Security Directory

B

BSH Домакински уреди

promotion-bshhome.bg

59

The website promotion-bshhome.bg serves as the Bulgarian localized portal for Bosch household appliances, offering a comprehensive catalog of products, promotional campaigns, and customer service information. It positions Bosch as a leading brand in the home appliance market in Bulgaria, emphasizing quality, reliability, and technological innovation. The site supports user engagement through product registration, service access, and promotional participation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and AJAX-based search suggestions, ensuring a responsive and user-friendly experience. The presence of CSRF tokens and HTTPS usage indicates a baseline security posture, though some security headers are missing. Privacy and cookie policies are clearly stated and GDPR compliant, reflecting adherence to European data protection standards. The domain WHOIS data is privacy protected in line with GDPR, with active status and consistent nameservers, supporting the legitimacy of the site. Overall, the site demonstrates a mature digital presence with strong branding and user engagement features, suitable for a large enterprise in the retail and manufacturing sector.

D

Dobrovolná iniciativa Naše Malešice

malesice.eu

43

The website malesice.eu represents a small, local non-profit volunteer initiative called Naše Malešice, focused on community engagement and cultural preservation in the Malešice area of Prague 10. The site provides information about local events, historical archives, educational trails, and offers a newsletter subscription to keep residents informed. The target audience is primarily local residents and community members interested in cultural and environmental activities. The business model is community-driven without commercial intent, relying on partnerships with local organizations such as ČSOP Natura and Ekofest. Technically, the website uses standard web technologies including JavaScript, Facebook SDK, and Google Analytics for user engagement and tracking. The hosting is provided by a reputable Czech registrar, INTERNET CZ, a.s. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features. SEO optimization is basic with proper meta tags but no structured data like JSON-LD or Open Graph tags detected. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks important security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or security contact information is provided. The use of third-party scripts like Facebook and Google Analytics introduces moderate user tracking without clear privacy disclosures. Overall, the website is safe, trustworthy, and professional for a small community initiative but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

Wachumba c.k. s.r.o. operates a professional website focused on organizing and promoting children's summer camps, schools in nature, ski training, and school trips primarily in Slovakia. The company positions itself as a leading provider with a wide variety of camp types and strong guarantees for parents, teachers, and children. The website is well-structured, visually appealing, and optimized for mobile devices, providing a good user experience and clear navigation. Technical infrastructure includes modern web technologies such as Google Tag Manager, Facebook Pixel, Hotjar, and Google Maps API, indicating a mature digital marketing and analytics setup. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. The domain WHOIS data is protected by EURid privacy policies, but website content and structured data confirm legitimacy and business focus. Overall, the website is professional, trustworthy, and safe for its target audience of children, parents, and schools.

V

VIA Schankhalle Pfefferberg gGmbH

pfefferberg-theater.de

52

Pfefferberg Theater is a small, non-profit cultural institution based in Berlin, Germany, offering a diverse range of theatrical performances including contemporary circus, dance, family shows, and live literature readings. The organization emphasizes artistic quality and inclusivity, partnering with local gastronomy and cultural entities to enhance visitor experience. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of arts and culture enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries, CSS frameworks, and accessibility tools such as ReadSpeaker. It integrates third-party services like Vimeo for video content and Google Analytics for visitor tracking, while maintaining GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly detected. From a security perspective, the site uses HTTPS and enforces cookie consent with granular user control, but lacks visible security policies or incident response information. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is partially consistent with the website's German location and business nature, with no suspicious patterns detected. Overall, the site presents a low-risk profile with good privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

P

Praděd Vysílač s.r.o.

hotelpradedvysilac.cz

47

Hotel Praděd Vysílač is a small hospitality business operating the highest located hotel and restaurant in the Czech Republic, situated at the summit of the Jeseníky mountains. The website offers comprehensive information about accommodation, dining, an observation tower, and seasonal activities, targeting tourists and visitors interested in mountain experiences. The business maintains clear contact channels and provides gift vouchers and reservation options online. Technically, the website uses a traditional jQuery-based stack with several plugins for UI and multimedia, including Google Maps and Google Analytics for location and visitor tracking. The site is mobile optimized and presents a good user experience with clear navigation and multimedia content. However, some technical improvements could be made, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR requirements. No advanced security headers were detected, and no vulnerability disclosure or incident response policies are publicly available. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate, with recommendations to enhance security headers, update libraries, and publish privacy and security policies to increase trust and compliance. The website is safe for general audiences and does not contain adult or questionable content.

