Security Directory

I

ISOTRA a.s.

isotra.com

54

ISOTRA a.s. is a well-established manufacturer specializing in high-quality interior and exterior shading products including blinds, roller blinds, pergolas, awnings, and insect screens. With over 30 years of market presence and exports to nearly 50 countries, ISOTRA positions itself as a technological leader in the shading industry, focusing on innovation and in-house production capabilities. The company targets both B2B partners and end customers, offering customized shading solutions and related services such as component production and coating. Technically, the website employs modern JavaScript libraries such as jQuery, Modernizr, and Slick Carousel, along with Google Tag Manager and Analytics for tracking. The site is mobile-optimized with good SEO practices and accessibility features, though some improvements in security headers and accessibility could be made. The presence of cookie consent and a comprehensive privacy policy indicates a strong commitment to GDPR compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is notably missing, which raises some concerns about domain registration transparency, though the professional website and business certifications mitigate this risk. Overall, ISOTRA presents a professional, trustworthy online presence with strong business credibility and technical maturity. The main risk lies in the incomplete WHOIS data, which should be investigated further to ensure domain legitimacy and ownership transparency.

I

ISOTRA a.s.

isotra.sk

51

ISOTRA a.s. is a well-established Czech manufacturer specializing in custom interior and exterior shading solutions including blinds, roller shutters, pergolas, and awnings. With over 20 years of experience and a strong international presence exporting to nearly 50 countries, ISOTRA positions itself as a technological leader in the shading industry. The company emphasizes in-house development and production capabilities, including owning tool shops and powder coating facilities, which supports their high-quality product offerings. Their website reflects a professional and comprehensive digital presence with multi-language support and detailed product information targeting both B2B and end consumers. Technically, the website employs modern JavaScript libraries such as jQuery, Modernizr, and Slick Carousel, alongside Google Tag Manager and Analytics for marketing and tracking. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility improvements could be made. Security-wise, the site enforces HTTPS, uses cookie consent banners compliant with GDPR, and disables right-click context menus for basic content protection. However, it lacks explicit security policy pages and incident response contacts, which are recommended for enhanced transparency and trust. Overall, ISOTRA's website demonstrates a mature digital infrastructure with strong branding, clear contact channels, and trust signals such as certifications and awards. The security posture is solid but could benefit from additional headers and published policies. Privacy compliance is well addressed with comprehensive cookie and privacy policies. The risk profile is low with no suspicious content or vulnerabilities detected. Strategic recommendations include publishing a dedicated security policy, adding incident response contact details, enhancing security headers, and improving accessibility features. These steps will further strengthen ISOTRA's digital trustworthiness and compliance posture.

P

Primirest a.s.

primirest.cz

61

Primirest a.s. is a prominent Czech company specializing in school catering services, serving over 260 schools nationwide with a focus on quality, sustainability, and education. The company is part of the larger CEE Catering HoldCo Kft. group, leveraging extensive industry experience and innovative models such as self-service dining and educational mascots. The website is built on Drupal 8, employs modern web technologies, and integrates Google reCAPTCHA and Google Tag Manager for security and analytics. While the site demonstrates strong GDPR compliance and professional content, the absence of WHOIS data limits domain registration transparency. Security posture is good with HTTPS and form protections, but could be enhanced by adding security headers and explicit incident response information. Overall, the site is trustworthy, well-designed, and serves its target audience effectively.

C

CityPortals.cz

cityportals.cz

42

CityPortals.cz is a specialized service provider offering municipalities in the Czech Republic a platform to display regional job offers directly on their websites. The service aggregates job listings from major Czech job portals and the national employment office, providing a valuable tool to combat local unemployment. The website is professionally designed with clear navigation and good mobile optimization, targeting municipal governments and local citizens seeking employment opportunities. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with moderate performance and SEO optimization. However, the absence of privacy and cookie policies and missing WHOIS registration data are notable compliance and trust concerns. Security posture is basic with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional and trustworthy for its niche but would benefit from improved privacy compliance and domain registration transparency.

S

SINGING ROCK s.r.o.

singingrock.cz

48

SINGING ROCK s.r.o. is a Czech-based company specializing in the manufacturing and retail of climbing and professional safety equipment. The company maintains a strong market position with an international presence, offering products such as harnesses, helmets, and fall arrest devices. Their website targets climbers and professionals working at heights, providing product information, community engagement, and B2B sales channels. The business model combines manufacturing with direct retail and wholesale distribution. Technically, the website employs a modern tech stack including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile optimized with good navigation and content quality. While no CMS is explicitly detected, the site uses standard web technologies and scripts to deliver a responsive user experience. Performance is moderate with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website presents a professional and trustworthy front for SINGING ROCK s.r.o., with good content quality and compliance practices. Strategic improvements in security headers, incident response transparency, and SEO could enhance the site's security posture and digital maturity.

