Security Directory

C

Cosmos

contacto-cosmos.mx

50

Cosmos is a well-established Mexican media company specializing in B2B industrial sectors, offering a broad range of services including digital and print advertising, web development, business intelligence, and editorial content. With over 60 years of market presence, Cosmos holds a strong position in the industrial media landscape in Mexico, targeting businesses seeking industry-specific marketing and informational solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, alongside Google Analytics and Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts enhancing user experience. However, no CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. The site uses tracking tools that collect user data, but transparency and user control could be enhanced. Overall, Cosmos presents a credible and professional online presence with moderate technical and security maturity. Strategic improvements in security headers, privacy compliance, and accessibility would enhance trust and compliance posture, supporting its long-term business credibility.

F

Fio investiční společnost

fiofondy.cz

68

Fio investiční společnost is a Czech investment company specializing in mutual funds and investment products, targeting retail investors primarily in the Czech Republic. The company operates under the umbrella of Fio banka, a well-established financial institution. Their website offers clear information about investment opportunities, including low entry thresholds and no entry fees, supported by professional fund managers. The site integrates online banking and brokerage services, enhancing customer convenience and engagement. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics and tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are missing. The domain is well-established since 2016, registered with a Czech registrar consistent with the business location and sector. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

E

Emerson Electric Co.

emerson.com

75

Emerson Electric Co. is a global leader in industrial automation, technology, and engineering solutions, serving a broad range of industrial manufacturing sectors. The company positions itself as a technology powerhouse driving innovation for a safer, smarter, and more sustainable world. Their website reflects a mature digital presence with multi-region and multi-language support, targeting industrial and technology professionals worldwide. The business model is B2B, focusing on delivering advanced automation architectures and software solutions to industrial clients. Technically, the website employs a modern tech stack including Bootstrap for responsive design, Google Tag Manager for analytics, LinkedIn Insight for marketing, and Drift for customer engagement. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating strong compliance with GDPR and related regulations. From a security perspective, the site uses HTTPS exclusively and includes mechanisms for vulnerability reporting, though explicit security headers are not detected. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable due to privacy protection, which is typical for large enterprises. Overall, the security posture is strong but could be improved by adding explicit security headers and a security.txt file. The overall risk assessment is low, with the site demonstrating professionalism, compliance, and trustworthiness. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and improving transparency around incident response contacts to further strengthen trust and security culture.

F

FlipHTML5

fliphtml5.com

75

FlipHTML5 is a well-established digital publishing platform founded in 2013, specializing in converting PDFs and other documents into interactive flipbooks. The company targets publishers, marketers, educators, and businesses seeking engaging digital publications. Their platform offers multimedia enrichment, sharing capabilities, and analytics, positioning them as a key player in the niche digital publishing market. Technically, the website leverages modern web technologies including jQuery, Bootstrap, and Cookiebot for consent management, with hosting and DNS services provided by Cloudflare. The presence of multiple language versions and SEO optimizations indicate a mature digital presence. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and uses domain locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility and good technical implementation.

C

ceskecasino.com

ceskecasino.com

70

CeskeCasino.com is a Czech-language online casino guide providing comprehensive information on licensed casinos, bonuses, free spins, and casino game guides targeted at adult players in the Czech Republic. The website is well-structured with clear navigation and uses modern web technologies including WordPress, Bootstrap, and Google Tag Manager for analytics. Despite the professional presentation and good content quality, the absence of WHOIS domain registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Contact information and incident response details are not present, limiting transparency. Overall, the site serves as a useful resource for Czech online casino players but would benefit from enhanced security and compliance disclosures.

H

HFP Beratungspersonen

hfpberatung.ch

47

HFP Beratungspersonen is a Swiss professional certification organization focused on providing examinations and resources for organizational consultants, supervisors, and coaches. The website serves as an informational portal offering details about certification processes, examination commissions, training institutions, and diploma ceremonies. It targets professionals in Switzerland seeking recognized credentials in their field. Technically, the site uses an older but functional tech stack including jQuery 1.11 and Modernizr, with a CMS identified as InitCMS. The site is moderately performant with basic mobile optimization and good accessibility features. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and the site uses a cookie consent mechanism indicating some privacy awareness. No advanced security policies or incident response information is publicly available. Overall, the site is professional and trustworthy but could improve in technical modernization and security hardening.