C

Crowd Reviews

crowdreviews.com

67

CrowdReviews.com is an online platform specializing in ranking and reviewing software and service providers across over 600 categories. The site positions itself as an unbiased alternative to fee-driven review platforms, targeting businesses and consumers seeking trustworthy user opinions to inform purchasing decisions. The platform offers extensive rankings and user reviews, supported by structured data to enhance search engine visibility. Contact information including phone, email, and a physical address in the United States is clearly provided, supporting business credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery UI, Font Awesome, and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and uses HTTPS with basic security headers. However, there is room for improvement in security headers and explicit privacy and cookie policy disclosures. The site integrates advertising and retargeting through Google Ads and SearchAtlas dynamic optimization. From a security perspective, the site benefits from HTTPS and CSRF protections on forms but lacks published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating an unregistered or privacy-protected domain, which impacts trustworthiness. Overall, CrowdReviews.com presents as a professional and content-rich platform with moderate technical maturity and security posture. The primary risk lies in the unclear domain registration status, which should be verified. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and establishing clear security and incident response disclosures to improve trust and compliance.

S

STORMWARE s.r.o.

pohodove-erp.sk

53

STORMWARE s.r.o. is a Slovak technology company specializing in ERP software solutions, notably the POHODA E1 system. With over 20 years of experience and a Microsoft partnership, the company offers a comprehensive ERP platform with numerous extensions tailored for small to medium-sized businesses. Their website reflects a professional and consistent brand image, targeting business users seeking integrated accounting, personnel, and warehouse management tools. Technically, the site is built on ASP.NET with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and policies are not fully visible. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

E

evzdelavani.cz

edukomforta.cz

51

Edukofmorta.cz is an established Czech educational platform founded in 2018, offering a broad range of in-person and online courses, professional exams, and subsequent training aimed at practical application of knowledge. The platform targets individuals and professionals seeking certification and skill development in sectors such as IT, finance, insurance, real estate, and construction. The business model revolves around e-commerce of educational services with a focus on verified instructors and comprehensive course offerings. Technically, the website is built on WordPress using WPBakery Page Builder and integrates modern JavaScript libraries and analytics tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is hosted likely by Active24, consistent with the domain registrar information. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though additional HTTP security headers could enhance protection. Privacy and cookie policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be improved. Overall, the site demonstrates good professionalism, trustworthiness, and technical maturity with no blocking or WAF interference detected.

J

Jitka Skuhrava Glass

jitkaskuhrava.com

42

Jitka Skuhrava Glass is a small artisan glass art business based in the Czech Republic, specializing in personalized glass and lighting products. The website serves primarily as a brand showcase with minimal content and limited direct customer interaction features. The technical infrastructure is modest, utilizing common JavaScript libraries such as jQuery and Modernizr, and is hosted on Wedos servers. Google Analytics is implemented for visitor tracking, but no cookie consent or privacy policies are present, indicating gaps in privacy compliance. Security posture is basic with HTTPS implied but lacking security headers and DNSSEC, which could be improved to enhance protection. Overall, the domain registration is consistent with the business profile, supporting legitimacy. The website is safe for general audiences with no adult or questionable content detected.

OctopusPro s.r.o. operates a professional website offering comprehensive data and monitoring services tailored for real estate agencies, brokers, investors, banks, and developers primarily in the Czech Republic and Slovakia. The company positions itself as a leading provider of real estate market data with a strong client base exceeding 950 customers and long-term partnerships. Their key services include real estate monitoring, auction monitoring, ownership record tracking, insolvency monitoring, and web services integrated with partner platforms such as cenovaMapa.cz and realitnieso.cz. The website is built on WordPress with modern front-end libraries and plugins, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data limits verification of domain legitimacy, although the website content and business presence strongly suggest a legitimate operation. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in security and compliance documentation.

S

Sight Digital +

sightplus.cz

39

Sight Digital + is a small, growth-oriented digital design agency based in Prague, Czech Republic. The company focuses on delivering data-driven design solutions to startups and established businesses aiming to increase sales, leads, or profits. Their portfolio showcases a variety of digital services including website development, app creation, e-commerce solutions, and design projects. The agency maintains a professional online presence with active social media profiles on Dribbble, Behance, and LinkedIn, supporting their market positioning as a niche creative agency.

Ostbelgien Sport is an official sports portal serving the German-speaking Community of Belgium, providing comprehensive information on sports development, promotion, school sports, anti-doping, and match-fixing. The website is managed by Demetec Sprl, which also acts as the registrar and CMS provider. The portal targets residents, sports clubs, and stakeholders within the region, offering government-backed resources and updates. Technically, the site is built on ASP.NET Web Forms using the contentXXL CMS and Telerik UI components, with modern JavaScript libraries such as jQuery and Modernizr. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is adequate with visible privacy and cookie policies, but no explicit incident response or vulnerability disclosure information is provided. Overall, the site is trustworthy, professional, and safe for general audiences.

