Security Directory

S

SATJAM, s.r.o.

satjam.sk

57

SATJAM, s.r.o. is a medium-sized manufacturing company specializing in metal roofing products and accessories, serving primarily the Slovak and Czech markets. The company emphasizes quality Czech manufacturing standards and offers a broad product portfolio including steel and aluminum roof coverings, trapezoidal sheets, and roofing accessories. Their website reflects a professional digital presence with clear navigation, mobile optimization, and integration of marketing and analytics tools. However, the absence of a dedicated privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Security posture is solid with HTTPS and cookie consent mechanisms, but could be enhanced with additional security headers and published security policies. Overall, the website supports the company's market position as a trusted regional player with recognized certifications and active customer engagement.

V

Výskumný ústav potravinársky

vup.sk

52

Výskumný ústav potravinársky (VÚP) is a Slovak national research institute specializing in food science, research, and related services. Established in 2003, it provides scientific research outputs, consulting, testing laboratory services, and publishes journals and bulletins targeting both professional and general audiences interested in food and nutrition. The website reflects a well-established institutional presence with consistent branding and a clear focus on its research mission. Technically, the site uses a traditional web stack with jQuery and related UI libraries, delivering moderate performance and good mobile responsiveness. Security posture is adequate with cookie consent and privacy policy compliance, though some improvements in security headers and library updates are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

S

Stephen Pelling

stephenpelling.com

49

Stephen Pelling's website serves as a professional portfolio showcasing his work as a creative art director, designer, and musician based in London. The site highlights various projects spanning from 2017 to 2021, targeting a general audience interested in creative arts and design. The business model is personal branding and portfolio presentation, with no e-commerce or direct sales functionality. The website is hosted on Cargo Collective and registered via GoDaddy, reflecting a small-scale, niche creative professional presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with templating via Handlebars.js. It is mobile optimized and performs moderately well, though it lacks advanced SEO and accessibility features. Hosting and domain registration are consistent and appropriate for the site's scope. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for improved protection. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is professional and functional as a portfolio but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve trust and regulatory adherence.

The website hk8.sk represents the Združenie hlavných kontrolórov samosprávnych krajov SR (HK8), a Slovak professional association for chief controllers of self-governing regions. The organization focuses on enhancing the expertise and effectiveness of control activities within local government, supporting professional development, legislative advocacy, and cooperation with similar institutions domestically and internationally. The site content is primarily informational, targeting professionals in Slovak regional government oversight. The business model is membership-based, funded by contributions from regular and honorary members, positioning HK8 as a niche professional association within the Slovak government sector. Technically, the website is built using static HTML generated by Artisteer, with CSS and jQuery for styling and interactivity. Hosting appears to be provided by Websupport, inferred from the nameservers. The site demonstrates basic mobile responsiveness and accessibility but lacks advanced SEO and performance optimizations. No analytics or tracking technologies are detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC, indicating a commitment to DNS integrity. However, the website lacks visible HTTPS confirmation in the provided data, security headers, and privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or contact mechanisms are present to facilitate incident reporting or user communication. These gaps suggest a moderate security posture with room for significant improvement. Overall, the website is functional and serves its informational purpose but requires enhancements in security, privacy compliance, and user engagement features to improve trustworthiness and regulatory adherence.

O

Ordem dos Engenheiros

ordemdosengenheiros.pt

60

Ordem dos Engenheiros is the official professional association for engineers in Portugal, providing a comprehensive range of services including membership management, professional certifications, training, events, and advocacy. The website serves as a central hub for engineering professionals and students, offering access to news, events, job boards, and regulatory information. The organization holds a leading position in the Portuguese engineering sector with a strong focus on professional development and international cooperation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and YouTube APIs, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement in adding advanced security headers and incident response disclosures. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, the site is professional, trustworthy, and well-maintained, serving its target audience effectively.

A

ALBIXON a.s.

powderpaintplant.com

50

ALBIXON a.s. operates a specialized powder coating plant in the Czech Republic, offering advanced surface treatment and decorating services primarily for industrial clients. The company emphasizes high-quality coatings certified by GSB International and Qualicoat, leveraging modern automated technology and an experienced workforce. Their market position is that of a significant European player in powder coating with a focus on quality, speed, and eco-friendly operations. Technically, the website is built with modern front-end technologies including Bootstrap and lazy loading libraries, providing a good user experience and mobile optimization. However, the absence of explicit privacy and terms of service pages, lack of contact information, and missing WHOIS data reduce transparency and trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and content-rich but would benefit from enhanced compliance and security disclosures.

