Security Directory

W

Wellit s.r.o.

wellit.sk

57

Wellit s.r.o. is a Slovakian technology company specializing in web development, e-commerce solutions, custom web applications, cloud repositories, and hosting services. Established in 2010 and operating under the Wellit brand since 2012, the company targets businesses seeking modern, user-friendly digital solutions. Their market position is that of a small but established technology service provider emphasizing innovation and partnerships. Technically, the website is built on WordPress 4.7.29 using Cherry Framework and Bootstrap, incorporating common JavaScript libraries like jQuery and FlexSlider. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No hosting provider details were identified from the content. From a security perspective, the site uses HTTPS but lacks important security headers and a cookie consent mechanism, which impacts GDPR compliance. The WordPress version is outdated, posing potential security risks. No explicit security policies or incident response contacts are published, limiting transparency. No vulnerabilities or exposed sensitive data were detected in the visible content. Overall, the website is professional and business-focused with good content quality and navigation. However, improvements in privacy compliance, security best practices, and technical modernization are recommended to enhance trust and reduce risk.

The GSA Platform, operated by GAZ-SYSTEM S.A., is a specialized online platform facilitating auctions and secondary market transactions for gas transmission capacity and LNG terminal services across Europe. It serves gas transmission operators, market participants, and LNG terminal operators, providing tools for booking long-term capacity and managing incremental capacity. The platform is positioned as a key player in the European energy sector, offering transparent and regulated capacity allocation services. Technically, the website employs a modern but moderate tech stack including Bootstrap, jQuery, and Font Awesome, hosted by OVH SAS. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security practices include CSRF tokens and cookie consent mechanisms, but there are notable weaknesses such as password input fields not using secure input types and lack of visible security headers. From a security perspective, the platform demonstrates a reasonable posture with encrypted communications (assumed HTTPS), but improvements are needed in input handling and security header implementation. Privacy compliance is supported by accessible privacy and cookie policies, with GDPR considerations evident. Contact information is comprehensive, enhancing business credibility. Overall, the platform is a professional, trustworthy service with a solid business model and clear market focus. Security and privacy practices are adequate but could be enhanced to meet higher standards. No critical vulnerabilities or blocking mechanisms were detected, allowing full content analysis.

F

Founders4Founders is under construction

founders4founders.cz

48

Founders4Founders.cz is a website currently under construction, targeting investors and startups in the Czech Republic. The site appears to be a small-scale project or startup founded in 2021, with minimal public-facing content and no active business services visible. The website uses WordPress with an under construction plugin and basic frontend technologies such as Bootstrap and Font Awesome. Hosting is likely provided by Forpsi, a Czech hosting provider, as inferred from the nameservers. The technical infrastructure is basic, with no advanced frameworks or analytics detected. Security posture is weak, with no visible HTTPS confirmation, security headers, or privacy policies. There is no contact information or forms, limiting user engagement and trust. Overall, the site is not yet operational and lacks critical compliance and security features.

A

AUDIT ADVICE s.r.o.

auditadvice.cz

50

AUDIT ADVICE s.r.o. is a Czech Republic based small-sized company specializing in accounting, payroll, tax advisory, and document archiving services. With over 15 years of experience, it serves firms, entrepreneurs, and various associations primarily in the Tábor region. The company offers comprehensive outsourcing solutions and emphasizes professionalism and trust in its service delivery. The website reflects a professional and consistent brand image with clear service descriptions and client-oriented content. Technically, the site uses modern frameworks like Bootstrap and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site is mobile-optimized and well-structured, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, HTTPS is implied, but security headers and incident response information are absent, suggesting room for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional overall.

E

ElDiario.es

eldiario.es

54

ElDiario.es is a prominent Spanish digital newspaper focused on current affairs, politics, and economic analysis. It operates a subscription-based business model with a paywall to monetize its content. The website demonstrates a mature digital presence with professional branding and high-quality content targeted at a general audience interested in independent journalism. Technically, the site employs modern JavaScript frameworks, integrates multiple advertising and tracking services, and shows good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic, with a consent management platform present but no explicit privacy or cookie policies detected in the provided HTML. WHOIS data is restricted by the Spanish registry, limiting domain registration transparency. Overall, the site is legitimate and trustworthy but could improve transparency and security practices.

