Security Directory

C

C4C creative GmbH

c4c-creative.de

52

C4C creative GmbH is a small, professional full-service creative agency based in Gladbeck, Germany, specializing in brand development, communication, employer branding, content creation, web development, and brand guidelines. The company positions itself as a strategic partner for businesses seeking to build authentic and sustainable brands with tailored digital solutions. Their market position is that of a regional agency integrated within the C4C group, leveraging sister companies for comprehensive communication services. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Cookiebot for GDPR-compliant cookie consent. Matomo analytics is employed, indicating a privacy-conscious approach to user tracking. The site is well-structured, mobile-optimized, and professionally designed, providing a positive user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are not explicitly published. Overall, the website reflects a trustworthy and credible business with solid privacy compliance but could improve transparency on security policies and vulnerability disclosures.

C

C4C consulting GmbH

c4c-consulting.de

52

C4C consulting GmbH is a German-based consulting firm specializing in branding, communication strategies, research, coaching, training, and teaching services. Positioned as a strategic partner for sustainable business success, the company operates under the C4C group umbrella alongside sister companies C4C systems and C4C creative. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of businesses and professionals seeking communication and branding expertise. Technically, the site runs on TYPO3 CMS, employs Matomo for analytics, and integrates Cookiebot for GDPR-compliant cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence with good trust indicators and business credibility.

A

Abbott

fr.abbott

72

Abbott is a global healthcare company with a strong presence in France, offering innovative health solutions across cardiovascular, diagnostics, neuromodulation, and diabetes care sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information tailored for a French-speaking audience. Technically, the site leverages Adobe Experience Manager as its CMS, integrates monitoring via New Relic, and manages user consent with TrustArc, indicating a modern and compliant infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site is trustworthy and professionally maintained, supporting Abbott's market position as a healthcare leader.

L

LivaNova PLC

livanova.com

65

LivaNova PLC is a global medical device company specializing in neuromodulation and cardiopulmonary products aimed at improving patient lives worldwide. The company focuses on therapeutic areas related to the head and heart, offering innovative medical devices and therapies for conditions such as epilepsy, depression, and advanced circulatory support. The website reflects a mature enterprise with a strong market position in healthcare, supported by comprehensive corporate governance and sustainability commitments. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and OneTrust for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Analytics and tracking are implemented with privacy compliance in mind. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, privacy policies, and terms of use. However, explicit security headers are not evident in the HTML content, and no vulnerability disclosure or incident response contacts are published. The absence of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or registration issues that warrant further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in transparency around domain registration and security practices are recommended to enhance trust and security posture.

G

Getinge AB

getinge.com

72

Getinge AB is a leading global provider of medical technology and healthcare solutions, serving hospitals and life science institutions worldwide. The company offers a broad portfolio including intensive care, cardiovascular procedures, operating room equipment, sterile reprocessing, digital health, pharmaceutical production, and research laboratory solutions. With a history spanning over a century, Getinge positions itself as a trusted partner to healthcare professionals and researchers. The website reflects a mature enterprise with consistent branding, multilingual support, and comprehensive product and service information tailored to healthcare providers. Technically, the website employs modern web technologies such as Google Tag Manager for analytics, OneTrust for cookie consent management, and video embedding via Video Indexer. The site appears to be built on a CMS platform likely Episerver, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no publicly visible security policy or incident response contact information. The absence of WHOIS data for the domain www.getinge.com is a notable anomaly, reducing trust in domain registration transparency, though the website content and external references strongly support legitimacy. Overall, the website is professional, content-rich, and compliant with privacy regulations, but could enhance its security posture and transparency regarding domain registration and incident response. Strategic recommendations include adding security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

Č

Česká spořitelna, a.s.

cs.cz

67

Česká spořitelna, a.s. is a leading financial institution in the Czech Republic offering a wide range of personal and corporate banking services including accounts, loans, mortgages, investments, and insurance. The website serves as the official portal for personal finance customers, providing comprehensive information and access to online banking platforms such as George. The company maintains a strong market position with consistent branding and a professional digital presence. Technically, the site employs modern web technologies, including Google Tag Manager, Evergage, and ElasticSearch, and is optimized for both desktop and mobile users with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for a major financial institution. Overall, the website is trustworthy, secure, and user-friendly, supporting the bank's reputation and customer engagement.