The website www.frezar.cz represents a small Czech manufacturing business specializing in custom milling and machining services, primarily targeting small and medium-sized clients requiring precise metal, wood, and polyamide parts. The business is operated by Zdeněk Jelínek and offers services such as custom milling, precise drilling, and thread cutting. The website is professionally designed with clear navigation and relevant content, supporting a moderate market position in the manufacturing sector. Technically, the site uses modern frontend technologies including jQuery, Bootstrap, and Swiper.js, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with moderate performance and basic accessibility features. However, no CMS or hosting provider information is discernible. The site uses HTTPS, but lacks security headers and privacy/cookie policies, indicating room for improvement in security and compliance. From a security perspective, the site shows a good baseline with HTTPS enabled and no visible sensitive data exposure or vulnerable forms. The absence of security headers and privacy policies, however, reduces the overall security posture and GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but reduces transparency. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, the website is a credible and professional representation of a small machining business but would benefit from enhanced security headers, privacy and cookie policies, and improved compliance documentation to strengthen trust and security posture.

M

INDIVIDUAL PRODUCTS

medistik.eu

58

The website medistik.eu is an e-commerce platform specializing in healthcare products, particularly natural and cooling therapy items such as Medistik Ice Roll-on and Natural Cold Spray. The site targets consumers interested in wellness and healthcare retail products. The business model is focused on direct online sales with product detail pages and a shopping cart system. The website demonstrates consistent branding and a professional presentation with clear navigation and product categorization. Technically, the site uses a combination of jQuery, Bootstrap, and other common JavaScript libraries, along with Google Analytics for visitor tracking. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and good mobile optimization. SEO practices are adequately implemented with meta tags and canonical URLs. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating basic privacy compliance. However, no advanced security headers were detected in the HTML content, and there is no visible incident response or vulnerability disclosure information. The WHOIS data is privacy protected, which is common for commercial sites, and no suspicious patterns were found. Overall, the security posture is moderate but could be improved with additional headers and explicit security policies. The overall risk assessment is low to moderate. The site is professional and functional but would benefit from enhanced security practices and more transparent business contact information. Strategic recommendations include implementing security headers, improving form protections, and providing clearer business and security contact details.

Business Solution Consulting s.r.o. is a Czech-based ICT consulting and system integration company founded in 2016. The company specializes in providing consulting services in information and communication technologies, system security, and project management, primarily targeting public sector, utility, and healthcare clients. Their offerings include system integration, cybersecurity services, IoT solutions, and a proprietary eHealth software solution called AMEBA. The website is professionally designed using WordPress and presents detailed service descriptions and contact information, indicating a credible business presence. Technically, the website uses a modern WordPress CMS with jQuery and Bootstrap for responsive design. The site loads with moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, suggesting minimal user tracking. However, the absence of security headers and unknown SSL configuration are areas for improvement. From a security perspective, the website shows no immediate vulnerabilities or exposed sensitive data but lacks important security best practices such as security headers and documented privacy or cookie policies. The WHOIS data is missing, which reduces domain trustworthiness, although the website content and contact details appear legitimate and professional. Overall, the site is a good representation of a small ICT consulting firm with room for improvement in privacy compliance and security posture. Strategic enhancements in these areas would strengthen trust and regulatory compliance.

M

Mgen - Espace Public

mgen.fr

64

MGEN is a leading mutual insurance organization in France specializing in health, insurance, and retirement services primarily for public service agents, employees, students, and retirees. The website reflects a mature digital presence with comprehensive service offerings including health insurance, life insurance, savings plans, and various specialized insurance products. The site is well-branded and consistent with the parent company Groupe VYV, indicating a strong market position. Technically, the site uses Drupal CMS with modern frameworks like Bootstrap and integrates privacy and analytics tools such as TagCommander and Piano Analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. WHOIS data is unavailable due to AFNIC policies, but the site’s content and structure strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

I

Institute of Molecular and Translational Medicine

imtm.cz

61

The Institute of Molecular and Translational Medicine (IMTM) is a well-established biomedical research institute based in the Czech Republic, founded in 2010. It focuses on understanding infectious diseases and cancer, developing medicines, diagnostics, and medical devices. The institute operates with a strong emphasis on public-private partnerships and international research collaborations. The website reflects a mature digital presence with comprehensive scientific content, including featured publications, research projects, and educational resources targeting researchers, students, and healthcare professionals. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Tag Manager for user tracking with anonymized IPs and provides a GDPR-compliant cookie consent mechanism. The hosting and domain registration are consistent with the organization's location and business nature. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers and a published security policy or incident response contacts are missing, representing areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with basic privacy standards.