I

IPEXO

ipexo.cz

57

IPEXO is a Czech-based IT service provider specializing in cybersecurity, cloud services, website and e-shop development, and digital marketing. The company targets businesses seeking comprehensive internet solutions to enhance security, online presence, and customer acquisition. The website demonstrates a professional design with clear navigation and multiple interactive contact forms protected by Google reCAPTCHA, indicating a moderate level of digital maturity and security awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. The site lacks explicit security policies and incident response information, which are critical for trust in cybersecurity services. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

J

JM Holding

jmholding.lv

57

JM Holding is a Latvian digital agency specializing in website development, e-commerce solutions, SEO optimization, and online advertising services including Google Ads. The company targets businesses and individuals seeking to establish or improve their online presence. The website is professionally designed using WordPress and Elementor, with integrated Google Analytics and reCAPTCHA for analytics and security. While the technical infrastructure is modern and the site is mobile optimized, there are gaps in privacy compliance such as missing privacy and cookie policies. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and formal security policies. Contact information is clearly provided, enhancing business credibility. Overall, JM Holding presents as a legitimate and professional small-sized technology service provider in Latvia.

Stiftung Refdata is a Swiss foundation providing essential standardized reference data services for the healthcare sector, focusing on unique identification of medicines, medical products, healthcare professionals, and organizations using GS1 standards such as GTIN and GLN. The website demonstrates a solid market position with exclusive licensing rights and partnerships with Swissmedic and GS1 Schweiz. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is good with HTTPS enforced and CSRF protections, though lacking explicit security policies and some security headers. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy in German. Overall, the site is professional, trustworthy, and well-aligned with its healthcare audience.

A

Agile CRM

agilecrm.com

62

Agile CRM is a technology company providing a comprehensive SaaS Customer Relationship Management platform targeting small businesses. The website presents a professional, well-structured digital presence with a focus on sales, marketing automation, and customer service features. The company has a significant customer base (15,000+ customers) and promotes integrations and partnerships with other technology providers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and secure form handling, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust slightly but the overall business credibility remains high based on content and branding. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy with room for improvement in security transparency and privacy compliance.

R

RC "RĀZNA"

rcrazna.lv

45

RC "RĀZNA" is a healthcare service provider specializing in state-funded medical rehabilitation services located within the Rāznas National Park area in Latvia. The website presents a professional and regionally focused healthcare business model targeting patients seeking rehabilitation services. The digital presence is built on WordPress CMS, utilizing common web technologies such as jQuery, Google Analytics, and Google Tag Manager for analytics and tracking. The site is mobile-optimized and includes SEO best practices, although some accessibility features are basic. From a security perspective, the website employs HTTPS with anonymized IP tracking in Google Analytics, indicating a baseline security posture. However, the absence of security headers and lack of published privacy or cookie policies suggest room for improvement in compliance and security best practices. No incident response or vulnerability disclosure information is provided, which could be a gap in the security maturity of the organization. Overall, the website is accessible without WAF or blocking mechanisms, and the domain registration data aligns with the website's claims, supporting legitimacy. The content is safe for general audiences, with no adult or explicit content detected. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing security and incident response information to enhance trust and compliance.

M

MAMALETO s.r.o.

mamaleto.cz

65

Mamaleto.cz is a specialized e-commerce retailer focused on baby products, primarily strollers, car seats, and related accessories. The company, legally known as MAMALETO s.r.o., targets parents and caregivers in the Czech and Slovak markets, positioning itself as an expert in its niche with a clear business model centered on online retail and customer advisory services. The website demonstrates a professional design and consistent branding, supporting a good user experience and trustworthiness. Technically, the site is built on modern frameworks such as Next.js and React, with integration of popular libraries like Font Awesome and Toastify, and employs Google Ad Manager for advertising. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Security posture is strong with HTTPS and security headers properly implemented, but the absence of a cookie consent banner and explicit security policies indicates room for compliance enhancement. The lack of WHOIS data is a notable concern for domain legitimacy verification, though the business information and structured data on the site support its credibility. Overall, Mamaleto.cz is a well-functioning retail website with minor gaps in privacy compliance and domain transparency.

