Security Directory

N

NOVÁ ŠKOLA, s.r.o.

eduzio.cz

59

Eduzio.cz is an educational platform specializing in online preparatory tests for secondary schools and gymnasiums in the Czech Republic, aligned with the CERMAT standard. The platform collaborates with the established publisher NOVÁ ŠKOLA, s.r.o., which has a history dating back to 1997. Eduzio offers targeted test preparation in Czech language and mathematics, providing immediate feedback to students to enhance learning effectiveness. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant educational content, including a blog and FAQ sections.

I

IndieWebify.Me - a guide to getting you on the IndieWeb

indiewebify.me

42

IndieWebify.Me is a specialized educational website dedicated to guiding users through the IndieWeb movement, which emphasizes personal ownership of web content and decentralized social interactions. The site offers practical tools such as validation forms for microformats and webmention sending, alongside extensive links to official IndieWeb resources and open source projects. Its target audience includes individuals and developers interested in establishing personal domains and participating in decentralized web publishing. The business model is informational and community-driven, with no direct commercial offerings. Technically, the site employs a straightforward tech stack including Bootstrap CSS, Flat UI, and an older version of jQuery, hosted on Linode servers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, the absence of explicit HTTPS confirmation and security headers suggests room for improvement in security hardening. From a security perspective, the domain is well-registered with a long history and stable registrar details, indicating legitimacy. Yet, the lack of privacy and cookie policies, security headers, and contact information for incident response reduces compliance and trustworthiness. No signs of malicious or adult content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, IndieWebify.Me presents as a credible, niche community resource with good content quality but moderate technical and security maturity. Strategic improvements in security practices, privacy compliance, and contact transparency would enhance its trust and resilience.

HotLizard is a UK-based specialist company established in 1999, providing recruitment websites and job board software solutions. Their offerings range from off-the-shelf SaaS platforms to bespoke, fully customized recruitment technology solutions designed to enhance candidate experience and client engagement. The company targets recruitment agencies, job board owners, and direct employers, positioning itself as a trusted provider with a strong market presence supported by long domain tenure and positive customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and reCAPTCHA v3, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, GDPR compliant, and trustworthy, reflecting a mature business with a clear focus on recruitment technology.

3

Events in the three-country region | 3event

3event.eu

39

The website 3mag.eu/en/events serves as a regional event calendar for the tri-border area encompassing parts of Germany, Czech Republic, and Poland. It offers a well-structured platform for users to discover various events such as festivals, music concerts, art exhibitions, sports activities, and more. The site targets a general audience interested in cultural and leisure activities within this geographic region. The business model revolves around event promotion and information dissemination, positioning itself as a key regional event aggregator. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, and libraries like Flatpickr for date selection and Embla Carousel for event display. The design is responsive and optimized for mobile devices, providing a good user experience. However, there is no evidence of a CMS or backend platform from the provided data. Hosting and domain registration are managed through RegistryGate GmbH, a reputable registrar. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers or policies were detected in the HTML content. There is a lack of visible privacy, cookie, or terms of service policies, which indicates potential compliance gaps with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting transparency and user trust. Overall, the website is functional and professionally designed for its purpose but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trustworthiness and regulatory adherence.

L

Lanes Health

laneshealth.com

64

Lanes Health is a well-established family-owned healthcare company with over 90 years of experience in manufacturing and distributing OTC medicines, food supplements, natural products, and confectionery. The company maintains a strong market presence in the UK and internationally through a portfolio of trusted brands such as Olbas, Jakemans, Kalms, and others. Their website reflects a professional and consistent brand image, targeting consumers, pharmacists, and retailers seeking quality health and wellbeing products. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. From a security perspective, the website uses HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and business information presented. Overall, the website is functional, secure, and compliant with privacy standards, but the domain registration inconsistency warrants further investigation. Strategic recommendations include improving security headers, publishing explicit security and incident response policies, and verifying domain registration details to enhance trust and credibility.

L

Livesport s.r.o.

flashfutbal.sk

56

FlashFutbal.sk is a Slovak-language sports media website operated by Livesport s.r.o., specializing in live football scores, detailed match statistics, betting tips, and odds comparison. It serves football fans and sports bettors primarily in Slovakia, offering comprehensive real-time sports data and related content. The platform is well-positioned in the Slovak market as a leading source for football results and sports statistics, leveraging partnerships with major bookmakers and live score providers. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, and cookie consent management via OneTrust, ensuring a fast, mobile-optimized, and SEO-friendly user experience. Security posture is strong with HTTPS enforced and standard security best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies and GDPR consent mechanisms in place. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable resource for its target audience.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

