Security Directory

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

B

BAYO Solutions AG

bayo.ch

57

BAYO Solutions AG operates a specialized cloud-based CRM platform tailored for insurance brokers, fiduciary companies, and law firms primarily in Switzerland. Their solution focuses on enhancing customer relationship management and secure data exchange, positioning them as a niche player in the Swiss financial and legal technology sectors. The website reflects a professional and consistent brand image with clear contact channels and partner affiliations. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with Google Tag Manager for analytics. The CMS identified is MoveCMS, indicating a custom or specialized content management approach. Security-wise, the site enforces HTTPS and displays a CyberSeal certification, signaling adherence to cybersecurity best practices. However, there is room for improvement in publishing explicit security policies and headers. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR through visible privacy and cookie policies.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

P

Projekt LIFE COALA

lifecoala.cz

53

Projekt LIFE COALA is a government-backed environmental initiative focused on increasing climate resilience and sustainable development in the Moravian-Silesian region of the Czech Republic. The project is co-financed by the European Union LIFE program and involves multiple regional government and institutional partners. The website provides detailed information about project activities, partners, events, and public engagement efforts. The target audience includes local residents, farmers, public authorities, and stakeholders interested in climate adaptation. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, accessible, and well-structured with good SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the EU co-financing and partner ecosystem provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and serves its public mission well. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance its security posture and compliance.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

B

BALIK Farm (Switzerland) AG

balik-kitchen.ch

48

BALIK Farm (Switzerland) AG operates BALIK Kitchen, a hospitality and retail food service business with multiple urban kitchen bars and shops located in major Swiss cities such as Bern, St. Gallen, Luzern, and Zürich. The website serves as a digital presence to promote their culinary offerings, events, and recipes, targeting general consumers interested in urban dining experiences. The company maintains a consistent brand image and provides clear contact information and social media engagement channels. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates marketing and analytics tools such as Facebook Pixel, Google Analytics, and Mailchimp for newsletter management. The site is hosted behind Cloudflare infrastructure, utilizing Turnstile captcha for bot protection, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a cookie consent banner and a privacy policy page in German, aligned with GDPR requirements. Business credibility is strong with verified contact details and consistent WHOIS data. Overall, the website presents a professional and trustworthy digital front for BALIK Kitchen, with room for improvement in security policy transparency and enhanced privacy compliance. The risk level is low, but strategic enhancements in security headers and incident response readiness are recommended.

S

Strähl Käse AG

straehl.ch

47

Strähl Käse AG is a well-established Swiss cheese manufacturer with over 90 years of family tradition, specializing in a variety of cheese products including raclette and fondue. The company targets both retail consumers and B2B clients, offering customized cheese solutions. Their market position is strong within the Swiss cheese industry, supported by consistent branding and a professional online presence. Technically, the website employs modern web technologies including Facebook Pixel and Google Analytics for marketing and analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and detailed security policies suggests room for improvement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, reflecting a credible business entity.

P

Pädagogische Hochschule Thurgau

phtg.ch

61

Pädagogische Hochschule Thurgau (PHTG) is a Swiss educational institution specializing in scientifically grounded teacher training and continuing education for all levels of primary and secondary education. The institution offers a broad range of study programs, professional development courses, and research projects, targeting educators and education professionals. The website reflects a strong regional presence with collaborations such as with the University of Konstanz, emphasizing cross-border educational opportunities. Technically, the website is built on modern web standards, leveraging Google Tag Manager and CookieYes for consent management, and is likely hosted on Wix, as indicated by certain cookies. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy and incident response information. Overall, the domain registration details align with the institution's identity, supporting legitimacy and trustworthiness.

G

Goba AG

goba-welt.ch

52

Goba AG is a small, independent Swiss mineral water producer with a strong local market presence. The company operates a professional e-commerce platform offering a variety of beverages and specialty products, including mineral water, limonade, and syrups. Their website reflects a well-established brand with clear contact information, multiple physical locations, and active social media engagement. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and lazy loading for images, ensuring a good user experience and performance. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing dedicated security policies and incident response information. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-aligned with the business's offline presence.