Fair Go Casino is an Australian-focused online gambling affiliate platform operated by Deckmedia, offering a variety of casino games, promotions, and bonuses targeting Australian players. The website is designed with mobile optimization and provides multiple payment options including Bitcoin, Neosurf, and POLi. Technically, the site uses modern HTML5 and JavaScript technologies with Microsoft Clarity for analytics, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is supported by Curacao licensing and CDS certification, though direct company contact emails are not published. Overall, the site is functional and trustworthy as an affiliate platform but could improve security and privacy practices.

O

Captcha - WEDOS Global Protection

obec2030.cz

48

The analyzed URL is a captcha verification page provided by WEDOS Global Protection, serving as a security gate to protect the underlying website. The page itself contains minimal content, primarily a form with a captcha image and input field, and no business or contact information. The domain is registered with REG-WEDOS and uses WEDOS name servers, consistent with the hosting and protection provider. The domain age is approximately 3.5 years, which is reasonable for the service. Technical infrastructure is basic, with no advanced frameworks or CMS detected. Security posture shows some best practices such as CSRF token usage and captcha protection, but lacks visible security headers and privacy policies. The page is blocked by a WAF/security mechanism, limiting the ability to perform a full content and compliance analysis.

A

Automattic

simplenote.com

65

Simplenote, owned by Automattic, is a well-established note-taking service offering a simple, free, and cross-platform solution for users to keep notes synced across devices. The website is professionally designed, leveraging the WordPress.com platform and Jetpack plugin, with strong branding consistency and positive trust signals including media endorsements and official app store links. The technical infrastructure is modern and performant, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and domain protections in place, though some improvements are recommended such as enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed via a comprehensive privacy policy hosted on Automattic's site, but lacks a cookie consent mechanism. Overall, the website is trustworthy, safe, and professionally maintained.

R

RoboSkillz Academy

roboskillz.academy

63

RoboSkillz Academy is a Slovak-based educational platform specializing in interactive workshops and courses in robotics, programming, and technology aimed at students of all levels. The platform leverages the LearnWorlds system to deliver STEM-focused content, supporting practical learning and growth in technology fields. The website is professionally designed with clear navigation and mobile optimization, targeting a niche market in STEM education. Technically, the site uses modern web technologies and embeds video content via Wistia, but lacks some advanced security headers and privacy compliance features. Security posture is adequate with HTTPS and CSRF protections, but could be improved with additional headers and privacy policies. Overall, the domain appears legitimate despite the absence of public WHOIS data, likely due to privacy protection. The site maintains a moderate trust level with visible social media presence and consistent branding.

B

Beats by Dre

beatsbydre.com

58

Beats by Dre is a prominent brand specializing in wireless headphones, earbuds, speakers, and related audio products. The website presents a professional and well-branded digital storefront targeting general consumers interested in high-quality audio devices. The technical infrastructure appears modern with the use of JavaScript and Font Awesome icons, and the site includes Google site verification, indicating some level of digital maturity. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy. Security posture is moderate but lacks visible security headers and privacy policies, which are critical for user trust and compliance. Overall, the site is functional and visually appealing but requires improvements in security and compliance transparency.

A

ALBIXON a.s.

praskovalakovna.cz

56

ALBIXON a.s. operates a significant European powder coating plant offering advanced powder coating and decorating services. The company emphasizes quality, speed, and ecological responsibility, supported by certifications such as GSB International and Qualicoat. Their website reflects a professional B2B manufacturing service provider targeting industrial clients requiring surface finishing solutions. Technically, the website uses modern frontend technologies including Bootstrap and lazy loading for images, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers or incident response information are published, and WHOIS data is missing, which raises some concerns about domain legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professional but would benefit from enhanced security transparency and domain registration clarity.

B

BAZENY.cz

bazeny.cz

60

BAZENY.cz is a Czech Republic-based e-commerce retailer specializing in pools, pool enclosures, and related accessories. The company positions itself as a significant seller in the Czech market, offering a wide range of products including in-ground pools, pool lights, and spare parts. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience. Technically, the site is built on the oXyShop platform and leverages modern web technologies such as Google Tag Manager, Algolia Autocomplete, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and CAPTCHA protections, though some security headers are not explicitly detected. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for commercial sites. Overall, the site presents a moderate risk profile with good business credibility and technical implementation.

