Security Directory

T

The Boeing Company

boeing.pl

59

The Boeing Poland website represents a regional presence of The Boeing Company, a leading global aerospace and defense corporation. The site highlights Boeing's 35-year history in Poland, its offices in Warsaw, Gdańsk, and Rzeszów, and its engagement with local communities, government, and military. The website serves as a corporate informational portal targeting Polish stakeholders, potential employees, and partners. Technically, the site is built on Adobe Experience Manager, uses Brightcove for video content, and integrates Google Tag Manager for analytics. The design is professional, mobile-optimized, and consistent with Boeing's global branding. Security posture shows room for improvement, with no visible security headers and missing privacy and cookie policies, which are critical for compliance and trust. WHOIS data is not publicly available, a common practice for large corporations to protect privacy, but this limits transparency. Overall, the site is credible and functional but would benefit from enhanced security and privacy disclosures.

T

The Boeing Company

boeing.co.in

68

The Boeing India website represents the Indian regional presence of The Boeing Company, a global aerospace and defense leader. The site highlights Boeing's longstanding partnership with India's aerospace sector, emphasizing commercial aviation, defense modernization, and local supplier development. The business model focuses on manufacturing, co-development, and skill development aligned with India's national initiatives. Technically, the site is built on Adobe Experience Manager with modern video integration and uses Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Contact information and incident response details are not explicitly provided, which could be improved. Overall, the site is professional, trustworthy, and well-branded, serving as a credible corporate presence in India.

L

Landkreis Görlitz

gis-lkgr.de

54

The website gis-lkgr.de serves as the official geoportal for Landkreis Görlitz, a regional government entity in Germany. It provides a comprehensive set of geographic information system (GIS) services including parcel and address searches, map printing, coordinate tools, and access to OGC services. The portal targets residents, local government officials, planners, and public users interested in geographic and cadastral data of the Landkreis Görlitz region. The business model is a public service offering free access to official geographic data, positioning itself as a trusted government resource. Technically, the website is built using ExtJS 4 framework and proprietary GIS software components (cardo.Map3Lib). It employs AJAX for dynamic content loading and uses HTTPS for secure communication. The site demonstrates moderate performance and basic mobile optimization. Accessibility and SEO optimizations are present but could be improved. The content is well-structured and professionally presented, with consistent branding aligned with Landkreis Görlitz. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which is a GDPR compliance gap. Incident response and security policies are not explicitly provided. No vulnerabilities or suspicious domains were detected. Overall, the security posture is adequate but could benefit from enhancements. The overall risk assessment is low, with the site appearing trustworthy and legitimate as an official government portal. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, providing explicit security and incident response policies, improving mobile responsiveness, and regularly auditing third-party libraries. These steps will enhance compliance, security posture, and user trust.

Channel 4 Sales operates as the advertising sales arm of Channel Four Television Corporation, providing a comprehensive suite of advertising solutions across TV, video on demand, social media, and digital platforms. The company targets advertisers and brands aiming to reach UK audiences, leveraging Channel 4's strong market presence and partnerships with UKTV and Warner Bros. Discovery. Their services include sponsorship packages, branded entertainment, and retail advertising, positioning them as a key player in the UK media advertising sector. Technically, the website is built on a modern stack using React and Next.js, optimized for performance and mobile responsiveness. The site features rich multimedia content including videos hosted on Brightcove, and integrates social media channels effectively. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of explicit security headers and a published security or incident response policy indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy, although the website's branding and external links strongly associate it with Channel 4. Overall, the security posture is good but could be enhanced with additional transparency and controls. Strategically, the site is well positioned to serve its target market but should address the WHOIS transparency issue and improve security disclosures to strengthen trust and compliance. Continued investment in security best practices and privacy compliance will support long-term business credibility and operational resilience.

M

MIRAMO spol. s r.o.

floreon.cz

43

Floreon+ Web is a specialized environmental and geospatial data visualization platform operated by MIRAMO spol. s r.o., a Czech Republic based company. The platform offers interactive mapping services with layers including floods, air pollution, traffic, and landslides, targeting environmental researchers, government agencies, and the general public interested in environmental data. The website leverages modern web technologies such as React and OpenLayers to deliver a dynamic and interactive user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS usage but missing key security headers and vulnerability disclosures. Overall, the site is professionally designed and functional but would benefit from enhanced privacy compliance and security best practices.