C

CPI Hotels, a.s.

cpihotels.com

60

CPI Hotels, a.s. operates a large hospitality business offering tailored accommodation services across six countries with nearly 40 hotels and over 4000 rooms. Their services include hotel bookings, conference and event hosting, special offers, and a corporate loyalty program targeting both leisure and business travelers. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and cookie consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with GDPR and cookie policies present. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be verified for full trust. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on domain registration and security policies.

B

Barum

barum.com.br

66

Barum is a well-established tire brand with over 70 years of history, operating as a second line brand under the Continental group. The website targets the Brazilian market, offering a portfolio of affordable and durable tires for passenger cars and commercial vehicles. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and Google Tag Manager for analytics and marketing. The site is professionally designed, mobile-optimized, and includes comprehensive legal and privacy documentation, reflecting good compliance with GDPR and cookie consent requirements. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the website presents a trustworthy and professional image consistent with a large enterprise in the transportation sector.

P

Printables.com

printables.com

60

Printables.com is a specialized online platform dedicated to the 3D printing community, offering a comprehensive database of 3D models, contests, community clubs, and a store. It appears closely linked with Prusa Research, a well-known 3D printer manufacturer, enhancing its credibility and market position within the 3D printing ecosystem. The website targets hobbyists, makers, and professionals interested in 3D printing resources and community engagement. Technically, the site is built on modern frameworks such as SvelteKit and employs standard web technologies including JavaScript and FontAwesome. It uses Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible security headers or explicit SSL configuration details, and privacy compliance is low due to missing privacy and cookie policies. Overall, the site provides valuable content and community features but would benefit from enhanced security and compliance measures.

N

Nadační fond Veolia

nfveolia.cz

50

Nadační fond Veolia is a corporate foundation affiliated with the Veolia group in the Czech Republic, established in 2003. It supports social and environmental projects nationwide and regionally, promoting volunteerism and community engagement. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a custom CMS platform with Matomo analytics and includes a cookie consent mechanism, reflecting good privacy compliance. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in security posture. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security practices and domain registration transparency.

F

Fastmail Pty Ltd

messagingengine.com

68

Fastmail Pty Ltd operates a professional, privacy-focused email and calendar hosting service targeting both individuals and businesses. The company positions itself as a secure, ad-free alternative to major providers like Gmail and iCloud, emphasizing privacy, productivity, and ease of use. Their service includes native apps across platforms and a strong commitment to open standards and open source contributions. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content supporting their business model. Technically, the website employs modern web technologies including JavaScript, SVG icons, and web fonts, delivering a fast and mobile-optimized experience. The presence of security headers and HTTPS indicates a strong security posture. The company also maintains a bug bounty program and provides clear channels for reporting security issues, demonstrating a proactive approach to security management. Despite the strong website and business presence, the absence of WHOIS registration data is a notable gap, reducing transparency and slightly impacting trustworthiness. However, the overall security and privacy focus, combined with positive customer testimonials and no detected vulnerabilities, suggest a low risk profile. Strategically, Fastmail should consider publishing a security.txt file to facilitate vulnerability disclosures and enhance incident response visibility. Continued emphasis on privacy compliance and transparent business information will further strengthen their market position.

E

Easy.jobs

easy.jobs

57

Easy.jobs is a technology company specializing in AI-powered recruiting software designed for startups to enterprises. Their SaaS platform offers an all-in-one recruitment solution including career page creation and applicant tracking system capabilities. Positioned as a leading AI recruiting software for 2025, Easy.jobs targets businesses seeking to streamline and accelerate their hiring processes. The website demonstrates a professional and modern digital presence built on WordPress with Elementor, leveraging various plugins and integrations to enhance user experience and functionality. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and incident response information are lacking. Privacy compliance is indicated by the presence of a privacy policy and terms of service, but cookie consent mechanisms are not evident. Overall, the website and domain registration data align well, indicating a legitimate and credible business with a strong market position in the recruitment technology sector.

J

JURA Suomi

jura.com

60

JURA Suomi is the Finnish localized website for JURA, a Swiss manufacturer of high-quality automatic coffee machines and related accessories. The site targets both home consumers and professional users in Finland, offering product catalogs, support, and dealer information. The brand is well-established globally with a consistent and professional online presence. Technically, the website is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and form validation, though some improvements like updated libraries and security headers are recommended. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site reflects a mature digital infrastructure supporting a medium-sized retail and professional business in the hospitality sector.