S

Svaz knihovníků a informačních pracovníků České republiky (SKIP)

skipcr.cz

45

Svaz knihovníků a informačních pracovníků České republiky (SKIP) is the largest professional organization for librarians and information workers in the Czech Republic, representing over 2,100 members including institutions and individuals. The organization focuses on promoting equal access to information, supporting educational and cultural activities, and organizing national projects to foster reading and library services. The website is well-structured, professionally designed using Drupal 10, and provides comprehensive information about SKIP's activities, membership, and events. It targets library professionals and institutions within the Czech Republic.

Č

Česká tisková kancelář (ČTK)

ctk.cz

62

Česká tisková kancelář (ČTK) is the Czech Republic's national press agency providing a wide range of news and media services including daily news reporting, multimedia content, photo and video banks, and crisis communication support. The website reflects a professional and well-established media organization targeting media professionals, institutions, and the general public. The business model centers on delivering reliable and independent news content and communication services, positioning ČTK as a leading media entity in the Czech market. Technically, the website employs modern web technologies such as Google Tag Manager, jQuery, SVG graphics, and lightbox galleries, ensuring a responsive and accessible user experience. The site is well-optimized for SEO and mobile devices, with clear navigation and comprehensive content. Privacy and cookie consent mechanisms are robust, reflecting good compliance with GDPR and related regulations. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent with granular controls. However, it lacks explicit security policy documentation, incident response contacts, and security headers that could further enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data is notable but likely due to registry policies or privacy protection, not detracting significantly from the site's legitimacy. Overall, ČTK's website is a trustworthy, professional platform with strong content quality and privacy compliance. Strategic improvements in security transparency and incident response readiness would further strengthen its security posture and stakeholder trust.

E

EGAP

egap.cz

60

EGAP.cz is the official website of the Czech Export Guarantee and Insurance Corporation, a government-backed entity providing export credit insurance and risk management services to Czech exporters and financial institutions. The website offers comprehensive information about their products, services, and organizational structure, targeting Czech exporters and related stakeholders. The site is bilingual (Czech and English) and professionally designed with clear navigation and relevant content. Technically, the website is built on Drupal 7 CMS, utilizing modern frontend libraries such as Bootstrap and jQuery, with analytics tools including Google Analytics and Smartlook for user behavior tracking. Security posture is generally good with HTTPS enforced and anonymized IP tracking, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of WHOIS data limits domain registration trust assessment, though the website content and presentation strongly suggest legitimacy as a government entity. Overall, the site is professional, secure, and suitable for its target audience.

I

ISOTRA a.s.

isotra.cz

49

ISOTRA a.s. is a well-established Czech manufacturer specializing in interior and exterior shading solutions including blinds, roller shutters, pergolas, and related products. With over 30 years in the market and exports to 46 countries, ISOTRA holds a strong position as a technological leader in its industry. The company emphasizes quality, innovation, and environmental sustainability, supported by its own tooling and component manufacturing facilities. The website reflects a professional and comprehensive digital presence, targeting both B2B and end consumers with multilingual support and configurator tools. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie consent mechanisms. Overall, ISOTRA demonstrates a mature digital infrastructure aligned with its business stature.

S

smsticket - Ticket sales

smsticket.cz

65

The website www.smsticket.cz is an online ticket sales platform primarily serving the Czech Republic market. It offers a wide selection of event tickets, including concerts, theater, and cultural events, with a user-friendly interface and mobile optimization. The platform supports user account management and social login via Facebook, enhancing user convenience. The business model focuses on facilitating event attendance through online ticket purchases, targeting general consumers interested in entertainment and cultural activities. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and templating with Handlebars.js. It uses HTTPS with good SSL configuration and includes security measures such as CSRF tokens in forms. The site is mobile optimized and has a moderate performance profile. However, it lacks some advanced security headers and accessibility features. From a security and compliance perspective, the site demonstrates basic security hygiene but lacks visible privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the site content and HTTPS presence suggest legitimate operations. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the site is functional and professionally presented but would benefit from enhanced transparency, privacy compliance, and security best practices to improve trust and regulatory adherence.

Holidayinfo.cz is a Czech-focused online portal providing comprehensive information about holiday resorts, including ski areas, accommodation, webcams, weather forecasts, and related tourist services. The website targets tourists and visitors interested in Czech recreational destinations, offering seasonal content for both summer and winter activities. The business operates as an information service platform with a niche regional focus, leveraging partnerships with related service providers such as accommodation platforms and ski pass services. The domain's long registration history since 2000 supports its established presence in the market. Technically, the website employs a custom JavaScript-based platform with libraries such as jQuery and Modernizr, integrated with Google Tag Manager and Google Analytics for tracking. The site uses HTTPS and implements a cookie consent banner, indicating basic privacy compliance. However, it lacks visible privacy policy and terms of service pages, and no direct contact information is provided on the homepage. The design is professional and consistent, though mobile optimization and accessibility are basic. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks published security policies, incident response contacts, and advanced security headers in the HTML content. No vulnerabilities or suspicious patterns were detected. The WHOIS data confirms domain legitimacy and consistency with the website's content and business focus. Overall, Holidayinfo.cz presents a trustworthy and functional information portal with room for improvement in privacy disclosures, security transparency, and contact availability. Strategic enhancements in these areas would strengthen user trust and compliance posture.