F

Flight Safety Foundation

aviation-safety.net

60

The Aviation Safety Network (ASN) is a specialized information service focused on aircraft accidents and civil aviation safety issues. It operates as an exclusive service of the Flight Safety Foundation, a reputable organization in the aviation safety sector. ASN provides comprehensive accident databases, investigation details, safety statistics, and monthly email digests, targeting aviation professionals, researchers, and safety analysts worldwide. The website demonstrates a consistent brand identity aligned with its parent organization and maintains a professional presence with active social media channels. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Google Charts for data visualization. It integrates Google Analytics for user tracking and offers a moderate level of mobile optimization and accessibility. While the site is functional and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, ensuring encrypted communication, but does not visibly implement advanced security headers or publish detailed security policies. The absence of WHOIS registrant data limits domain trust assessment, though the affiliation with Flight Safety Foundation and the quality of content provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, ASN presents a trustworthy and authoritative resource in the aviation safety domain with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

I

Indep s.r.o.

indep.cz

56

Indep s.r.o. is an independent production agency based in Prague, Czechia, specializing in event management and audiovisual production. The company offers a range of services including corporate events, public space events, and professional audiovisual and photography production. Their business model focuses on personalized client relationships and creative, high-quality event execution. The website is professionally designed using the Squarespace platform, with good mobile optimization and clear navigation. Technical infrastructure is modern but lacks some security headers and privacy policy documentation. Security posture is generally good with HTTPS enabled and cookie consent implemented, though improvements are recommended in security headers and privacy transparency. Overall, the website presents a trustworthy and professional image consistent with a small, specialized service provider in the event production industry.

Gastromapa Lukáše Hejlíka is a Czech gastronomic map service that has discontinued its web presence in favor of mobile applications available on Android and iOS platforms. The website serves primarily as a redirect and informational page encouraging users to download the mobile apps. The business appears small and focused on providing gastronomic location services within the Czech Republic. The website content is minimal and basic, with limited business information and no visible privacy or cookie policies. Technically, the site uses modern web standards and Google Tag Manager for analytics but lacks advanced security headers and comprehensive compliance documentation. The security posture is moderate with HTTPS enabled but missing several best practices. The absence of WHOIS data reduces domain trustworthiness and raises concerns about domain registration transparency. Overall, the site is functional but limited in content and security maturity.

V

VITAMIN 2

vitamin2.ch

57

Vitamin 2 is a full-service advertising agency based in Eastern Switzerland, specializing in branding, design, web development, marketing, and communication services. The website showcases a professional portfolio with multimedia content and a strong client base, positioning the company as a reputable regional player in the media sector. The technical infrastructure is modern, leveraging frameworks like Livewire and Alpine.js, and integrates Google Tag Manager and Cloudflare Turnstile for performance and security. Security posture is solid with HTTPS and bot protection, but lacks visible privacy and cookie policies, as well as incident response contacts, which are important for compliance and trust. Overall, the site is well-designed, mobile-optimized, and user-friendly, reflecting a high level of digital maturity.

T

The Naked Watchmaker

thenakedwatchmaker.com

59

The Naked Watchmaker is a specialized online platform dedicated to providing in-depth educational content and insights into the art and craft of watchmaking. It offers a variety of services including detailed watch deconstructions, interviews with horological experts, book reviews, and an e-commerce shop selling watch-related products. The website targets watch enthusiasts, collectors, and professionals interested in horology. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and integrating Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the website enforces HTTPS but lacks some advanced security headers such as HSTS and CSP, which are recommended for enhanced protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Overall, the site is trustworthy and professional but would benefit from improved domain registration transparency and enhanced security headers.