H

Husqvarna

husqvarna.com

75

Husqvarna is a globally recognized enterprise specializing in manufacturing and retailing forest and garden tools such as lawn mowers, chainsaws, and robotic mowers. The website serves a broad audience including both professionals and homeowners, reflecting a strong market position in outdoor power equipment. The digital infrastructure leverages modern technologies including React, Microsoft Application Insights for telemetry, and Google Tag Manager for analytics, indicating a mature and well-maintained technical environment. Privacy compliance is robust with a comprehensive cookie consent mechanism and a dedicated privacy portal, aligning with GDPR requirements. Security posture is solid with HTTPS enforced and telemetry exception filtering, though there is room for improvement in publishing explicit security policies and adding security headers. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

H

Hisense

hisense.com

62

Hisense is a large multinational company specializing in consumer electronics and home appliances, offering a broad range of products including smart TVs, laser TVs, soundbars, refrigerators, laundry appliances, and smartphones. The website serves as a global portal showcasing their product lines and corporate information, targeting a general consumer audience as well as B2B clients. The site is professionally designed with clear navigation and consistent branding, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries and Google Tag Manager for analytics, with responsive design for mobile devices. Security is adequately addressed with HTTPS and basic security headers, though there is room for improvement in advanced header implementation and accessibility features. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but lacks explicit incident response or vulnerability disclosure information. WHOIS data for the subdomain is unavailable, which is typical and not suspicious for subdomains. Overall, the site demonstrates a trustworthy and professional online presence consistent with a major global brand. Strategic recommendations include enhancing security headers, improving accessibility, publishing a vulnerability disclosure policy, and increasing transparency around security and incident response to further strengthen trust and compliance.

H

Haier

haier-europe.com

64

Haier Europe presents a professional website focused on kitchen and home appliances with modern design and localized Finnish content. The company is positioned as a large manufacturer with advanced technology integration and customization options for consumers. The technical infrastructure leverages modern web frameworks such as Gatsby and React, indicating a contemporary digital maturity. However, the absence of WHOIS data and lack of visible privacy and cookie policies suggest gaps in transparency and compliance. Security posture is moderate with no detected security headers or SSL configuration details, indicating room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

E

ELEKTROWIN a.s.

zaostrenonaelektro.cz

54

Zaostřeno na elektro is an educational and environmental project supported by ELEKTROWIN a.s., focused on promoting proper sorting and recycling of electrical waste in the Czech Republic. The website provides comprehensive information about recycling processes, types of electrical devices, and the importance of recycling for environmental protection. It targets the general public, especially consumers of electrical appliances, aiming to raise awareness and encourage responsible behavior. Technically, the website is built on the Webnode CMS platform, hosted on AWS Cloudfront CDN, and uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes multimedia content such as embedded YouTube videos to enhance user engagement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or security policies. No WHOIS data is available for the domain, which limits transparency and trust assessment. The site shows no signs of malicious content or vulnerabilities in the visible source. Overall, the website is a well-structured, informative platform with good business credibility and moderate technical maturity. However, improvements in security headers, privacy policy publication, and domain registration transparency are recommended to enhance trust and compliance.

C

Czech Pedal Car

czechpedalcar.com

56

Czech Pedal Car is a small manufacturing business based in the Czech Republic specializing in the production and sale of retro pedal car models and kits. Established since 2017, the company targets enthusiasts and collectors interested in nostalgic pedal cars. The website showcases media coverage and videos highlighting their products, indicating a niche but engaged market presence. Technically, the site is built on the Webnode platform, hosted via AWS Cloudfront, and uses modern web technologies including HTTPS and Google Tag Manager for analytics. While the site is accessible and mobile-optimized with good design and navigation, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and external media references support legitimacy. Overall, the security posture is moderate with room for enhancements in security best practices and privacy compliance.

Z

ZONER software, a.s.

zoner.cz

61

ZONER software, a.s. operates the website www.zoner.cz, offering a comprehensive photo and video editing software suite primarily targeting Czech consumers, businesses, and educational institutions. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model centers on software sales and subscription services, supported by extensive educational content and user testimonials. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site is well-optimized for SEO and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie management aligned with GDPR requirements. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, with no signs of malicious activity or content blocking.