A

ALBIXON a.s.

albixon.co.za

53

ALBIXON a.s. is a well-established European manufacturer specializing in swimming pools and pool enclosures, with a strong market presence across multiple countries and over 30 years of experience. The company targets homeowners and dealers seeking high-quality pool solutions and operates a multilingual web presence to support its international customer base. Technically, the website employs modern web technologies such as Bootstrap, lazy loading, and animation libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional branding, certifications, and comprehensive product information support the company's credibility. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

A

ALBIXON a.s.

albixonusa.com

52

ALBIXON a.s. is a well-established European manufacturer specializing in swimming pools and pool enclosures, with a strong presence in over 70 countries. The company emphasizes quality, innovation, and customer satisfaction, supported by multiple certifications and a professional online presence. Their website reflects a mature business with clear branding and comprehensive product offerings. Technically, the site uses modern web technologies such as Bootstrap, lazy loading, and animation libraries, providing a good user experience across devices. However, the absence of WHOIS data for the domain www.albixonusa.com raises concerns about domain legitimacy and registration status, which should be investigated further. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security transparency.

A

ALBIXON a.s.

albixon.fr

47

ALBIXON a.s. is a well-established European manufacturer specializing in high-quality swimming pools, pool enclosures, bioclimatic pergolas, and related pool technologies and accessories. Founded in 1985 by the Smetana brothers, the company has grown to become a leading brand in Europe with a presence in over 70 countries. Their business model includes direct manufacturing in the Czech Republic and sales through a network of partners in Germany, Austria, Switzerland, and other markets. The website reflects a professional and consistent brand image with comprehensive product information and customer testimonials, supporting their market position. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, and lazy loading for images, ensuring good mobile optimization and user experience. SEO practices are well implemented with proper meta tags and structured data. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS and includes anti-spam measures in forms and a cookie consent modal with granular options, indicating awareness of privacy compliance. However, the absence of visible security headers, explicit privacy policy, and incident response information suggests room for improvement in security posture. The lack of WHOIS data reduces domain trust verification, though the website content and certifications support legitimacy. Overall, ALBIXON's website is professional, content-rich, and trustworthy, but would benefit from enhanced security policies, clearer privacy documentation, and improved domain registration transparency to strengthen user trust and compliance.

A

ALBIXON a.s.

albixon.es

48

ALBIXON a.s. is a well-established European manufacturer specializing in pools, pool covers, bioclimatic pergolas, pool technology, and accessories. Founded in 1985, the company has grown to serve customers in over 70 countries, positioning itself as a market leader in its sector. The website reflects a professional and consistent brand image, offering detailed product information and customer references, supported by certifications and awards that enhance trust. The business model relies on manufacturing and distribution through a network of partners and a dedicated B2B portal.

A

ALBIXON a.s.

albixon.com

54

ALBIXON a.s. is a well-established manufacturer specializing in high-quality swimming pools, pool enclosures, and related accessories, primarily serving the European market from its base in Prague. The company positions itself as a leading player in the pool manufacturing industry with over 30 years of experience and a broad international presence. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer references, and multiple language options to cater to diverse markets. The inclusion of certifications and a B2B portal further supports their market credibility. Technically, the website employs modern web technologies including Bootstrap, Owl Carousel, and lazy loading techniques to optimize performance and user experience. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. However, no explicit CMS or hosting provider information is available, and performance is moderate based on the observed assets. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of visible security headers and a published security policy or incident response contact reduces the overall security posture. The lack of WHOIS domain registration data is a notable concern, potentially indicating recent registration or privacy protection, which slightly impacts trustworthiness. Overall, ALBIXON's website is a strong representation of a mature manufacturing business with good digital maturity and compliance practices. The main risks relate to domain registration transparency and formalized security disclosures. Strategic improvements in these areas would enhance trust and security assurance for customers and partners.