L

Latvijas Vēstnesis

vestnesis.lv

54

Latvijas Vēstnesis is the official publication platform of the Republic of Latvia, serving as the authoritative source for legal acts and official announcements. The website targets government officials, legal professionals, businesses, and the general public interested in accessing official legal documents and notices. It operates as a government entity providing essential services related to legal transparency and public information dissemination. Technically, the site employs a modern JavaScript stack including jQuery, jQuery UI, and Google services such as reCAPTCHA and Google Analytics 4, ensuring a functional and moderately optimized user experience. The site is mobile-friendly and well-structured, though SEO is limited by intentional 'noindex' directives, likely due to the nature of official content. Security-wise, the website enforces HTTPS and uses reCAPTCHA for bot protection, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site demonstrates high business credibility as an official government resource but could improve privacy compliance and security transparency.

V

VSIA "Latvijas Vēstnesis"

lv.lv

57

VSIA "Latvijas Vēstnesis" operates as the official publisher of the Republic of Latvia, providing authoritative access to official publications and legal acts. The organization supports legal awareness and development of legal thought through its multiple portals and the "Jurista Vārds" journal. The website serves a broad audience including Latvian citizens, legal professionals, and government entities, positioning itself as a trusted and official source of legal information in Latvia. The business model revolves around official publication services, legal information dissemination, subscription services, and advertising within its legal journal and portals. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Google Analytics for tracking, Swiper.js for sliders, and Flatpickr for date inputs. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie policies are implemented with GDPR compliance in mind. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the official nature of the entity, showing consistent registration and no privacy protection, enhancing trustworthiness. Overall, the website is a high-quality, professional, and secure platform serving an essential government function. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and trust.

S

stoz werbeagentur ag

stoz.ch

59

Stoz Werbeagentur AG is a Swiss-based fullservice advertising agency specializing in creative print and digital marketing solutions. Established in 1987 and operated as a family business, it serves a diverse clientele ranging from SMEs to international companies. The website reflects a strong brand identity emphasizing creativity, quality, and emotional engagement. Technically, the site uses modern web technologies including Alpine.js and Google Tag Manager, with good mobile optimization and fast performance. Security posture is solid with HTTPS and cookie consent implemented, though lacking explicit security headers and public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website www.stops.lt provides comprehensive public transport route schedules and trip planning services primarily for Vilnius, Lithuania. It offers detailed information on bus, trolleybus, express bus, and night routes, targeting local commuters and visitors. The site supports multiple languages and includes interactive features such as maps and route planners. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party analytics and social media SDKs. While the content quality and user experience are good, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and privacy best practices. Security posture is moderate with no evident advanced security headers or policies, and WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

S

Sweden Abroad

swedenabroad.se

56

Sweden Abroad is an official Swedish government website providing comprehensive information about Sweden's embassies and consulates worldwide. It serves Swedish citizens abroad with travel advice and assistance information, as well as non-Swedish citizens interested in traveling or moving to Sweden. The site is well-positioned as a trusted government resource with a large global footprint through its network of over 100 foreign missions. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and uses privacy-compliant tracking mechanisms, though it could improve by adding explicit security headers and publishing a security policy or vulnerability disclosure. Overall, the website demonstrates a strong security posture and high trustworthiness consistent with its government affiliation.

S

Summit

globalgoalssummit.cz

50

Global Goals Summit 2024 is a professionally organized event focused on sustainability and the UN Sustainable Development Goals, hosted in Prague by Asociace společenské odpovědnosti in partnership with DVTV and other reputable organizations. The website demonstrates a mature digital presence with detailed speaker profiles, program schedules, ticketing options, and strong partner engagement. Technically, it is built on WordPress with modern tracking and analytics tools, optimized for mobile and accessibility. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

T

test

giving-tuesday.cz

58

Giving Tuesday Czechia is a well-established non-profit platform promoting global generosity and good deeds, organized locally by the Association of Social Responsibility. The website provides comprehensive information about the movement, ways to participate, and showcases registered charitable challenges and activities. The platform targets a broad audience including individuals, families, NGOs, schools, municipalities, and businesses. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and Typekit fonts, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a detailed privacy policy page. WHOIS data is unavailable, which slightly reduces trustworthiness, but the professional content and social media presence mitigate concerns. Overall, the site is a credible and effective tool for promoting charitable engagement in Czechia.