Natalieba.net is a professional personal website representing Dr. Natalie Banet, a pathologist affiliated with the Cleveland Clinic. The site focuses on her expertise in gynecologic and cytopathology, offering educational resources such as an online journal club and a mailing list for updates. The website targets medical professionals and students interested in pathology. Technically, the site is built with modern web standards, uses Google Fonts, and integrates lightweight analytics via Fathom, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though it lacks DNSSEC and security headers. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

S

Jobs that will help you level up | StartupJobs.com

startupjobs.com

7

StartupJobs.com is an online job platform specializing in connecting job seekers with startup companies. The website offers job listings tailored to the startup ecosystem, targeting individuals seeking employment opportunities in innovative and emerging companies. The platform positions itself as a niche job board within the technology sector, aiming to facilitate career growth for startup enthusiasts. Technically, the website leverages modern JavaScript frameworks such as Nuxt.js and integrates multiple third-party analytics and advertising tools including Google Tag Manager, Matomo Analytics, LinkedIn Insight Tag, and Broadstreet Ads. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation structure. However, the absence of visible privacy, cookie, and terms of service policies, as well as the lack of contact information, reduces its privacy compliance and business credibility scores. Security posture is weak due to missing security headers and unknown SSL configuration. The WHOIS data is unavailable, indicating either an unregistered domain or privacy protection, which raises concerns about domain legitimacy. Overall, the website is functional and relevant for its target audience but requires improvements in security, privacy compliance, and transparency to enhance trust and credibility.

H

Health Products Regulatory Authority

hpra.ie

73

The Health Products Regulatory Authority (HPRA) is the official Irish government agency responsible for regulating medicines, medical devices, and other health products in Ireland. The website provides comprehensive information about authorised and withdrawn medicines for human and animal use, safety notices, regulatory guidance, and public alerts. It serves healthcare professionals, manufacturers, distributors, and the general public, positioning itself as a trusted national regulatory authority. The site is well-branded, professionally designed, and consistent with government standards. Technically, the website is built on the Sitefinity CMS platform and employs modern web technologies including JavaScript libraries for lazy loading images and Google Tag Manager for analytics. CookiePro is used for consent management, indicating a mature approach to privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. From a security perspective, the site enforces HTTPS, uses standard security headers, and manages cookies with user consent. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit security policies and incident response contacts are not prominently published, which could be improved to enhance transparency and trust. Overall, the HPRA website demonstrates a strong security posture, excellent content quality, and good privacy compliance. The lack of WHOIS data limits domain registration trust analysis, but the official .ie domain and consistent content strongly support legitimacy. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing incident response contacts to further strengthen trust and compliance.

P

PC HELP, a.s.

qi-partner.cz

47

PC HELP, a.s. operates the website www.qi-partner.cz offering the QI ERP system, a modular business software solution tailored for companies of various sizes, primarily targeting the Czech market. The company provides a comprehensive suite of modules including firm management, project management, CRM, finance, production, services, and bond management. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses xartCMS and integrates common analytics and marketing tools such as Google Tag Manager and Seznam tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are missing and no explicit security policies are published. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and contact information support legitimacy. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security best practices and transparency.

P

PC HELP, a.s.

helios-servis.cz

46

PC HELP, a.s. operates the website www.helios-servis.cz, providing specialized ERP software solutions centered around the Helios Inuvio system for small and medium enterprises in the Czech Republic. The company offers a range of services including ERP implementation, supplementary plugins, training, and customer support, positioning itself as a trusted partner in the ERP software market. The website content is professionally presented, targeting business customers seeking tailored enterprise software solutions. Technically, the site is built on the xartCMS platform, utilizing modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good privacy compliance. Security-wise, the site enforces HTTPS and employs email obfuscation to reduce spam, but lacks visible security headers which could enhance protection. The absence of WHOIS data for the domain reduces trust in domain registration transparency, though the website content and contact information appear legitimate and consistent with a professional business. Overall, the site demonstrates a solid digital presence with room for improvement in security best practices and domain registration transparency.

A

Aula Angelini

aulaangelini.com

70

Aula Angelini is an online education platform focused on providing training and professional development for healthcare professionals in Spain. It operates under the Angelini Pharma group, offering a niche service in healthcare education. The website is well-branded and consistent, targeting healthcare professionals with relevant content and services. Technically, the site uses modern JavaScript libraries, a proprietary frontend framework, and integrates Piwik PRO for analytics and consent management. The platform employs secure authentication via Angelini ID, enhancing user security. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Testy

testy.cz

50

Testy.cz is a Czech website specializing in outdoor equipment and travel service reviews, operated by experienced tourists and contributors affiliated with Turistika.cz since 2008. The site offers over 400 tests and reviews covering a wide range of products including outdoor gear, clothing, maps, books, bicycles, cars, and travel services. The business model centers on content publishing targeting outdoor enthusiasts and travelers in the Czech Republic. Technically, the website is built on the Wix platform using Wix Thunderbolt framework and standard web technologies, providing a moderate performance and good mobile optimization. Security posture is basic with no advanced security headers detected and no visible privacy or cookie policies, which indicates room for improvement in compliance and security best practices. The domain WHOIS data is unavailable, which limits trust verification, but the website content and branding appear consistent and professional. Overall, the site is safe for general audiences and provides relevant, quality content in its niche.