G

G-car s.r.o.

g-4f.cz

44

The website www.g-4f.cz serves as a wholesale vehicle sales portal operated by G-car s.r.o., targeting wholesale buyers in the transportation sector within the Czech Republic. The site is primarily a login portal for wholesale customers, with minimal public-facing content describing the business. The technical infrastructure is based on VARIO CMS 1.0 with standard JavaScript and CSS assets. The site shows basic mobile optimization and accessibility but lacks advanced SEO and content richness. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user credentials and data. The absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails, phone numbers, or social media profiles are publicly listed, limiting transparency. Overall, the website demonstrates a basic digital presence with significant gaps in security posture and privacy compliance. The lack of WHOIS data and security best practices lowers the trust score and increases risk. Strategic improvements in security, privacy policies, and transparency are recommended to enhance business credibility and user trust.

G

Good Sailors, s.r.o.

dobraspisovka.cz

43

Good Sailors, s.r.o. is a Czech-based technology company specializing in electronic document and records management solutions, notably through their Dobrá spisovka application. The company has a strong social entrepreneurship focus, employing handicapped workers and serving a broad range of public institutions such as schools, municipalities, and museums. Their market position is supported by over 200 IT projects since 2002 and a client base exceeding 70 document originators. Technically, the website employs modern analytics and spam protection tools, with a responsive design and good user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market.

V

Vladeko, spol. s r.o.

jezirka.cz

46

The website www.jezirka.cz represents Vladeko, spol. s r.o., a specialized retailer focused on garden and swimming pond equipment, primarily featuring Oase brand products. It serves the Czech market with a comprehensive e-commerce platform offering pumps, filtration systems, lighting, water treatment chemicals, and accessories for pond maintenance. The site is well-structured, professionally designed, and targets garden enthusiasts and pond owners in the Czech Republic. Technically, the site runs on PrestaShop CMS, uses modern JavaScript libraries, and integrates Google Analytics and advertising scripts. HTTPS is enforced, but security headers are missing, and no cookie consent mechanism is present, indicating partial privacy compliance. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small retail business. Overall, the site demonstrates good digital maturity but could improve security and privacy practices.

Saba Software, Inc. operates the sabacloud.com domain, which appears to be a minimal placeholder or landing page for their cloud software offerings. The website content is extremely limited, providing only basic navigation links to terms and privacy policies hosted on related domains. The business is positioned in the technology sector, likely targeting enterprises seeking cloud-based software solutions. The domain is well-established, registered since 2009, and shows no signs of privacy protection or suspicious registration patterns, indicating legitimacy. Technically, the website is very basic, consisting of simple HTML and CSS with no detected modern frameworks, analytics, or interactive elements. There is no evidence of HTTPS or security headers, which is a significant security concern. The lack of cookie consent mechanisms and minimal content further reduce the site's digital maturity and user engagement potential. From a security perspective, the absence of HTTPS and security headers, combined with no visible incident response or security policies, indicates a low security posture. No vulnerabilities or malicious content were detected, but the site lacks fundamental security best practices. The WHOIS data supports the legitimacy of the domain but does not compensate for the weak security implementation on the website. Overall, the site presents a low-risk profile due to minimal content and no suspicious elements but suffers from poor security and privacy compliance. Strategic improvements in HTTPS implementation, security headers, and richer content would significantly enhance trust and professionalism.

G

Gumi-teszt.eu

gumi-teszt.eu

55

Gumi-teszt.eu is a Hungarian-language tire review and test aggregation website providing extensive user-generated and expert test data for summer, winter, and all-season tires. The platform targets vehicle owners and drivers seeking reliable tire information to make informed purchasing decisions. It aggregates official test results from reputable sources such as ADAC and AutoBild and supplements these with user reviews. Technically, the site uses standard web technologies including Google Analytics and Adsense for tracking and monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie policy present but no detailed privacy or incident response policies. WHOIS data is unavailable due to EURid privacy restrictions, which is typical for EU domains and does not raise legitimacy concerns. Overall, the site is professional and trustworthy within its niche but could improve transparency and security practices.

R

Ranking-opon.eu

ranking-opon.eu

58

Ranking-opon.eu is a Polish-language niche content platform specializing in tire rankings and user reviews, aggregating thousands of tire evaluations and official test results such as ADAC and AutoBild. The website targets drivers and vehicle owners in Central Europe seeking detailed and transparent tire information to aid purchase decisions. The business model revolves around user-generated content combined with expert test data, supported by advertising revenue through Google Adsense and retargeting services. The site is small in scale but maintains consistent branding and good content quality.

Channel 4 Sales operates as the advertising sales arm of Channel Four Television Corporation, offering a broad range of advertising solutions across TV, video on demand, social media, and digital platforms. The website presents a professional and comprehensive showcase of their services, targeting advertisers and agencies seeking to leverage Channel 4's audience reach. The site is well-branded, consistent with Channel 4's corporate identity, and includes multimedia content to engage visitors. Technically, the website is built on modern web technologies including React and Next.js, with good mobile optimization and accessibility features. The use of Brightcove for video content indicates a mature digital infrastructure. Performance appears fast and SEO practices are well implemented through meta tags and structured content. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is trustworthy and professional, though the absence of WHOIS data for the domain raises questions about domain registration status. Verification of domain legitimacy is recommended to fully confirm trustworthiness.

