Security Directory

M

Městský úřad Šumperk

sumperk.cz

63

The website www.sumperk.cz serves as the official municipal portal for the city of Šumperk in the Czech Republic. It provides comprehensive information including municipal news, event calendars, public notices, and citizen services. The site targets residents and visitors, offering easy access to government contacts, forms, and local updates. The business model is that of a government service portal, positioning itself as a trusted source for local governance and community engagement. The site is well-branded and consistent with municipal identity. Technically, the website is built on the Public4u CMS platform and utilizes common web technologies such as jQuery and JavaScript. It is served over HTTPS, ensuring secure communication. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR requirements. No incident response or vulnerability disclosure information is available, which could be enhanced to improve security posture. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. The absence of WHOIS data for the domain is a concern that slightly impacts trustworthiness, suggesting the need for external verification of domain registration. Strategic recommendations include implementing additional security headers, publishing security policies, and verifying domain registration details to strengthen legitimacy and trust.

M

Město Židlochovice

zidlochovice.cz

57

Město Židlochovice operates an official municipal website serving residents and visitors with comprehensive information about local government services, news, events, and community resources. The site is positioned as a trusted local government portal with clear contact details and official branding. Technically, the website uses a CMS named Public4u, integrates jQuery libraries, and employs Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The absence of WHOIS data limits domain registration trust analysis, though the website content and contact information strongly support legitimacy. Overall, the site is safe, professional, and serves its public service mission effectively.

M

Městský úřad Moravská Třebová

moravskatrebova.cz

57

Moravská Třebová's official municipal website serves as a comprehensive portal for residents, tourists, and citizens, providing timely news, event calendars, public notices, and essential contact information. The site is positioned as a local government authority platform, focusing on public service delivery and community engagement. It offers multilingual support with Czech as the primary language and English and German alternatives, enhancing accessibility for international visitors. The business model is centered on government service provision without commercial intent. Technically, the website is built on the Public4u CMS platform, utilizing jQuery and JavaScript libraries for interactive features. While the site employs HTTPS and includes a cookie consent mechanism, it lacks advanced security headers and comprehensive privacy documentation. Performance and mobile optimization are moderate, indicating room for technical enhancements to improve user experience and accessibility. From a security perspective, the site demonstrates basic best practices such as HTTPS and cookie consent but misses critical security headers and explicit privacy policies. No vulnerabilities or malicious content were detected, and the site maintains a trustworthy presence with official contact details and social media links. The absence of WHOIS data is typical for Czech domains and does not detract from the site's legitimacy. Overall, the website presents a solid foundation for municipal digital presence but would benefit from enhanced security measures, privacy transparency, and technical modernization to align with best practices and regulatory compliance.

M

Město Velká Bystřice

velkabystrice.cz

56

Město Velká Bystřice operates an official municipal website serving residents and visitors with local government information, news, events, and public services. The site is positioned as a local government authority portal providing essential community updates and cultural information. The target audience is primarily local citizens and visitors interested in municipal affairs and events. Technically, the website uses the Public4u CMS platform with jQuery and related JavaScript libraries. It is served over HTTPS and includes cookie consent mechanisms, indicating a moderate level of digital maturity. The site is mobile optimized and offers a clear navigation structure, though accessibility features are basic. From a security perspective, the website enforces HTTPS and uses Google Tag Manager for analytics. However, no explicit security headers were detected, and there are no dedicated security or incident response policy pages. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and contact information appear legitimate and consistent with a municipal government entity. Overall, the website presents a good user experience and trustworthy content but would benefit from enhanced security headers, transparent domain registration data, and explicit security policies to improve its security posture and compliance.

M

Městský úřad Jindřichův Hradec

jh.cz

61

The website www.jh.cz serves as the official online presence of the city and municipal office of Jindřichův Hradec in the Czech Republic. It provides comprehensive information about city services, cultural events, administrative procedures, and tourist information. The site targets local citizens and visitors, offering key services such as document access, online office services, and event calendars. The business model is public sector focused, aiming to facilitate communication and service delivery between the city administration and its stakeholders. Technically, the website is built on the Public4u CMS platform, utilizing standard web technologies including jQuery and Google Analytics for traffic monitoring. The site is well-structured, mobile-optimized, and includes accessibility features, although some improvements could be made. Performance is moderate, with a good SEO setup and proper meta tags. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a good baseline security posture. However, it lacks visible advanced security headers, a formal security policy, and incident response information. The absence of WHOIS data for the domain is a notable concern, limiting full trust verification. No vulnerabilities or sensitive data exposures were detected in the content. Overall, the website is a professional and trustworthy municipal portal with good content quality and user experience. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and resolving the WHOIS data absence to improve domain legitimacy and trust.