České hory is a well-established Czech online platform operated by eProgress s.r.o. since 1999, specializing in providing comprehensive accommodation listings and tourism information for Czech mountain regions. The site emphasizes direct contact between guests and accommodation providers, offering commission-free booking options. It also provides additional services such as online cameras, weather updates, and last-minute offers, targeting tourists and visitors interested in Czech mountain vacations. The platform enjoys a strong market position with a large inventory of accommodations and a consistent brand presence. Technically, the website uses modern JavaScript and CSS frameworks, integrates Google Analytics and Tag Manager for tracking, and implements cookie consent mechanisms in compliance with GDPR. Security posture is adequate with HTTPS and CSRF tokens but lacks explicit security headers, suggesting room for improvement. Overall, the site is professional, user-friendly, and trustworthy, with no signs of adult or questionable content.

Temu operates as a large-scale e-commerce platform offering a wide variety of consumer products. The website analyzed is a security verification page designed to protect user accounts and transactions through multiple verification methods. The platform targets a general audience with a focus on secure online shopping experiences. Technically, the site employs modern web technologies such as React and Webpack, served via a CDN infrastructure, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and integrity checks on resources, although some security headers could be improved. Privacy and cookie policies are comprehensive and indicate GDPR compliance. However, the absence of WHOIS data and contact information on this page limits full trust assessment. Overall, the site demonstrates a mature digital presence with room for enhanced transparency and security documentation.

N

nanosilver

nanosilver.cz

64

The website nanosilver.cz operates as an e-commerce platform specializing in functional clothing embedded with silver molecules, targeting consumers interested in antibacterial and nanotechnology-enhanced apparel. The business appears to be a niche player within the Czech Republic retail sector, offering a range of products including clothing, sprays, and hygiene-related nanoparticle products. The site demonstrates a consistent brand presence with clear contact information and physical store location, supporting its legitimacy. From a technical perspective, the website employs modern JavaScript libraries such as Swiper.js for UI components, Google Tag Manager for analytics, and Facebook Pixel for marketing tracking. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. However, some improvements could be made in exposing security headers and implementing explicit cookie consent mechanisms to enhance privacy compliance. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact reduces transparency in security governance. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for small retail businesses. Overall, nanosilver.cz presents a professional and trustworthy online presence with moderate risk. Strategic enhancements in privacy compliance and security transparency would further strengthen its position.

C

Czech Republic

accu-chek.cz

64

The website www.accu-chek.cz serves as the Czech Republic regional portal for Accu-Chek, a well-known brand under Roche specializing in diabetes management products such as glucose monitoring systems and insulin pumps. The site provides product information, customer support, training resources, and links to an official e-shop. The business is positioned as an enterprise-level healthcare provider targeting patients with diabetes and healthcare professionals in the Czech market. Technically, the site is built on Drupal 10, employs modern web technologies, and includes cookie consent mechanisms to comply with privacy regulations. However, explicit privacy policy and terms of service pages were not detected in the provided content, which is a compliance gap. Security posture is generally good with HTTPS enforced, but lacks visible security headers and incident response contact details. WHOIS data is unavailable, limiting domain legitimacy verification, though branding and content strongly indicate a legitimate corporate site. Overall, the site is professional, safe, and well-structured but could improve transparency and security practices.

B

Barum

barum.cz

63

Barum is a well-established tire brand with a strong presence in the Czech Republic and other markets, operating under the Continental AG umbrella. The website serves as an official platform offering product information, tire guides, and dealer search functionalities targeting both consumers and commercial clients. The site is built on Adobe Experience Manager, indicating a mature digital infrastructure with modern web technologies and multi-language support. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit privacy and terms of service documentation. WHOIS data is unavailable, which slightly reduces transparency and trustworthiness. Overall, the website is professional and trustworthy but could improve compliance and contact transparency.