R

Rēzeknes valstspilsēta pašvaldība

rezekne.lv

51

Rēzeknes valstspilsēta pašvaldība operates the official municipal portal for the city of Rēzekne in Latvia, providing comprehensive information and services to residents and visitors. The website serves as a central hub for city administration, public services, news, cultural events, and investment opportunities, positioning itself as a key government resource in the region. The site targets local citizens, businesses, and tourists, offering multilingual support in Latvian, English, and Russian. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO tools like Rank Math, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements, making it a reliable digital presence for the municipal government.

H

Health Food Manufacturers' Association

hfma.co.uk

50

The Health Food Manufacturers' Association (HFMA) is a UK-based trade association representing companies in the health food and supplement manufacturing sector. The website serves as an informational and advocacy platform for its members, providing industry representation and support. The domain is well-established, dating back to 1999, indicating a mature presence in the market. Technically, the site is built on WordPress using the Elementor page builder, with standard web technologies and fonts loaded from trusted sources. Google Tag Manager is employed for analytics, reflecting moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

Recruiter Sites is a UK-based SaaS platform developed by HotLizard Limited, providing an instantly configurable recruitment website solution targeted at recruitment agencies and recruiters. The platform emphasizes rapid deployment, cost-effectiveness, and ongoing support with hosting and upgrades included. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on ASP.NET WebForms with modern integrations such as Google Analytics and reCAPTCHA v3, ensuring secure and user-friendly interactions. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to domain naming query issues but does not detract from the evident legitimacy of the business. Overall, the site is well-structured, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

R

Rara Themes

raratheme.com

76

Rara Themes is a specialized WordPress theme provider established in 2015, offering both free and premium mobile-friendly themes. The company targets WordPress users and small to medium businesses seeking easy-to-use themes with good support. Their business model includes theme sales and a theme club subscription, supported by documentation and customer testimonials. Technically, the website is built on WordPress with popular plugins and frameworks such as Elementor and Easy Digital Downloads, hosted behind Cloudflare for DNS and security. The site demonstrates moderate performance and excellent mobile optimization, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks visible security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages found. The domain WHOIS data is transparent and consistent with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but could improve privacy and security disclosures.

W

WYVERN Ltd

wyvernltd.com

61

WYVERN Ltd is a globally recognized leader in aviation safety auditing, consulting, and information services, founded in 1991. The company offers a comprehensive suite of services including safety auditing, training, consulting, SMS software, and certification programs such as the Wingman and Flight Leader Programs. Their market position is strong within the aerospace transportation sector, supported by ISO 9001 certification and a robust digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a professional and responsive user experience. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, WYVERN demonstrates a mature and trustworthy online presence aligned with its business operations.

N

NOVA SKOLA, s.r.o.

ucebnice.online

51

Učebnice online is an educational platform operated by NOVA SKOLA, s.r.o., offering multimedia interactive textbooks (MIUč+) primarily for primary school students and teachers in the Czech Republic. The website provides both online and installed versions of their educational software, supported by video tutorials and technical assistance. The business model revolves around licensing and subscription access to over 110 interactive textbooks covering a wide range of subjects. The company maintains a moderate market position with a clear focus on digital education content.

Rail Recruiter Limited operates a specialized online job board focused on the UK rail industry, providing job listings, career advice, and recruitment services to both job seekers and employers. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. The technical infrastructure is based on ASP.NET WebForms with standard tracking tools like Google Analytics and Bing UET, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which should be addressed to improve resilience. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and functional platform for rail industry recruitment.

JobBoard.com is a UK-origin job board software platform operated by HotLizard Limited, offering white label solutions for new and existing job boards internationally. The platform emphasizes cost-effectiveness, industry best practices, and customer support. Technically, the website uses modern tracking and security tools such as Google Analytics, Google Tag Manager, and reCAPTCHA v3, but lacks some security headers and uses an outdated jQuery version. Privacy and cookie policies are comprehensive with user consent mechanisms in place. The security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing a security policy. The missing WHOIS data raises some legitimacy concerns, though the website content and contact information support a credible business presence.

HotLizard is a UK-based specialist company established in 1999, providing recruitment websites and job board software solutions. Their offerings range from off-the-shelf SaaS platforms to bespoke, fully customized recruitment technology solutions designed to enhance candidate experience and client engagement. The company targets recruitment agencies, job board owners, and direct employers, positioning itself as a trusted provider with a strong market presence supported by long domain tenure and positive customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and reCAPTCHA v3, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, GDPR compliant, and trustworthy, reflecting a mature business with a clear focus on recruitment technology.