M

Město Kuřim

kurim.cz

61

Město Kuřim is the official municipal government website for the city of Kuřim in the Czech Republic, serving approximately 10,675 residents. The site functions as a central hub for public administration, providing citizens with access to services such as contact information, official announcements, event calendars, social services, waste management, and cultural activities. The website is well-structured, primarily in Czech, and targets local residents and visitors seeking municipal information. Technically, the website employs a modern JavaScript stack including jQuery, jQuery UI, and Swiper.js, and is built on the Public4u CMS platform. It uses HTTPS with a good SSL configuration and integrates Google Tag Manager for analytics and tracking. Accessibility features such as a voice assistant are implemented, enhancing usability for diverse users. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and does not provide visible security policies or vulnerability disclosure mechanisms. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy and ownership, which is a notable concern. Cookie consent mechanisms are present, indicating some level of privacy compliance. Overall, the website is a credible and functional municipal portal with good content quality and technical implementation. The main risk lies in the missing WHOIS data and limited visible security policies. Strategic improvements in security headers, transparency of security practices, and domain registration verification are recommended to enhance trust and compliance.

I

Informační centrum Šumperk

infosumperk.cz

60

The website www.infosumperk.cz serves as the official information and tourism center portal for the Šumperk region in the Czech Republic. It provides comprehensive local content including event calendars, cultural news, tourism tips, and business directories aimed at residents and visitors. The site is positioned as a regional government-affiliated platform promoting local culture and tourism. Technically, the site uses a Public4u CMS with common JavaScript libraries such as jQuery and Leaflet for interactive maps, and includes a Google Translate widget for multilingual support. The site is accessible over HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or terms of service pages. Contact information is clearly presented, enhancing business credibility. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

M

město Slavičín

mesto-slavicin.cz

62

The website www.mesto-slavicin.cz serves as the official online presence for the town of Slavičín, Czech Republic. It provides residents and visitors with comprehensive municipal information including local governance, public notices, event calendars, and community services. The site is positioned as a trusted government resource with clear contact details and active social media channels. Technically, the site is built on the Public4u CMS platform, utilizing jQuery and related libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trust slightly but does not detract from the site's legitimacy as a municipal government portal.

M

Město Rokytnice nad Jizerou

mesto-rokytnice.cz

63

Město Rokytnice nad Jizerou operates an official municipal website serving residents, visitors, and local businesses by providing news, event calendars, public notices, and online services. The site targets local community members and stakeholders interested in municipal affairs and services. The business model is typical of a government entity focused on public service and information dissemination. Technically, the website uses a CMS called Public4u, incorporates modern JavaScript libraries like jQuery and Swiper.js, and employs Google Tag Manager for analytics. The site is mobile-optimized and has good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and formal security policies. WHOIS data is missing, which slightly impacts trust but the presence of official contact details and GDPR compliance links support legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

Cestovatelský fotodeník is a Czech travel photo diary platform focused on historical landmarks and monuments, primarily serving travel enthusiasts and cultural tourists interested in Czech heritage. The website is operated by as4u.cz, s.r.o., a small company specializing in publishing and editorial systems. The platform offers user registration, photo uploads, and competitions, supported by an interactive map and categorized listings of monuments. Technically, the site uses the Public4u CMS, jQuery libraries, and Leaflet.js for mapping, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and a published privacy policy, which are areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness. Overall, the site is functional, professionally presented, and safe for general audiences, but could enhance compliance and security practices.

M

Magistrát města Jablonec nad Nisou

mestojablonec.cz

64

The website mestojablonec.cz serves as the official online presence of the city government of Jablonec nad Nisou, Czech Republic. It provides comprehensive information and services for residents and visitors, including city governance, public announcements, event calendars, and citizen support resources. The site targets local citizens and tourists, positioning itself as a trusted municipal information portal. The business model is that of a government service provider, focusing on transparency and accessibility. Technically, the website employs a traditional web stack with jQuery, Google Tag Manager, Google Analytics, and Smartlook for analytics and user behavior tracking. It uses the Public4u CMS platform, which is specialized for municipal websites. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in modernizing the tech stack. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits domain trust verification, but the official nature and content quality support legitimacy. Overall, the website is a well-maintained government portal with good content quality and user experience. Security posture is adequate but could be enhanced by adding security headers and formal policies. Privacy compliance is basic but present. The domain's registration status should be verified to strengthen trust. Strategic improvements in security and transparency will further solidify the site's credibility and user trust.

M

Město Lysá nad Labem

mestolysa.cz

61

Město Lysá nad Labem operates an official municipal website serving the residents and visitors of the city Lysá nad Labem in the Czech Republic. The site provides comprehensive local government information, including news updates, event calendars, online citizen services such as ordering systems and map portals, and clear contact details. The website targets local citizens and stakeholders seeking municipal services and information. Technically, the site is built on the Public4u CMS platform and leverages common web technologies including jQuery, Google Analytics, Microsoft Clarity, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and accessible, with good SEO practices and structured navigation. Security-wise, the website enforces HTTPS and uses anti-spam measures on forms, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS registration data reduces domain transparency but does not detract from the legitimacy of the municipal content and contact information. Overall, the website is professional, trustworthy, and serves its purpose effectively with room for enhanced security and compliance documentation.