A

ALBIXON a.s.

albixon.de

54

ALBIXON a.s. is a well-established European manufacturer specializing in swimming pools, pool enclosures, bioclimatic pergolas, and related pool technology and accessories. Founded in 1985 by the Smetana brothers, the company has grown to become a leading player in the European market with a strong export footprint in over 70 countries. Their business model leverages both direct manufacturing and a network of partners in Germany, Austria, and Switzerland to provide comprehensive customer support from planning to maintenance. The website reflects a mature digital presence with multilingual support, a B2B portal, and extensive product and reference information. Technically, the website employs modern web technologies including Bootstrap, lazy loading images, and JavaScript libraries for enhanced user experience and performance. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response contacts are not publicly disclosed. Analytics and marketing tools such as Google Analytics, Smartlook, and Facebook Pixel are used with appropriate consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements. The WHOIS data aligns with the business claims, showing consistent domain registration and no privacy protection, supporting legitimacy. No blocking or WAF interference was detected, allowing full content access and analysis.

P

Pricemania s.r.o.

pricemaniaacademy.sk

39

Pricemania Academy, operated by Pricemania s.r.o., is a Slovak-based educational platform offering the first comprehensive e-commerce and online marketing training program in Slovakia. The website provides interactive workshops, webinars, and tailored training sessions aimed at e-shops and online businesses. It positions itself as a trusted source with professional mentors, case studies, and a satisfaction guarantee. Technically, the website uses modern web technologies including JavaScript libraries, Vimeo API, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and secure forms, but lacks some security headers and visible cookie consent mechanisms, which impacts GDPR compliance. Overall, the domain registration and business information are consistent and legitimate, supporting a high trust level.

G

Google LLC

google.com.tw

72

Google LLC operates the world's leading search engine and a broad portfolio of internet-related services and products. The company holds a dominant market position in online search and advertising, serving a global audience with localized content such as the German-language interface analyzed here. Google's business model primarily revolves around advertising revenue generated through its search engine and associated platforms. The website reflects Google's enterprise scale, with a consistent brand presence and comprehensive service offerings.

R

Royal Academy of Engineering

thisisengineering.org.uk

61

Thisisengineering.org.uk is an educational website operated under the Royal Academy of Engineering, focused on promoting engineering careers and providing resources for students and educators. The site offers rich multimedia content, career guidance, and profiles of engineers, positioning itself as an authoritative resource in the STEM education sector within the United Kingdom. The domain has been active since 2017, consistent with the maturity of the content and the organization's initiatives. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. It is hosted by Easyspace Ltd, a reputable UK hosting provider. The site demonstrates good performance, mobile optimization, and accessibility standards, with a clean and professional design that enhances user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The use of Google reCAPTCHA cookies indicates bot protection measures. Privacy policies and cookie declarations are comprehensive and transparent. Overall, the website presents a low risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to sustain trust and security.

P

PROFIL NÁBYTEK, a. s.

profil-nabytek.cz

46

PROFIL NÁBYTEK, a. s. is a Czech-based medium-sized company specializing in the manufacturing of office furniture and comprehensive interior design services. With a strong emphasis on project consulting and custom solutions, the company targets businesses and organizations seeking quality furniture and interior realization. The website reflects a professional and well-established business with a consistent brand presence and extensive references. Technically, the site uses modern web technologies including Alpine.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust, but the business content and contact information support legitimacy. Overall, the website is a strong digital asset for the company, supporting its market position and customer engagement.

P

PETROF, spol. s r.o.

petrof.cz

66

PETROF, spol. s r.o. is a leading European manufacturer of acoustic pianos and pianinas, operating globally with exports to over 65 countries. The company maintains a strong market position as the largest manufacturer in Europe, supported by a well-structured website that highlights its products, dealer network, and corporate information. The website is multilingual and professionally designed, targeting piano buyers, music professionals, and dealers worldwide. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, alongside security measures like HTTPS and Google reCAPTCHA to protect user interactions. However, the absence of WHOIS data limits transparency regarding domain registration details.

Arbyd is a Czech manufacturer specializing in custom furniture and interior design with over 30 years of tradition. The company offers a comprehensive service from design to manufacturing and installation, targeting customers seeking tailored interior solutions. The website is professionally designed, mobile-optimized, and provides clear navigation to various product categories and company information. Technically, the site uses modern web technologies including Google Analytics and Slick Carousel, with HTTPS enabled ensuring secure communication. However, the absence of WHOIS data and lack of visible security headers slightly reduce the overall trustworthiness. Privacy compliance is basic, with a privacy policy and terms of service present but no explicit cookie consent mechanism detected. Overall, the website reflects a legitimate and established business with room for improvement in security and privacy practices.