R

Rīgas Valsts Tehnikums

rvt.lv

51

Rīgas Valsts Tehnikums (RVT) is a Latvian state technical school providing vocational education across multiple technical and commercial disciplines. The institution targets students and adult learners, offering a broad range of programs supported by EU projects such as Erasmus+. The website reflects a well-established educational entity with a clear focus on technical training and community engagement. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and security practices including HTTPS and security headers. However, the absence of a visible cookie consent mechanism and explicit security policies indicates room for compliance improvement. Overall, the site is professional, secure, and trustworthy, with active social media presence and clear contact channels.

A

ACCESS Newswire

accessnewswire.com

65

ACCESS Newswire operates as a leading global press release distribution and PR platform, offering a comprehensive suite of services including media database access, media pitching, monitoring, and investor relations tools. The company targets businesses, PR professionals, investors, and agencies, providing subscription and non-subscription models to meet diverse client needs. The website demonstrates a strong market position with professional branding and clear service offerings. Technically, the website leverages a modern technology stack including Google Analytics, Microsoft Clarity, Marketo, Facebook Pixel, and service workers for offline support. It is built on the MultiScreenSite CMS platform, optimized for mobile and accessibility, and integrates multiple marketing and analytics tools to support business growth and user engagement. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v3, and includes accessibility compliance features. While explicit security headers are not fully confirmed, no exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of a public vulnerability disclosure policy and WHOIS data transparency are areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. However, the missing WHOIS data and lack of explicit security policies slightly reduce trustworthiness. Strategic recommendations include enhancing WHOIS transparency, publishing a security policy, and ensuring all security headers are implemented and maintained.

The website kronaby.cz represents Janeba Time, s.r.o., a small Czech retail business specializing in hybrid smartwatches under the Kronaby brand. The site provides product information and links to partner e-commerce platforms for purchase. The business targets consumers interested in classic design smartwatches with advanced technology. The website is built on the Incomedia WebSite X5 Pro CMS and uses modern web technologies including jQuery, Swiper.js, and Google Analytics. It is hosted likely by Forpsi, a Czech hosting provider, with domain registration consistent with the business age and location. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and visible privacy or terms of service pages. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and compliance. Overall, the site is professional and functional with moderate technical maturity.

FM Recruiter is a UK-based specialist job board focused on the facilities management sector, operated by Business Daily Group. The platform offers job listings, CV upload, job alerts, and career advice tailored to facilities management professionals and recruiters. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience for its target audience. Technically, it is built on ASP.NET WebForms with common web technologies and integrates Google Analytics and Bing UET for tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes phone numbers, email, and a physical address, enhancing business credibility. Overall, FM Recruiter presents as a trustworthy and functional niche recruitment platform with room for security enhancements.

O

Official FISU TORINO 2025 Product's Store

wugtorino2025.it

45

The website www.wugtorino2025.it/en is the official e-commerce store for the FISU Torino 2025 World University Games, offering official merchandise such as apparel, accessories, and memorabilia. It targets fans, participants, and the general public interested in event-related products. The site is built on the PrestaShop CMS platform and incorporates modern web technologies including Google reCAPTCHA for form security and structured data for SEO enhancement. The design is professional and mobile-optimized, providing a good user experience with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, demonstrating a good security posture. The use of Google reCAPTCHA helps mitigate automated abuse on forms. However, the absence of explicit privacy and terms of service pages indicates gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose and geographic focus, supporting legitimacy. Overall, the site is a trustworthy and functional e-commerce platform for official event merchandise, but it would benefit from enhanced privacy compliance and clearer legal documentation to improve user trust and regulatory adherence.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

50

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

T

TV Marko

tvmarko.cz

53

TV Marko is a small audiovisual studio based in the Moravskoslezský region of the Czech Republic, operating since 1999. The company specializes in media production and broadcasting, including local television (TIK Bohumín), corporate films, advertising spots, aerial drone filming, and 2D/3D animation. Their market position is regional with a focus on local businesses and media consumers. The website presents a professional design with clear navigation and detailed service descriptions, supported by client logos and contact information. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced CMS or hosting details. Security posture is moderate with HTTPS assumed but missing key security headers and privacy policies, indicating compliance gaps. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the site is safe, trustworthy, and professionally maintained but would benefit from enhanced security and privacy compliance measures.