B

Balkan Pensiony

balkanpensiony.cz

58

Balkan Pensiony is a small hospitality business offering accommodation services in Bulgaria, specifically in the Bansko and Primorsko regions. The website presents two main pensions, Atika and Nadia, targeting tourists seeking winter and summer vacation stays. The business model focuses on direct accommodation bookings with a clear regional niche. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap, jQuery, and social media integration via Facebook SDK. Google Analytics is used for visitor tracking. Security posture is basic with HTTPS enabled but lacking security headers and privacy policies, which are critical for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact phone number appear legitimate. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

I

International Judo Federation

judobase.org

60

The International Judo Federation (IJF) operates Judobase.org, a comprehensive and authoritative platform dedicated to judo sports enthusiasts worldwide. The website serves as the official source for competition results, athlete rankings, event calendars, and multimedia content related to IJF-sanctioned events. It targets a global audience including athletes, coaches, officials, and fans, positioning itself as a key resource in the judo sports ecosystem. The business model is primarily federation-driven, supported by sponsorships and partnerships, with a medium-sized operational scale and a history dating back to at least 2007. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site is well-optimized for performance and mobile devices, with a clean and professional design that facilitates excellent user experience and navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security policy page, which are areas for improvement. Privacy and cookie policies are present and appear comprehensive, indicating a reasonable level of GDPR compliance. Contact information is clearly provided with official domain emails, enhancing trustworthiness. Overall, Judobase.org demonstrates a strong security posture and high business credibility, with no signs of suspicious activity or content safety concerns. The lack of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, implementing explicit cookie consent mechanisms, and publishing a formal security incident response policy to further strengthen compliance and user trust.

T

Tourismuszentrale Südmähren

sued-maehren.de

47

Tourismuszentrale Südmähren operates as the official regional tourism authority promoting South Moravia, a renowned wine-growing and cultural region. The website provides comprehensive tourism information, including excursions, events, regional guides, and accommodation options, targeting tourists interested in nature, history, gastronomy, and cultural experiences. The business model focuses on regional tourism promotion and information dissemination, positioning itself as a trusted source for visitors to South Moravia. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, hosted on Active24 servers. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear cookie policy and consent mechanism, though a dedicated privacy policy page could enhance compliance. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively supports the regional tourism business with clear contact information and social media presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture.

D

DINEVA - cestovní agentura

dineva.cz

58

DINEVA is a Czech travel agency specializing in vacation packages to Bulgaria, Turkey, and Greece. The company collaborates with Czech and German travel agencies to provide a broad selection of trips, including custom travel arrangements and charter flight tickets. The website presents a professional and consistent brand image, targeting travelers seeking tailored holiday experiences in Eastern Mediterranean destinations. Technically, the site is built on Joomla CMS with modern frontend technologies such as Bootstrap and jQuery, and it integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is moderate with HTTPS enabled but lacks important security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and contact information appear credible. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

The website www.elita.blog serves as a professional magazine and blog platform focused on technology, business, IT, and related topics primarily for a Czech-speaking audience. It is closely associated with ARICOMA, a technology company, which is evident from branding and linked parent company references. The site offers curated articles, interviews, and insights targeting professionals and enthusiasts interested in digital transformation, public administration, and innovation. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, Google reCAPTCHA, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and basic security practices like CAPTCHA and cookie consent implemented, though some security headers are missing. Privacy compliance is addressed through cookie consent and links to GDPR information on the parent company site. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the professional presentation and parent company association mitigate this concern. Overall, the site is well-positioned as a niche media outlet within the technology sector in the Czech Republic.

C

Comité National Olympique et Sportif Français (CNOSF)

franceolympique.com

66

The website represents the Comité National Olympique et Sportif Français (CNOSF), the French National Olympic and Sports Committee. It serves as an official platform to promote Olympic sports and support athletes in France. The site targets sports professionals, athletes, and the general public interested in Olympic activities. The business model is non-profit and government-related, focusing on sports promotion and Olympic movement support. The website is professionally designed using modern frameworks such as Bootstrap and custom fonts, providing a good user experience with clear navigation and mobile optimization. However, the technical implementation lacks advanced security headers and privacy compliance indicators, which are critical for enhancing user trust and regulatory adherence. The WHOIS data for the subdomain is unavailable, but the domain's branding and content strongly indicate legitimacy as part of the French Olympic Committee's digital presence.