H

HOPI Holding a.s.

hopifoodbroker.eu

55

HOPI Food Broker operates as a specialized food brokerage and logistics partner primarily serving international retail chains. The company consolidates small deliveries to reduce costs and administrative burdens for suppliers, while also offering import expertise, customs handling, and logistics services. As part of the larger HOPI Holding a.s., it benefits from established market presence and certifications such as IFS Logistic, Organic operations, and ISO standards. The website reflects a professional business with a clear focus on food supply chain efficiency and compliance.

E

Epson

epson.sk

64

Epson Slovakia operates as a localized branch of the global Epson brand, providing a wide range of printing and imaging products including inkjet, laser, dot matrix printers, scanners, and projectors. The website targets both consumers and business customers in Slovakia, offering product information, support, and promotional content. The business model focuses on manufacturing and distributing technology products with a strong emphasis on brand consistency and customer support. Technically, the website leverages modern web technologies including Adobe DTM for tag management, Google reCAPTCHA for bot protection, and OneTrust for GDPR cookie consent management. The site is built on a CMS platform likely SAP Commerce (Hybris), ensuring structured content delivery and e-commerce capabilities. Security posture is solid with HTTPS enforced and basic security best practices in place, though additional security headers and explicit security policies could enhance trust. The absence of direct contact information and security incident channels is a minor gap. Overall, the website is professional, well-branded, and compliant with GDPR cookie consent requirements, reflecting a mature digital presence for an enterprise technology company.

珠

珠海格力电器股份有限公司

greeyun.com

53

The website greeyun.com represents the corporate presence of Zhuhai Gree Electric Appliances Co., Ltd., a manufacturing company based in China. The site content is minimal, primarily consisting of the company name in Chinese and a government ICP备案 link, indicating compliance with Chinese internet regulations. The business appears to focus on manufacturing electrical appliances, but no detailed business descriptions, services, or contact information are provided on the site. The domain is registered with Alibaba Cloud Computing and is consistent with the hosting provider, supporting legitimacy. From a technical perspective, the website uses basic HTML and CSS without advanced frameworks or CMS. Hosting is provided by Alibaba Cloud, a reputable provider. The site lacks mobile optimization, accessibility features, and SEO best practices. Security headers are minimal, with only a Content-Security-Policy to upgrade insecure requests. DNSSEC is not enabled, and no advanced security measures are observed. There are no forms, scripts, or analytics tools detected, indicating a very basic technical infrastructure. Security posture is moderate but limited by the absence of comprehensive security headers and DNSSEC. The lack of privacy and cookie policies, as well as absence of contact information, reduces compliance with global privacy standards such as GDPR. No vulnerability disclosure or incident response information is present. The site content is safe with no adult or questionable material detected. Overall, the website is functional but minimal, with significant room for improvement in content richness, security, privacy compliance, and user engagement. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and cookie policies, adding contact information, and improving website content and design to better reflect the company's market position and build trust.

B

Blutspendedienst des Bayerischen Roten Kreuzes gemeinnützige GmbH

blutspendedienst.com

67

Blutspendedienst des Bayerischen Roten Kreuzes gemeinnützige GmbH operates a comprehensive blood donation service platform primarily serving the Bavarian region in Germany. The organization is a non-profit entity affiliated with the Bavarian Red Cross, providing blood donation appointment scheduling, donor education, digital donor services via a mobile app, and health checks. The website is professionally designed with clear navigation and extensive content tailored to blood donors and healthcare partners. Technically, the site uses modern web technologies including Bootstrap, Matomo analytics, and cookie consent management, ensuring a good user experience and privacy compliance. Security posture is strong with HTTPS enforced and CSRF protections, though some security headers could be improved. The WHOIS data is unavailable, which is unusual but the website's legitimacy is supported by its branding and external references. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

D

DRK-Blutspendedienste

spenderservice.net

68

The website www.spenderservice.net is the official digital service portal for blood donors affiliated with the Deutsches Rotes Kreuz (German Red Cross). It provides a comprehensive platform for blood donors in Germany to manage their donation appointments, view donation history, participate in forums, and access a dedicated mobile app. The service is positioned as a trusted non-profit healthcare platform with a strong focus on user engagement and convenience. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with backend indications of Ruby on Rails. It integrates cookie consent management via CookieFirst and uses Piwik/Matomo for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and provides seamless navigation and user experience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong branding and professional presentation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for missing WHOIS data and security policy disclosures. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to bolster trust and compliance.