P

PIVOVAR SVIJANY, a.s.

pivobranisvijany.cz

45

Pivovar Svijany is a traditional Czech brewery with a rich history dating back to 1564. The website pivobranisvijany.cz primarily promotes the 14th annual Svijanské Pivobraní event scheduled for August 23, 2025, featuring music and the brewery's beer offerings. The company targets beer enthusiasts and local community members, leveraging its heritage and quality products to maintain a strong regional presence. The business model focuses on event promotion and brand marketing to support brewery sales. Technically, the website uses a common and stable technology stack including jQuery, Bootstrap, and various UI libraries. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, SEO and accessibility features are basic, and no CMS or advanced platform is detected. Hosting appears to be provided by Active24, consistent with the domain registrar information. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, indicating gaps in compliance with GDPR and best practices. No forms or sensitive data collection mechanisms are present, reducing immediate risk. The domain is relatively new (created in 2023) but aligns with the event-specific purpose rather than the brewery's main website. Social media links connect to official brewery accounts, enhancing trust. Overall, the website is functional and professional but would benefit from improved privacy compliance, security hardening, and enhanced SEO and accessibility. The risk level is moderate due to missing policies and security headers but no critical vulnerabilities or blocking mechanisms are detected.

D

Delirest services s.r.o.

delirest.cz

62

Delirest services s.r.o. is a leading provider of professional corporate catering services in the Czech Republic and Slovakia, offering a comprehensive range of food services including breakfasts, lunches, dinners, canteen and buffet operations, and event catering. The company emphasizes quality, sustainability, and customer satisfaction, positioning itself as a market leader supported by a strong parent company, CEE Catering HoldCo Kft. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting a positive user experience for corporate clients and employees. Technically, the site is built on Drupal 8, leveraging modern web technologies and security features such as HTTPS and Google reCAPTCHA to protect user interactions and data.

K

Kup merch!

kupmerch.cz

55

Kup merch! is a Czech Republic based e-commerce platform specializing in the sale and production of merchandise across various projects. The website targets a general audience interested in branded merchandise, offering a range of products including clothing and accessories. The business operates primarily online with a niche market focus. Technically, the site uses a modern technology stack including jQuery, Google reCAPTCHA for bot protection, and Google Analytics for traffic analysis. The site is built on the Sirius CMS platform and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are not explicitly detected. Privacy compliance is partial, with no clear privacy policy or terms of service pages found, and no explicit contact information for security or business inquiries. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

P

Petzl

petzl.com

72

Petzl is a globally recognized brand specializing in manufacturing and retailing technical gear for sport climbing, professional work-at-height, and rescue operations. The website targets both sports enthusiasts and professionals, offering a wide range of equipment including headlamps and safety systems. The brand maintains a strong market position with consistent branding and a comprehensive online presence across multiple countries and languages. The website is built on the Salesforce Visualforce platform, integrating modern JavaScript libraries and tracking tools such as Google Tag Manager and OneTrust for cookie consent. The technical infrastructure supports good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and input sanitization, though the absence of explicit security policies and incident response contacts is noted. WHOIS data is incomplete, which is unusual for a brand of this stature, but the website content and social media presence strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its target audience.

Raab Computer operates the brand RaabWEB, providing comprehensive custom web design, e-commerce solutions, graphic design, and hosting services primarily targeting businesses and organizations in the Czech Republic. The company has a long-standing presence since 1998, offering additional IT services including hardware sales, internet connectivity, and installation of security and audiovisual systems. Their market position is that of a regional technology service provider with a solid portfolio and professional presentation. Technically, the website employs a modern JavaScript stack including jQuery, Revolution Slider, OwlCarousel, and Google Analytics for tracking. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS enabled and use of Google reCAPTCHA, but lacks visible security headers and published security policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and business information appear professional and trustworthy. Privacy and cookie policies are missing, representing a compliance gap. Contact information is clearly provided with multiple channels including email, phone, and physical address. Overall, the website is functional and professional but would benefit from enhanced security headers, published privacy and cookie policies, and improved transparency on incident response and vulnerability disclosure to strengthen trust and compliance.

V

Vydavatelství KAM po Česku s.r.o.

kampocesku.cz

63

KAM po Česku is a Czech Republic-based tourism media portal offering comprehensive travel information, event calendars, magazines, and e-commerce services focused on domestic tourism. The website targets a general audience interested in cultural events, family activities, and travel within the Czech Republic and neighboring regions. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and CAPTCHA protections on forms, though some security headers and explicit incident response policies are absent. Overall, the site demonstrates good digital maturity and compliance with GDPR, supported by visible privacy and cookie policies. The domain registration is consistent and transparent, reinforcing trustworthiness.