K

Domů • IDZK

koved.cz

44

The website www.idzk.cz represents Integrovaná doprava Zlínského kraje (IDZK), a regional integrated public transportation service provider in the Zlín region of the Czech Republic. The platform offers comprehensive services including bus and train schedule searches, fare and tariff information, a transport card system (Zetka), and an e-shop for related products. The site targets local citizens and travelers, aiming to simplify and improve regional mobility. The business model is focused on public transport integration and customer service facilitation, positioning IDZK as a key regional transportation entity. Technically, the website employs modern web technologies such as Google Web Fonts and JavaScript, with responsive design and good accessibility features. The site is served over HTTPS, ensuring secure communication. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature approach to privacy and data protection. However, no advanced security headers were detected, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with HTTPS and privacy compliance but lacks some best practices such as security headers and vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure appear professional and legitimate. No critical vulnerabilities or exposed sensitive data were found. Overall, the site is secure for general users but could improve transparency and security posture. The overall risk assessment is moderate with recommendations to enhance security headers, publish incident response contacts, and improve business contact transparency. The site is well-positioned in its market niche but should address WHOIS data gaps and security best practices to strengthen trust and compliance.

E

Elektrowin

elektrowin.cz

50

Elektrowin operates as a collective system focused on the responsible collection, recycling, and disposal of electronic waste in the Czech Republic. The company targets both individual consumers and businesses, providing comprehensive services to ensure sustainable management of end-of-life electrical equipment. Their market position is reinforced by partnerships with major manufacturers and membership in international organizations such as the WEEE Forum. The website reflects a professional and consistent brand image, emphasizing environmental responsibility and community engagement through educational projects. From a technical perspective, the website employs modern web technologies including jQuery, Google Tag Manager, and a robust cookie consent mechanism via CookieYes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of a published security policy or incident response contacts suggests room for improvement. The WHOIS data is notably absent, which impacts the domain trustworthiness assessment. Despite this, the website's content quality, clear contact information, and visible certifications such as ISO 27001 contribute positively to the overall credibility. No signs of adult or questionable content were detected, confirming the site is safe for general audiences. Overall, Elektrowin presents as a credible and professionally managed organization with a clear environmental mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and establishing formal vulnerability disclosure channels to further strengthen trust and compliance.

C

Czech Pedal Car

czechpedalcar.cz

56

Czech Pedal Car is a small manufacturing business based in the Czech Republic specializing in the production and sale of retro pedal car models and kits. Established since 2017, the company targets enthusiasts and collectors interested in nostalgic pedal cars. The website showcases their products through multimedia content including videos and media coverage, reinforcing their niche market presence. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery and Google Tag Manager for analytics. The site is mobile optimized and uses HTTPS with good SSL configuration, though it lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust verification, but the website content and external media references support its legitimacy. Overall, the site presents a professional and engaging user experience with moderate technical maturity and security posture.

R

Realita Music

realitamusic.cz

51

Realita Music is a small Czech music band with an official website built on the Wix platform. The site serves primarily as a promotional and informational portal for the band, targeting a general audience interested in their music and events. The website features basic content including band information and media, with a consistent branding approach and a professional design typical of Wix-built sites. Technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, with Google Adsense integrated for advertising. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, and WHOIS data is unavailable, likely due to privacy protection or domain status. Overall, the site is legitimate for a small music band but would benefit from enhanced security and compliance measures.

Moravia Events s.r.o. is a small regional sports and event agency based in the Czech Republic, specializing in organizing running and cycling events primarily in the Moravia region. The company offers event management services including chip timing and operates several sports projects and races. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at sports enthusiasts and families interested in regional sports events. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, Moment.js, and Swiper.js, with a focus on mobile responsiveness and user experience. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and policies are not evident. The domain registration data aligns well with the business information, supporting legitimacy. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and partner information.

B

Baxter

baxteritalia.it

69

Baxter Italia is a well-established healthcare company specializing in renal care, acute therapies, hospital care, nutritional care, and surgical care. The website reflects a mature digital presence with a focus on providing information and resources to both patients and healthcare professionals. The company maintains a strong market position with over 85 years of history globally and more than 45 years in Italy. The site uses modern technologies including Drupal 10 CMS and Brightcove video players, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's healthcare mission.

