Security Directory

S

Stadt Zittau

zittau.de

58

The website zittau.de serves as the official digital presence of the city of Zittau, Germany. It provides comprehensive information and services related to tourism, culture, citizen services, education, and economic development. The site targets residents, tourists, and businesses within the Dreiländerregion, offering event calendars, administrative resources, and city news. The business model is that of a government portal, focusing on public service and information dissemination. Technically, the site is built on Drupal CMS, employs Matomo for privacy-respecting analytics, and uses modern web technologies such as FontAwesome and CookiesJSR for cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high given the official nature of the site and consistent branding. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional municipal website.

W

Warhorse Studios s.r.o.

warhorse.cz

57

Warhorse Studios s.r.o. is a Czech-based game development company established in 2011, specializing in creating meaningful games. The website presents a professional but basic digital presence with clear navigation and branding consistency. The company targets gamers and industry professionals, offering game development services and career opportunities. The technical infrastructure leverages OctoberCMS, jQuery, and slick carousel libraries, with Google Analytics and Tag Manager for tracking. Performance and mobile optimization are moderate, with room for improvement in SEO and accessibility. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating potential compliance gaps. No contact emails or phone numbers are directly provided, though social media links are present. Overall, the website is safe, legitimate, and moderately trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Cité Gestion

cite-gestion.com

58

Cité Gestion is a Swiss private bank specializing in personalized wealth management solutions for both Swiss and international clients. The bank emphasizes a unique business model that combines the security and regulatory compliance of a FINMA-regulated institution with the flexibility and independence of an agile private bank. With 15 years of experience and CHF 9.5 billion in assets under management, Cité Gestion positions itself as a trusted partner offering bespoke investment solutions and a high-quality operational infrastructure. The website reflects a professional and well-branded digital presence, supporting multiple languages and featuring multimedia content to engage its audience. Technically, the website employs a modern JavaScript technology stack including jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. However, some security headers are not visibly implemented, and no explicit terms of service or incident response policies are published, which could be improved. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates Google reCAPTCHA to protect forms. The absence of WHOIS registration data raises some concerns about domain registration transparency, although the website content and business information suggest legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and published security frameworks. The overall risk assessment indicates a professional and trustworthy financial institution with minor gaps in transparency and security documentation. Strategic recommendations include verifying domain registration details, publishing comprehensive security and incident response policies, and implementing additional security headers to strengthen protection and trust.

M

Mezzo Technologies

mezzotechnologies.com

53

Mezzo Technologies is a specialized engineering and manufacturing company focused on custom microtube heat exchangers designed for extreme performance in demanding industries such as aerospace, military, automotive racing, and modular nuclear applications. The company operates as a part of Signia Aerospace, leveraging a strong parent company relationship to enhance its market position. Their website reflects a mature business with detailed product offerings, clear market segmentation, and a professional digital presence. Technically, the site is built on WordPress with Elementor and includes modern SEO and analytics tools, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the business demonstrates high credibility and trustworthiness with no critical security issues detected.

International Water-Guard (IWG) is a Canadian-based company specializing in potable water treatment and distribution solutions for business and commercial aircraft. With over 30 years of industry experience, IWG positions itself as a leading provider of flight-certified water treatment units, pumps, heaters, and touchless lavatory technologies. The company targets aircraft manufacturers and operators seeking innovative and sustainable water management solutions to enhance passenger experience and comply with environmental standards. Technically, the website is built on a modern WordPress platform using Bootstrap and jQuery, with integrations such as Google Analytics and reCAPTCHA to support analytics and security. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be improved. The absence of explicit privacy and cookie policies suggests room for enhancement in compliance. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, which limits domain trust verification, but the website's certifications and social media presence support its legitimacy. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and compliance.