M

Maltas apvienības pārvalde

malta.lv

52

Maltas apvienības pārvalde operates as a local government administrative body serving six parishes in the Rēzeknes novads region of Latvia, including Maltas pagasts. The website provides residents and stakeholders with information on governance, cultural events, educational institutions, infrastructure, and community services. It maintains an active online presence with social media integration and contact details for public engagement. The site is built on Joomla CMS with a variety of common web technologies and plugins, offering a moderate level of digital maturity and mobile responsiveness. Security posture is adequate with HTTPS enabled and cookie consent implemented, though it lacks advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and serves its community effectively.

B

Bonus Veren Siteler

bonus-deneme-siteler.com

56

Bonus Veren Siteler is a Turkish online platform specializing in aggregating and presenting legal and reliable bonus offers, promotional codes, and free trial opportunities primarily for e-commerce and digital services. The website targets online shoppers and users seeking to maximize savings and benefits through verified promotions. The business operates as an informational and affiliate-style service, focusing on providing up-to-date and trustworthy content to its audience. The market position is niche with a focus on the Turkish market, emphasizing legal compliance and user trust. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with external resources such as Google Fonts and Font Awesome. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized with responsive design and basic accessibility features. SEO practices are well implemented with comprehensive meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks advanced security headers and does not publish privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The WHOIS data presents a suspicious domain creation date in the future, which undermines trust and requires further verification. No forms or user data collection mechanisms are present on the main page, reducing immediate privacy risks. Overall, the website is professionally designed and functional with good content quality and user experience. The main risks relate to compliance gaps (missing privacy and cookie policies) and the questionable WHOIS domain registration data. Strategic improvements in these areas would enhance trustworthiness and security posture.

H

www.hattrick.cz – Trojnásobná porce fotbalového čtení

hattrick.cz

40

www.hattrick.cz is a Czech football magazine and online media platform providing extensive football-related content including news, interviews, and analyses. The website targets football fans and readers interested in Czech and international football. It operates primarily as a media business offering both digital content and a print magazine subscription model. The site is built on WordPress CMS with common plugins for social media feeds and analytics integration. While HTTPS is enabled and Google Tag Manager is used for tracking, the site lacks visible privacy and cookie policies and security headers, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the active social media presence and professional content suggest a legitimate operation.

The website cookiebar.it presents a login page for a service named Cookiebar. The site is minimalistic with no public-facing content describing the business, its services, or contact information. The domain is registered in Italy and is relatively new, created in 2021, which aligns with a small or startup business profile. The technical infrastructure is based on ASP.NET Web Forms with older versions of jQuery and jQuery UI, and uses Bootstrap and Font Awesome for styling. External resources are loaded over HTTP, which is a security concern. No privacy, cookie, or terms of service policies are present, and no contact or social media information is provided, limiting transparency and trust. Security posture is weak due to outdated libraries, lack of HTTPS enforcement, and missing security headers.

A

Alp Design – brand owned by Kong

alpdesign.it

53

Alp Design, a brand owned by Kong S.p.A., specializes in manufacturing high-quality equipment for speleology, canyoning, and rescue operations. Established in 1978, the company has a strong market position within its niche, offering a comprehensive product catalog including harnesses, bags, clothing, K9 harnesses, and rescue stretchers. The website reflects a professional and consistent brand image targeting professionals and enthusiasts in outdoor and rescue activities. Technically, the site is built on ASP.NET Web Forms with modern front-end libraries such as Bootstrap and Swiper.js, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in security headers and explicit security policies. Overall, the domain registration and business information are consistent and trustworthy, supporting the legitimacy of the website and its operations.