T

Toplage Immobilien GmbH

toplage-immobilien.de

45

Toplage Immobilien GmbH is a regional real estate brokerage firm based in Kiel, Germany, specializing in property sales, rentals, and related consulting services. The company is part of the larger wankendorfer Unternehmensgruppe, which enhances its market position and resource access. The website is professionally designed using TYPO3 CMS and targets property buyers, sellers, and renters in Schleswig-Holstein with clear service offerings and contact options. Technical infrastructure includes modern JavaScript libraries and privacy-conscious analytics via Matomo with cookies disabled. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a trustworthy and professional real estate business with strong compliance to GDPR and user privacy.

A

Adlershorst Immobilien GmbH

adlershorst-immobilien.de

41

Adlershorst Immobilien GmbH is a medium-sized German real estate company specializing in property sales, condominium and rental building management, and in-house skilled trades such as painting, plumbing, and electrical services. The company targets property owners, tenants, and investors primarily in Hamburg and surrounding regions. Their website is built on TYPO3 CMS and employs modern JavaScript libraries, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides detailed contact information for multiple team members, enhancing user trust and engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information are absent. Overall, the website presents a professional and trustworthy image with no detected vulnerabilities or suspicious content.

A

ADLERSHORST Baugenossenschaft eG

adlershorst.de

41

ADLERSHORST Baugenossenschaft eG operates as a large regional housing cooperative in the northwest of the Hamburg metropolitan area, managing over 5,600 residential units and serving more than 9,200 members. The company focuses on providing rental housing, new construction projects, property management, and investment opportunities, targeting tenants, prospective tenants, property owners, investors, and cooperative members. Their market position is strong within their regional niche, supported by a comprehensive digital presence and member engagement through reports and social media. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, delivering a responsive and well-structured user experience. Hosting appears to be managed by a German provider (WTNet), ensuring good performance and regional compliance. The site implements HTTPS and cookie consent mechanisms, reflecting GDPR awareness and privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data and DNS configuration are consistent with a legitimate business entity, enhancing trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious digital front for ADLERSHORST Baugenossenschaft eG, with room for improvement in formal security documentation and transparency. The risk profile is low, with no signs of malicious activity or content safety concerns.

N

New Communication GmbH & Co. KG

new-communication.de

48

New Communication GmbH & Co. KG is a full-service advertising and marketing agency based in Kiel, Germany. The company offers comprehensive marketing solutions across digital, print, and crossmedia channels, positioning itself as a trusted partner for effective communication strategies. Their website reflects a professional and modern digital presence, showcasing a diverse client portfolio and active engagement on major social media platforms. The agency targets businesses seeking integrated marketing services with a focus on quality and innovation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Modernizr, and includes advanced features like Lottie animations and responsive design. The site demonstrates good SEO practices, accessibility, and mobile optimization, providing a smooth user experience. Cookie consent and privacy compliance mechanisms are well implemented, reflecting adherence to GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent controls but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in publishing security policies and incident response information would enhance trust and compliance further.

K

KarelCapek.cz

karelcapek.cz

49

The website karelcapek.cz is a cultural and historical informational platform dedicated to the lives and works of the Čapek siblings, notable Czech writers and artists. It serves as a niche educational resource targeting general audiences interested in Czech literature, history, and cultural heritage. The site offers multimedia content, interactive maps, and event updates, positioning itself as a trusted source within its domain. Technically, the site employs a moderate technology stack including jQuery, Modernizr, Google Analytics, and Facebook Pixel, hosted under a reputable registrar. The website is mobile-optimized with good SEO and accessibility basics, though some modernization opportunities exist. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is legitimate, well-established since 2009, and maintains a consistent brand presence with active social media engagement.

P

POLAR televize Ostrava

polar.cz

61

POLAR is a regional television broadcaster serving the Moravskoslezský kraj region in the Czech Republic. Established in 1998, it provides continuous streams of local news, entertainment, and multimedia content. The website reflects a mature digital presence with video streaming capabilities, social media integration, and advertising services. The business model centers on regional broadcasting and multimedia production, targeting local residents and advertisers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Video.js, hosted likely by Websupport, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found, indicating room for compliance improvement. Overall, the domain registration and website content align well, supporting a trustworthy and established media entity.

K

Koloo

koloo.de

42

Koloo.de is a German-language website offering a marketing widget/plugin called Koloo /Rad/ designed to increase conversions, sales, and profits for e-commerce shops and websites. The company targets small to medium-sized businesses including internet cafes, restaurants, guesthouses, fitness centers, hairdressers, and beauty salons. The business model is subscription-based SaaS with multiple pricing tiers. Technically, the site uses a custom-built platform with jQuery, Modernizr, Google reCAPTCHA, and third-party analytics tools such as Google Analytics, Facebook Pixel, and Smartlook for session recording. Hosting is provided by Wedos, a Czech hosting provider. Security posture is moderate with HTTPS enabled and spam protection on forms, but some outdated libraries and missing security headers are noted. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, but could improve in security and privacy transparency.