E

European Club Association

ecaeurope.com

66

The European Club Association (ECA) operates as a membership organization representing European football clubs. It provides a range of services including legal support, brand protection, fixture management, sustainability strategies, and research publications. The website positions ECA as a key stakeholder in European football governance, targeting football clubs and professionals. The digital infrastructure is built on modern web technologies such as jQuery, Vue.js, and Google Analytics, with a CMS likely based on Umbraco. The site is well-designed, mobile-optimized, and accessible, offering a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response policies suggests room for improvement. Privacy compliance is strong, with clear cookie and privacy policies aligned with GDPR. However, the lack of WHOIS registration data raises questions about domain legitimacy, warranting further monitoring. Overall, the site is trustworthy and professional but could enhance transparency and security practices.

C

Cestovní kancelář Ludor, spol. s r. o.

e-rakousko.cz

48

Cestovní kancelář Ludor, spol. s r. o. operates the website www.e-rakousko.cz, specializing in travel and vacation services focused on Austria. The company has a stable market presence of over 25 years, offering a variety of travel packages, accommodation options, and travel insurance. The website targets Czech and Slovak tourists seeking summer and winter vacations in Austria. Technically, the site uses a traditional tech stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA for form security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and uses an outdated jQuery version. Privacy compliance is partial, with a comprehensive privacy policy available but no visible cookie consent mechanism. WHOIS data is unavailable, which raises concerns about domain registration transparency, though the business legitimacy is supported by certifications and legal documents linked on the site.

P

Peoplecomm

peoplecomm.cz

44

Peoplecomm is a Czech-based small publishing company specializing in books that address social, ecological, and business topics with an ethical focus. The company operates an e-commerce platform offering physical books and ebooks, targeting a general audience interested in socially responsible literature. The website is professionally designed, mobile-optimized, and includes essential features such as newsletter subscription and social media integration. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA, and the Nette Framework, ensuring a functional and secure user experience. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, the absence of WHOIS registration data reduces the overall trust score and suggests a need for verification of domain legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency regarding domain registration and security policies.

W

Webtasy, d.o.o.

varialis.si

41

Varialis.si is a Slovenian-based technology company specializing in an online product configurator platform designed to streamline the sales, pricing, ordering, and production processes for customizable products such as doors and windows. The platform integrates with ERP and CAD systems to automate data exchange and reduce errors, targeting manufacturers and sellers in the construction and manufacturing sectors. The website is professionally designed, mobile-optimized, and provides detailed information about the product features and benefits, including demo versions for potential customers. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and interactive user experience. While the site performs moderately well and is accessible without restrictions, it lacks some advanced security headers and cookie consent mechanisms. No CMS or hosting provider details are explicitly detected, and the site does not appear to use analytics or tracking services. From a security perspective, the site uses HTTPS (assumed from domain), but no explicit security headers or incident response policies are visible. Privacy compliance is basic, with a privacy policy present but lacking explicit GDPR compliance statements or cookie consent. Contact information is clearly provided, enhancing business credibility. The domain registration data is consistent with the business claims and location, indicating legitimacy. Overall, Varialis.si presents a solid business offering with good technical implementation and moderate security posture. Improvements in privacy compliance, security headers, and cookie consent would enhance trust and compliance. The site is safe for general audiences and does not contain any adult or questionable content.

GENIUS Venture Capital GmbH is a regional venture capital firm founded in 1998, focused on providing equity financing and strategic support to technology startups and early-stage companies primarily in Mecklenburg-Vorpommern, Germany. The company manages public venture capital funds on behalf of the regional government and collaborates with private investors to co-invest in promising technology-driven enterprises. Their services include capital investment, management support, and leveraging a broad network of partners and industry contacts. The website reflects a professional and consistent brand presence with detailed portfolio and team information, targeting founders and private investors.