S

SIGVARIS GROUP

sigvaris.com

66

SIGVARIS GROUP is a well-established Swiss family-owned company specializing in medical compression products with a history spanning over 160 years. The company offers a broad portfolio including compression stockings, bandages, and postoperative compression clothing, serving both healthcare professionals and consumers primarily in Switzerland. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site leverages modern monitoring and analytics tools such as Google Tag Manager, Raygun, Azure Application Insights, and Elastic APM, hosted likely on Microsoft Azure, and built on the EPiServer CMS platform. Security posture is strong with HTTPS enforced and use of error monitoring, though explicit security headers could be verified further. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. The WHOIS data is unavailable, which is common for corporate privacy but reduces transparency. Overall, the website is professional, secure, and trustworthy, supporting SIGVARIS GROUP's market position as a leader in medical compression therapy products.

Recruiter Sites is a UK-based SaaS platform developed by HotLizard Limited, providing an instantly configurable recruitment website solution targeted at recruitment agencies and recruiters. The platform emphasizes rapid deployment, cost-effectiveness, and ongoing support with hosting and upgrades included. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on ASP.NET WebForms with modern integrations such as Google Analytics and reCAPTCHA v3, ensuring secure and user-friendly interactions. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to domain naming query issues but does not detract from the evident legitimacy of the business. Overall, the site is well-structured, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

D

Druckerei Horisberger AG

druckerei-horisberger.ch

54

Druckerei Horisberger AG is a well-established Swiss printing company specializing in traditional and digital print media, marketing instruments, and packaging solutions. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive services including consulting, publishing, lettershop, offset and digital printing, finishing, logistics, and sustainability initiatives. The company targets business clients seeking high-quality print and marketing solutions and holds a strong market position as the largest family-owned printing company in its region with over 60 years of experience. Technically, the website is built on modern frameworks such as Vue.js and UKit, with a Cockpit CMS backend. It demonstrates good mobile optimization, moderate performance, and basic accessibility features. The site uses HTTPS with strong SSL configuration and includes security headers, reflecting a solid security posture. However, it lacks visible cookie consent mechanisms and explicit privacy or security policies, which are areas for improvement. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Certifications like ISO 9001 and ISO 14001 reinforce trust and commitment to quality and environmental management. The absence of incident response contacts and vulnerability disclosure policies suggests room to enhance security transparency and readiness. Overall, Druckerei Horisberger AG presents a professional, trustworthy, and content-rich online presence aligned with its business stature. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing GDPR compliance to further strengthen privacy and security posture.

N

NOVÁ ŠKOLA, s.r.o.

eduzio.cz

59

Eduzio.cz is an educational platform specializing in online preparatory tests for secondary schools and gymnasiums in the Czech Republic, aligned with the CERMAT standard. The platform collaborates with the established publisher NOVÁ ŠKOLA, s.r.o., which has a history dating back to 1997. Eduzio offers targeted test preparation in Czech language and mathematics, providing immediate feedback to students to enhance learning effectiveness. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant educational content, including a blog and FAQ sections.

HotLizard is a UK-based specialist company established in 1999, providing recruitment websites and job board software solutions. Their offerings range from off-the-shelf SaaS platforms to bespoke, fully customized recruitment technology solutions designed to enhance candidate experience and client engagement. The company targets recruitment agencies, job board owners, and direct employers, positioning itself as a trusted provider with a strong market presence supported by long domain tenure and positive customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and reCAPTCHA v3, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, GDPR compliant, and trustworthy, reflecting a mature business with a clear focus on recruitment technology.