H

Hartzell Aviation

hartzellaviation.com

51

Hartzell Aviation is a prominent aviation company that unites leading general aviation manufacturers, suppliers, and service providers under a family of brands. With a rich heritage dating back to the Wright Brothers era and subsidiaries founded as early as 1917, the company focuses on innovation, quality, and performance in the general aviation sector. Their services span advanced aircraft propeller design, engine accessories, aerospace welding, and maintenance, repair, and overhaul (MRO) operations. The website reflects a professional and consistent brand image targeting aviation professionals and aircraft operators worldwide. Technically, the website is built on WordPress with modern plugins for SEO and analytics, hosted behind Cloudflare DNS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and DNSSEC implementation. The site uses HTTPS and has a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page was not found in the provided content. From a security perspective, the site benefits from HTTPS and domain transfer protection but could improve by enabling DNSSEC and adding security headers. No critical vulnerabilities or WAF blocks were detected. Contact information is clearly presented, including phone numbers and a contact form with anti-spam measures. Social media presence on major platforms adds to trustworthiness. Overall, Hartzell Aviation's website is a well-structured, professional platform that effectively communicates its business and brand values. Enhancements in privacy policy visibility and security headers would further strengthen its compliance and security posture.

Cleveland Wheel & Brake Systems is a globally recognized manufacturer specializing in aircraft braking products, systems, and services. As a part of Signia Aerospace, the company leverages over 85 years of industry experience to serve general aviation, turboprop, business jet, rotorcraft, and military markets. Their product portfolio includes wheel assemblies, brake assemblies, hydraulic components, and repair kits, supported by comprehensive technical publications and resources. The website reflects a professional and well-branded digital presence, targeting aerospace manufacturers, mechanics, and pilots.

B

Beey.io

beey.io

61

Beey.io is a technology-focused SaaS company specializing in automatic transcription and subtitle generation for audio and video content. The platform targets content creators, educators, and businesses seeking fast and affordable voice recognition services. The website presents a professional and consistent brand image with a clear focus on its core services. Technically, the site is built on WordPress using the Astra theme, integrating common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and performs moderately well, though some accessibility features are basic. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the domain WHOIS data is unavailable due to privacy protection, which is justified for this business type. The website is safe for general audiences and shows no signs of malicious or adult content.

U

Ultrō

ultro.fr

60

Ultrō is a French digital agency specializing in e-commerce, UX/UI design, and web development services. Established in 2009, the company supports businesses in defining digital strategies and implementing digital services. The website reflects a professional and modern digital presence with strong client trust signals, including high ratings on Sortlist and active social media engagement. Technically, the site is built on Webflow with modern JavaScript libraries such as GSAP and integrates privacy-conscious analytics tools like Fathom and Plausible. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. Overall, Ultrō presents a credible and trustworthy digital agency profile with a well-optimized and user-friendly website.

C

Citizen

citizen.com

66

Citizen operates a personal safety network platform that provides real-time 911 alerts, live incident broadcasts, and safety tracking for individuals and communities. The company leverages a mobile app-based business model with premium subscription services to enhance personal security. Positioned as a leader in community safety technology, Citizen serves a broad audience seeking timely and actionable safety information. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Google Cloud infrastructure, and integrates analytics and monitoring tools for performance and error tracking. Security posture is strong with HTTPS enforcement and domain protections, though DNSSEC is not enabled and explicit security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Citizen demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its market niche.

G

Groupe TF1

tf1.fr

63

TF1 is a leading French media group offering a broad range of entertainment content including series, films, and live TV streaming through its TF1+ platform. The website is professionally designed with excellent content quality and user experience, targeting a general audience with free and premium subscription models. Technically, the site leverages modern frameworks such as Next.js and Tailwind CSS, integrates advanced analytics and marketing tools, and maintains strong SEO and accessibility standards. Security posture is robust with HTTPS, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with detailed policies and consent mechanisms aligned with GDPR. Overall, TF1's digital presence reflects a mature, trustworthy, and secure media platform.

F

Fourthwall, Inc.

fourthwall.com

67

Fourthwall, Inc. is a technology company providing an all-in-one creator business platform that enables digital creators to launch branded shops, memberships, and homepages. The platform targets a broad audience of creators including YouTubers, Twitch streamers, TikTokers, musicians, podcasters, comedians, and businesses, positioning itself as a comprehensive solution for creator monetization and brand building. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on Webflow CMS, uses Google Analytics, Google Tag Manager, reCAPTCHA, and AdRoll for marketing and tracking, and is hosted likely on Webflow infrastructure with DNS managed by Google Domains. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and domain registration protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

E

Equinox

equinox.com

74

Equinox is a premium luxury fitness and wellness brand offering a comprehensive range of services including personal training, group fitness classes, Pilates, and spa amenities. The website reflects a high level of professionalism and targets affluent consumers seeking a lifestyle-oriented fitness experience. The technical infrastructure is modern, leveraging React and Next.js frameworks, with integrations for marketing and analytics tools such as Adobe Launch, Optimizely, and Facebook Pixel. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is noted but does not detract significantly from the overall legitimacy given the brand's strong external presence and professional web implementation.