A

as4u.cz, s.r.o.

as4u.cz

69

as4u.cz, s.r.o. is a Czech software company specializing in modular content management systems and business applications tailored for municipalities, government bodies, companies, and cultural institutions. With over 20 years of market presence, the company offers products such as the Public4u editorial system, Shop4u e-commerce platform, and various intranet and reservation systems. Their solutions emphasize compliance with legislative requirements, user-friendliness, and scalability, serving a broad client base including cities, towns, and organizations. The website reflects a mature business with a solid client portfolio and a focus on digital transformation in public and private sectors. Technically, the website is built on a proprietary CMS named Public4u, utilizing jQuery and JavaScript libraries. The site is mobile-optimized and structured with good SEO practices. While performance is moderate, the site is accessible and well-organized. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, but there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency, which slightly impacts trustworthiness. However, the extensive references to reputable municipal and cultural clients, clear contact information, and comprehensive privacy and cookie policies support the company's legitimacy. Overall, the site demonstrates a professional digital presence aligned with its business objectives. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and verifying domain registration details to improve trust and compliance.

The website www.liberecky-kraj.cz serves as the official regional tourism portal for the Liberec Region in the Czech Republic. It provides comprehensive information on active holidays, cultural architecture, nature, family trips, and a calendar of events, targeting tourists and travel professionals. The site is supported by regional government entities and partners with national tourism organizations, positioning itself as a key resource for regional tourism promotion. Technically, the website employs a modern technology stack including jQuery, Leaflet.js for mapping, and the Public4u CMS platform. It integrates external APIs such as Mapy.cz for interactive maps and uses responsive design principles to ensure good mobile usability. Performance is moderate with room for optimization, and SEO practices are adequately implemented. From a security standpoint, the site uses HTTPS and secure form submissions but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is evident with GDPR policy pages and cookie consent mechanisms in place. Overall, the website presents a professional and trustworthy front for regional tourism, though the absence of WHOIS data and some security headers slightly reduce the trust score. Strategic improvements in security headers and transparency could enhance the site's security posture and user trust.

Geopark Český ráj is a nonprofit organization managing the UNESCO Global Geopark Český ráj, located in the Czech Republic. The website provides extensive educational and tourism-related content about the geological, natural, and cultural heritage of the region. It targets tourists, researchers, educators, and local communities interested in sustainable tourism and conservation. The organization is uniquely positioned as the only UNESCO Global Geopark in the Czech Republic, offering a rich portfolio of services including educational programs, research facilitation, and tourism promotion. Technically, the website uses the Public4u CMS platform with jQuery and Mapy.cz API for interactive maps. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, it lacks advanced SEO and accessibility features. Security posture is moderate with no visible security headers or incident response policies, and the SSL configuration status is unknown. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data is unavailable, which limits domain legitimacy verification and reduces trustworthiness from a registration perspective. Despite this, the website content and official UNESCO affiliation strongly indicate a legitimate and professional operation. No adult or explicit content is present, making the site safe for general audiences. Overall, the website is functional and informative but would benefit from improved security practices, privacy compliance, and transparency regarding domain registration and incident response.

E

EDU LK

edulk.cz

56

EDULK.cz is an established regional educational and informational portal serving the Liberecký kraj region in the Czech Republic. Founded in 2010, it provides comprehensive resources for schools, educators, students, and parents including news, school directories, event calendars, job listings, and educational projects. The portal is co-financed by the European Social Fund and the Czech state budget, indicating a strong governmental affiliation and trustworthiness. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery and Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly with good content quality and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site demonstrates a mature digital presence with a focus on regional educational support.

V

Vysočina Tourism, příspěvková organizace

vysocina.eu

53

Vysočina Tourism is a regional tourism organization providing comprehensive information about the Vysočina region in the Czech Republic. The website serves as an official portal offering details on tourist destinations, cultural events, accommodation, and services, targeting tourists, families, and cultural visitors. The site is well-branded and consistent with regional government and tourism partners, indicating a strong market position within regional hospitality and government sectors. Technically, the website is built on the xartCMS platform and uses common JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. HTTPS is enforced, and a GDPR-compliant cookie consent mechanism is implemented, reflecting good digital maturity. From a security perspective, the site shows good practices such as HTTPS and cookie consent but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, and does not raise legitimacy concerns given the website's professional appearance and official branding. Overall, the website is a trustworthy and professional regional tourism portal with moderate to good security posture and compliance. Strategic improvements in security headers and incident response transparency could further enhance its security stance.

MojeOrlickeHory.cz is an official regional tourism portal for the Orlické hory and Podorlicko area in the Czech Republic, operated by World Media Partners, s.r.o. The website provides comprehensive tourist information including attractions, accommodations, activities, and cultural heritage. It targets a broad audience including families, seniors, and outdoor enthusiasts. Technically, the site uses common web technologies such as jQuery, Matomo, and Google Analytics, with a moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust verification, though the site appears professionally maintained and linked to reputable regional partners.