3

Events in the three-country region | 3event

3event.eu

39

The website 3mag.eu/en/events serves as a regional event calendar for the tri-border area encompassing parts of Germany, Czech Republic, and Poland. It offers a well-structured platform for users to discover various events such as festivals, music concerts, art exhibitions, sports activities, and more. The site targets a general audience interested in cultural and leisure activities within this geographic region. The business model revolves around event promotion and information dissemination, positioning itself as a key regional event aggregator. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, and libraries like Flatpickr for date selection and Embla Carousel for event display. The design is responsive and optimized for mobile devices, providing a good user experience. However, there is no evidence of a CMS or backend platform from the provided data. Hosting and domain registration are managed through RegistryGate GmbH, a reputable registrar. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers or policies were detected in the HTML content. There is a lack of visible privacy, cookie, or terms of service policies, which indicates potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and professionally designed for its purpose but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trustworthiness and regulatory adherence.

L

Lanes Health

laneshealth.com

64

Lanes Health is a well-established family-owned healthcare company with over 90 years of experience in manufacturing and distributing OTC medicines, food supplements, natural products, and confectionery. The company maintains a strong market presence in the UK and internationally through a portfolio of trusted brands such as Olbas, Jakemans, Kalms, and others. Their website reflects a professional and consistent brand image, targeting consumers, pharmacists, and retailers seeking quality health and wellbeing products. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. From a security perspective, the website uses HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and business information presented. Overall, the website is functional, secure, and compliant with privacy standards, but the domain registration inconsistency warrants further investigation. Strategic recommendations include improving security headers, publishing explicit security and incident response policies, and verifying domain registration details to enhance trust and credibility.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

54

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

T

TV Marko

tvmarko.cz

53

TV Marko is a small audiovisual studio based in the Moravskoslezský region of the Czech Republic, operating since 1999. The company specializes in media production and broadcasting, including local television (TIK Bohumín), corporate films, advertising spots, aerial drone filming, and 2D/3D animation. Their market position is regional with a focus on local businesses and media consumers. The website presents a professional design with clear navigation and detailed service descriptions, supported by client logos and contact information. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced CMS or hosting details. Security posture is moderate with HTTPS assumed but missing key security headers and privacy policies, indicating compliance gaps. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the site is safe, trustworthy, and professionally maintained but would benefit from enhanced security and privacy compliance measures.

S

SIA NETVISION

netvision.lv

54

SIA NETVISION is a well-established Latvian telecommunications provider offering optical home internet, interactive TV, fixed telephony, and data center services. With over 16 years of market presence, the company targets residential and business customers in Latvia, providing competitive packages and reliable connectivity solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer support channels. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or domains.

T

The Boeing Company

boeing.es

67

The Boeing España website represents the Spanish presence of The Boeing Company, a global aerospace leader with a 90-year history in Spain. The site highlights Boeing's commercial and defense aerospace activities, research and innovation efforts, and community engagement in STEM education. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Google Tag Manager for analytics, with a strong emphasis on privacy compliance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers should be verified. Overall, the site reflects a professional, trustworthy corporate presence consistent with Boeing's global brand.

T

The Boeing Company

boeing-sea.com

68

The Boeing in Southeast Asia website serves as a regional portal for The Boeing Company, a global leader in aerospace and defense. The site provides comprehensive information about Boeing's presence, leadership, market outlook, sustainability efforts, and career opportunities in Southeast Asia. It targets aerospace industry stakeholders, government entities, business partners, and potential employees in the region. The website is professionally designed, mobile-optimized, and well-structured, reflecting Boeing's strong brand identity and market position. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and Google Tag Manager for analytics. Hosting is US-based, and the site employs HTTPS with good privacy and cookie compliance, including GDPR adherence via OneTrust consent management. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses consent management but lacks publicly disclosed security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain www.boeing-sea.com is unusual and reduces trustworthiness, though the site's content and links to official Boeing domains strongly support its legitimacy. Overall, the website is a credible, professional regional representation of Boeing with strong content and technical maturity. Strategic improvements include publishing security policies, incident response details, and enhancing transparency around domain registration to bolster trust and compliance.