B

Baxter

baxter.it

47

Baxter is a premium Italian furniture manufacturer specializing in handcrafted leather sofas, armchairs, beds, chairs, and accessories. The company positions itself as a luxury brand emphasizing artisanal quality and unique design, targeting consumers and businesses seeking high-end Italian designer furniture. The website supports multiple languages, indicating a global market reach. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure CDN, and incorporates performance and user experience best practices including mobile optimization and SEO. Security-wise, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence with room for improvement in privacy and security transparency.

C

CPI Hotels, a.s.

clarioncongresshotelostrava.com

61

Clarion Congress Hotel Ostrava is a large, modern four-star hospitality business located in the Czech Republic, specializing in accommodation, congress and event hosting, wellness, and dining services. It is part of the CPI Hotels group and targets business travelers, conference delegates, and tourists. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript frameworks, analytics, and consent management tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers are missing and no explicit security policy is published. The absence of WHOIS data raises some legitimacy concerns but is mitigated by the professional business presence and affiliations. Overall, the site is trustworthy and well-maintained.

Z

Emil Zátopek Ostrava Golden Marathon

zatopekmaraton.cz

57

The Emil Zátopek Ostrava Golden Marathon website represents a professionally organized international marathon event held in Ostrava, Czech Republic, honoring the legendary athlete Emil Zátopek. The event offers multiple race categories including marathon, half-marathon, 10 km, and team races, targeting runners of all levels and athletics enthusiasts. The website is well-designed, mobile-optimized, and uses modern web technologies to provide an engaging user experience. It is supported by official city and regional partners, enhancing its credibility and market position. Technically, the site employs a modern tech stack including Bootstrap, Swiper, and animation libraries, ensuring good performance and responsiveness. However, there is a lack of visible security headers and privacy/cookie policies, which are areas for improvement. The site uses Plausible Analytics, a privacy-focused analytics tool, indicating some attention to user privacy. Contact information is clearly provided, but no forms collecting sensitive data are present on the main page. From a security perspective, the absence of WHOIS data raises some concerns about domain registration transparency, though the professional nature of the site and its partners mitigate this risk. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the site demonstrates a solid security posture but would benefit from enhanced privacy compliance and security header implementation. The overall risk is moderate with recommendations to improve privacy disclosures, implement security headers, and clarify domain registration details to enhance trust and compliance.

C

C4C group

c4c.com

53

The C4C group website presents a professional business offering strategic consulting, creative communication solutions, and custom web development services primarily targeting large companies, public institutions, and medium-sized enterprises in Germany. The site is built on TYPO3 CMS and integrates Cookiebot for GDPR-compliant cookie consent management. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and publicly available security policies or incident response contacts. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional website presence. Overall, the site is trustworthy and well-designed but would benefit from enhanced transparency and security disclosures.

The website www.oooojournal.net is an academic journal platform focused on oral surgery, oral medicine, oral pathology, and oral radiology, operating under the Elsevier brand. It serves healthcare professionals and researchers by providing access to scientific publications and research content. The site demonstrates a professional design and consistent branding aligned with Elsevier's standards. Technically, the site employs modern JavaScript frameworks, uses New Relic for performance monitoring, and integrates OneTrust for cookie consent, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies, which are recommended for improvement. The absence of WHOIS registration data for the domain is a notable discrepancy that impacts trustworthiness, suggesting either privacy protection or registration issues. Overall, the site is functional, compliant with GDPR, and safe for general audiences, but would benefit from enhanced transparency and security disclosures.

The International Journal of Gynecological Cancer website serves as a professional academic platform for disseminating research and journal content related to gynecological oncology. It is branded under Elsevier, a well-known global publisher in healthcare and scientific domains. The site targets medical researchers, healthcare professionals, and academic institutions, providing subscription-based access to scholarly articles and resources. The business model is focused on academic publishing and research dissemination within the healthcare sector. Technically, the website employs modern JavaScript frameworks and monitoring tools such as New Relic SPA, alongside compliance tools like OneTrust for cookie consent management. The site uses HTTPS and integrates Google Fonts and advertising scripts from Google DoubleClick, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses monitoring and consent management tools, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, although the website content and branding strongly associate with Elsevier. Overall, the website is professional, secure, and compliant with privacy regulations, but improvements are recommended in publishing security policies, incident response contacts, and enhancing security headers. The domain registration ambiguity warrants further investigation to ensure full trustworthiness.