C

Channel 4 Ventures

channel4ventures.com

61

Channel 4 Ventures operates as the UK's largest media-for-equity fund, leveraging Channel 4's extensive TV advertising reach to invest in early-stage consumer brands. Their unique business model exchanges TV advertising budgets for equity stakes, providing startups with significant marketing resources without upfront cash costs. The company positions itself as a long-term, founder-friendly partner focused on building household name brands in the UK consumer market. Technically, the website is built on modern frameworks such as Next.js and Drupal headless CMS, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS and modern security headers, though privacy and cookie policies are absent, indicating room for compliance improvement. The absence of WHOIS data is a notable anomaly but the website's branding and content strongly associate it with the reputable Channel 4 broadcaster. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

B

Brite Beak

britebeak.com

61

Brite Beak is a newly registered domain and business based in the Philippines, currently presenting a minimal website with a 'Launching Soon' message. The site is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC. The technical infrastructure is basic but functional, with HTTPS enabled and reCAPTCHA protecting the contact form. However, the site lacks critical business and legal content such as privacy policy, terms of service, and detailed contact information, which limits its credibility and compliance posture. Security measures are minimal, with no DNSSEC or security headers implemented. Overall, the website appears to be in early development or pre-launch stage, with limited digital maturity and business presence.

G

Good Sailors, s.r.o.

goodsailors.cz

42

Good Sailors, s.r.o. is a Czech-based social enterprise founded in 2013 that provides digital services including application development and hardware/software supply. The company emphasizes meaningful employment for handicapped individuals and operates several socially impactful projects such as GSail and Dobrá spisovka. Their market position is strengthened by numerous awards recognizing innovation, social responsibility, and business success. Technically, the website employs modern analytics and spam protection tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its social mission.

G

G-car s.r.o.

g-car.cz

50

G-car s.r.o. is a Czech Republic-based luxury car dealership specializing in new, demo, and reference vehicles from premium brands such as Audi, BMW, Mercedes-Benz, Volkswagen, and Škoda. Established in 2008, the company offers a comprehensive range of services including vehicle sales, a unique SMART financing system tailored for entrepreneurs, and a fully equipped autoservice for vehicles up to 3.5 tons. The business maintains a strong local presence in České Budějovice and Boršov nad Vltavou, supported by positive customer reviews and a professional online presence. Technically, the website is built on VARIO CMS 3.0, employing modern web technologies with asynchronous script loading and responsive design for mobile users. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. The absence of some security headers and explicit cookie consent mechanisms indicates partial compliance with best security and privacy practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible incident response policies or vulnerability disclosure information. The WHOIS data is unavailable, which slightly impacts trustworthiness, though the business information and external trust signals mitigate this concern. Overall, the site presents a secure and professional front with minor gaps in privacy compliance and security transparency. Strategically, G-car s.r.o. should focus on enhancing security headers, implementing explicit cookie consent, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance. These improvements will support sustained growth and customer confidence in a competitive luxury automotive market.

A

Armik.cz: Armyshop a outdoor

armik.cz

47

Armik.cz is a Czech Republic based e-commerce retailer specializing in military, outdoor, survival, and sporting goods. The website offers a wide range of products including clothing, tactical gear, and accessories, targeting outdoor enthusiasts and military gear consumers. The business has been operating since 2008, indicating a stable market presence. Technically, the site uses a proprietary e-commerce platform with modern JavaScript integrations including Google Tag Manager and Google Analytics, supporting marketing and analytics efforts. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers were found in the analyzed content, limiting direct customer support visibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

HUKR spol. s r.o. is a small Czech company specializing in the sale, service, and restoration of classic and veteran cars, primarily Toyota, Lexus, and Hyundai brands. Established in 1994, the company has a strong local presence in Brno and offers specialized veteran car renovation services with over two decades of experience. The website provides basic business information and contact details but lacks modern digital maturity features such as privacy policies, HTTPS, and advanced security measures. The technical infrastructure relies on basic HTML, CSS, and JavaScript libraries like jQuery and Modernizr, with no detected CMS or advanced frameworks. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is minimal with no cookie or privacy policies. Overall, the website serves its purpose as a business brochure but requires significant improvements in security and compliance to meet modern standards.