M

Magistrat der Landeshauptstadt Klagenfurt am Wörthersee

klagenfurt.at

59

The website www.klagenfurt.at serves as the official digital presence of the city government of Klagenfurt am Wörthersee, Austria. It provides municipal services, public information, and resources for residents and visitors. The site is positioned as a key government portal with a focus on city services such as waste management, education, and building permits. The target audience primarily includes local residents and tourists seeking official information. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap Package, jQuery, and Modernizr. It integrates analytics tools such as Matomo and Google Tag Manager for user tracking and performance monitoring. The site is hosted by Webwerk Online Solutions GmbH and demonstrates moderate performance with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal security or incident response policies. Privacy compliance is limited due to the absence of a privacy policy and cookie consent mechanism, which are critical for GDPR adherence. The WHOIS data confirms the domain's legitimacy and consistency with the official city government entity. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

V

VARIALIS

varialis.net

45

Varialis is a small technology company founded in 2019, specializing in providing a web-based product configurator platform primarily for doors and windows. Their solution integrates sales, engineering, production, and purchasing processes to streamline price calculation, quoting, and ordering. The website reflects a professional and consistent brand image targeting manufacturers, dealers, and customers seeking efficient product configuration tools. Technically, the site employs a modern tech stack with popular JavaScript libraries and Bootstrap framework, delivering a responsive and user-friendly experience. However, performance is moderate and accessibility is basic. Security posture is average, with domain registration protections in place but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but could improve in security and compliance aspects.

D

Dornbirn Tourismus & Stadtmarketing GmbH

dornbirn.info

57

Dornbirn Tourismus & Stadtmarketing GmbH operates as the official tourism and city marketing organization for Dornbirn, Austria. The website serves as a comprehensive portal for visitors and locals alike, providing information on local events, accommodations, dining, shopping, and cultural highlights. The organization positions itself as a key regional player in promoting Dornbirn as a travel destination, leveraging partnerships with local government and tourism entities. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. The site is mobile-optimized, accessible, and uses HTTPS to secure user interactions. However, some security best practices such as security headers are not visibly implemented, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with encrypted connections and GDPR-compliant cookie consent. The absence of WHOIS registrant data is due to privacy protection, which is justified for this type of organization. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained. Strategically, the organization should enhance its security posture by implementing recommended HTTP security headers, publishing incident response and vulnerability disclosure policies, and regularly auditing third-party scripts. These steps will strengthen user trust and compliance with evolving security standards.

K

Kitl s.r.o.

kitl.cz

42

Kitl s.r.o. is a Czech family-owned company founded in 2007 specializing in the production and retail of natural herbal and fruit syrups, mead, and mineral waters. The company emphasizes the use of organic and environmentally friendly raw materials. The website presents a professional e-commerce platform with a clear product catalog and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enforced for secure communications. However, the absence of WHOIS data and registrant information reduces domain trustworthiness. Privacy and cookie policies are not clearly presented, which may impact compliance with GDPR regulations. Overall, the site is well-designed and functional, targeting general consumers interested in natural health products.

H

Hypo Vorarlberg Bank AG

hypovbg.at

68

Hypo Vorarlberg Bank AG is a well-established financial institution based in Austria, specializing in business banking, residential construction financing, and investment services. The website reflects a strong market position as a leading regional bank with a clear focus on entrepreneurs, home builders, and investors. Their digital presence is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Piwik PRO, indicating a mature technical infrastructure. The site is well-designed, mobile-optimized, and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates high professionalism and trustworthiness, suitable for a financial services provider.

N

Nacionālie bruņotie spēki

mil.lv

57

The website www.mil.lv is the official online presence of the Latvian National Armed Forces, providing authoritative information on military service, reserves, training, and national defense news. It serves primarily Latvian citizens interested in defense matters and military careers. The site is well-branded, consistent, and professionally maintained, reflecting its governmental status. Technically, it is built on Drupal 9, hosted on Azure, and employs modern analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive cookie policy and consent mechanism. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are present. Overall, the site is trustworthy, professional, and serves its public service mission effectively.

R

ROWAN LEGAL, advokatni kancelar s.r.o.

rowan.legal

56

ROWAN LEGAL is a well-established Czech law firm providing comprehensive legal services to businesses and individuals, with a strong focus on corporate, financial, tax, intellectual property, and compliance law. The firm positions itself as a trusted advisor with over 35 years of market presence, supported by client testimonials and international cooperation. The website reflects a professional and modern digital presence built on WordPress, utilizing popular libraries and SEO tools to enhance visibility and user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. Overall, the site is trustworthy, content-rich, and well-branded, serving its target audience effectively.

R

RENOMIA

renomia.ro

60

RENOMIA is an international insurance and reinsurance brokerage firm providing top-tier services to both individuals and companies. The company operates across multiple sectors including energy, transport, manufacturing, real estate, healthcare, agriculture, and technology. It maintains a strong market position with several subsidiaries and partner companies across Central and Eastern Europe. The website reflects a professional business model focused on insurance brokerage, risk management, and employee benefits, targeting a broad audience of corporate and individual clients primarily in Romania and neighboring countries. Technically, the website employs modern web technologies including Google Tag Manager, Google Fonts, and a proprietary CMS platform, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response information are missing. Privacy compliance is well addressed with comprehensive GDPR policies and cookie management. Overall, RENOMIA's digital presence is professional and trustworthy, supporting its business credibility and international operations.