54

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

C

Canton of Graubünden

gr.ch

58

The website www.gr.ch is the official online portal for the Canton of Graubünden, Switzerland, serving as a multilingual government platform providing information on politics, public services, and administration. It targets residents and visitors of the canton, offering diverse content in German, Romansh, and Italian. The site reflects a medium-sized government entity with a consistent and professional brand presence. Technically, the site employs modern web technologies including Font Awesome 6 Pro icons and JavaScript analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

G

Gemeinde Albula/Alvra

albula-alvra.ch

58

The website www.albula-alvra.ch serves as the official online presence of the municipality of Albula/Alvra in Switzerland. It provides residents and visitors with comprehensive information about the community, including local news, events, administrative services, and online service portals. The site targets local citizens and stakeholders interested in municipal affairs and public services. The business model is that of a government entity focused on public administration and community engagement. Technically, the website is built on a CMS platform likely provided by i-web.ch, utilizing modern web technologies such as HTML5, CSS, JavaScript, and responsive design frameworks like Bootstrap. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. It employs HTTPS for secure communication and includes a user consent mechanism for anonymized web analytics. From a security perspective, the site benefits from HTTPS encryption and anonymized data collection with user consent, indicating a privacy-conscious approach. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user information and service delivery. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure to strengthen security posture and trustworthiness.

R

RWS Technology

rws-ammunition.com

55

RWS Technology is a well-established German manufacturer specializing in ammunition products including rifle cartridges, rimfire cartridges, pistol cartridges, air rifle pellets, and reloading components. With a history dating back to 1855 and exclusive production in Germany, the company targets hunters and sport shooters, positioning itself as a premium brand in the ammunition manufacturing sector. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website is built on TYPO3 CMS and hosted by Vautron Rechenzentrum AG. It demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. The site uses modern web technologies but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. From a security perspective, the site uses HTTPS but does not show advanced security headers or incident response contacts. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, no terms of service or vulnerability disclosure policies are found, and direct contact emails or phone numbers are not publicly listed, which could impact user trust. Overall, the website is professional and trustworthy with room for security and compliance enhancements. Strategic improvements in security headers, DNSSEC, and clearer contact information would strengthen the security posture and user confidence.

T

TV Marko

tvmarko.cz

53

TV Marko is a small audiovisual studio based in the Moravskoslezský region of the Czech Republic, operating since 1999. The company specializes in media production and broadcasting, including local television (TIK Bohumín), corporate films, advertising spots, aerial drone filming, and 2D/3D animation. Their market position is regional with a focus on local businesses and media consumers. The website presents a professional design with clear navigation and detailed service descriptions, supported by client logos and contact information. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced CMS or hosting details. Security posture is moderate with HTTPS assumed but missing key security headers and privacy policies, indicating compliance gaps. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the site is safe, trustworthy, and professionally maintained but would benefit from enhanced security and privacy compliance measures.

S

SIA NETVISION

netvision.lv

54

SIA NETVISION is a well-established Latvian telecommunications provider offering optical home internet, interactive TV, fixed telephony, and data center services. With over 16 years of market presence, the company targets residential and business customers in Latvia, providing competitive packages and reliable connectivity solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer support channels. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or domains.

A

Akciju sabiedrība "Business Media"

cenueksperts.lv

59

Cenueksperts.lv is a Latvian price comparison website operated by Akciju sabiedrība "Business Media". The platform offers users the ability to compare prices across a wide range of product categories from various partner sellers, aiming to help consumers make smarter purchasing decisions. The website targets online shoppers in Latvia and positions itself as a trusted local price comparison service. Technically, the site uses standard web technologies including jQuery and custom JavaScript, with a moderate performance profile and good mobile optimization. The site is secured with HTTPS but lacks advanced security headers and uses an outdated JavaScript library, which could pose security risks. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. Contact information is limited to an email address with no phone or physical address provided. Overall, the site demonstrates a moderate security posture with room for improvement in security best practices and incident response readiness.

I

International Shooting Sport Federation - ISSF

issf-sports.org

65

The International Shooting Sport Federation (ISSF) operates as the global governing body for Olympic shooting sports, providing governance, event organization, athlete rankings, and promotional activities. The website serves athletes, officials, and shooting sport enthusiasts with comprehensive news, event calendars, and educational resources. The ISSF maintains a strong market position as the authoritative organization in its niche, supported by partnerships with Olympic and anti-doping agencies. Technically, the website is built on a modern Next.js and React stack, delivering fast performance and excellent mobile optimization. The site employs HTTPS and a cookie consent mechanism, reflecting a mature digital infrastructure. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the site shows good posture with no visible vulnerabilities or exposed sensitive data. The absence of explicit security policies or incident response contacts is a gap. Privacy compliance is well addressed with a clear privacy and cookie policy, including GDPR consent mechanisms. Overall, the ISSF website is professional, trustworthy, and well-aligned with its organizational identity. Strategic improvements in security transparency and contact information would enhance trust and compliance further.