K

Krkonoše - svazek měst a obcí

krkonose.eu

49

The website www.krkonose.eu serves as the official tourism portal for the Krkonoše mountain region in the Czech Republic. It provides comprehensive information about the region's natural beauty, activities, events, accommodations, and practical visitor information. The site targets tourists and visitors interested in exploring the Krkonoše area, offering multilingual content and rich media to enhance user engagement. The business model is focused on destination marketing and regional tourism promotion, supported by partnerships with local and national organizations. Technically, the website is built on Drupal 8, leveraging modern web technologies including Google Analytics, Google Tag Manager, and CookieHub for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR. The domain WHOIS data is privacy-protected by EURid, which is typical for .eu domains, and no suspicious patterns were detected. The site links to multiple trusted partner domains and maintains an active social media presence. Strategically, the site is well-positioned to serve its audience effectively but could improve security transparency and incident response readiness to enhance trust further.

The website www.cyklohk.cz serves as the official regional tourism portal for cycling in the Královéhradecký region of the Czech Republic. It provides detailed cycling tips, routes, trail information, and seasonal cycling bus services aimed at tourists, cycling enthusiasts, and families. The site is managed by the Královéhradecká krajská centrála cestovního ruchu, a regional tourism organization, and is supported by the Czech Ministry for Regional Development. The content is primarily in Czech with multilingual support for English, German, and Polish, enhancing accessibility for international visitors. Technically, the website is built on the Public4u CMS platform and utilizes jQuery and JavaScript libraries for interactive features. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and has a good SEO foundation, although accessibility features could be improved. The cookie policy and consent mechanism are implemented, but explicit privacy and terms of service pages are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks certain security headers that could enhance protection against common web vulnerabilities. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the official nature of the organization and the professional presentation of the website. Overall, the website is a reliable and professional resource for cycling tourism in the region, but it would benefit from improved transparency regarding privacy policies, enhanced security headers, and resolution of WHOIS data availability to strengthen trust and compliance.

I

Information und Technik Nordrhein-Westfalen

statistik.nrw

63

Statistik.NRW is the official statistical office for North Rhine-Westphalia, Germany's most populous state. It provides comprehensive social and economic data, serving government bodies, researchers, businesses, and the public. The website is professionally designed, well-structured, and offers extensive statistical content and services including databases, publications, and regional profiles. The parent organization is the Landesbetrieb IT.NRW, ensuring strong institutional backing. Technically, the site is built on Drupal CMS with modern JavaScript libraries and privacy-conscious analytics (Matomo). It is mobile-optimized and accessible, with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. WHOIS data confirms legitimacy and consistency with the official entity. Overall, the site demonstrates a mature digital infrastructure and strong compliance with privacy regulations. It is trustworthy and reliable for users seeking official statistical information about NRW. Recommendations include enabling DNSSEC, publishing explicit security policies, and adding a vulnerability disclosure channel to further enhance security transparency.

K

Královéhradecká krajská centrála cestovního ruchu, p. o.

hkregion.cz

58

The website www.hkregion.cz serves as the official tourism portal for the Královéhradecký region in the Czech Republic, managed by the Královéhradecká krajská centrála cestovního ruchu, a public organization. It provides comprehensive information on regional attractions, events, cultural activities, wellness, sports, and family-friendly options, targeting tourists, local visitors, and tourism professionals. The portal features multimedia content, interactive maps, and an AI-based guide to enhance user experience. Technically, the site employs a modern technology stack including jQuery, Leaflet.js for mapping, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. It uses the Public4u CMS platform and is optimized for mobile devices with good SEO and accessibility basics. The site is served over HTTPS with a cookie consent mechanism, reflecting compliance with GDPR and privacy standards. From a security perspective, the site enforces HTTPS and secure form submissions but lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie management are clearly presented, though no explicit security policy or incident response information is available. The WHOIS data is unavailable, limiting domain legitimacy verification, but the official branding and partner links support its authenticity. Overall, the site is a well-maintained regional government tourism portal with good content quality, technical implementation, and privacy compliance. Strategic improvements could focus on enhancing security headers and accessibility features to further strengthen its security posture and user inclusivity.

T

Telly s.r.o.

telly.cz

67

Telly s.r.o. operates a modern television subscription service targeting the Czech market, offering TV packages with promotional discounts and a focus on family entertainment. The company is positioned as a medium-sized telecommunications provider founded in 2019, with a clear digital presence and active marketing efforts. The website is built on WordPress and integrates multiple analytics and advertising technologies, including Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, supported by a comprehensive cookie consent mechanism ensuring GDPR compliance. The technical infrastructure is modern and well-optimized for mobile and SEO, hosted with Active24 and using Cloudflare DNS services. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though improvements in security headers and published security policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

PENTA CZ

penta.cz

60

PENTA CZ operates as a Czech Republic-based e-commerce retailer specializing in a broad range of products including household goods, garden supplies, tools, and electronics. The website offers a loyalty program and expert advice, targeting both consumers and businesses. The platform is well-structured with extensive product categories, indicating a mature retail operation with a medium-sized market presence. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager, Google Analytics, and reCAPTCHA for analytics and security. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. However, the absence of a visible privacy policy and security headers suggests areas for improvement in compliance and security hardening. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which limits domain trust assessment. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency and security practices. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