K

Koloo

koloo.net

62

Koloo.net operates as a specialized marketing tool provider offering a fortune wheel widget designed to increase conversion rates and sales for e-commerce and hospitality businesses. The website presents a professional and consistent brand image with clear service offerings, pricing plans, and client testimonials, positioning itself as a niche player in the marketing technology sector primarily targeting small to medium-sized enterprises. Technically, the site employs a traditional jQuery-based stack with additional plugins for UI and analytics, including Google Analytics and Smartlook for user behavior tracking. While the site uses HTTPS and includes reCAPTCHA for form security, it lacks advanced security headers and uses an outdated jQuery version, which may expose it to vulnerabilities. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business presence suggest a legitimate operation. Privacy and terms of service pages are present, but cookie consent mechanisms are missing, indicating partial privacy compliance. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

K

Kladské pomezí o.p.s.

kladskepomezi.cz

51

Kladské pomezí o.p.s. operates a regional tourism portal focused on promoting the Kladské pomezí region in the Czech Republic. The website offers comprehensive information about cultural, natural, and recreational attractions, events, and partner services. It targets tourists and visitors interested in exploring the region's heritage and leisure opportunities. The organization appears to be a small non-profit destination management entity with a well-established online presence since 2004. Technically, the website uses a modern CMS platform (inCUBE interactive), integrates Google Maps, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. However, no explicit security or incident response policies are published. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture.

Č

Česká televize

ceskatelevize.cz

59

Česká televize is the Czech Republic's public television broadcaster, providing a wide range of content including live TV streaming, news, sports, cultural, educational, and children's programming. It operates multiple branded channels such as ČT1, ČT2, ČT24, ČT sport, Déčko, ČT art, and ČT edu, serving a broad general audience primarily within the Czech Republic. The business model is based on public funding through TV license fees, positioning it as a leading media entity in the country. Technically, the website employs a modern web stack including jQuery, Modernizr, Google Tag Manager, and analytics tools like Gemius and Microsoft Clarity. It is well-optimized for mobile devices, accessible, and SEO-friendly. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be improved. No dedicated security policy or incident response contact information is publicly available, and no vulnerability disclosure or security.txt file was found. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data is mitigated by the site's official nature and consistent branding. Strategic recommendations include enhancing security header implementation, publishing incident response details, and establishing a vulnerability disclosure policy to further strengthen security posture.

Ú

Úrad geodézie, kartografie a katastra Slovenskej republiky

skgeodesy.sk

63

The Úrad geodézie, kartografie a katastra Slovenskej republiky (ÚGKK SR) is the official Slovak government agency responsible for geodesy, cartography, and cadastre services. The website serves as a portal for multiple cadastral and spatial data services, targeting citizens, government bodies, and geodesy professionals. It provides access to electronic cadastral data, spatial reference information, and transformation services. The site is well-maintained with recent news updates and clear contact information, reflecting an authoritative national position in its sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and the WebJET CMS platform. It is mobile-optimized, accessible, and SEO-friendly. The cookie consent mechanism is implemented in compliance with GDPR, though some security headers are missing. No major vulnerabilities or exposed sensitive data were detected. The site uses HTTPS and secure cookie handling, indicating a solid security posture. Security-wise, the site demonstrates good practices but could improve by adding explicit security headers and publishing a security.txt file for vulnerability disclosures. Incident response contact details are not publicly available. The WHOIS data confirms the domain is legitimately registered to the Slovak government agency, consistent with the website content and language. Overall, the website is professional, trustworthy, and provides essential public services with good technical and security standards. Strategic improvements in security transparency and incident response readiness would further enhance its posture.

B

BAföG Digital

bafoeg-digital.de

66

BAföG Digital is the official German government platform enabling students and trainees to apply online for BAföG educational funding. It is a joint offering by the federal government and the German states, providing a secure, accessible, and user-friendly digital service. The platform supports application submission, status tracking, and offers additional services such as a BAföG calculator and a dedicated mobile app. The website is well-branded with official logos and consistent messaging, targeting students and their families in Germany.