T

The Boeing Company

boeing.es

67

The Boeing España website represents the Spanish presence of The Boeing Company, a global aerospace leader with a 90-year history in Spain. The site highlights Boeing's commercial and defense aerospace activities, research and innovation efforts, and community engagement in STEM education. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and Google Tag Manager for analytics, with a strong emphasis on privacy compliance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers should be verified. Overall, the site reflects a professional, trustworthy corporate presence consistent with Boeing's global brand.

T

The Boeing Company

boeing-sea.com

68

The Boeing in Southeast Asia website serves as a regional portal for The Boeing Company, a global leader in aerospace and defense. The site provides comprehensive information about Boeing's presence, leadership, market outlook, sustainability efforts, and career opportunities in Southeast Asia. It targets aerospace industry stakeholders, government entities, business partners, and potential employees in the region. The website is professionally designed, mobile-optimized, and well-structured, reflecting Boeing's strong brand identity and market position. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and Google Tag Manager for analytics. Hosting is US-based, and the site employs HTTPS with good privacy and cookie compliance, including GDPR adherence via OneTrust consent management. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses consent management but lacks publicly disclosed security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain www.boeing-sea.com is unusual and reduces trustworthiness, though the site's content and links to official Boeing domains strongly support its legitimacy. Overall, the website is a credible, professional regional representation of Boeing with strong content and technical maturity. Strategic improvements include publishing security policies, incident response details, and enhancing transparency around domain registration to bolster trust and compliance.

T

The Boeing Company

boeing-me.com

67

The Boeing Company’s Middle East website presents a comprehensive and professional digital presence reflecting its long-standing involvement in the region’s aerospace, defense, and technology sectors. The site highlights Boeing’s partnerships with airlines, defense forces, and educational institutions, emphasizing its role in regional economic diversification and technological advancement. The content is well-structured, visually consistent, and targets aerospace industry stakeholders, government entities, and job seekers. Technically, the site leverages Adobe Experience Manager CMS and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, supporting strong privacy practices. However, the absence of WHOIS registration data for the domain www.boeing-me.com introduces some uncertainty regarding domain ownership verification, despite the site’s professional appearance and linkage to official Boeing domains. Overall, the website scores well on content quality, technical implementation, and business credibility, with recommendations to enhance security headers and publish vulnerability disclosure details.

T

The Boeing Company

boeingitaly.it

64

The Boeing Italy website represents the Italian branch of The Boeing Company, a leading aerospace and defense manufacturer with a 75-year presence in Italy. The site highlights Boeing's strong industrial partnerships with Italian aerospace companies, its commercial airline customers, and defense collaborations with the Italian Armed Forces. The company employs approximately 150 people across multiple locations in Italy, focusing on operations, partnerships, marketing, and community engagement, including STEM education initiatives. Technically, the website is built on Adobe Experience Manager, uses modern web technologies, and implements privacy and cookie policies with consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for users.

T

The Boeing Company

boeing.com.au

69

The Boeing Australia website represents the regional presence of The Boeing Company, a global leader in aerospace manufacturing and defense systems. The site highlights Boeing's advanced manufacturing capabilities, defense systems, sustainment, training, R&D, and uncrewed systems tailored for the Australian market. The website targets industry professionals, government entities, suppliers, and partners, positioning Boeing as a key player in the aerospace and defense sectors within Australia. The content is professionally curated, consistent with Boeing's global branding, and provides comprehensive information about subsidiaries and services.

T

The Boeing Company

boeingsuppliers.com

73

The Boeing Suppliers website serves as a comprehensive portal for current and prospective suppliers to The Boeing Company, a global leader in aerospace manufacturing. The site provides detailed information on becoming a supplier, supplier quality, logistics, cybersecurity, terms and conditions, and recognition programs. The content is professionally presented with consistent Boeing branding and clear navigation, targeting suppliers and partners in the aerospace and manufacturing sectors. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information could be more transparent. The WHOIS data for the domain is missing or unavailable, which is unusual for a corporate domain of this scale. Despite this, the website's content, linked official Boeing domains, and branding strongly indicate legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site presents a low-risk profile with strong business credibility and technical implementation. However, the lack of WHOIS data and explicit contact information slightly reduce trust scores. Strategic improvements in security transparency and contact availability would enhance the site's trustworthiness and compliance posture.