Střední Čechy filmová kancelář operates as a regional film office providing location and production support services for filmmakers in Central Bohemia, Czech Republic. The website serves as an informational and contact portal, offering news, location listings, filmographies, and contact details for film production inquiries. The organization targets film producers and related professionals seeking filming locations and support in the region. The business model is service-oriented, facilitating film production logistics and location scouting. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and jQuery UI. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. The site lacks advanced analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS and includes anti-spam measures on its contact form. However, no security headers were detected, and there is no visible privacy or cookie policy, which are compliance gaps. The absence of WHOIS data reduces transparency and trustworthiness. Overall, the security posture is moderate but could benefit from improvements in headers, policies, and vulnerability disclosures. The overall risk is moderate with no critical security issues detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and reduce risk. The website is professionally presented with clear contact information and active social media presence, supporting business credibility.

AUTO-PRESSE.de is a German automotive news and media portal operated by WITTMANN MEDIA, providing a wide range of content including car news, test reports, new model introductions, e-bike information, travel tips, and automotive guides. The website targets German-speaking automotive enthusiasts and consumers, positioning itself as a niche media platform with a focus on automotive transportation topics. The business model is primarily content publishing supported by advertising and affiliate partnerships with automotive parts and service providers. Technically, the website uses a combination of jQuery, Owl Carousel, Retina.js, and FontAwesome for frontend functionality and styling. The site appears to be custom-built or uses an unknown CMS, with moderate performance and good mobile optimization. SEO practices are adequate with proper meta tags and structured navigation. Cookie consent is implemented, indicating attention to privacy compliance, though no explicit terms of service or security policies are found. From a security perspective, HTTPS usage is implied but no security headers were detected in the provided data. The site lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or malware indicators were found, but security posture could be improved by adding security headers and explicit policies. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the website is accessible with no WAF or blocking mechanisms detected. The domain registration is consistent with the business age and sector, and no suspicious WHOIS patterns were found. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing terms of service, and expanding contact information to improve trust and compliance.

T

Technische Universität Dortmund

tu-dortmund.de

60

Technische Universität Dortmund is a reputable German university offering approximately 80 study programs with a focus on innovation, interdisciplinarity, and internationality. The website is professionally designed using TYPO3 CMS and integrates modern web technologies such as jQuery UI and Matomo analytics. It provides comprehensive academic and campus information, event calendars, and access to university services. The technical infrastructure appears solid with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit security policies are not evident. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain and website are legitimate and trustworthy, consistent with an academic institution.

U

Universitätsallianz Ruhr

uaruhr.de

51

The Universitätsallianz Ruhr (UA Ruhr) website represents a cooperative alliance of three major universities in the Ruhr region of Germany: Ruhr-Universität Bochum, TU Dortmund, and Universität Duisburg-Essen. Established in 2007, the alliance focuses on joint research, study programs, and knowledge transfer. The website serves as an information hub for students, researchers, and partners, showcasing news, events, and collaborative initiatives. The site is professionally designed with clear navigation and multilingual support (German and English), reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, a robust open-source content management system favored by academic institutions. It employs modern frontend libraries such as jQuery, Photoswipe, and Select2, and integrates Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and explicit security or incident response policies. No privacy or cookie policies were detected in the provided content, which may impact GDPR compliance. The domain registration aligns well with the academic institutions involved, enhancing trustworthiness. No signs of malicious activity or content blocking mechanisms were found. Overall, UA Ruhr's website is a credible, well-maintained academic portal with strong business credibility and good technical implementation. However, improvements in privacy compliance and security policy transparency are recommended to enhance user trust and regulatory adherence.

A

Akademie věd České republiky

cas.cz

59

The Akademie věd České republiky (Academy of Sciences of the Czech Republic) is a prominent public research institution dedicated to scientific research, education, and public outreach in the Czech Republic. The website serves as a comprehensive portal for news, events, publications, and resources related to the academy's activities. It targets researchers, academics, students, media, and the general public interested in science and research. The institution holds a leading position in the Czech scientific community and operates with a large organizational size and extensive content offerings.

FAKRO America, LLC. operates a professional website focused on manufacturing and retailing skylights, roof windows, attic ladders, and balcony windows. The company positions itself as a fast-growing leader in its niche market, targeting construction professionals, architects, and end customers. The website content is well-structured, with clear navigation and a consistent brand presence supported by active social media channels and a media center. Technical infrastructure relies on established JavaScript libraries and Google Analytics for user tracking, with a CMS identified as WebKameleon. The site is mobile optimized and performs moderately well. From a security perspective, the website uses HTTPS with anonymized IP tracking in Google Analytics and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security or incident response policies are published, indicating room for improvement in security posture. The absence of WHOIS data is a notable anomaly, reducing trust slightly despite the professional presentation and contact transparency. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. The main risks relate to missing WHOIS transparency and potential security header gaps. Strategic improvements in these areas would enhance trust and security maturity.