McCann Prague is a marketing and advertising entity with a long-established domain dating back to 1997. The current website is under construction and provides minimal information beyond social media links. The technical infrastructure uses Microsoft Azure DNS and custom web fonts, but lacks advanced frameworks or CMS. Security posture is basic with no visible security headers or privacy policies, and no HTTPS status provided. The site does not collect user data or provide contact information, limiting its business credibility and privacy compliance. Overall, the website is in an early stage of development and requires significant improvements in content, security, and compliance to meet professional standards.

E

Úvodní stránka

engineering-card.cz

46

The website engineering-card.cz serves as an informational portal for the Professional Engineer Card initiative in the Czech Republic, part of a broader European project to enhance engineer mobility. It is managed by Czech engineering organizations and government bodies, providing detailed information about the card, registration processes, and organizational structure. The site targets engineers seeking professional certification and mobility within Europe. Technically, the site is built on Joomla! CMS using standard web technologies like Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF tokens, but lacks HTTP security headers and explicit privacy policies, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data is consistent and legitimate, supporting trust in the site. Overall, the site is professional and functional but could enhance compliance and security practices.

O

Ordem dos Engenheiros

ordemengenheiros.pt

61

Ordem dos Engenheiros is the official professional organization for engineers in Portugal, providing membership services, professional certifications, training, events, and advocacy. The website serves as a comprehensive portal for members and the public, offering access to regional branches, news, events, and professional resources. The organization holds a strong market position as the leading engineering body in Portugal with a large membership base and international affiliations. Technically, the website uses modern web standards, HTTPS, and integrates Google Tag Manager and YouTube APIs, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS and basic security headers, but lacks explicit security policies and incident response disclosures. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

E

eNOT.pl

enot.pl

44

The website enot.pl appears to be a small Polish business with an online presence established since 2012. The site uses modern frontend technologies such as Element UI and Slick Carousel, indicating a moderate level of technical maturity. However, the content is minimal and lacks comprehensive business descriptions, contact information, or privacy-related policies. The absence of privacy and cookie policies, as well as security headers, suggests limited focus on compliance and security best practices. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. Overall, the security posture is basic, with room for improvement in privacy compliance and contact transparency.

The Comité Nacional Español ENGINEERS EUROPE is a newly established professional association representing Spanish engineers within the broader European engineering community. The organization aims to promote recognition, mobility, and professional opportunities for engineers across Europe. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Rank Math PRO. It is hosted by a reputable registrar and uses HTTPS, but lacks advanced security headers and DNSSEC. Privacy and terms of service pages are absent, indicating compliance gaps. No direct contact information is published, which may affect user trust and engagement. Overall, the site presents a professional image suitable for its target audience but requires enhancements in security and compliance to improve trustworthiness and regulatory adherence.

B

BM Systém s.r.o.

cervenykohout.com

45

The website cervenykohout.com represents a well-established annual fire protection conference held in České Budějovice, Czech Republic. The business behind the site is BM Systém s.r.o., a small company organizing this event since at least 2013, consistent with the domain registration date. The site provides information about the conference, including history, photo galleries, and online registration via a partner domain. The target audience includes professionals and stakeholders in fire protection and related fields. The business model centers on event organization and publication of conference materials.

The website kurse-pflege.de is an online platform focused on providing nursing and caregiving courses primarily in the German language. It targets individuals seeking professional education and certification in healthcare and emergency care. The platform offers various training modules and educational content tailored to caregivers and healthcare professionals. The market position is that of a niche healthcare education provider serving the German-speaking community. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and video playback libraries such as Video.js. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is basic with no evident security headers or advanced configurations, and no HTTPS status was explicitly found in the provided data. Privacy compliance is weak as no privacy or cookie policies were detected, and no GDPR compliance indicators are present. Business credibility is moderate but limited by the lack of explicit contact information and trust signals. Overall, the site is accessible and safe for general audiences but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

The website www.drk-blutspende.de serves as the official platform for the DRK-Blutspendedienste, the blood donation services under the German Red Cross. It provides comprehensive information about blood donation, appointment scheduling, and donor services, targeting the general public in Germany. The site is well-branded, consistent, and professionally designed, reflecting its position as a leading non-profit healthcare service provider. Technically, the site employs modern JavaScript libraries such as Swiper.js and AOS for UI enhancements, uses Matomo for analytics, and integrates a consent management platform to comply with GDPR requirements. The presence of CSRF tokens and HTTPS indicates a good security posture, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital infrastructure suitable for its healthcare and non-profit mission.