B

Bonus Veren Siteler

bonus-deneme-siteler.com

56

Bonus Veren Siteler is a Turkish online platform specializing in aggregating and presenting legal and reliable bonus offers, promotional codes, and free trial opportunities primarily for e-commerce and digital services. The website targets online shoppers and users seeking to maximize savings and benefits through verified promotions. The business operates as an informational and affiliate-style service, focusing on providing up-to-date and trustworthy content to its audience. The market position is niche with a focus on the Turkish market, emphasizing legal compliance and user trust. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with external resources such as Google Fonts and Font Awesome. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized with responsive design and basic accessibility features. SEO practices are well implemented with comprehensive meta tags and structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks advanced security headers and does not publish privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The WHOIS data presents a suspicious domain creation date in the future, which undermines trust and requires further verification. No forms or user data collection mechanisms are present on the main page, reducing immediate privacy risks. Overall, the website is professionally designed and functional with good content quality and user experience. The main risks relate to compliance gaps (missing privacy and cookie policies) and the questionable WHOIS domain registration data. Strategic improvements in these areas would enhance trustworthiness and security posture.

S

Sue Ryder

suerydercharitycup.cz

47

Sue Ryder is a Czech non-profit organization that organizes the Sue Ryder Charity Cup, the largest corporate charity football tournament in the Czech Republic, supporting dignified senior care. The event has been held annually since 2009 and attracts numerous corporate participants and partners, including prominent entities such as AC Sparta Praha and Nadace ČEZ. The website serves as an information and registration portal for the event, showcasing partners, teams, and media content. Technically, the site is built on Vizus CMS, uses modern web standards, and is mobile optimized. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit privacy/cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high.

F

FourJaw Manufacturing Analytics Ltd

fourjaw.com

73

FourJaw Manufacturing Analytics Ltd is a UK-based company founded in 2020 specializing in manufacturing analytics software and IoT hardware solutions. Their platform provides real-time machine monitoring, productivity analytics, downtime tracking, and energy monitoring to manufacturers aiming to optimize factory floor operations. Positioned as an award-winning, plug-and-play solution, FourJaw targets SMEs to global manufacturers, emphasizing ease of installation and affordability. The website reflects a mature digital presence built on HubSpot CMS, with strong branding, comprehensive content, and clear calls to action. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS, domain locking, and cookie consent mechanisms, though lacks explicit security policies or incident response disclosures. Overall, FourJaw presents a trustworthy and professional business with a strong market position in manufacturing analytics.

카

카페24 주식회사

cafe24corp.com

45

Cafe24 Corp. is a South Korean technology company specializing in providing a comprehensive global e-commerce platform. Their services include commerce platform solutions, global market expansion support, store and design services, marketing, hosting, and entrepreneurship education. The company positions itself as a leader in the Korean e-commerce ecosystem with a strong partner network and a focus on enabling global online business success. The website content is professionally presented in Korean with multilingual support, targeting online merchants and businesses seeking e-commerce solutions. Technically, the website uses modern JavaScript libraries such as jQuery 3.6.0 and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features are basic, and no CMS or specific frameworks are detected. Hosting appears to be managed internally or through Cafe24's own infrastructure. From a security perspective, the site enforces HTTPS and uses standard tracking scripts without visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security best practices and privacy compliance. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, Cafe24's website is a well-structured, professional platform supporting a large e-commerce business. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, publishing security policies, and clarifying domain registration information to improve trust and compliance.

Spotler Ltd operates a marketing platform specializing in email marketing delivery and authentication services. The analyzed domain cgtforms.com is used by Spotler customers for email authentication and link redirection, serving as a technical domain rather than a direct customer-facing website. The website content is minimal but professional, providing transparency about data privacy and compliance with spam laws. The company positions itself as a trusted provider in the email marketing sector with a medium-sized business footprint in the UK. Technically, the website uses standard HTML and CSS with FontAwesome icons, hosted under a domain registered via Easyspace Limited. The site is mobile responsive with basic accessibility and SEO features but lacks advanced security headers and cookie consent mechanisms. DNSSEC is not enabled, representing a potential security enhancement. No tracking or analytics scripts were detected, indicating minimal user tracking. From a security perspective, the domain registration includes protective statuses to prevent unauthorized transfers or updates, enhancing trustworthiness. However, the absence of security headers and cookie policies suggests room for improvement in security posture and privacy compliance. No vulnerabilities or suspicious patterns were identified. Overall, the site is safe, professional, and compliant with GDPR principles, but could benefit from enhanced security and privacy features. The overall risk is low given the nature of the site as an informational domain for a marketing platform. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies to improve trust and compliance.