R

RENOMIA EUROPEAN PARTNERS

renomia-ep.com

60

RENOMIA EUROPEAN PARTNERS is a large insurance brokerage and risk management network operating across 29 countries primarily in Central and Eastern Europe, Central Asia, and the Caucasus. They provide comprehensive insurance solutions including property & casualty, employee benefits, and reinsurance through a network of 2500 professionals and 81 offices. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses modern web technologies including Google Analytics, Microsoft Clarity, and a proprietary CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. WHOIS data is missing or unavailable, which reduces domain trustworthiness and should be verified externally. Overall, the site is safe, professional, and well-structured, suitable for its target business audience.

W

WoodRocks Bau GmbH

wood-rocks.com

66

WoodRocks Bau GmbH is a medium-sized Austrian company specializing in sustainable wood construction and residential building solutions. The company emphasizes holistic, future-proof building practices with a strong focus on human and environmental integration. Their services span from initial contact and planning through prefabrication and construction to completed residential complexes. The website reflects a professional and consistent brand image, targeting a broad audience interested in sustainable living and affordable housing. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for cookie consent management, with embedded multimedia content and responsive design. The site is well-structured with good SEO and accessibility basics, although some advanced security headers are missing. The presence of HTTPS and secure forms with CSRF tokens indicates a solid baseline security posture. Security-wise, the site shows good practices such as cookie consent and encrypted communications but lacks explicit security policies or incident response information. The absence of WHOIS registration data is a concern and reduces trustworthiness, though the website content and contact details support legitimacy. No vulnerabilities or suspicious content were detected. Overall, the website scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for missing WHOIS data and security headers. Strategic improvements in security transparency and WHOIS registration verification are recommended to enhance trust and compliance.

HKK Landschaftsarchitektur GmbH is a German landscape architecture firm specializing in the design and planning of innovative green spaces. The company emphasizes quality, individuality, and sustainable interaction with nature and people. Their website showcases a portfolio of projects, services, and career opportunities, targeting clients such as investors, municipalities, and private individuals. The firm operates primarily in Frankfurt am Main and Dresden regions, positioning itself as a medium-sized, creative, and international team. Technically, the website is built on TYPO3 CMS with modern JavaScript enhancements, providing a good user experience with mobile optimization and clear navigation. Security-wise, the site uses HTTPS and email obfuscation but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

I

ISOTRA Jalousien GmbH

isotra.de

54

ISOTRA Jalousien GmbH is a German-based manufacturer specializing in high-quality interior and exterior shading solutions including blinds, roller blinds, awnings, pergolas, and insect screens. The company emphasizes energy efficiency and environmental friendliness in its product development and holds a strong technological position in the shading industry, serving both domestic and international markets. The website is professionally designed, providing clear business and contact information, and supports user engagement through social media and search functionality. Technically, the site employs modern JavaScript libraries and Google Analytics for user tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, though security headers are not evident, and privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages. Overall, the site is trustworthy and well-maintained, though improvements in security policies and transparency could enhance compliance and user trust.

D

DERIVA solutions s.r.o.

deriva.cz

59

DERIVA solutions s.r.o. is a Czech Republic-based small technology company specializing in custom development of web and mobile applications, including e-commerce systems, tailored websites, and native Android/iOS apps. Their market position is that of a specialized service provider focusing on bespoke software solutions for businesses seeking to digitize or enhance their online presence. The website presents a professional image with clear service offerings and a project showcase, targeting business clients primarily in the Czech market. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and Modernizr, supplemented by Google Analytics and SpeedCurve for performance monitoring. The site is mobile optimized and has good SEO fundamentals, though accessibility is basic. No CMS or hosting provider details are evident. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing accessibility. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. The site includes a cookie consent banner, indicating some privacy awareness, but lacks visible privacy policies, terms of service, or vulnerability disclosure information. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is functional and professional but would benefit from improved transparency in domain registration, enhanced security headers, and comprehensive privacy and security policies to strengthen trust and compliance.

I

ISOTRA

artosi.cz

47

The website www.artosi.cz represents a Czech company specializing in the design, manufacture, and sale of advanced bioclimatic pergolas under the ARTOSI brand, developed by ISOTRA, a recognized leader in shading technology. The site showcases detailed product information, references, and accessories, targeting homeowners and businesses seeking high-quality outdoor shading solutions. The technical infrastructure includes modern web technologies such as Google Tag Manager, YouTube embeds, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and comprehensive privacy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance disclosures.