GigaBoard, s.r.o. operates a Czech Republic-based advertising service specializing in large-format outdoor advertising spaces for medium and long-term campaigns. The company has a well-established presence since 2002, supported by a domain age consistent with its business history. The website provides basic information about its services and contact details but lacks modern technical and security features. The technical infrastructure is simple, relying on basic HTML, CSS, and JavaScript without advanced frameworks or CMS. Security posture is weak due to absence of HTTPS, security headers, and cookie consent mechanisms. No evident vulnerabilities or malicious content were detected, but the site would benefit from improved security and privacy compliance. Overall, the business credibility is moderate, supported by clear contact information and domain legitimacy.

K

Kingsbet

kingsbet.cz

64

Kingsbet is an online gambling and sports betting platform targeting the Czech market, offering online casino games, live casino, and sports betting services with promotional bonuses. The website is professionally designed with consistent branding and good content quality tailored for adult users interested in gambling. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of WHOIS data and lack of visible privacy policy or terms of service pages reduce transparency and trustworthiness. Security posture is moderate with HTTPS enforced but missing security headers and no explicit security or incident response policies disclosed.

R

Ráj aut

rajaut.cz

53

Ráj aut is a Czech Republic based online automotive classifieds platform specializing in car advertisements, sales, and bazaar listings. The website offers a comprehensive search and filter system for vehicles, targeting car buyers and sellers primarily within the Czech market. It maintains a moderate market position with partnerships to related automotive sites and services. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site is served over HTTPS, ensuring secure data transmission, but lacks some advanced security headers and has only basic mobile optimization. Privacy and cookie policies are present but could be more explicit and comprehensive. No WHOIS data was retrievable, which slightly impacts trustworthiness but the site content and business presence indicate legitimate operation. Overall, the website is functional, moderately secure, and serves its niche audience effectively.

T

TECHNOLOGY - GARAGE spol. s r.o.

technology-garage.cz

73

TECHNOLOGY - GARAGE spol. s r.o. is a Czech Republic based company specializing in professional equipment and machinery for automotive service centers, tire services, industrial workshops, and the energy sector. Established since 1995, the company offers a broad catalog of products including lifts, compressors, diagnostic tools, and safety equipment, positioning itself as a trusted supplier in its niche markets. The website reflects a mature business with a clear focus on B2B customers in automotive and energy industries. The technical infrastructure of the website is built on a proprietary or custom e-commerce platform (wpj.cz), utilizing modern web technologies such as JavaScript, CSS, Google Tag Manager, Google Analytics, and Sentry for error monitoring. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and error monitoring but lacks some important security headers and explicit privacy and security policies. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, but no dedicated privacy or terms of service pages were found. The absence of WHOIS data for the domain reduces trust in the domain registration legitimacy, though the website content and business presence suggest a legitimate operation. Overall, the website presents a professional and trustworthy business front with room for improvement in security best practices and privacy transparency. The risk level is moderate, primarily due to missing domain registration data and incomplete privacy documentation.

The website maxdrive.ovh is a recently registered domain (July 2023) owned by Gruppo Duemila snc, hosting a login portal named MaxDrive. The portal provides user authentication functionality including username/password and OTP multi-factor authentication, indicating a focus on secure access management. However, the site lacks publicly accessible privacy policies, terms of service, or contact information, which limits transparency and user trust. Technically, the site uses standard web technologies including jQuery and Font Awesome, hosted on OVH infrastructure. Security practices include OTP but lack modern security headers and DNSSEC, which are recommended for improved security posture. Overall, the site appears functional but basic, with room for improvement in compliance, security, and user trust features.

E

European Commission - Directorate-General for Communications Networks, Content and Technology

5gobservatory.eu

70

The European 5G Observatory is an official monitoring platform managed by the European Commission's Directorate-General for Communications Networks, Content and Technology. It provides comprehensive data and insights on 5G technology deployment, market developments, spectrum allocation, and policy progress across the EU and neighboring countries. The platform targets policymakers, researchers, telecom operators, and technology enthusiasts, offering reliable and up-to-date information to support the EU's digital transformation goals. Technically, the website is built on Drupal 10 and leverages the European Commission's design system (ECL), ensuring a modern, accessible, and mobile-optimized user experience. The site integrates standard web technologies and includes social media sharing tools and Matomo analytics for user insights. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, includes cookie consent mechanisms, and links to a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy documentation and incident response contacts could enhance transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with EU privacy regulations. It serves as a key resource for tracking 5G progress in Europe, supporting the Digital Decade connectivity targets.