H

HOPI Holding a.s.

hopiholding.eu

52

HOPI Holding a.s. is a well-established Czech family-owned holding company operating primarily in logistics, food production, and agriculture across Central and Eastern Europe. Founded in 1992, it has grown into a large enterprise with multiple subsidiaries and a strong regional presence. The company emphasizes family values, professional management, and innovation, offering comprehensive supply chain services, food brands, and sustainable agricultural production. The website reflects a mature digital presence with clear branding, detailed business descriptions, and extensive partner and subsidiary linkage. Technically, the website uses modern web technologies including JavaScript libraries, font loading optimizations, and responsive design, ensuring good performance and accessibility. The site is hosted under a reputable registrar and uses HTTPS with good SSL configuration. Cookie consent and GDPR compliance mechanisms are implemented, though some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy or incident response contact is noted. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website and business demonstrate a high level of professionalism, technical maturity, and compliance, suitable for their industry and market position.

R

rbb Rundfunk Berlin-Brandenburg

rbb-online.de

54

rbb24 is a well-established multimedia news portal serving the Berlin and Brandenburg regions, operated by the public broadcaster Rundfunk Berlin-Brandenburg (rbb). The website offers comprehensive news coverage including politics, economy, culture, sports, and panorama, supported by video and audio content. It maintains a strong digital presence with official social media channels and uses modern web technologies and a professional CMS platform, ensuring a high-quality user experience. The site is well-branded and trusted within its regional market.

Z

Zentralrat der Juden in Deutschland K.d.ö.R.

juedische-allgemeine.de

53

Jüdische Allgemeine is a well-established German weekly newspaper focusing on politics, culture, religion, and Jewish life. It operates under the Zentralrat der Juden in Deutschland K.d.ö.R., serving primarily the German-speaking Jewish community and interested audiences. The website offers rich content including news, opinion pieces, and cultural commentary, supported by subscription models for print and digital editions. The brand maintains consistent and professional presentation with strong social media engagement.

The Société Biblique de Genève is a well-established non-profit organization founded in 1917, focused on the translation, publication, and dissemination of the Bible and Christian literature primarily in Switzerland and French-speaking regions. Their business model centers on making the Bible accessible at low cost, supported by donations and community engagement. The website reflects a consistent brand with clear messaging and a focus on educational and religious content targeting a broad audience including youth and Christian bookstores. Technically, the website employs modern web standards with HTML5, CSS3, Bootstrap framework, and integrates Google Tag Manager for analytics. Hosting is provided by Infomaniak Network SA, a reputable Swiss provider. The site is mobile optimized and has good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and published security or incident response policies. No forms or sensitive data collection mechanisms were detected, reducing risk exposure. Privacy compliance is partial, with no cookie consent mechanism and only basic privacy/legal mentions. Overall, the site is trustworthy and professional with a good security baseline but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

S

Sociedad Biblica Iberoamericana

labiblia.org

60

The Sociedad Biblica Iberoamericana operates as a non-profit organization focused on the dissemination and study of the Bible, particularly through its Biblia Textual editions and related educational resources. The website serves a Spanish-speaking audience interested in biblical textual studies, offering courses, audio, video, and articles to support religious education. The organization has a clear market niche in religious education and textual biblical scholarship, with a history dating back to 1998 and physical presence in the US and Spain. Technically, the website is built with standard web technologies, is mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. Overall, the site is trustworthy and professionally maintained, with no critical security or content safety issues detected.

TVZ Theologischer Verlag Zürich AG is a specialized Swiss theological publisher offering a wide range of academic and church-related books and materials. The website presents a professional and comprehensive catalog targeting theologians, students, clergy, and readers interested in religious studies and spirituality. The business model focuses on publishing and selling both print and digital editions, with a strong emphasis on quality and educational content. The company maintains a consistent brand presence and leverages partnerships with payment processors and content providers to enhance user experience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and PayPal Plus for payments. It integrates a cookie consent manager to comply with privacy regulations and features a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with opt-out options, indicating good privacy compliance. However, it lacks explicit security policies, incident response contacts, and security.txt files. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

Inzerce BiL.cz operates as a Czech Republic-based online classified ads platform, providing free listings across a wide range of categories including automotive, real estate, electronics, and services. Established in 2007, it has built a modest but steady user base with over 4 million visitors and more than 137,000 ads posted. The platform's business model relies primarily on advertising revenue, leveraging Google Adsense and other ad networks. The website content is primarily in Czech, targeting a general audience seeking local classifieds. Technically, the site uses standard web technologies such as HTML, CSS, and JavaScript, with hosting and domain registration managed by WEDOS, a reputable Czech provider. Performance and mobile optimization are basic but functional, with room for improvement in accessibility and modern web standards. Security posture is adequate with HTTPS enabled, but lacks several important security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy features.