L

Lisa Edi

lisaedi.com

51

Lisa Edi is a professional photographer based in Vienna, Austria, specializing in fashion, portrait, and still life photography. The website showcases a rich portfolio of artistic works and provides comprehensive contact and business information. The business operates a small-scale creative service model with additional print sales. Technically, the website is built on Craft CMS and uses modern JavaScript libraries, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC and security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website presents a trustworthy and professional digital presence.

I

Image Format

imageformat.fr

43

Image Format is a French creative design portfolio website showcasing various visual and typographic projects. The site targets design professionals and enthusiasts, presenting a curated collection of creative works. The business model appears to be service or portfolio-based, emphasizing artistic and typographic design. The website is built on WordPress and uses common JavaScript libraries such as jQuery and Splide.js, hosted via Scaleway with DNS managed by o2switch.net. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is average with HTTPS likely enabled but lacking visible security headers and formal security policies. Privacy compliance is low due to absence of privacy and cookie policies. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

P

PromoTron Solutions a.s.

unipresent.cz

49

UniPresent.cz is an established Czech e-commerce platform operated by PromoTron Solutions a.s., specializing in promotional products and custom printed gifts. The website offers a wide range of product categories including office supplies, drinkware, textiles, technology accessories, and more, targeting businesses and individuals seeking branded merchandise. The platform supports online logo visualization and printing cost calculation, enhancing user experience and service transparency. Technically, the site is built on the TronShop e-commerce platform and leverages modern web technologies such as jQuery, Bootstrap, and Stripe.js for payment processing. The website is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some recommended security headers are not explicitly confirmed. The absence of WHOIS registration data is a notable gap, limiting full trust verification of domain legitimacy. Overall, the site presents a professional and trustworthy front for its business operations.

A

ANAN Promotion d.o.o.

anan-promotion.si

56

ANAN Promotion d.o.o. is a Slovenian-based e-commerce business specializing in promotional products, corporate gifts, and custom branded merchandise. Established in 2005, the company offers a wide range of over 50,000 product ideas to support business promotion and employee gifting. Their market position is supported by positive customer reviews and a comprehensive product catalog targeting businesses and organizations. The website is built on the TronShop E-Commerce Platform and hosted by NEOSERV.si, utilizing modern web technologies such as jQuery, Bootstrap, and Stripe for payment processing. The site demonstrates good digital maturity with responsive design and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit privacy policy or terms of service pages were found. Overall, the business presents a trustworthy and professional online presence with room for improvement in privacy and security documentation.

C

Carnival Cruise Line

carnival.com

73

Carnival Cruise Line operates a professional and content-rich website offering cruise deals and vacation packages to popular destinations such as the Caribbean, Bahamas, Alaska, and Mexico. The company is positioned as a leading player in the transportation and hospitality sectors, targeting a broad general audience seeking cruise vacations. The website employs modern technologies including React, jQuery UI, and various marketing and tracking tools, hosted on a robust CDN infrastructure likely provided by Akamai. The site demonstrates good design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and privacy policies indicates room for improvement. WHOIS data was not retrievable from the provided raw output, which is unusual for a major brand and slightly reduces trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Tyler Technologies is an enterprise-level software and services provider specializing in public sector solutions tailored for government agencies and educational institutions. The company offers a broad portfolio including ERP, courts and public safety, health and human services, and transformative technologies such as cybersecurity and data insights. Recognized as a leader in the Gartner Magic Quadrant for Cloud-Based ERP for U.S. Local Government, Tyler Technologies holds a strong market position with a focus on delivering secure, efficient, and integrated software solutions to its target audience. The website infrastructure is built on a modern technology stack including DNN CMS, Bootstrap, jQuery, and integrates marketing and analytics tools like Marketo and Google Tag Manager. The site demonstrates good technical maturity with responsive design, SEO optimization, and moderate performance. Security best practices are observed with HTTPS enforcement, compliance certifications (CJIS, PCI, SOC, GDPR), and a dedicated security and compliance section. However, direct contact information is limited on the main site, and WHOIS data is unavailable, which slightly impacts trust. Overall, Tyler Technologies exhibits a strong security posture and business credibility with comprehensive compliance frameworks and client support mechanisms. The absence of WHOIS transparency is a minor concern but is mitigated by the company's established market presence and external trust signals. Strategic recommendations include enhancing contact transparency, publishing security.txt, and improving accessibility compliance to further strengthen trust and security culture.

Tyler Technologies is a well-established provider of government software solutions, specializing in outdoor recreation management for local, state, and federal agencies. Their platform offers cloud-based reservation, licensing, and park management tools tailored to the public sector. The company leverages a mature digital infrastructure including DNN CMS, ASP.NET WebForms, and integrates marketing and analytics tools such as Marketo and Google Tag Manager. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security and compliance are emphasized with dedicated pages and use of HTTPS, although some security headers could be improved. The absence of WHOIS data reduces domain trust slightly, but the overall brand presence and content quality support legitimacy.