T

The Boeing Company

boeing-me.com

67

The Boeing Company’s Middle East website presents a comprehensive and professional digital presence reflecting its long-standing involvement in the region’s aerospace, defense, and technology sectors. The site highlights Boeing’s partnerships with airlines, defense forces, and educational institutions, emphasizing its role in regional economic diversification and technological advancement. The content is well-structured, visually consistent, and targets aerospace industry stakeholders, government entities, and job seekers. Technically, the site leverages Adobe Experience Manager CMS and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, supporting strong privacy practices. However, the absence of WHOIS registration data for the domain www.boeing-me.com introduces some uncertainty regarding domain ownership verification, despite the site’s professional appearance and linkage to official Boeing domains. Overall, the website scores well on content quality, technical implementation, and business credibility, with recommendations to enhance security headers and publish vulnerability disclosure details.

T

The Boeing Company

boeingitaly.it

64

The Boeing Italy website represents the Italian branch of The Boeing Company, a leading aerospace and defense manufacturer with a 75-year presence in Italy. The site highlights Boeing's strong industrial partnerships with Italian aerospace companies, its commercial airline customers, and defense collaborations with the Italian Armed Forces. The company employs approximately 150 people across multiple locations in Italy, focusing on operations, partnerships, marketing, and community engagement, including STEM education initiatives. Technically, the website is built on Adobe Experience Manager, uses modern web technologies, and implements privacy and cookie policies with consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for users.

T

The Boeing Company

boeing.com.au

69

The Boeing Australia website represents the regional presence of The Boeing Company, a global leader in aerospace manufacturing and defense systems. The site highlights Boeing's advanced manufacturing capabilities, defense systems, sustainment, training, R&D, and uncrewed systems tailored for the Australian market. The website targets industry professionals, government entities, suppliers, and partners, positioning Boeing as a key player in the aerospace and defense sectors within Australia. The content is professionally curated, consistent with Boeing's global branding, and provides comprehensive information about subsidiaries and services.

T

The Boeing Company

boeingsuppliers.com

73

The Boeing Suppliers website serves as a comprehensive portal for current and prospective suppliers to The Boeing Company, a global leader in aerospace manufacturing. The site provides detailed information on becoming a supplier, supplier quality, logistics, cybersecurity, terms and conditions, and recognition programs. The content is professionally presented with consistent Boeing branding and clear navigation, targeting suppliers and partners in the aerospace and manufacturing sectors. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information could be more transparent. The WHOIS data for the domain is missing or unavailable, which is unusual for a corporate domain of this scale. Despite this, the website's content, linked official Boeing domains, and branding strongly indicate legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site presents a low-risk profile with strong business credibility and technical implementation. However, the lack of WHOIS data and explicit contact information slightly reduce trust scores. Strategic improvements in security transparency and contact availability would enhance the site's trustworthiness and compliance posture.

B

Bonus Veren Siteler

bonus-deneme-siteler.com

56

Bonus Veren Siteler is a Turkish online platform specializing in aggregating and presenting legal and reliable bonus offers, promotional codes, and free trial opportunities primarily for e-commerce and digital services. The website targets online shoppers and users seeking to maximize savings and benefits through verified promotions. The business operates as an informational and affiliate-style service, focusing on providing up-to-date and trustworthy content to its audience. The market position is niche with a focus on the Turkish market, emphasizing legal compliance and user trust. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with external resources such as Google Fonts and Font Awesome. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized with responsive design and basic accessibility features. SEO practices are well implemented with comprehensive meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks advanced security headers and does not publish privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The WHOIS data presents a suspicious domain creation date in the future, which undermines trust and requires further verification. No forms or user data collection mechanisms are present on the main page, reducing immediate privacy risks. Overall, the website is professionally designed and functional with good content quality and user experience. The main risks relate to compliance gaps (missing privacy and cookie policies) and the questionable WHOIS domain registration data. Strategic improvements in these areas would enhance trustworthiness and security posture.