D

DESIGN TRADE s.r.o

dtgroup.cz

54

Design Trade Group is a medium-sized retail and wholesale business specializing in luxury watches, jewellery, and cosmetics across Czechia, Slovakia, and Poland. With over 30 years of experience, the group operates flagship retail stores in Prague and distributes numerous prestigious international brands. The website reflects a professional and consistent brand image, targeting consumers and retailers interested in high-end luxury goods. Technically, the site uses modern front-end technologies and is mobile-optimized, though it lacks advanced SEO and accessibility features. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the provided data, and no privacy or cookie policies are present, indicating compliance gaps. The absence of WHOIS data limits domain legitimacy verification, but the business information and external brand partnerships support credibility. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

Sabe, spol. s r.o.

kancelar-sabe.cz

45

Sabe, spol. s r.o. operates as a retail business specializing in office supplies, calendars, diaries, and office furniture primarily serving customers in the Czech Republic. The company maintains multiple physical stores, with the website indicating at least one active location in Blansko. The website is currently in maintenance mode, preparing a new e-shop, but provides a catalog link and contact information for customers. The business targets both individual and corporate customers seeking office-related products with options for personal pickup. Technically, the website uses standard HTML5 and CSS3 with custom fonts and basic responsive design. There is no detected CMS or advanced frameworks. The site lacks active analytics or tracking scripts, and no social media presence is linked. The website's SEO and accessibility features are basic, and performance is moderate. Security features such as HTTPS and security headers are not verifiable from the provided data, and no privacy or cookie policies are published. From a security perspective, the absence of WHOIS data and domain registration details is a concern, reducing trust in domain legitimacy. The site does not expose any forms or user input fields, minimizing attack surface, but also lacks visible security best practices such as security headers or vulnerability disclosure policies. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which could pose legal risks. Overall, the website presents a legitimate retail business with moderate digital maturity but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and user experience. The domain registration opacity is a notable risk factor that should be addressed to improve credibility.

T

The Boeing Company

boeing.com

77

The Boeing Company is a globally recognized aerospace and defense corporation, operating as the world's largest manufacturer of commercial jetliners and defense, space, and security systems. The website reflects a mature, enterprise-level digital presence with comprehensive content targeting commercial aerospace customers, defense clients, investors, employees, and the general public. The business model centers on manufacturing and services in aerospace and defense, with a strong emphasis on innovation, safety, and sustainability. The site demonstrates consistent branding and professional design, supporting Boeing's market leadership position. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but explicit security headers and cookie consent mechanisms could be improved. Privacy compliance is partially addressed with a comprehensive privacy and ethics policy, but lacks visible cookie consent and detailed data protection officer contact. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain introduces some uncertainty. The digital infrastructure supports Boeing's business objectives effectively, but enhancements in privacy transparency and security header implementation are recommended to further strengthen compliance and user trust.

POSKYTOVATEL.cz is a Czech webhosting provider offering tiered hosting packages including basic, professional, and reseller hosting plans. The website is built on the WHMCS platform, providing e-commerce and client management capabilities. The site is well-structured, mobile-optimized, and presents clear service offerings targeted at small businesses, web developers, and agencies. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. The website lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Technically, the site uses modern web technologies and includes security measures such as CSRF tokens, but lacks visible security headers and detailed security policies.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business-related information, contact details, or policies are present. The page primarily contains technical scripts and styles related to the Chrome offline dinosaur game, which is a default error placeholder. Consequently, no meaningful business or security posture can be derived from this content. The technical infrastructure is limited to browser internal scripts with no external hosting or CMS details. Security posture is minimal due to lack of headers or policies, and privacy compliance is absent. Overall, the site is non-functional from a user or business perspective, and the analysis is constrained by the lack of accessible content.

3

3mag

3mag.eu

33

3mag is a regional multilingual magazine serving the three-country border region of Germany, Czech Republic, and Poland. It focuses on cultural events, lifestyle, and regional stories, targeting residents and visitors interested in the Neisse Euroregion. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and featuring a rich set of articles and event information. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned as a niche regional media outlet.