R

R.A.C.E.

race.pt

61

R.A.C.E. is a small Portuguese company specializing in the promotion, advertising, and rental of competition vehicles, particularly classic and historic racing cars. The company has a notable presence in national classic car racing championships and offers services targeting motorsport enthusiasts and sponsors. The website reflects a focused business model with clear content about their vehicles and achievements, supported by active social media channels. Technically, the site uses modern web technologies including HTTPS, service workers for PWA capabilities, and a responsive design, although some SEO and accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of a privacy policy and terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

D

DMSB – Deutscher Motor Sport Bund e.V.

bahnsport-deutschland.de

57

Bahnsport Deutschland is the official website for the German motor sports federation's Bahnsport discipline, operated by the Deutscher Motor Sport Bund e.V. The site serves as a comprehensive information hub for enthusiasts, athletes, and clubs involved in motor sports in Germany, providing news, event schedules, results, and official documents. The website demonstrates a solid market position as a national governing body platform with a clear focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and integrates accessibility tools to support diverse user needs. Security posture is strong with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements could be made in transparency around security and vulnerability disclosures.

R

Region Stockholm

regionstockholm.se

63

Region Stockholm is a regional government entity responsible for healthcare, public transportation, regional development, and cultural activities within Stockholm County, Sweden. The website serves as a comprehensive portal for residents, providing access to services, news, job opportunities, and contact information. The organization holds a strong market position as the primary regional authority in its sector, offering essential public services to a large population. The site is well-branded, professionally designed, and targets a broad audience including citizens, healthcare users, cultural actors, and job seekers. Technically, the website is built using modern web technologies including React and Next.js, with indications of Episerver CMS usage. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. However, the absence of a vulnerability disclosure program and data protection officer contact details are areas for improvement. Overall, the website presents a low risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure channel, and enhancing transparency around data protection roles.

The domain observanatura.com is currently a parked domain with no active website content beyond a SedoParking iframe and Google ads. The domain was registered in 2020 and is managed by GMO Internet Group, a reputable registrar. The website lacks any business information, contact details, or privacy and cookie policies, indicating it is not currently used for active business operations. Technically, the site uses basic HTML, CSS, and JavaScript with no CMS or advanced frameworks detected. The hosting is via SedoParking services, and no HTTPS enforcement or security headers are present, which lowers the security posture significantly. There are no signs of malware or phishing, but the lack of security best practices and minimal content results in a low trust score. Overall, the site is a placeholder domain with advertising but no substantive content or business presence.

S

skodahrou.cz

skodahrou.cz

49

skodahrou.cz is a Czech language online magazine dedicated to fans of the ŠKODA brand, offering a variety of content including news, reviews, tips, contests, and lifestyle articles related to automotive topics and beyond. The website targets automotive enthusiasts and general readers interested in transport, economy, finance, technology, health, and society. The business model is content publishing with monetization through advertising. The domain is newly registered in late 2024, consistent with the website's fresh content and market entry. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Matomo analytics and Google Adsense for advertising and tracking. The site is hosted on vas-hosting.com servers and shows good mobile optimization and navigation clarity. However, no CMS or advanced frameworks were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and explicit security or incident response policies. No cookie consent mechanism is present, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is average but could be enhanced with standard best practices. The overall risk assessment indicates a legitimate, small-scale media website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and auditing third-party scripts to improve trust and compliance.

Ateliér PKO s.r.o., operating under the brand APKO, is a specialized engineering firm focused on road communications and related infrastructure services in the Czech Republic. Their offerings include road design, traffic engineering, expert opinions, safety audits, environmental assessments, and professional translations. The company targets professionals and organizations involved in transportation infrastructure projects, positioning itself as a niche service provider with a clear and consistent brand presence. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. While the site is moderately optimized for performance and basic mobile responsiveness, it lacks advanced accessibility features and modern frameworks. SEO is basic but sufficient for the content presented. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and includes Google Analytics scripts loaded securely. However, it lacks visible security headers and published security or privacy policies, which are important for GDPR compliance and user trust. No forms or input fields were detected on the analyzed page, reducing immediate risk exposure. The WHOIS data aligns well with the website content, indicating legitimacy and consistent registration information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response information to strengthen its security posture and regulatory adherence.

Spolek přátel Národního divadla Brno is a voluntary, non-political, and non-profit association focused on promoting theatrical arts including opera, ballet, and drama in Brno, Czech Republic. The organization collaborates closely with the National Theatre Brno and related artistic institutions to deepen public interest and knowledge in performing arts. The website serves as an informational platform showcasing news, events, and publications related to their activities. Technically, the website is built on the eStránky.cz platform using legacy JavaScript libraries such as jQuery 1.12.4 and includes Facebook SDK for social media integration. The site is accessible and provides relevant content but lacks modern technical and security enhancements.