Channel 4 Sales operates as the advertising sales arm of Channel Four Television Corporation, providing a comprehensive suite of advertising solutions across TV, video on demand, social media, and digital platforms. The company targets advertisers and brands aiming to reach UK audiences, leveraging Channel 4's strong market presence and partnerships with UKTV and Warner Bros. Discovery. Their services include sponsorship packages, branded entertainment, and retail advertising, positioning them as a key player in the UK media advertising sector. Technically, the website is built on a modern stack using React and Next.js, optimized for performance and mobile responsiveness. The site features rich multimedia content including videos hosted on Brightcove, and integrates social media channels effectively. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of explicit security headers and a published security or incident response policy indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain legitimacy, although the website's branding and external links strongly associate it with Channel 4. Overall, the security posture is good but could be enhanced with additional transparency and controls. Strategically, the site is well positioned to serve its target market but should address the WHOIS transparency issue and improve security disclosures to strengthen trust and compliance. Continued investment in security best practices and privacy compliance will support long-term business credibility and operational resilience.

The website bokvaj.cz is currently inaccessible, presenting a 403 Forbidden error page indicating restricted access or missing index document. The domain is long-established since 2002 and hosted by web4u.cz, consistent with the WHOIS data. No business content, policies, or interactive elements are available for analysis. The technical infrastructure is based on Apache 2.4.56 and PHP 7.2, which is somewhat outdated. Security posture is weak due to lack of visible security headers and no HTTPS confirmation. Overall, the site is effectively blocked, limiting any meaningful content or security evaluation.

Global Access is a professional B2B company specializing in global eCommerce and logistics solutions, helping businesses expand into over 200 countries and territories. The company offers comprehensive services including end-to-end commerce solutions, direct sales logistics, localization, payment, and shipping options. Their market position is strong with over two decades of experience and a broad partner ecosystem. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Analytics and reCAPTCHA for analytics and security. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is adequate with HTTPS and reCAPTCHA but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is incomplete, which slightly reduces trustworthiness. Overall, the website is professional and credible but could improve transparency and security practices.

B

Blažek

blazek.sk

53

Blažek is a well-established Czech and Slovak menswear brand specializing in formal and casual men's clothing and accessories. The company operates a professional e-commerce platform complemented by physical stores and bespoke tailoring services. Their market position is strong within the regional retail sector, targeting fashion-conscious men seeking quality apparel and accessories. The website reflects a mature digital presence with modern technologies such as Google Analytics, Facebook Pixel, and various UI libraries enhancing user experience and marketing capabilities. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Basecom

basecom.co

54

Basecom is a specialized B2B SaaS website design agency focused on creating conversion rate optimized websites that help SaaS companies double their revenue. Their market position is that of a niche agency delivering CRO-driven, visually stunning, and SEO-friendly websites. The company leverages modern web technologies such as Webflow, Lottie animations, and integrates analytics tools like Microsoft Clarity and Google Tag Manager to provide a high-quality digital experience. The website is well-designed, mobile-optimized, and professional, reflecting a mature digital presence for a small agency. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal privacy compliance documentation. Overall, the domain WHOIS data is privacy protected, which is typical for small agencies, and no suspicious patterns were detected. Strategic recommendations include adding privacy and cookie policies, security headers, and explicit contact information to enhance trust and compliance.

F

Festina

festina.cz

46

Festina.cz is the official Czech Republic distributor and retailer of Festina brand watches, offering a wide range of products including men's, women's, and children's watches, as well as smartwatches and chronographs. The website presents a professional and consistent brand image with detailed product collections and authorized dealer information. Technically, the site is built on a commercial CMS (Incomedia WebSite X5 Pro) with modern JavaScript libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is safe, trustworthy, and suitable for general audiences, but could improve privacy compliance and contact transparency.