P

Popup Maker LLC

popupmaker.com

67

Popup Maker LLC operates a mature and well-established SaaS platform specializing in popup marketing tools designed to increase website sales and subscriptions. The company offers a variety of popup types including subscription, exit intent, contact forms, countdowns, and social popups, targeting website owners, marketers, and eCommerce businesses. The website demonstrates a strong market position with over 20,000 clients and positive customer feedback. Technically, the site employs modern JavaScript libraries, integrates with major analytics and marketing platforms, and is hosted behind Cloudflare DNS, ensuring reliable performance and moderate speed. Security posture is solid with HTTPS enforced and domain locking, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

T

The Newsmast Foundation

channel.org

55

Channel.org is a media-focused platform operated by The Newsmast Foundation, providing tools for organisations and content creators to manage channels, content, and communities. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and performant user experience. The website is professionally designed with clear navigation and mobile optimization, targeting organisations and community managers in the media sector. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but aligns with the organization's non-commercial nature. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

G

GMX - kostenlose E-Mail-Adresse, FreeMail & Nachrichten

gmx.net

63

The website at https://www.gmx.net/consent-management/ appears to be part of the GMX brand, which is known for providing free email services and related digital products primarily in Germany. However, the analyzed page content is inaccessible, displaying an error message prompting users to reload the homepage. This indicates either a temporary issue or a content blocking mechanism. The technical infrastructure includes multiple JavaScript libraries focused on consent management and tracking, but no visible privacy or cookie policies are present on this page. The WHOIS data for the domain www.gmx.net is unavailable, with the query returning no match, which raises concerns about domain registration transparency or possible privacy protection. Overall, the site shows poor content quality and limited business information, impacting trust and credibility.

P

Pharmacie.lu

pharmacie.lu

57

Pharmacie.lu is a specialized healthcare information platform serving the Luxembourg community by providing comprehensive details about pharmacies, including on-call schedules, vaccination services, Covid testing, job offers, and pharmacy news. The website positions itself as a key national resource for pharmacy-related information, targeting residents seeking accessible and reliable pharmacy services. The business model revolves around being an authoritative directory and informational hub rather than a transactional platform. Technically, the website employs modern web technologies including JavaScript, CSS, and Google reCAPTCHA for form security, hosted under EuroDNS nameservers. The site is mobile-optimized with good navigation and professional design, though it lacks a known CMS and some advanced accessibility features. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is good with a clear privacy policy and cookie consent mechanism, though terms of service and incident response contacts are missing. Overall, the domain registration is consistent and trustworthy, with no suspicious indicators. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility and SEO further.

E

Etat luxembourgeois

public.lu

64

The website etat.public.lu serves as the official directory and portal for public administration websites of the Grand Duchy of Luxembourg. It provides comprehensive listings of ministries, administrations, public services, and related government portals. The site targets government agents, citizens, and professionals seeking official information and services. It also promotes Luxchat4Gov, a secure instant messaging platform for government employees. Technically, the site is built on Adobe Experience Manager, uses modern web standards, and is optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration insights, but the site’s branding and content strongly indicate legitimacy as a government resource. Overall, the site is professional, trustworthy, and well maintained.

F

Fórum dárců

donorsforum.cz

44

Fórum dárců is a well-established Czech non-profit organization acting as a national forum for donors, foundations, and charitable activities. The website provides extensive information about its members, projects, events, and related portals, positioning itself as a key player in the Czech charitable sector. Technically, the site uses modern web technologies including HTTPS, jQuery, FontAwesome, and Google Analytics, ensuring a functional and responsive user experience. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy verification. Security posture is generally good with HTTPS and no visible vulnerabilities, but the lack of security headers and explicit privacy/cookie policies indicates room for improvement. Overall, the site is professional, content-rich, and trustworthy from a business perspective, but would benefit from enhanced privacy compliance and domain registration transparency.

S

Sciencesconf

sciencesconf.org

60

Sciencesconf is a French academic platform dedicated to the management of scientific conferences, workshops, and colloquia. It offers a free, comprehensive toolset for organizers to create event websites, manage communications, organize peer reviews, and track registrations. The platform is well integrated with the HAL open archive, enhancing its utility for the research community. The website is professionally designed, multilingual, and targets academic organizers and researchers primarily in France. Technically, Sciencesconf is built on WordPress with modern SEO and analytics tools like Matomo, ensuring good digital maturity and privacy respect. Security posture is solid with HTTPS and secure forms, though some security headers and incident response details could be improved. Overall, the platform demonstrates high trustworthiness and professionalism, supported by its affiliation with the reputable CCSD and HAL organizations.