L

Landkreis Görlitz

gis-lkgr.de

54

The website gis-lkgr.de serves as the official geoportal for Landkreis Görlitz, a regional government entity in Germany. It provides a comprehensive set of geographic information system (GIS) services including parcel and address searches, map printing, coordinate tools, and access to OGC services. The portal targets residents, local government officials, planners, and public users interested in geographic and cadastral data of the Landkreis Görlitz region. The business model is a public service offering free access to official geographic data, positioning itself as a trusted government resource. Technically, the website is built using ExtJS 4 framework and proprietary GIS software components (cardo.Map3Lib). It employs AJAX for dynamic content loading and uses HTTPS for secure communication. The site demonstrates moderate performance and basic mobile optimization. Accessibility and SEO optimizations are present but could be improved. The content is well-structured and professionally presented, with consistent branding aligned with Landkreis Görlitz. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which is a GDPR compliance gap. Incident response and security policies are not explicitly provided. No vulnerabilities or suspicious domains were detected. Overall, the security posture is adequate but could benefit from enhancements. The overall risk assessment is low, with the site appearing trustworthy and legitimate as an official government portal. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, providing explicit security and incident response policies, improving mobile responsiveness, and regularly auditing third-party libraries. These steps will enhance compliance, security posture, and user trust.

S

SABE, spol. s r.o.

sabe.cz

48

SABE, spol. s r.o. is a well-established Czech company specializing in the manufacture and sale of sports trophies, medals, plaques, and other awards, alongside office supplies and printing services. With a history dating back to 1990 and six physical stores across major Czech cities, the company holds a solid regional market position. Their website reflects a professional retail and manufacturing business model targeting general consumers and organizations requiring trophies and office products. Technically, the website employs modern web standards with responsive design and integrates Google Analytics for visitor insights. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates good GDPR compliance. Security-wise, the site enforces HTTPS but lacks advanced security headers and formal incident response disclosures, suggesting room for improvement. Overall, the website is trustworthy, content-rich, and professionally maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen the security posture and trust further.

P

Pražský hrad

hrad.cz

70

The website www.hrad.cz serves as the official digital presence of the Office of the President of the Czech Republic, providing authoritative information, news, and cultural content related to the presidency and Prague Castle. It targets the general public, media, and visitors, offering comprehensive resources including press releases, event information, and contact avenues. The site is well-branded and professionally maintained, reflecting its governmental status. Technically, the site employs modern web technologies including Google Tag Manager for analytics, Cloudflare for performance and security, and is optimized for mobile devices with responsive design. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to user privacy and compliance with GDPR. The site is served over HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent management. However, explicit security headers and a public security policy or vulnerability disclosure page are not evident, representing areas for improvement. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent, given the official nature of the site. Overall, www.hrad.cz is a trustworthy, well-maintained government website with strong content quality and technical implementation. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clearer contact information for security incidents to further strengthen trust and compliance.

P

Privacy service provided by Withheld for Privacy ehf

crucials.io

46

Crucials is a newly launched SaaS company founded in 2024, offering an all-in-one suite of over 30 integrated apps designed to enhance BigCommerce stores by boosting sales and improving customer experience. The company targets e-commerce businesses using the BigCommerce platform, positioning itself as a comprehensive toolkit to streamline store management and growth. The website is professionally designed, mobile-optimized, and uses modern technologies including Unicorn Platform, Intercom for customer engagement, and Facebook Pixel for marketing analytics. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy and terms policies are present and GDPR compliance is indicated, but no cookie consent mechanism is implemented despite tracking pixels. Contact information is limited to a physical address in Hanoi, Vietnam, and an Intercom chat interface, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security headers and privacy transparency.

The website topnahradnidily24.cz is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. This prevents extraction of meaningful business, contact, or policy information. The domain was registered in 2016 and uses Cloudflare for DNS and security services, indicating a stable but small-scale operation likely based in the Czech Republic. The lack of visible content or metadata limits the ability to assess the business model or market position. Technically, the site uses modern security mechanisms but does not expose any SEO or accessibility features on the challenge page. Security posture is limited to Cloudflare's WAF protections, with no additional headers or policies visible. Overall, the site appears legitimate but lacks transparency and accessible content for full analysis.

The website euautodily.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct content access. The domain is registered since 2015 under a Czech registrar and uses Cloudflare for security and performance. Due to the WAF challenge, no business content, contact information, or policies are accessible for analysis. The technical infrastructure indicates use of modern security measures but limits visibility into the site's actual offerings or compliance posture. Security posture cannot be fully assessed beyond the presence of Cloudflare protection. Overall, the site appears legitimate based on domain age and registrar data but lacks accessible content for comprehensive evaluation.

P

PUBHTML5.com

pubhtml5.com

75

PubHTML5.com is a digital publishing platform established in 2014, offering software tools to create mobile-friendly HTML5 flipbooks, eMagazines, catalogs, and brochures. The platform targets publishers, marketers, and digital content creators, providing a SaaS model with free and paid offerings. The website demonstrates a consistent brand presence and professional content focused on digital publishing solutions. Technically, the site uses a modern tech stack including jQuery, Cloudflare DNS, and Cookiebot for consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and domain protection statuses, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong, with comprehensive privacy and cookie policies and an active consent mechanism. However, contact information and terms of service are not clearly presented, which could impact user trust. Overall, the site is professional, secure, and compliant, suitable for its target audience.