M

McDonald's Česká republika

mcdonalds.cz

70

McDonald's Česká republika operates a comprehensive and professionally designed website serving as the official portal for the brand in the Czech Republic. The site offers detailed information about their menu, promotions, McCafé products, Happy Meal offerings, and delivery services. It targets a broad general audience including families and fast food consumers, positioning itself as a leading quick service restaurant in the region. The business model focuses on retail food services supported by digital engagement through a mobile app and online coupons. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare Insights for performance and analytics. The site is well optimized for mobile devices, features fast loading times, and includes accessibility considerations. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. While explicit security headers are not fully confirmed in the HTML, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is attributed to privacy protection policies common in the region and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance trust and transparency.

F

Floorbee - Floorbee - Popular floorball equipment

floorbee.com

60

Floorbee is an e-commerce retailer specializing in floorball equipment, offering a range of products including sticks, goalie gear, blades, balls, bags, goals, jerseys, field equipment, and accessories. The website targets floorball players and enthusiasts, positioning itself as a niche market player with a focus on quality and design. The site supports multiple languages, enhancing accessibility for a broader audience. Technically, the website employs Google Tag Manager and Google Analytics for tracking and uses Google Fonts for typography. The design is professional with good navigation and mobile optimization, though accessibility features are basic. Security posture is moderate but lacks visible security headers and privacy policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and social media presence appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

SABE, spol. s r.o.

sabe.cz

48

SABE, spol. s r.o. is a well-established Czech company specializing in the manufacture and sale of sports trophies, medals, plaques, and other awards, alongside office supplies and printing services. With a history dating back to 1990 and six physical stores across major Czech cities, the company holds a solid regional market position. Their website reflects a professional retail and manufacturing business model targeting general consumers and organizations requiring trophies and office products. Technically, the website employs modern web standards with responsive design and integrates Google Analytics for visitor insights. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates good GDPR compliance. Security-wise, the site enforces HTTPS but lacks advanced security headers and formal incident response disclosures, suggesting room for improvement. Overall, the website is trustworthy, content-rich, and professionally maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen the security posture and trust further.

N

NECY s.r.o.

eflorbal.cz

64

eFlorbal.cz is a specialized Czech e-commerce retailer focused on floorball equipment, operating since 2003 under the company NECY s.r.o. The website offers a wide range of products including floorball sticks, blades, goalkeeper equipment, bags, balls, and accessories from well-known brands. The company emphasizes product testing and customer education through its own floorball court and blog content. Technically, the site uses modern web technologies including jQuery, Google Fonts, and integrates multiple analytics and advertising tools such as Microsoft Clarity, Bing Ads, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS and secure forms, though it lacks some advanced security headers and formal incident response disclosures. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the site presents a trustworthy and user-friendly shopping experience for floorball enthusiasts.

A

Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.)

sportujveskole.cz

49

Sportuj ve škole is a Czech Republic-based non-profit project managed by the Association of School Sports Clubs of the Czech Republic (AŠSK ČR z.s.) aimed at promoting physical activity among primary school children. The project offers free weekly sports lessons during school aftercare, focusing on popular sports such as basketball, volleyball, football, handball, and floorball. It enjoys partnerships with notable organizations including Sportisimo and the Ministry of Education, enhancing its credibility and reach. The website is well-structured, mobile responsive, and provides clear contact information and testimonials, supporting its trustworthiness. Technically, the website employs modern web technologies including Bootstrap 4, jQuery, FontAwesome 5, and Owl Carousel, ensuring a good user experience across devices. The site uses HTTPS with a presumably strong SSL configuration, though lacks some advanced security headers and a security.txt file. Cookie consent mechanisms are implemented, reflecting GDPR compliance awareness. However, the absence of WHOIS data limits domain trust verification, which is a moderate concern. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected in the content. Privacy compliance is supported by a privacy policy document and cookie consent, but explicit incident response or security policies are not found. The website content is safe for general audiences, focusing on children's sports and education without any adult or explicit material. Overall, the project appears legitimate and professionally managed, though improvements in security headers, WHOIS transparency, and formal security policies would enhance trust and compliance. The site scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in a solid overall AI score of 78.