S

Swiss Design Association

swiss-design-association.ch

44

The Swiss Design Association is a professional membership organization based in Switzerland that supports design professionals through legal advice, insurance consulting, and advocacy. It is recognized by the Swiss Federal Office of Culture, indicating a reputable position within the cultural and design sector. The website provides information about awards, events, membership benefits, and a directory of designers, targeting primarily design professionals and organizations within Switzerland. Technically, the website uses a mature technology stack including jQuery, Backbone.js, Google Analytics, and reCAPTCHA v3, running on Craft CMS. The site is mobile optimized with good navigation and consistent branding. Security posture is solid with HTTPS and anti-bot protections, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

M

MWEIMH Nordrhein-Westfalen

wirtschaft.nrw

65

The website wirtschaft.nrw is the official portal of the Ministry for Economic Affairs, Industry, Climate Protection and Energy of North Rhine-Westphalia, Germany. It serves as a comprehensive information hub for economic policy, industry, energy, climate protection, innovation, and digitalization initiatives within the state. The site targets businesses, entrepreneurs, policymakers, and the general public interested in these sectors. It is positioned as a trusted government source with extensive content and clear navigation. Technically, the site is built on Drupal CMS with modern web technologies including Bootstrap and Modernizr. It employs Matomo analytics with strong privacy controls respecting user consent and Do Not Track settings. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent with a German government entity. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, some security headers are not explicitly detected and DNSSEC is not enabled, which could be improved. There is no public security policy or incident response contact information visible. No vulnerabilities or suspicious content were found. Overall, wirtschaft.nrw demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It is a safe and reliable resource for its audience. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security.txt file, and improving incident response visibility to further strengthen its security posture.

M

motor-traffic.de

motor-traffic.de

54

motor-traffic.de is a German-language online news portal specializing in mobility and automotive topics, including automobiles, motorcycles, commercial vehicles, bicycles, technology, environment, and traffic. The site targets German-speaking readers interested in current mobility news and industry developments. It operates as a niche media outlet providing categorized news articles, event coverage, and RSS feeds. The business model centers on content publishing and dissemination within the transportation and media sectors. The website presents a consistent brand with good content quality and clear navigation.

M

Modem Studio

modem.studio

50

Modem Studio is a small, professional graphic design studio specializing in web and print projects, brand and cultural identities. The website serves as a portfolio showcasing various projects primarily targeting creative professionals, artists, and cultural organizations. The business model is service-based, focusing on design and branding services with a niche market position in the creative media sector. Technically, the website is built on WordPress with WooCommerce, uses modern JavaScript libraries like jQuery, and integrates Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks some advanced SEO and accessibility features. Security posture is good with HTTPS enabled and no exposed sensitive data, but it lacks security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is justified for this business type. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.

R

Ruhr-Universität Bochum

ruhr-uni-bochum.de

69

Ruhr-Universität Bochum is a well-established public university in Germany, offering a broad range of academic programs and engaging in significant research and transfer activities. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting students, researchers, alumni, and partners. Technically, the site is built on Drupal 10, uses privacy-respecting Matomo analytics, and employs modern web technologies ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and privacy best practices observed, though formal security policies and incident response contacts are not explicitly published. Overall, the site demonstrates high trustworthiness and compliance with GDPR and cookie regulations.

A

Akademie věd České republiky

cas.cz

59

The Akademie věd České republiky (Academy of Sciences of the Czech Republic) is a prominent public research institution dedicated to scientific research, education, and public outreach in the Czech Republic. The website serves as a comprehensive portal for news, events, publications, and resources related to the academy's activities. It targets researchers, academics, students, media, and the general public interested in science and research. The institution holds a leading position in the Czech scientific community and operates with a large organizational size and extensive content offerings.

R

RUBY PRESS GmbH

ruby-press.com

62

Ruby Press GmbH operates a specialized e-commerce platform focused on publishing and selling books related to architecture, art, and cultural spatial practices. Established in 2008 and based in Berlin, Germany, the company targets academics, architects, and cultural practitioners with a curated selection of niche publications. The website demonstrates a professional and consistent brand presence with clear product listings and company information. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies such as jQuery and Google Fonts, and hosted likely via IONOS SE. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a cookie consent banner and privacy policy present, though GDPR compliance is not explicitly stated. Overall, the website is trustworthy and professionally maintained, with room for security and privacy enhancements.

Uldry AG is a well-established Swiss printing and visual communication company with over 56 years of experience. They offer a broad portfolio of printing services including digital print, fine art prints, and advertising technology products, emphasizing ecological and sustainable production methods. Their market position is strong locally with a medium-sized business model targeting both B2B and B2C customers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries and tracking tools with good mobile optimization and SEO practices. Security posture is solid with HTTPS, secure forms, and cookie consent management, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR-aligned consent mechanisms. Overall, the site is trustworthy and professionally maintained with transparent business and contact information.