G

GIVERSDON s.r.o.

azcasopis.cz

42

The website azcasopis.cz represents a specialized professional magazine named A-Z ELEKTRO, focusing on electrical engineering, automation, energy, software, lighting, and related technologies. It targets professionals and companies within these technical sectors primarily in the Czech Republic. The business operates as a small-sized publishing entity with a history dating back to 2009, offering industry news, magazine publications, advertising, and subscription services. The site demonstrates consistent branding and good content quality with regular updates and industry partnerships.

A

Alfred Kärcher GmbH & Co. KG

karcher.cz

10

Kärcher Česká republika operates as the official Czech branch of Alfred Kärcher GmbH & Co. KG, a leading global manufacturer and retailer of cleaning technology for both household and professional markets. The website offers a comprehensive catalog of cleaning products including window vacuums, steam cleaners, floor washers, vacuum cleaners, and pressure washers, supported by services such as repair, warranty extensions, and rental of professional equipment. The company holds a strong market position in the Czech Republic as a trusted brand with extensive product and service offerings tailored to both consumers and professionals. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Adobe Dynamic Tag Management for analytics and marketing tag control, and OneTrust for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate with asynchronous loading of scripts and preloading of key assets. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. Security headers are partially observed, and third-party scripts are managed via Adobe DTM. However, explicit security headers like Content-Security-Policy and incident response contacts are not clearly published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and compliant digital presence for Kärcher in the Czech market. The absence of WHOIS data limits domain trust assessment, but the brand consistency and compliance signals support legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure information, and improving transparency of contact details to strengthen trust and security posture.

SIGNEX, spol. s r.o. is a Czech Republic based small business specializing in comprehensive traffic signage services including project design, approval, installation, rental, and maintenance primarily serving Brno and the South Moravian Region. The company has a long-established presence since 1999, reflected in its domain age and consistent WHOIS data. The website presents a professional and well-structured digital presence with clear contact information and service descriptions tailored to businesses and entities requiring traffic safety solutions. Technically, the site uses legacy JavaScript libraries and common web technologies such as jQuery, Bootstrap, and Google Maps API, with moderate performance and good mobile optimization. Security posture is moderate with room for improvement, notably updating outdated libraries and implementing security headers. Privacy compliance is basic, with a cookie consent banner but no privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

Prestige advertise is a small Czech Republic-based advertising and marketing service provider offering a range of services including promotional work, graphic design, printing, event marketing, internet marketing, and web services. The website is built on WordPress 4.6.30 with common plugins such as Contact Form 7 and SiteOrigin Panels, using technologies like jQuery and Bootstrap. The site is accessible without any WAF or security challenge, but it lacks modern security practices and compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a professional business front but requires significant improvements in security, privacy compliance, and domain transparency.

F

Formata v.o.s.

formata.cz

45

Formata v.o.s. is a well-established Prague-based creative studio specializing in graphic design, web design, and print production services. Founded in 1997, the company serves a diverse clientele including cultural institutions and corporate clients, offering a broad range of services from branding and visual identity to web development and marketing campaigns. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette Framework, and integrates Google Maps for location display. The hosting is inferred to be with a Czech hosting provider, supporting local business operations. Security posture is moderate; while HTTPS usage is implied and form validation is implemented, the absence of security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website demonstrates a solid business presence with good technical implementation but lacks some compliance and security best practices.

H

Health and Safety Authority

hsa.ie

63

The Health and Safety Authority (HSA) is the national government body responsible for workplace health and safety regulation and enforcement in Ireland. Established in 1989, it provides comprehensive guidance, education, and support to employers, employees, and various industry sectors to promote safe and healthy working environments. The website serves as a central resource hub with extensive information on legislation, safety topics, training, and compliance requirements. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by Hosting Ireland, and the domain is well-established with a long registration history. The site is mobile-optimized with good navigation and accessibility features, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie management system and consent mechanism, but no explicit privacy policy or terms of service were found in the provided content. Overall, the website is professional, trustworthy, and serves its government regulatory function effectively. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and adding vulnerability disclosure information to improve transparency and compliance.

G

Green Soft LLC

greensoft.mn

47

Green Soft LLC is a Mongolian technology company specializing in website development, domain registration, web hosting, and digital marketing services. Established in 2011, it offers a broad portfolio including CRM platforms, chatbots, online invoicing, and training services, targeting businesses and individuals seeking to establish or enhance their online presence. The company maintains a professional website with clear navigation and multiple service categories, reflecting a mature business model and diversified offerings. Technically, the website employs modern frameworks such as Bootstrap and integrates key analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. Hosting and DNS are managed via Cloudflare, providing a reliable infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the domain registration data aligns well with the website content, supporting legitimacy. The website is accessible without WAF or blocking mechanisms, enabling full analysis.