A

Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.)

letnikempyassk.cz

48

The website represents the Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.) and its Letní kempy AŠSK project, a government-funded non-profit initiative focused on providing summer educational camps to children in the Czech Republic. The project aims to mitigate educational disruption caused by the COVID-19 pandemic by offering popular-educational and physical activities to support children's learning and social development. The website is well-structured, professionally designed, and provides clear information about the project, partners, and contact details. Technically, it uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, ensuring good mobile responsiveness and user experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers or published security policies. WHOIS data is unavailable, which limits domain legitimacy verification, but the presence of government funding and partner references supports trust. Overall, the site is a credible educational resource with room for improvement in security transparency and WHOIS data availability.

M

McDonald’s ČR spol. s r. o.

mcdonaldscup.cz

67

McDonald’s Cup is a well-established youth football tournament in the Czech Republic, targeting children aged 6-11 years from elementary schools. The website serves as an information and registration portal for schools, organizers, and participants, supported by strong partnerships with McDonald’s, the Czech Football Association, UEFA Grassroots, and government bodies. The site features rich multimedia content, event updates, and training resources, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking, alongside a cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant. However, the absence of WHOIS data reduces transparency and trust slightly. Overall, the site is professional, user-friendly, and trustworthy for its audience.

Č

Český svaz plaveckých sportů

czechswimming.cz

54

The Czech Swimming Federation (ČSPS) operates as the national governing body for swimming sports in the Czech Republic, managing multiple aquatic disciplines and providing organizational, informational, and athlete support services. The website serves as a central hub for news, event results, and federation documentation, targeting athletes, coaches, clubs, and swimming enthusiasts. It holds a strong market position as the authoritative entity for swimming sports nationally. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap. While functional and moderately optimized for mobile, it uses some legacy JavaScript libraries that may pose security risks. The site employs HTTPS and integrates Google Analytics for user tracking, with a cookie consent mechanism in place, reflecting basic GDPR compliance. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible HTTP security headers and explicit incident response or security policies. No critical vulnerabilities or blocking mechanisms were detected, but updating legacy libraries and enhancing security headers would improve posture. The WHOIS data is consistent and transparent, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and serves its audience well, though improvements in security practices and contact transparency are recommended to strengthen compliance and user trust.

I

International School Sport Federation

isfsports.org

57

The International School Sport Federation (ISF) operates as a global non-profit organization dedicated to promoting school sports and organizing international school sports events. The website reflects a professional and well-structured digital presence, leveraging Drupal 9 CMS and modern web technologies. The organization maintains active social media channels and provides event information and registration through partner domains. Technically, the website is well-implemented with HTTPS, standard security practices, and moderate performance. However, explicit privacy policies, terms of service, and contact information are not prominently available, which could be improved for better transparency and compliance. The WHOIS data is unavailable or protected, which is common for non-profit organizations but limits domain trust analysis. Overall, the website is trustworthy, safe, and serves its educational and sports community effectively.

S

SPORTISIMO s. r. o.

sportisimopro.cz

61

Sportisimopro.cz is a Czech-based e-commerce platform specializing in sports equipment and apparel, catering primarily to sports teams and enthusiasts. The website offers a broad range of products including team kits, football gear, and custom printing services, positioning itself as a key player in the regional sports retail market. The company behind the site is SPORTISIMO s. r. o., a medium-sized retail entity with a consistent and professional online presence. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and a GDPR-compliant consent management system (Didomi). The site is responsive and optimized for mobile devices, with good SEO and accessibility basics. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes standard security headers, though it could enhance its security posture by adding Content-Security-Policy headers and conducting regular audits of third-party scripts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies and an active consent mechanism. Overall, the website presents a low-risk profile with strong business credibility and compliance. The lack of public WHOIS data suggests privacy protection, which is common and justified for commercial retail sites. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining vigilance on third-party scripts to sustain a secure and trustworthy online presence.

E

EuroAgentur

eahotellipno.cz

52

EA Hotel Lipno near Cerna v Posumavi is a hospitality business operating a hotel near Lipno lake in the Czech Republic, offering accommodation, conference facilities, restaurant, and leisure services. The website is professionally designed with clear navigation and integrated booking functionality, targeting tourists and business travelers. The parent company is EuroAgentur, a known operator in the hospitality sector. Technically, the site uses an older jQuery version alongside Bootstrap and jQuery UI, with Google Analytics and CookieScript for tracking and consent management. Security posture is moderate with HTTPS enabled but lacking some modern security headers and using outdated libraries. Privacy compliance is good with a cookie consent banner and policy in place. WHOIS data is missing, likely due to privacy protection, which reduces transparency but is common in this sector. Overall, the site is functional, trustworthy, and business-appropriate but could improve security and transparency.