The website www.ceske-knizni-novinky.cz is a Czech-language informational portal dedicated to providing extensive listings and descriptions of new book releases primarily for the year 2025 and previous years. It targets Czech-speaking readers interested in literature across various categories including women, men, children, youth, and multiple genres such as fantasy, historical, and detective books. The site aggregates content and links to a reputable external book database (CBDB.cz) for detailed book information. The business model is content aggregation and informational service with a niche focus on the Czech book market. The site is small in scale with consistent branding and good content quality.

The Victoria Transport Policy Institute is an independent Canadian research organization specializing in innovative and practical transportation solutions. Established in 1999, it offers free resources, consulting services, and publishes research to improve transportation planning and policy analysis. The website serves transportation planners, policymakers, researchers, and the public with a focus on sustainable and equitable transportation. Technically, the site is custom-built with classic HTML, JavaScript, and CSS, hosted on Island Hosting, and integrates Mailchimp for marketing. While the site content is rich and professionally presented, technical modernization opportunities exist, including improved mobile optimization and accessibility. Security posture is moderate; domain management is sound with transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and credible but would benefit from enhanced security and privacy practices.

G

GTO Solutions s.r.o.

jdvm.cz

48

Skutočnosť.sk is an online Slovak informational portal operated by GTO Solutions s.r.o., focusing primarily on transportation-related news, including traffic updates, toll information, fuel prices, and travel advice. The website targets Slovak-speaking drivers and travelers seeking up-to-date and practical information for navigating road transport in Slovakia and neighboring countries. The business model appears to be content publishing monetized through advertising networks such as Google Adsense. The site maintains a consistent brand presence with a clear navigation structure and regularly updated content.

The website davar.cz is a personal site maintained by RNDr. David VARNER, Ph.D., featuring diverse hobbyist content including military history, technical monuments, Ford car collections, fossils, applied mechanics, and trainspotting. It serves a niche audience interested in these specialized topics and does not appear to operate as a commercial business. The domain is mature, registered since 2006, and hosted with Czech-based registrar and DNS providers, consistent with the website's Czech language content and focus. Technically, the site is built using legacy tools such as Microsoft FrontPage 6.0, with static HTML and CSS. There is no evidence of modern CMS, responsive design, or accessibility features. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring secure communications. No forms or user data collection mechanisms are present, reducing immediate data security risks but also limiting interactivity. From a security perspective, the absence of HTTPS and security headers lowers the security posture score. No privacy or cookie policies are present, indicating non-compliance with GDPR and related privacy regulations. The site does not use analytics or advertising scripts, minimizing tracking but also limiting business intelligence capabilities. Contact information is limited to a single email address, with no phone or physical address provided. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site’s technical and security posture is basic and would benefit from modernization and implementation of standard security and privacy practices. The domain registration data is consistent and trustworthy, supporting the legitimacy of the site as a personal project rather than a commercial enterprise.

H

Heidelberg Materials

heidelbergmaterials.com

77

Heidelberg Materials is a global leader in the manufacturing and supply of building materials including cement, aggregates, ready-mixed concrete, and asphalt. The company emphasizes sustainability and digital innovation as core pillars of its business strategy, targeting construction industry professionals, investors, and sustainability stakeholders worldwide. The website reflects a mature digital presence built on Drupal 10, with excellent design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is unusual for a large enterprise and warrants further verification. Overall, the website presents a professional, trustworthy, and comprehensive corporate presence.

R

Raiffeisen stavební spořitelna a.s.

rsts.cz

70

Raiffeisen stavební spořitelna a.s. is a Czech financial institution specializing in building savings, housing loans, and related financial products. The company targets individuals and legal entities in the Czech Republic seeking financial solutions for housing and savings. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service offerings. Technically, the site employs modern web technologies including JavaScript, SVG graphics, and integrates Google Tag Manager and Sentry for analytics and error tracking. Cookie consent management is robust, supporting GDPR compliance. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. The domain WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and presence on social media platforms support legitimacy. Recommendations include publishing security policies and enhancing security headers.

C

cdv.cz

shopcdv.cz

66

The website shopcdv.cz represents an e-commerce platform operated by Centrum dopravního výzkumu (CDV), a Czech organization specializing in transportation research and related expert services. The platform offers publications, methodologies, and professional services targeting both public and private sector stakeholders interested in transportation safety, planning, and sustainability. The business is positioned as a niche provider with a medium-sized footprint, founded in 2019, and focused on delivering research outputs into practical applications. The website is primarily in Czech with multilingual support and integrates social media channels for broader engagement. Technically, the site is built on the Shopify platform, leveraging modern web technologies including JavaScript, CSS, and HTML5. It employs hCaptcha for form security and Judge.me for customer reviews, indicating a mature digital infrastructure. Performance and mobile optimization are good, with accessibility and SEO considerations well implemented. Hosting and domain registration are consistent with the business location and sector. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses CAPTCHA to protect forms. However, explicit security headers and published security policies are lacking, and no incident response or vulnerability disclosure mechanisms are evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website demonstrates a solid business and technical foundation with good security hygiene, though it could benefit from enhanced transparency on security policies and incident response. The risk profile is low, with no critical vulnerabilities or suspicious indicators detected.