I

ILUNION

ilunion.com

70

ILUNION is a Spanish enterprise focused on social inclusion and diversity, operating a business model that combines economic profitability with social impact by creating quality employment for people with disabilities and vulnerable groups. The company is positioned as a leader in diversity and transformation with a broad portfolio of services including hospitality, retail, consulting, and wellbeing. Technically, the website is built on Drupal CMS with modern front-end frameworks and integrates analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent accessibility, mobile optimization, and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the website's content, branding, and external links to Grupo Social ONCE and subsidiaries strongly support legitimacy. Overall, ILUNION presents a professional, trustworthy, and socially responsible digital presence.

SCOPAY is an online platform designed to facilitate payments and communication between parents and schools, focusing on services such as lunch payments, school trip payments, and booking parents' evenings. The website presents a professional and user-friendly interface with mobile app availability on major app stores, targeting parents and school staff. Technically, the site uses common web technologies including jQuery, Bootstrap, Font Awesome, and Google reCAPTCHA for form security. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The site lacks direct contact emails or phone numbers, relying solely on a contact form with CAPTCHA for enquiries. Overall, the website is functional and serves its business purpose but requires improvements in transparency, security headers, and compliance documentation to enhance trust and security.

Miele is a well-established premium brand specializing in luxury home appliances including kitchen, laundry, floorcare, and cleaning products. The website targets Canadian consumers seeking high-quality appliances and offers an online catalog and e-commerce capabilities. The brand emphasizes quality and heritage dating back to 1899, positioning itself as a leader in the luxury appliance market. Technically, the website employs modern frameworks such as Bootstrap and integrates marketing and analytics tools like Google Tag Manager and Yotpo. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. WHOIS data for the domain is unavailable, which reduces trustworthiness and should be investigated further. Overall, the website is professional and trustworthy but could improve transparency and security practices.

A

AUTOPOLIS

autopolis.sk

60

AUTOPOLIS.sk is a well-established Slovak automotive dealership specializing in Hyundai and Ford vehicles, offering a comprehensive range of services including new and used car sales, authorized servicing, spare parts, vehicle buyback, fleet offers, insurance, and car rental. The website targets consumers and businesses in Slovakia, positioning itself as a regional leader in automotive sales and services. The business has been operational since 2003, supported by a domain age consistent with its market presence. Technically, the website employs modern web technologies such as Bootstrap, Vue.js, and Google Fonts, hosted on Websupport infrastructure with DNSSEC enabled, ensuring a secure and reliable platform. The site is mobile optimized with good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in speed and technical modernization. From a security perspective, the site enforces HTTPS and DNSSEC, but lacks some advanced security headers and explicit security policies. There is no visible privacy policy or terms of service, which presents compliance gaps, especially regarding GDPR. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, AUTOPOLIS.sk demonstrates a solid business and technical foundation with good security posture but requires enhancements in privacy compliance and security policy transparency to improve trust and regulatory adherence.

H

Husqvarna Group

husqvarnagroup.com

76

Husqvarna Group is a global leader in manufacturing products and services that shape green spaces and urban environments. The company emphasizes user-centered and sustainable solutions, targeting customers worldwide in landscaping, gardening, and construction sectors. Their website reflects a mature digital presence built on Drupal CMS, with modern design, good mobile optimization, and comprehensive corporate content including investor relations and sustainability initiatives. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. The absence of WHOIS domain registration data is a notable concern, requiring further verification to confirm domain legitimacy. Overall, the website is professional, trustworthy, and well-structured, supporting Husqvarna Group's market position as an established manufacturing enterprise.

R

ReadyMembership

readymembership.com

11

ReadyMembership is a UK-based technology company specializing in AI-enabled unified association and membership management systems. The platform targets membership organizations and non-profits, offering a comprehensive suite of services including membership CRM, event management, ecommerce integration, marketing automation, and AI-powered tools. The company is positioned as a trusted provider with over 150 clients worldwide and recognized certifications such as ISO 27001. The website demonstrates a mature digital infrastructure with integrations to HubSpot, Google Analytics, Piwik PRO, and Vimeo, supported by Cloudflare DNS and GoDaddy domain registration. Security posture is strong with HTTPS enforcement and domain locks, though DNSSEC is not enabled and some security headers are not evident. Privacy compliance is robust with detailed policies and cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy.