S

Sue Ryder

suerydercharitycup.cz

47

Sue Ryder is a Czech non-profit organization that organizes the Sue Ryder Charity Cup, the largest corporate charity football tournament in the Czech Republic, supporting dignified senior care. The event has been held annually since 2009 and attracts numerous corporate participants and partners, including prominent entities such as AC Sparta Praha and Nadace ČEZ. The website serves as an information and registration portal for the event, showcasing partners, teams, and media content. Technically, the site is built on Vizus CMS, uses modern web standards, and is mobile optimized. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy/cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high.

F

FourJaw Manufacturing Analytics Ltd

fourjaw.com

73

FourJaw Manufacturing Analytics Ltd is a UK-based company founded in 2020 specializing in manufacturing analytics software and IoT hardware solutions. Their platform provides real-time machine monitoring, productivity analytics, downtime tracking, and energy monitoring to manufacturers aiming to optimize factory floor operations. Positioned as an award-winning, plug-and-play solution, FourJaw targets SMEs to global manufacturers, emphasizing ease of installation and affordability. The website reflects a mature digital presence built on HubSpot CMS, with strong branding, comprehensive content, and clear calls to action. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS, domain locking, and cookie consent mechanisms, though lacks explicit security policies or incident response disclosures. Overall, FourJaw presents a trustworthy and professional business with a strong market position in manufacturing analytics.

Spotler Ltd operates a marketing platform specializing in email marketing delivery and authentication services. The analyzed domain cgtforms.com is used by Spotler customers for email authentication and link redirection, serving as a technical domain rather than a direct customer-facing website. The website content is minimal but professional, providing transparency about data privacy and compliance with spam laws. The company positions itself as a trusted provider in the email marketing sector with a medium-sized business footprint in the UK. Technically, the website uses standard HTML and CSS with FontAwesome icons, hosted under a domain registered via Easyspace Limited. The site is mobile responsive with basic accessibility and SEO features but lacks advanced security headers and cookie consent mechanisms. DNSSEC is not enabled, representing a potential security enhancement. No tracking or analytics scripts were detected, indicating minimal user tracking. From a security perspective, the domain registration includes protective statuses to prevent unauthorized transfers or updates, enhancing trustworthiness. However, the absence of security headers and cookie policies suggests room for improvement in security posture and privacy compliance. No vulnerabilities or suspicious patterns were identified. Overall, the site is safe, professional, and compliant with GDPR principles, but could benefit from enhanced security and privacy features. The overall risk is low given the nature of the site as an informational domain for a marketing platform. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to improve trust and compliance.

D

DESIGN TRADE s.r.o

dtgroup.cz

54

Design Trade Group is a medium-sized retail and wholesale business specializing in luxury watches, jewellery, and cosmetics across Czechia, Slovakia, and Poland. With over 30 years of experience, the group operates flagship retail stores in Prague and distributes numerous prestigious international brands. The website reflects a professional and consistent brand image, targeting consumers and retailers interested in high-end luxury goods. Technically, the site uses modern front-end technologies and is mobile-optimized, though it lacks advanced SEO and accessibility features. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the provided data, and no privacy or cookie policies are present, indicating compliance gaps. The absence of WHOIS data limits domain legitimacy verification, but the business information and external brand partnerships support credibility. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Sabe, spol. s r.o.

kancelar-sabe.cz

45

Sabe, spol. s r.o. operates as a retail business specializing in office supplies, calendars, diaries, and office furniture primarily serving customers in the Czech Republic. The company maintains multiple physical stores, with the website indicating at least one active location in Blansko. The website is currently in maintenance mode, preparing a new e-shop, but provides a catalog link and contact information for customers. The business targets both individual and corporate customers seeking office-related products with options for personal pickup. Technically, the website uses standard HTML5 and CSS3 with custom fonts and basic responsive design. There is no detected CMS or advanced frameworks. The site lacks active analytics or tracking scripts, and no social media presence is linked. The website's SEO and accessibility features are basic, and performance is moderate. Security features such as HTTPS and security headers are not verifiable from the provided data, and no privacy or cookie policies are published. From a security perspective, the absence of WHOIS data and domain registration details is a concern, reducing trust in domain legitimacy. The site does not expose any forms or user input fields, minimizing attack surface, but also lacks visible security best practices such as security headers or vulnerability disclosure policies. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which could pose legal risks. Overall, the website presents a legitimate retail business with moderate digital maturity but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and user experience. The domain registration opacity is a notable risk factor that should be addressed to improve credibility.