R

Ruhr-Universität Bochum

rub.de

69

Ruhr-Universität Bochum is a large, well-established German university with a strong focus on education, research, and societal impact. The website reflects a mature digital presence with comprehensive content targeting students, researchers, alumni, and partners. The technical infrastructure is modern, leveraging Drupal 10 CMS and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and privacy best practices, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

FAKRO America, LLC. operates a professional website focused on manufacturing and retailing skylights, roof windows, attic ladders, and balcony windows. The company positions itself as a fast-growing leader in its niche market, targeting construction professionals, architects, and end customers. The website content is well-structured, with clear navigation and a consistent brand presence supported by active social media channels and a media center. Technical infrastructure relies on established JavaScript libraries and Google Analytics for user tracking, with a CMS identified as WebKameleon. The site is mobile optimized and performs moderately well. From a security perspective, the website uses HTTPS with anonymized IP tracking in Google Analytics and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security or incident response policies are published, indicating room for improvement in security posture. The absence of WHOIS data is a notable anomaly, reducing trust slightly despite the professional presentation and contact transparency. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. The main risks relate to missing WHOIS transparency and potential security header gaps. Strategic improvements in these areas would enhance trust and security maturity.

I

Inspired Minds Media Ltd / World Summit AI Ltd

worldsummit.ai

61

World Summit AI is a premier global AI summit organizer based in the UK, hosting annual events in Amsterdam and other international locations. The company serves as a nexus for AI professionals, startups, investors, and academia, providing a platform for innovation, networking, and knowledge sharing. Their business model revolves around event ticket sales, partnerships, memberships, and workshops, positioning them as a market leader in AI event management. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, HubSpot, and Facebook Pixel, reflecting a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and user experience. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's credible market position.

Alliance Graphique Internationale (AGI) is a well-established professional association dedicated to the world's leading graphic designers. The website serves as a digital archive and showcase for design history and member projects, targeting design professionals and enthusiasts globally. The organization is based in Switzerland and has maintained its domain since 2001, reflecting a stable and credible presence in the design community. The business model focuses on member networking and promoting graphic design excellence rather than commercial sales. Technically, the website employs a moderate technology stack including jQuery, Modernizr, Handlebars.js, and Fuse.js for search functionality, hosted with a reputable registrar and DNS provider. The site is mobile optimized with good SEO practices but lacks some modern security headers and privacy compliance features. Performance is moderate with room for improvement in accessibility and security hardening. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but does not implement key security headers or privacy policies, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious content were found. The WHOIS data aligns well with the website's purpose and history, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response information to improve its security posture and regulatory adherence.

The University of California Office of The President (UCOP) website serves as the central administrative portal for the UC system, providing comprehensive information about academic affairs, finance, operations, external relations, civil rights, and health services. The site targets students, faculty, staff, government officials, and the public, positioning itself as a leading public university system administrative body. The content is professional, well-structured, and consistent with the branding of a major educational institution. Technically, the website employs a combination of legacy and modern technologies including jQuery, Bootstrap 2.3.2, Modernizr, and Google Analytics. While the site is accessible and performs moderately well, some technical debt is evident due to older framework versions and basic mobile optimization. Accessibility features are present but could be enhanced. SEO is basic but functional. From a security perspective, the site enforces HTTPS and uses secure analytics scripts but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy and terms of use, but no cookie consent mechanism is implemented despite tracking scripts. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data and domain registration aligned with the University of California system. Strategic recommendations include improving security headers, implementing cookie consent, enhancing mobile and accessibility features, and publishing explicit security policies to strengthen compliance and user trust.

D

Département de l'Ardèche

ardeche.fr

53

The Département de l'Ardèche website serves as the official digital presence for the Ardèche regional government in France, providing residents and visitors with comprehensive information on public services, aid guides, news, and contact resources. The site targets a broad audience including local citizens, businesses, and tourists, positioning itself as a trusted source of regional governmental information and services. The business model is centered on public service and information dissemination without commercial intent. Technically, the website employs a traditional web stack with jQuery, Modernizr, and JWPlayer, indicating moderate digital maturity. The site is functional with basic mobile optimization and accessibility features, though there is room for improvement in modernizing the tech stack and enhancing performance. The presence of a cookie consent mechanism and structured navigation reflects attention to user experience and privacy compliance. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of incident response contacts and security certifications suggests opportunities to strengthen security posture and transparency. Overall, the website is a credible and professional government portal with good content quality and user experience. The lack of WHOIS data limits domain registration trust analysis, but the official branding and content strongly support legitimacy. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, and publishing clear security and incident response policies to bolster trust and compliance.

B

BookThatApp Demo

bookthatapp-demo.com

59

BookThatApp Demo is a Shopify-based appointment booking and scheduling application designed to serve a wide range of industries including professional services, product rentals, classes, and events. The company positions itself as a leading solution within the Shopify ecosystem, offering flexible booking options, integrations with iCal and Zoom, and support for staff accounts and resource management. The website demonstrates a professional and consistent brand presence with clear navigation and social media engagement, targeting Shopify merchants and businesses seeking booking solutions. Technically, the site leverages the Shopify platform and associated technologies such as jQuery, Modernizr, and Google Analytics. Hosting and domain registration are managed via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and includes accessibility features, though some areas such as explicit privacy and cookie policies are missing. From a security perspective, the website enforces HTTPS and uses hCaptcha for form protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration aligned with the business timeline. Overall, the website is well-structured and trustworthy but would benefit from improved privacy compliance documentation and enhanced security headers to strengthen its security posture and regulatory adherence.