M

Mimosa.květiny

kvetinymimosa.cz

58

Mimosa.květiny is a small local flower shop based in Blansko, Czech Republic, offering a variety of floral products including bouquets, flower delivery, workshops, and wedding arrangements. The business operates an e-commerce platform with free delivery within the Blansko area, targeting local customers seeking creative and handmade floral decorations. The website is professionally designed with consistent branding and clear contact information, supporting a positive user experience and trustworthiness. Technically, the website is built on the Webnode CMS platform and utilizes Amazon Cloudfront CDN for content delivery. It employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with good SEO practices. The site uses HTTPS with a valid SSL certificate, ensuring secure communication. Cookie consent mechanisms and privacy policies are implemented, indicating compliance with GDPR requirements. From a security perspective, the website has a good posture with HTTPS and cookie consent but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. However, the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy and trustworthiness. Overall, the website presents a trustworthy and professional front for a small retail flower business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture.

N

NOHO

cihlovka.cz

52

The website cihlovka.cz represents a real estate development project by NOHO focused on revitalizing the Kukleny district in Hradec Králové, Czech Republic. It highlights sustainable residential buildings, including the first passive house in the city, and offers modern living solutions with amenities such as carsharing and proximity to public transport. The site is professionally designed using WordPress and WPBakery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and Wordfence plugin presence, but lacks visible security headers and privacy policies, indicating room for improvement in compliance and security best practices. Overall, the domain registration is consistent with the business claims, supporting legitimacy and trustworthiness.

D

DEBYT

debyt.cz

59

DEBYT is a small Czech architecture and furniture design studio that integrates architectural services with sociological participation and community involvement. Their offerings include architectural projects, artistic creations by architect Tomáš Petrášek, and a curated e-shop for retro and antique furniture renovation and sales. The website presents a professional portfolio and clear contact information, targeting clients interested in personalized architectural and furniture solutions. Technically, the website uses modern analytics tools and is mobile-optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain legitimacy, although the website content itself is professional and safe. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

Internetové-stránky.eu is a small Czech-based professional web development company specializing in creating websites, e-shops, and internet applications. Their services include graphic design, coding, SEO optimization, marketing, and advertising. The website content is primarily in Czech and targets local businesses and individuals seeking affordable and professional web solutions. The company provides clear contact details including email, phone, and physical address, enhancing business credibility. Technically, the website uses basic HTML, CSS, and JavaScript with legacy Google Analytics integration. There is no evidence of modern CMS or frameworks, and mobile optimization and accessibility are basic. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No forms are present, reducing data collection risks but also limiting user engagement. From a security perspective, the site shows moderate risk due to missing HTTPS and outdated analytics scripts. There are no privacy or cookie policies, indicating non-compliance with GDPR requirements. The WHOIS data is consistent with the website's business information, supporting legitimacy. Overall, the site is functional but requires significant improvements in security and privacy compliance to meet modern standards. The overall risk is moderate with recommendations to implement HTTPS, update analytics, add privacy and cookie policies, and improve security headers. These steps will enhance trust, compliance, and user safety.

B

Beyond Gravity

beyondgravity.com

71

Beyond Gravity is a well-established aerospace technology company specializing in satellite and launcher components, with over 40 years of experience supporting space missions. Their website reflects a mature business with a clear focus on advancing humanity through space exploration technologies. The company targets aerospace professionals and organizations requiring advanced satellite and launcher solutions. Technically, the website is built on Drupal CMS, employs modern analytics (Matomo), and integrates a robust cookie consent mechanism (OneTrust), indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly impacts trust but does not overshadow the professional presentation and compliance indicators. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

W

Web Incubator Community Group (WICG)

wicg.io

56

The Web Incubator Community Group (WICG) operates as a community-driven platform under the World Wide Web Consortium (W3C) to incubate and discuss new web platform features. It serves developers and browser makers by providing a collaborative environment for proposing and refining web standards. The website reflects a well-established entity with a domain age consistent with its founding in 2015, and it maintains a reputable presence with active GitHub repositories and affiliation with recognized web standards bodies. Technically, the site employs modern web technologies including HTML5, CSS, and JavaScript with asynchronous script loading, and is hosted by a reputable registrar, Gandi SAS. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured content. Security-wise, the site uses HTTPS but lacks visible security headers and published security policies, which suggests room for improvement in security posture and transparency. Privacy compliance is minimal, with no privacy or cookie policies found, and no explicit GDPR compliance indicators. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory expectations.