C

CIRCULAR PATH X AMANDA MURRAY

circularpathshoes.com

49

Circular Path X Amanda Murray is a niche luxury footwear brand offering unique and limited edition shoes and accessories crafted in Italy. The brand targets fashion-conscious women inspired by iconic New York City fashion culture. The website is hosted on the AliveShoes platform and integrates modern technologies including Stripe and Adyen for secure payments, Google reCAPTCHA for bot protection, and tracking tools like Google Analytics and Mouseflow. While the site is professionally designed with good mobile optimization and SEO practices, it lacks a visible privacy policy page and explicit security headers, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and secure website presence suggests a legitimate business. Overall, the site demonstrates a moderate security posture and good business credibility but should enhance transparency and security practices to improve trust and compliance.

W

Worldsoft AG

wbshelp.info

54

Worldsoft AG operates the Worldsoft Business Suite, a comprehensive software platform offering CRM, EMS, invoicing, affiliate management, and other business tools. The website analyzed is a documentation portal providing detailed guides and resources for users of the suite. The site is professionally designed with clear navigation and multilingual support, primarily in German and English. The technical infrastructure leverages established web technologies including jQuery, Bootstrap, and Algolia for search, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and WHOIS data is unavailable, likely due to privacy protection. Overall, the site is trustworthy and serves as a valuable resource for Worldsoft customers.

E

Ealys

ladesirade-vence.fr

39

The website www.ladesirade-vence.fr represents a small hospitality business offering a vacation villa rental in Vence, France. The site provides detailed information about the villa, including accommodation capacity, amenities, and local attractions, targeting tourists and vacationers seeking a premium holiday experience on the Côte d'Azur. The business appears to be a niche local operator with a professional online presence but limited public business registration transparency. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a visually appealing and mobile-optimized experience. However, there is no evidence of a CMS or advanced backend platform. Performance is moderate with good SEO basics but lacks advanced analytics or tracking tools. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and WHOIS data is not publicly available, which is common for small businesses but reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is minimal, with a basic privacy policy page but no cookie banner or GDPR explicit consent. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and greater transparency in business and domain registration information to increase trustworthiness and regulatory adherence.

S

Société Française de Dermatologie

sfdermato.org

53

The Société Française de Dermatologie (SFD) is a well-established French non-profit professional society dedicated to promoting dermatology research, education, and public health. With over 130 years of history and more than 2400 members, it serves medical professionals, researchers, and patients by providing educational resources, funding opportunities, and organizing congresses. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design consistent with its mission. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, some security best practices such as security headers and explicit security policies are missing, which could be improved to enhance the security posture. From a security perspective, the site shows good privacy compliance with GDPR-aligned cookie consent and anonymized analytics. No vulnerabilities or suspicious activities were detected. The absence of WHOIS data limits domain trust analysis, but the professional content and certifications like HONcode support legitimacy. Overall, the site is a trustworthy and authoritative resource in the dermatology field, with recommendations to improve security headers, publish security policies, and clarify domain registration data to further strengthen trust and compliance.

Kryt Folimanka is a public underground shelter located in Prague 2, serving as the largest shelter in the district with capacity for 1300 people. The website provides information about the shelter, public tours, and related tourist services. The site is maintained by a government or municipal entity, indicated by the nature of the content and sector classification. Technically, the website uses a traditional web stack including Bootstrap, jQuery, and Google Analytics, hosted by Wedos. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, and no contact information is provided, which impacts compliance and user trust. Security posture is adequate with HTTPS but missing security headers and formal policies. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

Z

Zdravotnické zařízení městské části Praha 4

zzpraha4.cz

53

Zdravotnické zařízení městské části Praha 4 is a public contributory organization operating childcare groups, home babysitting, and other family services in Prague 4. The website serves as an information portal for parents and clients, providing updates, downloadable documents, and contact information. The organization holds a quality certification for childcare groups, indicating a reputable position in the local government sector. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, Google Maps API, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the site is safe, professional, and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic improvements in security headers, privacy compliance, and incident response documentation would strengthen the site's security and compliance profile.

I

Indiana University Bloomington

indiana.edu

68

Indiana University Bloomington is the flagship campus of the Indiana University system, offering a comprehensive higher education experience with a strong emphasis on research, innovation, and academic freedom. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting prospective and current students. The university leverages modern web technologies including Google Tag Manager and Siteimprove Analytics to monitor and optimize user experience. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, explicit security headers and privacy policies are not evident in the provided content, indicating areas for improvement. The domain is a subdomain of iu.edu, which is consistent with institutional practices, though WHOIS data for the subdomain is unavailable. Overall, the site is trustworthy, professional, and safe for general audiences.