Y

Yates Gear

yatesgear.com

38

Yates Gear is a specialized manufacturer focused on mountaineering, rock climbing, tactical, helo-ops, and search and rescue equipment. The company has a long-established domain since 1999, indicating a mature presence in the manufacturing sector. Their website is built on a modern e-commerce platform (likely OpenCart) with a professional design and good mobile optimization. The technical infrastructure includes popular libraries and frameworks such as Bootstrap, Font Awesome, and Swiper, supporting a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enforced but missing DNSSEC and security headers, suggesting room for improvement in hardening the site against attacks. Tracking via Facebook Pixel indicates marketing efforts but also raises privacy considerations. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices.

B

BOSPF

laboutiqueofficiellepompiers.fr

54

The website 'BOSPF' operates as an e-commerce retail platform specializing in firefighter-related apparel, equipment, collectibles, and accessories. It targets both individual customers and professional firefighters, positioning itself within a niche market in France. The business has been established since 2013, with a consistent domain registration and a clear focus on its target audience. The site offers a variety of product categories including clothing, equipment, and gift cards, supporting a specialized retail business model. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by OVH, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The presence of cookie consent mechanisms indicates awareness of privacy regulations, although no explicit privacy policy or terms of service were detected in the provided content. From a security perspective, the site enforces HTTPS with a valid SSL certificate, but lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were found, but improvements in security headers and form protections are advised. The absence of analytics and advertising scripts suggests minimal user tracking, aligning with basic privacy compliance. Overall, the website presents a professional and trustworthy retail presence with room for enhancement in privacy documentation and security hardening. The domain registration data supports the legitimacy of the business, and the content is safe for general audiences without any adult or questionable material.

DMO Lužické a Žitavské hory, z.s. operates a regional tourism website promoting the Lužické hory area, a scenic region on the Czech-German border known for its natural beauty, cultural heritage, and glassmaking tradition. The website offers guides, itineraries, accommodation and gastronomy information, and an e-shop for souvenirs, targeting tourists and nature enthusiasts. The business is positioned as a small, regional destination management organization supported by local and regional partners. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and GDPR cookie consent, though security headers could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and good user experience.

Z

Zittauer Stadtentwicklungsgesellschaft mbH

stadtentwicklung-zittau.de

48

The Zittauer Stadtentwicklungsgesellschaft mbH is a small, regionally focused municipal development company established in 1992, specializing in city and regional development, tourism, and urban renewal in Zittau, Germany. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting local citizens, businesses, and public institutions. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Overall, the domain and website appear legitimate and trustworthy with no signs of blocking or suspicious activity.

I

International Federation of Mountain Guides Associations

ifmga.info

52

The International Federation of Mountain Guides Associations (IFMGA) is a globally recognized non-profit federation that represents professional mountain guides and coordinates national member associations. The organization focuses on maintaining high standards in training, certification, and safety for mountain guides worldwide. Their website reflects a professional and consistent brand presence, targeting professional guides and related stakeholders. Technically, the site is built on Joomla CMS with modern frontend technologies and is hosted via GoDaddy. The site is responsive and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and formal privacy and cookie policies, which are compliance gaps. No signs of blocking or WAF interference were detected, and the domain registration is consistent and legitimate. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and DNS security.

N

NEWTON Media

newtonmediasee.eu

54

NEWTON Media SEE is a regional media intelligence and research company operating primarily in South East Europe, with a focus on media monitoring, data mining, market research, translation services, and voice-to-text technologies. The company maintains a network of regional subsidiaries and partners in Slovenia and Croatia, providing tailored media intelligence and consulting services. The website is professionally designed using WordPress and Elementor, reflecting a mature digital presence with moderate technical sophistication. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of public WHOIS data is consistent with EURid privacy policies for .eu domains and does not detract significantly from the company's legitimacy. Overall, the website and business present a credible and professional image suitable for their target market.

N

Nimblr

nimblrsecurity.com

73

Nimblr is a security awareness training provider focused on reducing IT security incidents caused by user actions through smart simulations and training. The company operates a professional website built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and Cookiebot for cookie consent management. The website is well-designed, mobile-optimized, and provides clear messaging about its services, targeting businesses seeking to improve their security culture. From a technical perspective, the site uses modern technologies and maintains good performance and SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and published security policies. The domain registration is consistent with the company's founding date and shows no suspicious patterns, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

D

DrWitt

drwitt.cz

47

DrWitt.cz is a Czech website representing a small retail business specializing in functional mineral water beverages enriched with vitamins and minerals. The company appears to be established since 2018 and targets general consumers interested in health and wellness products. The website is professionally designed with consistent branding and clear messaging about their product offerings. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Google Fonts, and integrates Google Analytics and advertising tools such as Google Ads and Seznam Sklik. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though explicit security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence for a small Czech beverage company.