T

The Boeing Company

boeing.com

77

The Boeing Company is a globally recognized aerospace and defense corporation, operating as the world's largest manufacturer of commercial jetliners and defense, space, and security systems. The website reflects a mature, enterprise-level digital presence with comprehensive content targeting commercial aerospace customers, defense clients, investors, employees, and the general public. The business model centers on manufacturing and services in aerospace and defense, with a strong emphasis on innovation, safety, and sustainability. The site demonstrates consistent branding and professional design, supporting Boeing's market leadership position. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but explicit security headers and cookie consent mechanisms could be improved. Privacy compliance is partially addressed with a comprehensive privacy and ethics policy, but lacks visible cookie consent and detailed data protection officer contact. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain introduces some uncertainty. The digital infrastructure supports Boeing's business objectives effectively, but enhancements in privacy transparency and security header implementation are recommended to further strengthen compliance and user trust.

POSKYTOVATEL.cz is a Czech webhosting provider offering tiered hosting packages including basic, professional, and reseller hosting plans. The website is built on the WHMCS platform, providing e-commerce and client management capabilities. The site is well-structured, mobile-optimized, and presents clear service offerings targeted at small businesses, web developers, and agencies. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. The website lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Technically, the site uses modern web technologies and includes security measures such as CSRF tokens, but lacks visible security headers and detailed security policies.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business-related information, contact details, or policies are present. The page primarily contains technical scripts and styles related to the Chrome offline dinosaur game, which is a default error placeholder. Consequently, no meaningful business or security posture can be derived from this content. The technical infrastructure is limited to browser internal scripts with no external hosting or CMS details. Security posture is minimal due to lack of headers or policies, and privacy compliance is absent. Overall, the site is non-functional from a user or business perspective, and the analysis is constrained by the lack of accessible content.

3

3mag

3mag.eu

33

3mag is a regional multilingual magazine serving the three-country border region of Germany, Czech Republic, and Poland. It focuses on cultural events, lifestyle, and regional stories, targeting residents and visitors interested in the Neisse Euroregion. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and featuring a rich set of articles and event information. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned as a niche regional media outlet.

S

SABE, spol. s r.o.

sabe.cz

48

SABE, spol. s r.o. is a well-established Czech company specializing in the manufacture and sale of sports trophies, medals, plaques, and other awards, alongside office supplies and printing services. With a history dating back to 1990 and six physical stores across major Czech cities, the company holds a solid regional market position. Their website reflects a professional retail and manufacturing business model targeting general consumers and organizations requiring trophies and office products. Technically, the website employs modern web standards with responsive design and integrates Google Analytics for visitor insights. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates good GDPR compliance. Security-wise, the site enforces HTTPS but lacks advanced security headers and formal incident response disclosures, suggesting room for improvement. Overall, the website is trustworthy, content-rich, and professionally maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen the security posture and trust further.

P

Pražský hrad

hrad.cz

70

The website www.hrad.cz serves as the official digital presence of the Office of the President of the Czech Republic, providing authoritative information, news, and cultural content related to the presidency and Prague Castle. It targets the general public, media, and visitors, offering comprehensive resources including press releases, event information, and contact avenues. The site is well-branded and professionally maintained, reflecting its governmental status. Technically, the site employs modern web technologies including Google Tag Manager for analytics, Cloudflare for performance and security, and is optimized for mobile devices with responsive design. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to user privacy and compliance with GDPR. The site is served over HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent management. However, explicit security headers and a public security policy or vulnerability disclosure page are not evident, representing areas for improvement. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent, given the official nature of the site. Overall, www.hrad.cz is a trustworthy, well-maintained government website with strong content quality and technical implementation. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clearer contact information for security incidents to further strengthen trust and compliance.