W

Workcred

workcred.org

67

Workcred is a medium-sized organization founded in 2014 that focuses on connecting credentials, competencies, careers, and customers, primarily serving professionals and credentialing bodies in the education sector. The website presents a professional and consistent brand image with good content quality and clear navigation, targeting workforce development stakeholders. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, TikTok Pixel, and Hotjar. The hosting and DNS infrastructure involve GoDaddy.com as the registrar and Cloudflare for DNS services, though DNSSEC is not enabled, representing a minor security gap. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service in the provided content. No direct contact information or incident response contacts were found. Overall, the website is trustworthy and professional but could improve transparency and security practices.

R

Race Space Ltd

race-space.com

59

Race Space Ltd operates a specialized online platform focused on race entry and endurance event management technology. The company targets race directors and athletes seeking efficient event registration and management solutions. Their market position is that of a niche technology provider offering SaaS-based race event systems. The website content is professional, well-branded, and clearly communicates their value proposition and services. Technically, the site employs modern JavaScript libraries including jQuery, RequireJS, and Facebook SDK, with Google Tag Manager for analytics and marketing. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partially met with privacy and terms pages present but no cookie consent mechanism detected. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy, though the active social media presence and professional site content mitigate this somewhat. Overall, the site scores well in content quality and technical implementation but should improve privacy and security transparency.

C

cosinex GmbH

cosinex.de

54

cosinex GmbH is a well-established German company specializing in digital solutions for public procurement. Their offerings include a comprehensive suite of software products that enable fully digital procurement processes for government entities at federal, state, and municipal levels. The company positions itself as a pioneer in e-procurement with a strong focus on innovation and customer support. The website reflects a professional and modern digital presence, leveraging WordPress and WooCommerce platforms with various plugins to enhance functionality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, cosinex GmbH demonstrates a credible and trustworthy business with clear contact information, social media engagement, and compliance with GDPR requirements.

C

Computacenter

computacenter.com

81

Computacenter is a leading independent technology and services provider focused on delivering IT infrastructure, cloud, security, and managed services to large corporate and public sector clients. The company emphasizes sustainability, customer-centricity, and long-term value creation, supported by numerous industry awards and partnerships with major technology vendors. The website demonstrates a mature digital presence with modern technologies, responsive design, and rich content including customer stories and news updates. Security posture is strong with HTTPS and bot protection, though explicit security headers and policies are not evident in the provided data. Privacy compliance documentation such as privacy and cookie policies are not clearly found, which is a gap for regulatory adherence. WHOIS data is unavailable, possibly due to privacy or registry restrictions, but the website's professional presentation and trust signals support legitimacy. Overall, the site is well-structured and trustworthy, serving an enterprise audience effectively.

M

MB Capital Services GmbH

mb-capital-services.de

62

MB Capital Services GmbH is a German-based company specializing in creative event and exhibition services, including design and system stand construction, hostess services, and advertising spaces primarily at Messe Berlin. The website targets businesses and event organizers seeking professional support for trade shows, congresses, and events. The company positions itself as a reliable partner for worldwide implementation of creative corporate and product presentations. Technically, the website uses a combination of jQuery, jQuery UI, Nivo Slider, Fancybox, and a custom video player, hosted on managed infrastructure. The site includes a Usercentrics cookie consent mechanism, indicating some level of privacy compliance, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policy information. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

P

Pandia

pandia.com

63

Pandia operates as an online directory platform connecting users with creative service providers specializing in graphic design, web design, app development, SEO, and video production. The website positions itself as the largest graphic designer index on the web, targeting businesses and individuals seeking creative professionals globally. The platform offers categorized listings by country and service type, facilitating straightforward connections between clients and service providers. The business model is primarily marketplace/directory-based, focusing on ease of discovery and engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slick Slider, and star rating plugins, ensuring a responsive and user-friendly experience. The site is mobile-optimized and uses HTTPS with embedded secure iframes for forms. However, there is a lack of advanced security headers and cookie consent mechanisms, which are important for compliance and security posture. Analytics are implemented via Clicky, indicating moderate user tracking. From a security perspective, the site benefits from HTTPS and CSRF token usage but lacks explicit security policies, incident response contacts, and security headers. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No contact emails or phone numbers are provided, limiting direct communication channels. Privacy policy and terms of use are present but cookie compliance is missing, which may impact GDPR compliance. Overall, while the website is functional, content-rich, and professionally designed, the unclear domain registration status and missing security and privacy compliance elements present moderate risks. Strategic improvements in domain legitimacy verification, security header implementation, and privacy compliance would enhance trust and security posture.

C

CSC AppealTrack®

appealtrack.com

64

CSC AppealTrack is a specialized real estate appeal management software platform designed to assist teams in assessing property appeal strength, managing appeals, and consolidating related documents and payments. The platform is branded under CSC Global, a recognized entity in corporate services. The website serves primarily as a secure login portal for existing users, with limited public-facing content on this page. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and other libraries, and uses ASP.NET MVC framework conventions. Security measures include HTTPS usage and anti-forgery tokens, but visible security headers and privacy policies are absent, indicating room for improvement in compliance and transparency. Overall, the site is professional and business-focused with no signs of malicious activity or adult content.