I

INSIDE COMMUNICATION

inside-communication.lu

38

INSIDE COMMUNICATION is a communication agency based in Luxembourg focusing on strategies, innovation, and impact. The current website is a placeholder announcing a forthcoming new site and offers a newsletter subscription to keep interested parties informed. The company targets businesses or professionals seeking communication and innovation services. The website's technical infrastructure uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Fonts and CreateSend for email marketing. However, the site lacks advanced frameworks or CMS indications and shows basic mobile optimization and accessibility features. Security posture is limited with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are present. The WHOIS data is unavailable due to query rate limits, limiting domain legitimacy verification. Overall, the site is functional but minimal, with room for significant improvements in security, privacy compliance, and content richness.

M

Maanmittauslaitos

maanmittauslaitos.fi

60

Maanmittauslaitos is the National Land Survey of Finland, a government agency responsible for providing authoritative land, real estate, and geographic information services. The website serves both the general public and professional users, offering access to property data, maps, research, and online service portals. It holds a strong market position as the official national provider of these services in Finland. The site is multilingual and professionally designed, reflecting its role as a trusted government resource. Technically, the website is built on Drupal 10, utilizing modern web technologies and libraries such as Modernizr and JS-Cookie. It features good mobile optimization, accessibility, and SEO practices. The site integrates a chat service powered by Elisa and uses Siteimprove for analytics and quality monitoring. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports its mission as a government information provider with a secure and user-friendly digital presence.

I

International Civil Aviation Organization

icao.int

68

The International Civil Aviation Organization (ICAO) operates as a specialized United Nations agency focused on establishing global standards and regulations for civil aviation. The website serves as a comprehensive portal for aviation safety, security, environmental protection, economic development, and capacity building. It targets governments, aviation stakeholders, and the public, providing authoritative information, news, and resources. Technically, the site is built on Microsoft SharePoint, leveraging modern JavaScript libraries and hosted on Microsoft Azure DNS, reflecting a mature and stable digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though improvements such as CSP headers and a vulnerability disclosure page are recommended. Privacy compliance is moderate, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with minor areas for enhancement in security and privacy transparency.

Ilmatieteen laitos operates the Ilmailusää website, providing comprehensive aviation weather services including radar, satellite data, METAR, and forecasts tailored for aviation professionals and drone operators. The service is positioned as an official Finnish government meteorological offering, targeting aviation stakeholders in Finland and surrounding regions. The website content is rich and relevant, supporting informed flight planning and safety. Technically, the site uses a custom-built platform with legacy JavaScript libraries such as jQuery 1.8.3 and Knockout.js 2.2.0, indicating moderate digital maturity but some technical debt. The hosting and DNS infrastructure align with Finnish government networks, ensuring reliability. Mobile optimization and accessibility are basic but functional. Security posture shows room for improvement: no DNSSEC, no visible security headers, and use of outdated JavaScript libraries with known vulnerabilities. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms interfere with access. Overall, the website is trustworthy and professionally maintained by a government entity but would benefit from modernization of its technical stack, enhanced security controls, and improved privacy compliance to meet contemporary standards.

A

Autokomplex Menčík

autokomplex.cz

44

Autokomplex Menčík is a reputable automotive dealership specializing in Škoda vehicles, operating primarily in the Czech Republic with two main branches in Prague and Benátky nad Jizerou. The company offers a comprehensive range of services including new and used car sales, servicing, fleet management, insurance, and car washing. Their market position is that of a regional authorized dealer with a strong local presence and partnerships with various sports and community organizations. Technically, the website employs modern front-end technologies such as jQuery, Bootstrap, and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data and security headers slightly diminishes the overall trustworthiness and security posture. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, content-rich, and well-branded, though improvements in security practices and domain registration transparency are recommended.

Nadoraz.cz is the official website of a Czech music band named Nadoraz, based in Hradec Králové, with a history spanning nearly four decades. The band offers live music performances across various genres including swing, dixieland, country, rap, funky, and rock, and participates in numerous festivals and events both domestically and internationally. Their business model centers on entertainment services, music sales, and event appearances targeting Czech-speaking music fans and event organizers. The website provides detailed band member information, upcoming event dates, and contact details for bookings. Technically, the website is built with basic HTML5, CSS, and JavaScript technologies including jQuery and Modernizr. The site has a moderate performance profile with basic mobile optimization and accessibility features. However, it lacks modern CMS integration and advanced technical frameworks. SEO optimization is basic with minimal meta tags and no structured data or Open Graph tags. From a security perspective, the site lacks HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is present. The absence of analytics and tracking scripts indicates minimal user tracking, which is positive for privacy but also suggests limited marketing insights. Overall, the security posture is weak and needs improvement to protect user data and enhance trust. The overall risk assessment indicates a low to moderate risk profile primarily due to missing security best practices and compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms to improve security and compliance posture.