C

Centum

centum-rt.com

49

Centum is a Spanish technology company specializing in the design, development, and commercialization of aeronautical mission systems for emergency, security, defense, and aerospace sectors. With over 15 years of experience, Centum offers advanced mobile communications technology that supports critical operations such as search and rescue, maritime surveillance, and emergency communications. The company positions itself as a trusted provider of mission-critical connectivity solutions, serving government and defense markets with a medium-sized, professional team. The website infrastructure is built on WordPress with modern plugins and technologies, including WPBakery Page Builder and WPML for multilingual support. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements could be made by enabling DNSSEC and adding security headers. No security blocking or WAF challenges were detected, allowing full content access and analysis. The site includes clear contact information, privacy and cookie policies, and legal notices, reflecting compliance with GDPR and related regulations. Social media presence on major platforms enhances trust and outreach. Overall, Centum's digital presence reflects a mature, credible business with a strong focus on technology and mission-critical solutions. Security and privacy practices are good but could be enhanced to further strengthen trust and resilience against threats.

K

Kobetron

kobetron.com

50

Kobetron is an established company operating in the energy sector, providing specialized solutions likely related to electrical and power infrastructure. The company has a long-standing web presence since 1998, indicating stability and experience in its field. The website is built on a modern WordPress platform using Elementor and Gravity Forms, offering a professional and responsive user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Contact is primarily facilitated through a web form, with no direct email or phone contacts visible. Overall, the website reflects a credible business with room for improvement in privacy and security transparency.

U

Ušetřeno.cz s.r.o.

usetreno.cz

67

Ušetřeno.cz s.r.o. operates a well-established Czech online platform specializing in comparison and brokerage services across energy, finance, insurance, and telecommunications sectors. The company offers consumers tools to compare prices and services such as energy suppliers, loans, mortgages, insurance policies, and mobile tariffs, aiming to help users save money efficiently. As part of the ČSOB group, Ušetřeno.cz benefits from strong market positioning and credibility within the Czech Republic. The website features a professional design, clear navigation, and interactive calculators that enhance user engagement and experience. Technically, the website leverages modern web technologies including Vue.js for frontend interactivity, Google Tag Manager for analytics, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, although some accessibility features could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place; however, the absence of explicit security headers and a security.txt file indicates room for enhancement in security posture and incident response readiness. The WHOIS data for the domain is unavailable, which raises concerns about transparency and domain registration legitimacy. Despite this, the website's content quality, business information, and affiliation with a reputable financial group mitigate some trust concerns. Overall, the platform demonstrates a solid business and technical foundation with moderate security maturity, suitable for its consumer-facing financial services role. Strategic recommendations include implementing comprehensive security headers, publishing a vulnerability disclosure policy, enhancing accessibility compliance, and improving transparency around domain registration and incident response contacts to strengthen trust and security culture.

A

Autoškolský ombudsman

autoskolsky-ombudsman.cz

50

The website 'Autoškolský ombudsman' serves as an independent advisory and mediation portal focused on driving schools and related stakeholders in the Czech Republic. It is a joint project of two professional associations representing driving schools, providing free expert advice, mediation services, and legislative input collection. The site targets driving school students, instructors, examiners, and operators, positioning itself as a niche expert resource within the transportation and education sectors. The business model is non-profit, funded initially by sponsorships and planned contributions from driving schools. Technically, the site employs a modern but basic technology stack including Bootstrap, jQuery, and Google Analytics. The design is professional and mobile-optimized with clear navigation and consistent branding. However, the site lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or security contact information is provided. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and partner affiliations support legitimacy. Tracking via Google Analytics is present, but privacy compliance is minimal. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

M

Município de Mondim de Basto

mondimdebasto.pt

43

Mondim de Basto is a municipal government website providing information about the local government, cultural activities, tourism, and public services for the Mondim de Basto region in Portugal. The site targets residents, tourists, and cultural visitors, serving as an official portal for municipal information and community engagement. The business model is governmental, focusing on public service and information dissemination. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, using Google Fonts and Font Awesome for styling and icons. The site is mobile optimized with a moderate performance profile. However, accessibility and SEO optimizations are basic, and no advanced analytics or tracking tools are detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks important security headers and published security policies. No cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy and professional, with good content quality and clear navigation. Strategic improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance the security posture and regulatory compliance.