B

bacsiday

bacsiday.vn

59

bacsiday is a Vietnamese medical tourism platform operated under the MyMediTravel brand, offering users the ability to search, compare, and book medical procedures and appointments across Vietnam. The website positions itself as a leading medical information and referral service, targeting patients seeking healthcare services with a focus on transparency, choice, and convenience. The platform integrates extensive listings of clinics and hospitals, enriched with ratings and accreditations, to support informed decision-making. Technically, the site employs modern web technologies including Google Analytics, Tag Manager, and Adsense for tracking and monetization, with responsive design and structured data enhancing SEO and user experience. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and privacy consent mechanisms are recommended. Overall, the site demonstrates a professional and trustworthy presence suitable for its healthcare audience.

D

Dokku

dokku.id

63

Dokku operates as an online platform focused on medical tourism and healthcare services in Indonesia, enabling users to search, compare, and book medical procedures, clinics, and hospitals. The company positions itself as a leading medical information and referral service, targeting patients and medical service seekers within Indonesia. The website demonstrates a moderate level of digital maturity, employing modern web fonts, JavaScript libraries, and tracking technologies such as Google Analytics and Google Tag Manager. SEO and metadata are well implemented, enhancing discoverability and social media integration. Security posture is adequate with HTTPS and CSRF tokens, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the platform is professional and trustworthy but could improve transparency and security documentation.

M

MyMediTravel

mymeditravel.com

64

MyMediTravel operates as a leading global medical tourism platform, providing a comprehensive service that connects patients with clinics and hospitals worldwide. The website offers extensive information on medical, cosmetic, and dental procedures, including price comparisons and patient reviews, targeting medical tourists seeking affordable healthcare options internationally. The platform emphasizes transparency, rich content, and user-friendly features such as free quotes and direct communication with providers. Technically, the website employs a modern technology stack including Google Analytics, Facebook Pixel, and jQuery UI, ensuring good performance and mobile optimization. The site is secured with HTTPS and implements CSRF tokens in forms, though it lacks some explicit security headers. The presence of structured data and SEO best practices supports good search engine visibility. From a security perspective, the site demonstrates a solid posture with encrypted communications and secure data collection methods. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. No critical vulnerabilities or exposed sensitive information were detected. Overall, MyMediTravel presents a professional, trustworthy, and content-rich platform with moderate security maturity. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen its risk profile and trustworthiness.

C

Cancer Research UK

cancerresearchuk.org

60

Cancer Research UK is a leading independent non-profit cancer charity based in the UK, dedicated to saving lives through funding cancer research, providing information, and engaging the public in fundraising and volunteering. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. It serves a broad audience including patients, researchers, donors, and volunteers. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, and employs Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

P

picotours GmbH

picotours.de

53

picotours GmbH is a specialized travel company focusing on sustainable and immersive travel experiences in Portugal, Madeira, the Azores, the Cape Verde Islands, and São Tomé & Príncipe. With approximately 17 years of experience and a TourCert CSR certification, the company emphasizes ecological, economic, and social responsibility in its offerings. The website reflects a professional and user-friendly platform that supports both group and individual travel bookings, with a strong commitment to quality and customer satisfaction. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies such as jQuery, Google Tag Manager, and GLightbox. Hosting is provided by netcup, as inferred from the DNS nameservers. The site is mobile-optimized and demonstrates good SEO practices, although some security headers could be improved. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and detailed privacy policies aligned with GDPR requirements. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, the absence of certain security headers and a formal incident response contact are areas for enhancement. No vulnerabilities or suspicious activities were detected. Overall, the site presents a trustworthy and credible online presence suitable for its business domain.

V

Vibe Systems Ltd.

vibe.travel

68

Vibe Systems Ltd. is a UK-based travel technology company specializing in providing tailored travel booking platforms and software solutions for travel agents, travel management companies (TMCs), and tour operators. Their platform supports both corporate and leisure travel sectors, offering scalable, secure, and user-friendly technology designed to enhance customer booking experiences. The company positions itself as a trusted partner in the travel industry with a focus on flexibility and customer-centric solutions. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google reCAPTCHA for form security. The site is mobile-optimized with a responsive design and includes cookie consent mechanisms indicating GDPR compliance. However, some security best practices such as implementing security headers are not evident, and WHOIS data is privacy-protected, limiting transparency. From a security perspective, the site uses HTTPS and has implemented CAPTCHA on forms to mitigate spam and abuse. The absence of security headers and incomplete WHOIS information are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie policies are present and comprehensive, supporting regulatory compliance. Overall, Vibe Systems presents a professional and credible online presence consistent with a legitimate travel technology provider. Strategic recommendations include enhancing security headers, improving transparency of domain registration, and publishing explicit security and incident response policies to strengthen trust and compliance.