E

EuroAgentur

hotelhajenka.cz

51

EA Mountain hotel Hajenka is a small hospitality business located in the Šumava region of the Czech Republic, offering mountain hotel accommodation, wellness, dining, and event services. The website is professionally designed with multilingual support and integrates a third-party booking system. The technical infrastructure relies on established but somewhat dated technologies including jQuery 1.12.4 and Bootstrap, managed via the Topinfo CMS platform. Security posture is generally good with HTTPS enforced and a comprehensive cookie consent mechanism, though improvements are recommended in security headers and updating legacy libraries. The absence of WHOIS data limits domain trust verification but the overall digital presence and business information indicate a legitimate and trustworthy operation. Strategic recommendations include enhancing security headers, updating JavaScript libraries, and publishing explicit security and incident response policies.

E

EuroAgentur

apartmanynafilipce.cz

51

EA Apartments Na Filipce is a small hospitality business operating mountain apartments in the Sumava Mountains, Czech Republic. The company is part of EuroAgentur, a hospitality group, and offers accommodation, wellness, restaurant services, and special offers with an integrated online booking system. The website is professionally designed with clear navigation and multilingual support, targeting tourists seeking mountain lodging. Technically, the site uses Topinfo CMS with jQuery, Bootstrap, and Google services for analytics and advertising. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks some security headers and uses an outdated jQuery version. WHOIS data is unavailable, likely due to privacy protection, but the website content and branding indicate legitimacy. Overall, the site is functional and trustworthy with room for security and compliance improvements.

P

Pražský hrad

hrad.cz

70

The website www.hrad.cz serves as the official digital presence of the Office of the President of the Czech Republic, providing authoritative information, news, and cultural content related to the presidency and Prague Castle. It targets the general public, media, and visitors, offering comprehensive resources including press releases, event information, and contact avenues. The site is well-branded and professionally maintained, reflecting its governmental status. Technically, the site employs modern web technologies including Google Tag Manager for analytics, Cloudflare for performance and security, and is optimized for mobile devices with responsive design. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to user privacy and compliance with GDPR. The site is served over HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent management. However, explicit security headers and a public security policy or vulnerability disclosure page are not evident, representing areas for improvement. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent, given the official nature of the site. Overall, www.hrad.cz is a trustworthy, well-maintained government website with strong content quality and technical implementation. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clearer contact information for security incidents to further strengthen trust and compliance.

Č

Česká asociace akademických technických sportů

caats.cz

40

Česká asociace akademických technických sportů (ČAATS) is a Czech non-profit association dedicated to organizing and promoting academic technical sports events and competitions. The website serves as a portal for event announcements, results, official documents, and partnership information, targeting academic institutions, students, and sports organizations within the Czech Republic. The association maintains partnerships with several national and international sports bodies, enhancing its credibility and reach. Technically, the website is built on WordPress 5.6.14, utilizing modern web technologies such as jQuery, Fancybox, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility improvements could be made. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers. There is no visible privacy or cookie policy, which impacts compliance with GDPR and related regulations. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and partnerships suggest a legitimate organization. Overall, the site is functional and professional but would benefit from enhanced security practices, explicit privacy compliance documentation, and verification of domain registration details to improve trust and compliance.

M

Mammut ANZ

mammut1862.com.au

66

Mammut ANZ operates a professional e-commerce website focused on retailing Mammut outdoor equipment and apparel in Australia and New Zealand. The site leverages Shopify as its platform, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The business targets outdoor enthusiasts with a comprehensive product catalog including avalanche safety gear, climbing equipment, and hiking apparel. The website demonstrates good branding consistency and content quality, with a clear focus on customer engagement through warranty forms and social media links. Technically, the site is well-structured, mobile-optimized, and uses modern web technologies, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, but explicit security headers and policies are not fully implemented. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy and professionally maintained, suitable for its retail purpose.