D

DigitaltMuseum

digitaltmuseum.se

58

DigitaltMuseum is a well-established digital platform founded in 2008 that aggregates collections from Norwegian and Swedish museums, providing public access to over four million cultural heritage items including photographs, artworks, and buildings. The platform targets museums, researchers, and the general public interested in cultural heritage, positioning itself as a leading resource in the Nordic region for digital museum collections. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Video.js for media playback, with hosting and DNS services provided by reputable providers such as Domeneshop AS and AWS Route53. Security measures include HTTPS enforcement, CSRF token usage, and Google reCAPTCHA integration, although DNSSEC is not enabled and explicit security headers are not visible in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website demonstrates a high level of professionalism, content quality, and business credibility, with room for improvement in privacy policy transparency and security header implementation.

The website zbl.basketball serves as the official online presence for the Czech Women's Basketball League, operated under the Czech Basketball Federation. It provides comprehensive information including news, match schedules, player and team statistics, and multimedia content targeted at basketball enthusiasts, players, coaches, and officials within the Czech Republic. The site is well-branded and consistent with the federation's identity, supporting its role as a key information hub for women's basketball in the region. Technically, the site employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and features a cookie consent mechanism, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the official federation, enhancing trust. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some recommended security headers. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is professional, trustworthy, and serves its business purpose effectively. However, improvements in privacy compliance documentation and security best practices are recommended to reduce risk and increase user confidence.

The website nbl.basketball serves as the official digital platform for the Czech National Basketball League, operated by the Czech Basketball Federation. It provides comprehensive basketball-related content including news, match schedules, statistics, team profiles, and ticketing information. The site targets basketball enthusiasts, players, coaches, and officials within the Czech Republic, positioning itself as a central hub for national basketball activities. The business model appears to be informational and promotional, supported by the federation and possibly sponsorships. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and analytics. The site is hosted by Bombora Technologies Pty Ltd., with a moderate performance profile and good mobile optimization. Accessibility is basic but functional, and SEO practices are adequately implemented through meta tags and structured navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found, representing a compliance gap. Contact information and incident response details are not explicitly provided. Overall, the website is trustworthy and professionally maintained, with a strong alignment between domain registration data and website content. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to improve the security posture and compliance standing.

G

Gumi-teszt.eu

gumi-teszt.eu

55

Gumi-teszt.eu is a Hungarian-language tire review and test aggregation website providing extensive user-generated and expert test data for summer, winter, and all-season tires. The platform targets vehicle owners and drivers seeking reliable tire information to make informed purchasing decisions. It aggregates official test results from reputable sources such as ADAC and AutoBild and supplements these with user reviews. Technically, the site uses standard web technologies including Google Analytics and Adsense for tracking and monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie policy present but no detailed privacy or incident response policies. WHOIS data is unavailable due to EURid privacy restrictions, which is typical for EU domains and does not raise legitimacy concerns. Overall, the site is professional and trustworthy within its niche but could improve transparency and security practices.

R

Ranking-opon.eu

ranking-opon.eu

58

Ranking-opon.eu is a Polish-language niche content platform specializing in tire rankings and user reviews, aggregating thousands of tire evaluations and official test results such as ADAC and AutoBild. The website targets drivers and vehicle owners in Central Europe seeking detailed and transparent tire information to aid purchase decisions. The business model revolves around user-generated content combined with expert test data, supported by advertising revenue through Google Adsense and retargeting services. The site is small in scale but maintains consistent branding and good content quality.

C

Channel 4 Ventures

channel4ventures.com

61

Channel 4 Ventures operates as the UK's largest media-for-equity fund, leveraging Channel 4's extensive TV advertising reach to invest in early-stage consumer brands. Their unique business model exchanges TV advertising budgets for equity stakes, providing startups with significant marketing resources without upfront cash costs. The company positions itself as a long-term, founder-friendly partner focused on building household name brands in the UK consumer market. Technically, the website is built on modern frameworks such as Next.js and Drupal headless CMS, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS and modern security headers, though privacy and cookie policies are absent, indicating room for compliance improvement. The absence of WHOIS data is a notable anomaly but the website's branding and content strongly associate it with the reputable Channel 4 broadcaster. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

B

Brite Beak

britebeak.com

61

Brite Beak is a newly registered domain and business based in the Philippines, currently presenting a minimal website with a 'Launching Soon' message. The site is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC. The technical infrastructure is basic but functional, with HTTPS enabled and reCAPTCHA protecting the contact form. However, the site lacks critical business and legal content such as privacy policy, terms of service, and detailed contact information, which limits its credibility and compliance posture. Security measures are minimal, with no DNSSEC or security headers implemented. Overall, the website appears to be in early development or pre-launch stage, with limited digital maturity and business presence.