C

Cesky kutil.cz, s.r.o.

primadoma.tv

10

PrimadomaTV is a Czech media platform specializing in video content related to home improvement, gardening, cooking, crafts, and lifestyle. The website targets Czech-speaking homeowners and DIY enthusiasts, offering a variety of video series and tutorials. The business operates under Cesky kutil.cz, s.r.o., established in 2019, and positions itself as a niche media provider in the Czech market. Technically, the site uses modern frontend technologies including Bootstrap, FontAwesome, Google Fonts, and integrates multiple tracking and privacy consent tools. Hosting appears to be provided by Active24, a known Czech hosting provider. Security posture is adequate with HTTPS enabled and CSRF tokens present, but lacks some security headers and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. No direct contact information is provided on the homepage, which may impact user trust. Overall, the site is professionally designed, mobile-optimized, and content is safe for general audiences.

C

Commission communautaire française

ccf.brussels

49

The Commission communautaire française (COCOF) is a governmental organization serving the French-speaking community in the Brussels-Capital Region, providing regulatory and public services to approximately 900,000 francophone residents. The website is professionally designed using WordPress with the Divi theme and includes SEO optimizations and structured data to enhance search visibility. The technical infrastructure is modern and leverages common WordPress plugins, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks visible advanced security headers and explicit incident response policies. Privacy compliance is weak due to the absence of clear privacy and cookie policies. Overall, the website is trustworthy and credible, reflecting its official status, but could improve transparency and security practices.

A

AMCA, spol. s r. o.

amca.cz

61

AMCA, spol. s r. o. is a Czech company founded in 2005 specializing in organizing academic, medical, and cultural conferences and events. It serves a professional audience including medical professionals, researchers, and academic institutions. The company has a solid market position with a history of organizing large international congresses and offers additional services such as association management. The website is professionally designed, mobile optimized, and provides clear contact information and privacy policies, although cookie consent mechanisms could be improved. Technically, the site uses ASP.NET WebForms with common libraries like jQuery and Bootstrap, and integrates Google Analytics and Google Maps APIs. Security posture is moderate with HTTPS implied but lacking explicit security headers and using an outdated jQuery version. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact details appear legitimate and professional.

Z

Zlínská liga železných hasičů

zlzh.cz

48

Zlínská liga železných hasičů is a regional sports league in Czechia focused on Tough Firefighter Athlete (TFA) competitions. Founded in 2017, it organizes multiple annual events for firefighter athletes with categories for men, women, and masters. The website serves as a community hub providing event information, news, results, and contact details. Technically, the site uses a modern but basic stack including jQuery, Bootstrap, Font Awesome, Owl Carousel, Chart.js, and the Nette PHP framework. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with no detected advanced security headers or incident response contacts, and no privacy policy or terms of service published, which are compliance gaps. The domain registration data is consistent with the business history and regional focus, supporting legitimacy. Overall, the website is functional and trustworthy but would benefit from improved security and privacy compliance measures.

Z

ZLIN.CZ

zlin.cz

60

ZLIN.CZ is a regional news and information portal serving the Zlín region in the Czech Republic. It provides up-to-date news, cultural events, sports coverage, and local information for residents and visitors. The website operates on a WordPress CMS platform, leveraging modern web technologies such as Bootstrap for responsive design and integrates advertising networks like Google AdSense and DoubleClick for revenue generation. The site employs cookie consent mechanisms to comply with privacy regulations, although explicit privacy and terms of service pages are not detected in the scanned content. Security posture is solid with HTTPS enforced and basic security best practices observed, but could be improved with additional security headers and published policies. Overall, the website is professional, content-rich, and well-positioned as a local media outlet.

P

Programa de Incentivo ao Controle de Qualidade (PICQ)

picq.org.br

10

The PICQ website represents a well-established Brazilian healthcare quality control program focused on pathology professionals and institutions. It is affiliated with the Sociedade Brasileira de Patologia and offers scientific updates, proficiency testing, and participant support through a mobile app and online platform. The site is professionally designed using WordPress and Bootstrap, hosted on Microsoft Azure DNS infrastructure, and includes Google Analytics for visitor tracking. Contact information is clearly provided, enhancing business credibility. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed. Security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Overall, the website is functional, trustworthy, and serves its target audience effectively.