The Associação Comercial e Industrial de Vizela (ACIV) is a well-established regional business association founded in 1986, serving the commercial and industrial sectors of the Vale de Vizela region in Portugal. The organization focuses on representing and promoting the interests of local businesses through services such as legal and financial consultancy, professional training, job insertion support, and event organization. The website reflects a professional and community-oriented approach, targeting local entrepreneurs and business stakeholders. Technically, the website employs a traditional web stack with Bootstrap, jQuery, and various UI libraries to deliver a responsive and user-friendly experience. While the site is functional and moderately optimized for mobile devices, there is room for improvement in performance and accessibility. The absence of a known CMS suggests a custom-built platform maintained by the developer acastro dev. From a security perspective, the site uses HTTPS and includes basic form validation but lacks critical security headers and anti-CSRF protections. No privacy or cookie policies are present, which is a compliance gap under GDPR. The integration of Facebook SDK indicates some level of user tracking, but overall tracking is minimal. The WHOIS data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the site is a credible and useful resource for its target audience but would benefit from enhanced security measures and privacy compliance to strengthen trust and regulatory adherence.

A

Associação Empresarial de Felgueiras

aef.pt

44

Associação Empresarial de Felgueiras (AEF) is a regional non-profit business association based in Portugal, focused on supporting local businesses through a variety of services including administrative, fiscal, legal, training, and internationalization support. The organization actively manages multiple projects and provides a platform for business networking and development. The website reflects a mature digital presence built on WordPress with modern plugins and design elements, targeting local entrepreneurs and companies. The site is well-structured, mobile-optimized, and provides clear contact information and policy disclosures, although some compliance mechanisms like cookie consent are not fully implemented. Security posture is adequate with HTTPS and modern libraries, but lacks explicit security headers and incident response policies. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and established business association.

C

Comunidade Intermunicipal do Algarve (AMAL)

amal.pt

44

AMAL (Comunidade Intermunicipal do Algarve) is a regional governmental entity coordinating 16 municipalities in the Algarve region of Portugal. The website serves as an official portal providing information on regional governance, environmental initiatives, social development, cultural programs, economic projects, mobility, and digital transformation efforts. It targets residents, municipal authorities, and stakeholders interested in Algarve's regional affairs. The site is well-structured, regularly updated with news, and maintains a consistent brand identity aligned with its governmental role. Technically, it is built on Joomla CMS with modern front-end technologies and includes accessibility features such as a screen reader plugin. Security posture is adequate with HTTPS and HSTS enabled, but lacks some security headers and a vulnerability disclosure mechanism. Privacy compliance is supported by a comprehensive GDPR policy, though cookie consent mechanisms are absent. Overall, the site is trustworthy and professional, reflecting its official status.

A

ACRAL - Associação do Comércio e Serviços da Região do Algarve

acral.pt

52

ACRAL is a regional non-profit association representing commerce and services in the Algarve region of Portugal. The organization provides a variety of services including member advantages, training, project support, events, and advocacy for local businesses. The website reflects a well-established regional presence with consistent branding and clear communication targeted at retailers and service providers in the Algarve. Technically, the site is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and email cloaking, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the site is professional, trustworthy, and suitable for its audience.

Associação Nacional do Ramo Automóvel (ARAN) is a Portuguese national association representing the automotive sector. The organization provides member support, training, publications, and events to automotive professionals and companies in Portugal. The website reflects a mature and professional digital presence with clear branding and comprehensive content tailored to its target audience. The association recently renewed its leadership, signaling ongoing organizational vitality. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and Font Awesome. It incorporates GDPR-compliant cookie consent mechanisms and uses Google Analytics for traffic analysis. The site is mobile-optimized and structured with SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating good baseline security hygiene. However, no advanced security headers were detected, and there is no public security policy or incident response contact information. The absence of a vulnerability disclosure or security.txt file suggests room for improvement in transparency and security maturity. Overall, ARAN's website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and stakeholder confidence.