G

G-car s.r.o.

g-car.cz

50

G-car s.r.o. is a Czech Republic-based luxury car dealership specializing in new, demo, and reference vehicles from premium brands such as Audi, BMW, Mercedes-Benz, Volkswagen, and Škoda. Established in 2008, the company offers a comprehensive range of services including vehicle sales, a unique SMART financing system tailored for entrepreneurs, and a fully equipped autoservice for vehicles up to 3.5 tons. The business maintains a strong local presence in České Budějovice and Boršov nad Vltavou, supported by positive customer reviews and a professional online presence. Technically, the website is built on VARIO CMS 3.0, employing modern web technologies with asynchronous script loading and responsive design for mobile users. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. The absence of some security headers and explicit cookie consent mechanisms indicates partial compliance with best security and privacy practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible incident response policies or vulnerability disclosure information. The WHOIS data is unavailable, which slightly impacts trustworthiness, though the business information and external trust signals mitigate this concern. Overall, the site presents a secure and professional front with minor gaps in privacy compliance and security transparency. Strategically, G-car s.r.o. should focus on enhancing security headers, implementing explicit cookie consent, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance. These improvements will support sustained growth and customer confidence in a competitive luxury automotive market.

A

Armik.cz: Armyshop a outdoor

armik.cz

47

Armik.cz is a Czech Republic based e-commerce retailer specializing in military, outdoor, survival, and sporting goods. The website offers a wide range of products including clothing, tactical gear, and accessories, targeting outdoor enthusiasts and military gear consumers. The business has been operating since 2008, indicating a stable market presence. Technically, the site uses a proprietary e-commerce platform with modern JavaScript integrations including Google Tag Manager and Google Analytics, supporting marketing and analytics efforts. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. No direct contact emails or phone numbers were found in the analyzed content, limiting direct customer support visibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

CZ.BASKETBALL

cbf.cz

50

CZ.BASKETBALL is a well-established Czech basketball portal founded in 2009, serving as a central hub for basketball news, videos, competitions, and community engagement in the Czech Republic. The website targets basketball fans, players, coaches, and officials, providing comprehensive coverage of national teams, leagues, and events. It maintains strong partnerships with official basketball organizations and sponsors, enhancing its market position as a leading basketball information source in the region. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and a custom CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security documentation.

B

Bundesanstalt für Straßen- und Verkehrswesen

bast.de

64

The Bundesanstalt für Straßen- und Verkehrswesen (BASt) is a German federal government research institute specializing in road and traffic safety, infrastructure, vehicle technology, and traffic engineering. It operates under the Federal Ministry for Digital and Transport and provides authoritative research, publications, and quality assessments to support transportation infrastructure and safety in Germany. The website serves as a comprehensive portal for research outputs, news, and public information targeting professionals, government bodies, and the general public. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is well-optimized for mobile devices, accessible, and SEO-friendly. The site uses HTTPS with excellent SSL configuration, though security headers are not explicitly detected in the HTML content. Privacy and cookie policies are clearly presented with GDPR compliance, and a cookie consent mechanism is implemented. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact details and does not provide a security.txt file for vulnerability disclosures. The domain registration and DNS setup align with German government and research networks, reinforcing legitimacy and trustworthiness. Overall, the BASt website is a professional, trustworthy, and secure government portal with excellent content quality and user experience. Strategic improvements could include enhancing security headers and publishing explicit security policies to further strengthen its security posture.

M

Município de Resende

cm-resende.pt

31

The Município de Resende website serves as the official digital presence of the local government of Resende, Portugal. It provides residents and visitors with comprehensive information about municipal governance, public services, cultural events, social programs, and community engagement initiatives. The site targets local citizens and stakeholders, offering transparency and access to municipal resources. The business model is that of a public sector entity focused on service delivery and community interaction. Technically, the website is built on WordPress, utilizing jQuery and jsCalendar for interactive elements. The site demonstrates moderate performance and good mobile optimization, though some technologies like jQuery are outdated. The design is professional and consistent with municipal branding, providing a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and includes some basic security headers but lacks advanced protections such as Content-Security-Policy and Strict-Transport-Security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is available primarily through social media links and a contact page, but no direct emails or phone numbers were found. Overall, the website is trustworthy and suitable for its purpose, with a solid foundation in content and business credibility. Strategic improvements in security headers, privacy compliance, and technology updates would enhance its posture and user trust.