LH Medical Management GmbH operates a specialized website focused on managing symposiums and seminars for the Swiss Society of Pathology (SGPath). The site provides detailed information about upcoming educational events, including an annual congress, targeting medical professionals in Switzerland. The business model centers on event management and educational services within the healthcare sector, positioning itself as a niche provider with a professional and consistent brand presence. The website content is relevant, well-structured, and designed to serve its target audience effectively. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Google Analytics, ensuring a responsive and moderately performant user experience. While the CMS is not explicitly identified, the site uses custom or proprietary solutions. Mobile optimization and basic accessibility features are present, though there is room for improvement in SEO and accessibility compliance. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and documented security policies or incident response contacts. Privacy compliance is addressed with visible privacy and cookie policies and a consent banner, indicating GDPR awareness. No critical vulnerabilities or exposed sensitive data were detected, resulting in a moderate security posture. Overall, the website is trustworthy and professional with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the site's security and user trust further.

B

BG Technik cs, a.s.

selvo.cz

48

Selvo (CZ), operated by BG Technik cs, a.s., is a Czech Republic-based company specializing in the sale and servicing of electric mobility products including electric wheelchairs, scooters, and electric vehicles. The company targets seniors and disabled persons, providing quality products with nationwide support and service. The website demonstrates a professional digital presence with clear product information, customer references, and a user-friendly interface optimized for mobile devices. Technically, the site employs modern web technologies such as Bootstrap and integrates multiple analytics and advertising tools including Google Tag Manager and Adform, ensuring effective marketing and user tracking while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website and business exhibit a trustworthy and established profile with no indications of malicious activity or content blocking.

L

LAB MARK a.s.

labmark.eu

61

LAB MARK a.s. is a well-established distributor specializing in clinical diagnostics, molecular biology, and genetics products. The company targets laboratories, healthcare professionals, and research institutions primarily in the Czech Republic. Their business model focuses on distributing a wide range of laboratory instruments, consumables, and reagents, supported by professional technical and application services. The website reflects a medium-sized enterprise with consistent branding and a strong market presence since 1998. Technically, the website is built on ASP.NET WebForms with modern front-end libraries such as jQuery, Bootstrap, and Owl Carousel. It is mobile optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating GDPR compliance. However, it lacks visible security headers and a vulnerability disclosure policy, which are areas for improvement. The WHOIS data is privacy protected, which is common for commercial entities but limits domain age and registrant verification. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing a security.txt file, and improving accessibility to strengthen the security posture and compliance further.

L

LABMARK

labmark.cz

57

LABMARK is a Czech-based company specializing in the distribution and sale of laboratory instruments, diagnostic kits, and consumables. Their website presents a comprehensive catalog of products targeting laboratories, healthcare providers, and research institutions. The company appears to hold a solid market position within the healthcare and laboratory supply sector in the Czech Republic. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance measures are lacking. The absence of WHOIS data introduces some uncertainty about domain legitimacy, but the professional website and clear contact information support trustworthiness. Overall, the site is functional and business-focused but would benefit from enhanced privacy and security disclosures.

A

Affidea

affidea.ro

72

Affidea Romania is a leading healthcare provider specializing in diagnostic imaging, laboratory analyses, and cancer treatment services. Operating in 15 European countries with over 391 centers and 16,000 professionals, Affidea holds a strong market position as the largest European provider in its sector. The website reflects a mature digital presence with comprehensive service offerings, clear navigation, and professional branding. Technically, the site leverages WordPress with modern libraries and APIs, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

A

Affidea Portugal

affidea.pt

72

Affidea Portugal is a leading healthcare provider specializing in diagnostic imaging, oncology treatment, and ambulatory services across Portugal. Established in 2007 and part of the larger Affidea Group, the company offers a comprehensive range of medical examinations, clinical analyses, and specialty consultations. The website reflects a mature digital presence with clear service offerings targeted at patients and healthcare professionals in Portugal. Technically, the site is built on WordPress with modern libraries and includes essential marketing and analytics tools such as Google Analytics and Facebook Pixel, integrated with GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA; however, some improvements are recommended in security headers and vulnerability disclosure practices. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, supporting Affidea Portugal's strong market position in healthcare diagnostics.

A

Affidea Polska

affidea.pl

62

Affidea Polska operates a large network of diagnostic imaging and oncology treatment centers across Poland, providing both publicly funded and private healthcare services. The website reflects a mature healthcare business with a strong market position supported by numerous partnerships and certifications. The technical infrastructure is based on WordPress CMS with modern plugins and technologies ensuring good performance, SEO, and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, targeting patients and healthcare professionals.