Aftermarket.sk is a Slovak domain aftermarket platform specializing in the catching and sale of expired Slovak domains. Established in 2014, it positions itself as a leading service in the Slovak domain aftermarket niche, targeting domain investors and buyers interested in domains with history. The website is built on modern web technologies including Laravel framework, FontAwesome icons, and integrates Google Analytics and Tag Manager for tracking. Security is well implemented with HTTPS, DNSSEC, and CSRF protections. However, the site lacks visible privacy and cookie policies, and no clear contact information is provided, which impacts privacy compliance and business credibility scores. Overall, the site is professional and functional but could improve transparency and compliance aspects.

M

Město Vsetín

mestovsetin.cz

48

Město Vsetín operates an official municipal website serving residents and visitors with comprehensive information and public services. The site offers online appointment booking, citizen portals, news updates, event information, and contact details, positioning itself as a key digital interface for local government communication. The website is well-branded with consistent use of the city emblem and maintains a professional appearance with good content quality and navigation. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript, Google Fonts, Google Analytics, and reCAPTCHA, built on the Vismo CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers like Content-Security-Policy could be improved. The site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. Security posture is solid with no visible vulnerabilities, secure forms with reCAPTCHA, and no exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies. The domain is longstanding and consistent with the official city identity, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and privacy standards.

O

Obec Hovězí

obec-hovezi.cz

48

Obec Hovězí operates an official municipal website serving the local community of Hovězí in the Czech Republic. The site provides comprehensive information about local government, community events, public notices, and services. It targets residents and visitors seeking official information and municipal resources. The business model is a government public service portal with a focus on transparency and community engagement. The website is well-branded with consistent use of official logos and symbols, and it maintains a good level of content quality and navigation clarity. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the content. From a security perspective, the website enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam and abuse. However, it lacks explicit security headers and does not provide dedicated security or incident response policies. Privacy policies and cookie policies are present but lack active consent mechanisms. There is no vulnerability disclosure or security.txt file, which could enhance transparency and security posture. Overall, the website is trustworthy and professional, reflecting its role as an official municipal portal. The domain registration is consistent with the municipality's history, and no suspicious patterns were found. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and considering a vulnerability disclosure program to strengthen security and compliance.

O

Obec Huslenky

huslenky.cz

48

Obec Huslenky operates an official municipal website serving the residents and visitors of the Huslenky municipality in the Czech Republic. The site provides local government information, public notices, event calendars, and community services, positioning itself as a trusted source for municipal communication. The business model is governmental public service with a focus on transparency and community engagement. The website is well-established, with a domain age dating back to 2000, reflecting a stable online presence. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate spam on forms. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No vulnerabilities or exposed sensitive data were detected in the content. Privacy policies are present and GDPR compliance is indicated, though the cookie consent mechanism is absent. Overall, the website is a reliable and legitimate municipal portal with a good trust profile. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and enhancing accessibility and SEO to improve user experience and compliance. These improvements will strengthen the site's security posture and regulatory adherence while maintaining its role as a key community resource.

O

Obec Zděchov

zdechov.cz

45

Obec Zděchov is a small municipal government entity serving the local community in the Czech Republic. The website provides information about the municipality, local services, tourism opportunities, and community events. It targets residents and visitors interested in the region. The business model is typical for a local government, focusing on public service and community engagement. The website is well-branded and consistent with its official purpose. Technically, the website uses a CMS platform (vismo), standard web technologies (HTML5, CSS, JavaScript), and integrates Google services such as reCAPTCHA and Translate. Hosting is provided by Wedos, a known Czech hosting provider. The site is moderately optimized for performance and mobile use, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect its contact form from spam. However, it lacks advanced security headers and explicit incident response or security policy disclosures. Privacy policies are present but basic, and cookie consent mechanisms are not implemented. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and suitable for its purpose but could improve security posture and privacy compliance to align with best practices and regulatory requirements.