C

cosinex GmbH

vergabesymposium.de

66

The Vergabesymposium website represents a well-established and professionally managed event platform focused on public procurement and related legal and management topics in Germany. Organized by cosinex GmbH, the symposium targets professionals from the public sector, legal experts, and companies involved in public contracts. The site offers detailed information about the event agenda, speakers, sponsors, and registration, reflecting a mature business model centered on knowledge sharing, networking, and professional development. Technically, the website employs modern web technologies including Bootstrap, jQuery, and multimedia integration via Vimeo, ensuring a responsive and engaging user experience. The presence of cookie consent mechanisms and clear privacy policies demonstrates a commitment to GDPR compliance and user privacy. Security posture is solid with HTTPS enforced and secure form handling, although explicit security headers and incident response information could be improved. Overall, the site is trustworthy, with transparent WHOIS data matching the business identity, comprehensive contact information, and no signs of malicious activity. The content is safe for general audiences, professionally curated, and highly relevant to its niche. Minor improvements in security policy transparency and technical headers would enhance the security maturity further.

K

KRAUSE

krause-systems.hu

53

KRAUSE-Systems Hungary operates as a specialist manufacturer and supplier of equipment for working at heights, including ladders, scaffolding, and related safety technologies. The company targets industrial and professional users requiring safe and innovative solutions. The website reflects a mature digital presence with multiple language versions, indicating an international market approach. The business model focuses on manufacturing, sales, and value-added services such as training and inspections. The site content is professionally presented, with clear navigation and comprehensive legal documentation, supporting a trustworthy brand image. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel. It integrates Google Analytics, Matomo, and Google Tag Manager for analytics and marketing purposes, with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent updates but lacks explicit security headers like X-Frame-Options and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contacts and no security.txt file indicates room for improvement in transparency and readiness. Overall, the website scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores. There are no critical issues or blocking mechanisms detected, making it a reliable and professional online presence for KRAUSE-Systems Hungary.

K

KRAUSE Systems

krause-systems.co.uk

52

KRAUSE Systems is a well-established manufacturer specializing in access technology and occupational safety products. The company offers a broad range of ladders, steps, scaffolds, and customized solutions targeting craftsmen, industry professionals, and general consumers. Their international presence is supported by multiple localized websites and comprehensive product and service information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Matomo. The site demonstrates good digital maturity with responsive design, clear navigation, and privacy compliance mechanisms including cookie consent. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness from a domain legitimacy perspective. Overall, the website is professional, secure, and compliant, representing a credible business entity.

A

Allianz Global Assistance

allianztravel.com

61

Allianz Global Assistance operates a comprehensive travel insurance website offering a variety of travel protection plans including trip cancellation, emergency medical coverage, rental car insurance, and 24/7 assistance services. The company is positioned as a global leader in travel protection, serving millions of customers annually with a strong brand presence and multiple trust indicators such as industry awards and customer testimonials. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to travelers seeking insurance solutions. Technically, the site leverages modern web technologies including AngularJS, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Adobe DTM, and VWO. Hosting appears to be via Akamai CDN, ensuring fast performance and global availability. Security best practices are observed with HTTPS enforcement, CSRF protection, reCAPTCHA integration, and consent management via OneTrust, although explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The security posture is strong with no evident vulnerabilities or exposed sensitive data, and privacy compliance is robust with comprehensive privacy and cookie policies. However, the absence of WHOIS registration data for the domain is a notable anomaly that reduces transparency but does not detract from the overall legitimacy given the strong brand and content consistency. Overall, the website presents a low risk profile with high professionalism and trustworthiness, suitable for its target audience of travelers seeking reliable insurance coverage and assistance services.

E

Edchemy Solutions India Private Limited

edchemy.com

64

Edchemy Solutions India Private Limited operates a comprehensive digital education platform designed to support institutions, teachers, and students. The platform offers a wide range of services including live online classes, recorded video publishing, digital assignments, attendance management, and student relationship management. Trusted by over 150 educational institutions globally, Edchemy positions itself as a robust and user-friendly solution for automating and streamlining educational administration and learning processes. The company targets K-12 schools, universities, and distance education providers primarily in India. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and integrates popular analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with a clean design and clear navigation, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. From a security and compliance perspective, the absence of privacy and cookie policies and lack of WHOIS registration data are notable gaps. No forms or incident response contacts are present, limiting transparency in data handling and security incident management. The website content is safe and appropriate for a general audience with no adult or questionable material detected. Overall, Edchemy presents a credible and professional educational technology business with room for improvement in privacy compliance and security best practices. Further verification of domain registration and implementation of comprehensive privacy and security policies are recommended to enhance trust and compliance.