G

GANSHORN Medizin Electronic GmbH

ganshorn.de

51

GANSHORN Medizin Electronic GmbH is a German medical technology company specializing in lung function diagnostics, offering a broad range of high-precision devices such as spirometers, body plethysmographs, diffusion measurement systems, and blood gas analyzers. With over 40 years of experience, the company positions itself as a reliable partner for healthcare professionals and institutions seeking innovative and durable pulmonary diagnostic solutions. Their website reflects a mature digital presence with multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, CAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain and WHOIS data align with the company's German origin and business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

Č

Černí koně

cernikone.cz

49

Černí koně is a Czech non-profit organization established in 2008 dedicated to helping people with disabilities achieve mobility through specially designed bicycles and electric mobility devices. The organization also supports families with handicapped children by organizing sports events and providing free bicycles. Their market position is that of a niche social assistance entity with a strong local presence and a clear social mission. Technically, the website is built on WordPress using Elementor and Astra theme, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

L

LEFEEN

lefeen.com

48

LEFEEN is a specialized company operating in the healthcare and technology sectors, focusing on longevity and biohacking technologies. Their offerings include medical devices, physiotherapy equipment, beauty treatments, and sports rehabilitation technologies. The website is professionally designed using WordPress with modern frameworks and plugins, indicating a moderate level of digital maturity. Contact information and social media presence enhance their business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and terms of service pages, though a cookie consent banner is present. Overall, the website is functional and professional but requires improvements in security and compliance documentation.

A

Affidea

affidea.com

74

Affidea is a leading European healthcare provider specializing in advanced diagnostic imaging and outpatient services, operating over 315 centers across 15 countries. The company focuses on delivering personalized, high-quality care through a network of specialized medical experts and state-of-the-art technology. Their services include MRI, CT, X-Ray, Ultrasound, Mammography, Nuclear Medicine, PET/CT, laboratory analysis, and outpatient specialty consultations. The website reflects a large, well-established healthcare network with a strong presence in multiple European markets. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and tracking tools including Google Analytics, Microsoft Application Insights, LinkedIn Insight Tag, and Facebook Pixel. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced and some security best practices are observed, though explicit security headers and incident response information are lacking. The WHOIS data is notably absent, with no registrar or creation date information available, which raises some concerns about transparency. However, the professional presentation, extensive contact information, and multi-country presence support the legitimacy of the business. Privacy and cookie policies are not detected in the provided content, indicating an area for compliance improvement. Overall, the website is professional and trustworthy from a business and content perspective but could enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

LYMFOM HELP, z.s. is a Czech non-profit patient organization established in 2005 that supports patients with malignant lymphoma, their families, and friends. The website provides extensive educational content, patient stories, event information, and charity initiatives aimed at improving patient quality of life and awareness. The organization appears well-established within its niche healthcare sector in the Czech Republic. Technically, the website uses modern web technologies including Bootstrap, jQuery, Kendo UI, and Google Analytics, hosted on a platform likely based on ASP.NET Web Forms. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit privacy/cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and external references support legitimacy. Overall, the site is a valuable resource for lymphoma patients in the Czech Republic but should improve privacy compliance and security headers.

P

Pan American Health Organization

paho.org

75

The Pan American Health Organization (PAHO) website serves as the official regional office for the World Health Organization in the Americas, providing comprehensive public health information, resources, and initiatives. The organization is well-established with a long history dating back to 1902 and holds a leading position in regional health governance and disease control. The website targets governments, health professionals, and the general public across the Americas, offering multilingual content and a wide range of health-related services and publications. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and Font Awesome, and integrates analytics tools such as Google Analytics and Microsoft Clarity. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is strong with HTTPS enforced and anonymized analytics, but lacks some security headers and explicit cookie consent mechanisms. The WHOIS data for the domain is unavailable, which slightly impacts trustworthiness, but the official branding, consistent content quality, and social media presence strongly support legitimacy. No critical security vulnerabilities or suspicious content were detected. Privacy policies are comprehensive and GDPR compliant, though cookie consent could be improved. Overall, the website is a professional, authoritative source for public health information in the Americas, with recommendations to enhance security headers, cookie consent, and publish incident response policies to further strengthen trust and compliance.

IdRelay, operated by Interdo AB, is a well-established Swedish SaaS provider specializing in digital communication tools such as email newsletters, SMS marketing, and app notifications. The company targets a broad audience including businesses, government entities, and non-profits, offering AI-enhanced content creation and integrations with platforms like Mediaflow and SiteVision. The website reflects a mature market position with a strong emphasis on GDPR compliance and user privacy. Technically, the site uses modern web technologies, is mobile-optimized, and hosted on Microsoft Azure DNS infrastructure. Security posture is solid with domain transfer protections and encrypted communications, though DNSSEC is not enabled and explicit security headers are not evident. Overall, the site is professional, trustworthy, and provides comprehensive contact options.