G

Gabia C&S

mammut.kr

64

The website mammut.kr serves as the official online store for the Mammut brand in Korea, a premium Swiss outdoor apparel and equipment company with a long heritage of 160 years. The site targets outdoor enthusiasts and climbers, offering a range of products including climbing gear, apparel, and accessories. The business operates primarily as an e-commerce retailer leveraging the Cafe24 platform, a popular Korean e-commerce solution. The domain is well-established, registered since 2009, and the WHOIS data aligns with the business's Korean presence and branding. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Vimeo for video content. It is hosted on Cafe24 infrastructure and uses HTTPS with good security headers, although DNSSEC is not implemented. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, explicit privacy, cookie, and security policies are not prominently found, which is a compliance gap. From a security perspective, the site enforces HTTPS and has domain transfer protections. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analysis. The site uses tracking and marketing tools moderately, with standard analytics and retargeting pixels. Overall, the security posture is solid but could be improved by adding DNSSEC and publishing clear security and privacy policies. The overall risk assessment is low, with the site appearing legitimate, professionally managed, and secure for users. Strategic recommendations include enhancing privacy compliance, implementing DNSSEC, and publishing incident response and security policies to further build trust and meet regulatory requirements.

M

Mammut

mammut.tw

45

Mammut Taiwan operates an official brand website offering a comprehensive range of outdoor apparel, footwear, bags, and climbing equipment. The site targets outdoor enthusiasts and mountain sports lovers in Taiwan, providing product information, multimedia content, and links to official e-commerce platforms. The brand leverages its Swiss heritage and global reputation to position itself as a premium outdoor retailer in the local market. Technically, the website uses established JavaScript libraries and Google tracking tools, indicating moderate digital maturity and integration with marketing analytics. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is professional, trustworthy, and well-branded, though improvements in privacy and security transparency are recommended.

I

International Federation of Mountain Guides Associations

ifmga.info

52

The International Federation of Mountain Guides Associations (IFMGA) is a globally recognized non-profit federation that represents professional mountain guides and coordinates national member associations. The organization focuses on maintaining high standards in training, certification, and safety for mountain guides worldwide. Their website reflects a professional and consistent brand presence, targeting professional guides and related stakeholders. Technically, the site is built on Joomla CMS with modern frontend technologies and is hosted via GoDaddy. The site is responsive and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and formal privacy and cookie policies, which are compliance gaps. No signs of blocking or WAF interference were detected, and the domain registration is consistent and legitimate. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and DNS security.

O

Orthopädie Sonnenhof KLG

orthopaediesonnenhof.ch

58

Orthopädie Sonnenhof KLG is a specialized healthcare provider based in Switzerland, focusing on orthopedics and sports medicine. The website presents a comprehensive range of orthopedic services including spine surgery, hand surgery, pediatric orthopedics, and more. It maintains a strong regional presence with partnerships such as the Lindenhofgruppe and Spitalzentrum Biel. The site is built on TYPO3 CMS and integrates modern tracking and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and well-structured, serving patients and healthcare professionals effectively.

P

POMOCA

pomoca.com

48

POMOCA is a Swiss-based manufacturer specializing in ski touring skins, founded in 1933 and positioned as a world leader in its niche. The company offers a range of products including ski skins, accessories, and attachment systems, targeting ski touring enthusiasts and retailers globally. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and privacy policies in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract significantly from the overall legitimacy given the business history and content quality. Overall, the website is well-structured, secure, and compliant, serving its business purpose effectively.

N

NORQAIN

norqain.com

69

NORQAIN is an independent Swiss watch brand established in 2018, specializing in luxury Swiss made watches and related merchandise. The company operates a professional e-commerce platform powered by Shopify, targeting watch enthusiasts and outdoor explorers. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS, clientTransferProhibited domain status, and form protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-positioned in its niche market.

A

ANDERMATTERS

andermatters.ch

58

ANDERMATTERS is a Swiss-based small business specializing in guided outdoor activities and experiences in the Andermatt region, focusing on winter sports such as skiing, freeride, ski touring, and avalanche training, as well as summer climbing and glacier trekking. The company maintains partnerships with reputable brands like Mammut and Norqain, enhancing its market credibility. The website is professionally designed using Drupal 9, featuring good mobile optimization, accessibility, and clear navigation. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and a granular cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