D

Dahasl s.r.o.

dahasl.cz

49

Dahasl s.r.o. is a Czech-based company specializing in the supply and installation of low-voltage technologies and security systems. The company positions itself as a traditional and reliable provider with extensive experience, offering comprehensive services from project design to maintenance and servicing of electrotechnical systems. Their target audience primarily includes businesses and organizations requiring advanced security and technology solutions. The website reflects a medium-sized enterprise with a professional online presence, including client references and statistical indicators of business activity. Technically, the website employs a standard modern technology stack including Bootstrap, jQuery, and various UI libraries, with a cookie consent mechanism and Google Analytics integrated with consent controls. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate, and SEO practices appear adequate. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed), includes a cookie consent banner, and loads analytics scripts conditionally based on user consent. However, no explicit security headers or published security policies were detected, and no incident response or vulnerability disclosure information is available. The WHOIS data is unavailable, likely due to privacy protection, which limits transparency but does not inherently indicate risk. Overall, the website is professional and trustworthy with good privacy compliance and business credibility. The lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. The risk level is moderate with no critical vulnerabilities detected in the analysis.

The website mojelecbaobezity.cz is a Czech-language informational portal dedicated to obesity treatment, specifically focusing on bariatric surgery. It serves as a resource for patients and interested individuals by providing detailed information about obesity risks, treatment options, patient stories, and expert guidance. The site is operated or supported by PR agency Focus Agency, which is also indicated in the footer. The business model centers on education and patient support within the healthcare sector, targeting individuals seeking surgical obesity treatment information. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Facebook Pixel, hosted likely by Active24. The site is mobile-optimized with good SEO and accessibility basics. Security-wise, the site employs cookie consent mechanisms and standard tracking controls but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security policies and incident response.

I

ILA, s.r.o.

ila.cz

47

ILA, s.r.o. is a Czech consulting company specializing in grant advisory, digitalization, innovation support, and implementation of new technologies. They assist clients in formulating and implementing financing strategies from public sources, preparing project applications for national and EU funding programs, and managing project administration and reporting. The company targets organizations seeking expert guidance in public funding and innovation projects. Their market position is that of a specialized niche consultancy with a strong local presence and reputable partners. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Fonts, with a responsive design and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional HTTP security headers and formal security policies. The absence of WHOIS data limits domain trust assessment, but the website content and contact information appear legitimate and professional. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

Skybill.info is a minimalistic website serving as a login portal for a service named Skybill, featuring a Microsoft sign-in option. The site lacks any descriptive business content, contact information, or policy documents, indicating it is likely an internal or limited-access service portal rather than a public-facing commercial site. The technical infrastructure includes common frontend libraries such as Bootstrap, AdminLTE, FontAwesome, and Google Fonts, hosted under a domain registered via NameCheap with privacy protection enabled. The domain age is moderate, created in 2020 and valid through 2027, but the use of privacy protection and absence of company details reduce transparency and trustworthiness. Security posture is basic with no DNSSEC and no visible security headers, though the use of Microsoft OAuth for authentication is a positive security indicator. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences with no adult or questionable content. Overall, the site scores moderately low on content quality, privacy compliance, and business credibility due to minimal content and lack of policies or contact details.

G

Grupa Maspex Sp. z o.o.

przyjacielenatury.pl

60

Kubusiowi Przyjaciele Natury is a large-scale Polish educational program focused on ecological awareness for preschool children, parents, and teachers. Operated by Grupa Maspex Sp. z o.o., the program offers educational materials, activities, and surveys to promote environmental responsibility. The website serves as a central hub for program information, resources, and registration. It enjoys strong market positioning as one of the largest ecological education initiatives in Poland, supported by reputable partners such as Rekopol and GRID.

M

Maspex

wloclawekketchup.pl

56

Włocławek Ketchup is a traditional Polish ketchup brand with a long-standing heritage, promoted through a WordPress-based website that emphasizes its original recipe and cultural significance. The site targets consumers interested in authentic Polish food products and brand history, leveraging storytelling and digital marketing tools to engage its audience. Technically, the website employs modern web technologies including WordPress 6.2.6, jQuery, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses reCAPTCHA for form protection but lacks comprehensive security headers and published security policies, which could be improved to enhance trust and compliance. Overall, the domain registration aligns well with the business claims, supporting the legitimacy of the site.