P

Prozdravi.cz na Vivantis | Vivantis.cz - Od kabelky po parfém

prozdravi.cz

54

The website vivantis.cz, specifically the Prozdravi.cz section, operates as an e-commerce platform primarily targeting consumers in the Czech Republic. It offers health-related products alongside fashion accessories and perfumes under the Vivantis brand umbrella. The site demonstrates a consistent and professional branding approach with a modern design and good user experience. The business model is retail-focused, leveraging online sales channels to reach a broad consumer base. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and ownership transparency. From a technical perspective, the site employs contemporary web technologies including Bootstrap 5, JavaScript libraries such as Swiper.js and Fancybox, and Google Fonts, indicating a modern frontend infrastructure. Performance and mobile optimization are adequate, though accessibility features appear basic. SEO practices are reasonably implemented with proper meta tags and Open Graph data. Security posture is moderate but could be improved. There is no evidence of security headers or explicit security policies, and privacy and cookie policies are not found, which raises compliance concerns. The lack of WHOIS data and absence of contact information for security incidents or data protection officers further reduce trustworthiness. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the site is functional and professionally presented but would benefit from enhanced transparency, security best practices, and compliance documentation to improve trust and reduce risk.

O

Obzor

ctreports.com

56

ctreports.com is an Azerbaijani-focused online casino informational and affiliate platform established in 2021. It provides comprehensive content about online casinos, including reviews, bonus offers, game strategies, and responsible gambling guidelines. The site targets mature users interested in online gambling within Azerbaijan, offering localized content in Azerbaijani language. Technically, the website uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and well-structured with clear navigation and SEO-friendly metadata. Security posture is moderate with HTTPS enforced and clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are present with consent mechanisms, though GDPR compliance is basic. Contact information is limited to an email address without phone or physical address details. Overall, the site demonstrates a professional approach to content and user experience but could improve security policies and transparency. The domain registration is consistent with the business model and age, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access.

K

Kluby | mcompanies.cz

kluby-mcompanies.cz

63

Kluby | mcompanies.cz is a newly launched e-commerce platform based in the Czech Republic, focusing on club memberships and related products. The website is built on Shopify, leveraging its robust e-commerce infrastructure and payment capabilities. The platform targets club members and customers interested in club benefits, providing a streamlined shopping and account management experience. The business appears to be in its early stages, with domain registration dating to June 2024, consistent with the website's branding and content.

S

Saab

saab.com

67

Saab is a well-established enterprise founded in 1937, serving global governments, authorities, and corporations with advanced defense and civil security products and solutions. The website reflects a mature digital presence with comprehensive information on products, investor relations, sustainability, and corporate governance. The technical infrastructure leverages modern web technologies, including Azure Application Insights and Google Tag Manager, with a strong emphasis on privacy compliance via Cookiebot. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. However, the absence of WHOIS data is notable but does not detract from the overall legitimacy given the professional content and branding. Contact is primarily via web forms rather than direct emails or phone numbers.

H

HENSOLDT AG

hensoldt.net

65

HENSOLDT AG is a leading German technology company specializing in defense and security electronics, with a strong presence across multiple domains including Air, Land, Sea, Space, and Cyber. The company offers manufacture-independent system integration, innovative radar, optronics, and electronic warfare products, as well as comprehensive services and training. Positioned as a European market leader with global reach, HENSOLDT targets government and defense sectors with advanced sensor solutions. The website infrastructure is built on modern technologies such as SvelteKit and hosted on Vercel, ensuring fast performance, mobile optimization, and good accessibility. The site employs HTTPS with strong security headers and integrates analytics and consent management tools, reflecting a mature digital presence. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or vulnerability disclosure page and missing WHOIS domain registration data introduce some concerns. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, though the domain registration inconsistency warrants further verification. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance transparency and trust.

L

Lukáš Churý

lukaschury.cz

46

Lukáš Churý's website serves as a personal portfolio and project showcase highlighting his expertise in project management, programming, graphic design, and education. The site presents a well-established personal brand with multiple successful projects primarily in technology and media sectors, targeting a general audience interested in these fields. The domain age and WHOIS data align well with the business history, reinforcing legitimacy. Technically, the website uses a simple but effective tech stack including jQuery and custom JavaScript, hosted on a Czech hosting provider. The site is mobile-optimized and SEO-friendly but lacks advanced frameworks or CMS. Performance is moderate with good design and navigation clarity. From a security perspective, the site lacks visible security headers and privacy compliance documents such as privacy or cookie policies. No forms collect sensitive data, reducing immediate risk, but the absence of GDPR compliance indicators and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices to improve compliance and user trust.