Z

Zermatters Events

zermattersevents.ch

62

Zermatters Events is a specialized event management company based in Zermatt, Switzerland, focusing on MICE (Meetings, Incentives, Conventions & Events) services. The company leverages a strong local network and personal engagement to deliver memorable events in the Walliser mountain region. Their website, built on the Wix platform, presents a professional and consistent brand image targeting event organizers and clients seeking local expertise. The business operates in the hospitality sector with a small company size profile. Technically, the website uses Wix's proprietary frameworks and scripts, ensuring moderate performance and good mobile optimization. However, SEO and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Privacy compliance is partial, with no visible privacy policy or terms of service, which should be addressed to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

ZERMATTERS

zermatters.ch

49

ZERMATTERS is a Swiss-based mountain guide office and ski school located in Zermatt, offering professional guided skiing, hiking, biking, climbing, and mountain tours year-round. The company holds recognized certifications such as IFMGA mountain guides and is an official Swiss Ski School, positioning itself as a trusted local expert in alpine outdoor activities. Their website is well-designed, mobile-optimized, and provides clear information about services, events, and booking options, targeting outdoor enthusiasts and tourists seeking expert guidance in the Swiss Alps. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Google Tag Manager with privacy-conscious configurations. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. Social media integration and partner links enhance their digital presence. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as anonymized analytics and consent management but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, ZERMATTERS presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and header configurations would further enhance their security posture and trustworthiness.

Dětská hřiště is a Czech-based e-commerce retailer specializing in children's playground equipment, including complete playgrounds, modules, and accessories. The website targets parents and municipalities looking for quality, safe, and entertaining playground solutions. The business appears established with over 15 years of experience and a solid customer base. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook SDK. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enabled and secure login forms, though some improvements like adding security headers and updating libraries are recommended. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data limits domain trust assessment, but the website content and business presence suggest legitimacy.

P

Privacy service provided by Withheld for Privacy ehf

crucials.io

46

Crucials is a newly launched SaaS company founded in 2024, offering an all-in-one suite of over 30 integrated apps designed to enhance BigCommerce stores by boosting sales and improving customer experience. The company targets e-commerce businesses using the BigCommerce platform, positioning itself as a comprehensive toolkit to streamline store management and growth. The website is professionally designed, mobile-optimized, and uses modern technologies including Unicorn Platform, Intercom for customer engagement, and Facebook Pixel for marketing analytics. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy and terms policies are present and GDPR compliance is indicated, but no cookie consent mechanism is implemented despite tracking pixels. Contact information is limited to a physical address in Hanoi, Vietnam, and an Intercom chat interface, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security headers and privacy transparency.

N

Nineteen Group

emergencytechshow.com

73

The Emergency Tech Show 2025 website serves as a professional platform showcasing technology innovation for emergency services in the UK. It targets emergency services professionals, government officials, and industry stakeholders, offering event registration, exhibitor information, and content programming. The site is well-branded and co-located with the established Emergency Services Show, indicating a strong market position within the emergency services event sector. Technically, the site employs modern JavaScript libraries and integrates multiple marketing and analytics tools, including HubSpot, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, reflecting a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security best practices.

E

Emergency Services Times

emergencyservicestimes.com

66

Emergency Services Times (EST) is a well-established UK-based media publication dedicated to the emergency services sector, providing news, reports, webinars, and podcasts tailored for professionals in the blue light and emergency services community. The website demonstrates a solid market position as a leading information resource with nearly 25 years of history, supported by a parent company, Nineteen Group. The target audience includes emergency service professionals, government agencies, and technology providers in the sector. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on SiteGround. It uses standard web technologies including jQuery, Swiper.js, and integrates analytics and marketing tools like Google Analytics and HubSpot. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and advanced HTTP security headers. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. However, no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with GDPR, with minor technical and security improvements recommended to enhance DNS security and security headers. No content safety concerns are identified.

M

MIRAMO spol. s r.o.

floreon.cz

43

Floreon+ Web is a specialized environmental and geospatial data visualization platform operated by MIRAMO spol. s r.o., a Czech Republic based company. The platform offers interactive mapping services with layers including floods, air pollution, traffic, and landslides, targeting environmental researchers, government agencies, and the general public interested in environmental data. The website leverages modern web technologies such as React and OpenLayers to deliver a dynamic and interactive user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS usage but missing key security headers and vulnerability disclosures. Overall, the site is professionally designed and functional but would benefit from enhanced privacy compliance and security best practices.