaking markets, reflecting a multilingual corporate presence. Technically, the site uses modern CMS and SEO tools but lacks a valid SSL certificate, resulting in an insecure HTTP-only connection. Security posture is weak due to missing HTTPS, lack of security headers, and no domain protection locks. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism. Contact information and social media presence are well established, supporting business credibility. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

REO AG is a well-established German family-run company with a 100-year history specializing in the development and production of inductive, resistive, and electronic components for various industrial sectors including energy, transportation, and manufacturing. The company operates internationally with subsidiaries across Europe, North America, Asia, and the Middle East, maintaining production primarily in Germany with a focus on quality and innovation. Technically, the website is built on a modern WordPress CMS with Elementor and Yoast SEO, indicating a good level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that undermines user trust and data protection. The site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. Business credibility is strong with clear contact information, social media presence, and detailed product and industry information. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect user data.

H

Helló Sajtó! Üzleti Sajtószolgálat

hellosajto.hu

40

Helló Sajtó! Üzleti Sajtószolgálat is a Hungarian online media platform specializing in publishing and distributing business press releases. Established in 2022, it serves businesses, PR agencies, and institutions primarily in Hungary, offering services such as press release publication, distribution, and effectiveness measurement. The website is built on WordPress with Elementor and uses the Smart Mag theme, hosted on a server managed by Mediacenter.hu. The platform integrates Google Tag Manager and Google Ad Manager for analytics and advertising purposes. Despite a professional design and good content quality, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided, including email and phone. Social media presence is active on Facebook, LinkedIn, and Twitter. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

The website carikita.id is currently inaccessible due to Cloudflare security mechanisms blocking direct content access. The domain is registered with a legitimate Indonesian registrar and is relatively new, created in late 2023. No meaningful business or contact information is available on the site, and no privacy or cookie policies are present. Technically, the site lacks a valid SSL certificate and does not support HTTPS, resulting in a poor security posture. The page load performance is slow, and the content quality is minimal, consisting mainly of embedded iframes and tracking pixels from suspicious external domains. Overall, the site appears to be either under development or improperly configured, limiting its trustworthiness and usability.

D

Dauphin Telecom Business

dauphintelecompro.com

37

Dauphin Telecom Business is a regional telecommunications and digital solutions provider focused on serving businesses in French overseas territories such as Guadeloupe, Martinique, Guyane, and the Northern Islands. The company offers a range of services including fiber internet (FTTH, FTTO), unified communication solutions, mobile plans, cloud and data center services, and VPN interconnection. Their website reflects a professional digital presence with clear navigation and relevant content tailored to their target audience. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and Bootstrap 5, incorporating modern libraries like jQuery and Awesomplete. However, the site suffers from slow load times and lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Cookie consent and privacy policies are implemented, showing good GDPR compliance, and Google Analytics is used with appropriate data retention policies. From a security perspective, the absence of HTTPS and security headers significantly lowers the security posture. While Google reCAPTCHA is used to protect forms, the lack of SSL/TLS encryption exposes users to risks. The WHOIS data confirms the domain is mature and registered transparently, consistent with the business claims. Overall, the website is functional and informative but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling security headers, and optimizing performance to improve user experience and security compliance.

D

dauphintelecom-entreprise.com

dauphintelecom-entreprise.com

48

The website dauphintelecom-entreprise.com currently presents as a minimal placeholder or parked page with no substantive content or business information. The domain is very young, registered in mid-2024, and is close to expiry, which raises concerns about the legitimacy and stability of the business presence. There is no SSL certificate installed, resulting in no HTTPS support, which severely impacts the security posture and user trust. No privacy, cookie, or terms of service policies are present, and no contact information or business details are provided on the site. Technically, the site lacks modern web technologies, performance optimizations, and accessibility features, indicating a low level of digital maturity.

D

Dauphin Telecom

dauphintelecom.com

40

Dauphin Telecom is a regional telecommunications provider serving the French Antilles, Saint Martin, and Saint Barthélemy. The company offers a variety of services including mobile plans, fiber internet, TV packages, and bundled offers, targeting both residential and business customers. With a local presence supported by multiple agencies and a customer service center based in Guadeloupe, Dauphin Telecom positions itself as a trusted and accessible operator in its market. Technically, the website is built on WordPress using the Elementor page builder and several Jet plugins, indicating a modern and flexible digital infrastructure. However, the site suffers from slow performance and lacks a valid SSL certificate, which impacts both user experience and security. The site is mobile-optimized and includes basic accessibility features, but there is room for improvement in performance and security hardening. From a security perspective, the absence of HTTPS and modern TLS protocols is a critical vulnerability. While the site implements cookie consent mechanisms and appears GDPR compliant, it lacks explicit security policies and incident response information. The use of SPF records for email authentication is a positive indicator, but the overall security posture is weak and requires urgent attention. Overall, Dauphin Telecom's website reflects a legitimate and established business with good content quality and business credibility. However, significant security improvements are necessary to protect user data and enhance trust. Addressing these issues will strengthen the company's digital presence and compliance standing.

M

MIGASTONE INTERNATIONAL SRL

migastoneacademy.com

33

Migastone Academy operates as a specialized educational platform focused on mobile marketing and app creation, leveraging proprietary methods such as the ASP© method and the Siberian platform. The company positions itself as a leader in Europe with over 1055 applications sold and strong partnerships with major Italian trade associations. The website is built on the Kartra platform, integrating multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Despite a professional design and good content quality, the site suffers from critical security issues, notably the lack of a valid SSL certificate and HTTPS, which significantly impacts its security posture. Privacy and cookie policies are present and GDPR compliant, with clear contact information including phone numbers and a physical address in San Marino. Overall, the website demonstrates moderate digital maturity but requires urgent security improvements to protect user data and enhance trust.

S

San Marino Open Innovation Institute

sanmarinoinnovation.com

49

San Marino Innovation is the official digital technology and blockchain innovation hub of the Republic of San Marino, established in 2017. It serves as a government-supported institute promoting high technology enterprises, startups, and entrepreneurs with tax benefits and certification programs. The website presents a professional and consistent brand image, targeting technology-focused businesses and investors interested in blockchain and digital transformation. The company maintains active social media channels and offers newsletter subscriptions to engage its audience. Technically, the website is built on the Squarespace platform using standard scripts and Typekit fonts. However, it suffers from poor performance with a very slow load time and a large page size. Mobile optimization and SEO are adequate, but accessibility is basic. Critically, the site lacks a valid SSL certificate, resulting in no HTTPS support, which severely impacts security posture. Security-wise, the absence of HTTPS, security headers, and DNSSEC are significant vulnerabilities. While cookie consent mechanisms are in place, GDPR compliance is only basic. The WHOIS data confirms a mature and consistent domain registration without privacy protection, aligning with the business claims. Overall, the website is functional and credible but requires urgent security improvements, especially SSL/TLS implementation, to protect user data and enhance trust. Performance optimization and enhanced security headers would further strengthen the site’s posture.