Security Directory

F

Fun Rádio

funradio.sk

58

Fun rádio is a prominent Slovak media company operating a popular radio station and digital platform offering music hits, podcasts, news, and contests. The website demonstrates a mature digital infrastructure using modern technologies such as Vue.js, Cookiebot for cookie consent, and Google Tag Manager for analytics and marketing. The security posture is strong with HTTPS enforced and standard security headers present, although explicit privacy and terms of service documents are missing, representing a compliance gap. The site is well-optimized for mobile and desktop users, providing a good user experience with clear navigation and relevant content. Overall, the domain registration and WHOIS data align with the business claims, supporting legitimacy and trustworthiness.

The website 4fstore.sk appears to be an established e-commerce retail platform, likely specializing in sportswear or apparel, based on the domain and URL patterns. The domain has been registered since 2013 and is hosted via Akamai CDN, indicating a mature infrastructure. The site employs modern web technologies including React and Tailwind CSS, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, SalesManago, and Cookiebot for cookie consent management. However, explicit privacy policies, terms of service, and contact information are not found in the analyzed content, which may impact user trust and compliance. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and formal security policies. Overall, the site is functional and professionally designed but could improve transparency and security practices.

T

TIPOS, národná lotériová spoločnosť, a. s.

tipos.sk

56

TIPOS, národná lotériová spoločnosť, a. s., is the national lottery company of Slovakia, offering a broad range of gambling services including lotteries, sports betting, scratchcards, and online casino games. The company holds a dominant market position as the official national operator, targeting Slovak residents interested in regulated gambling entertainment. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools, with good performance and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates high business credibility with clear contact information, official certifications, and government affiliations.

Lime Talk, operated by Lime Inspirations, provides an intuitive and affordable online chat solution tailored for websites and e-commerce shops. The platform focuses on enhancing customer engagement by offering real-time visitor insights, automated messaging, and seamless integration with various web platforms. With over 1000 customers daily and a strong market presence evidenced by a high Capterra rating, Lime Talk positions itself as a reliable SaaS provider in the customer support technology sector. Technically, the website employs modern JavaScript libraries and tracking tools such as jQuery, Google Analytics, Facebook Pixel, and Inspectlet, indicating a mature digital infrastructure. The site is mobile-optimized and designed with professional quality, ensuring a positive user experience. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks certain security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness, although the website content and business information appear legitimate and professional. Overall, Lime Talk demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency.

I

Institute of Molecular and Translational Medicine

imtm.cz

61

The Institute of Molecular and Translational Medicine (IMTM) is a well-established biomedical research institute based in the Czech Republic, founded in 2010. It focuses on understanding infectious diseases and cancer, developing medicines, diagnostics, and medical devices. The institute operates with a strong emphasis on public-private partnerships and international research collaborations. The website reflects a mature digital presence with comprehensive scientific content, including featured publications, research projects, and educational resources targeting researchers, students, and healthcare professionals. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Tag Manager for user tracking with anonymized IPs and provides a GDPR-compliant cookie consent mechanism. The hosting and domain registration are consistent with the organization's location and business nature. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers and a published security policy or incident response contacts are missing, representing areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with basic privacy standards.

K

Kairos Power

kairospower.com

66

Kairos Power is a mission-driven engineering company specializing in advanced nuclear reactor technology aimed at enabling the global transition to clean energy. The company focuses on the design, licensing, and demonstration of its fluoride salt-cooled high temperature reactor (KP-FHR), positioning itself as a competitive and responsible energy provider in the U.S. market. The website reflects a professional and consistent brand presence with clear communication of its mission and services. Technically, the website is built on WordPress with modern technologies such as jQuery and Yoast SEO, hosted by GoDaddy. It features good mobile optimization, SEO practices, and moderate performance. However, some security enhancements such as DNSSEC and security headers are missing, and there is no cookie consent mechanism despite the use of tracking scripts. From a security perspective, the site uses HTTPS and domain locking statuses that enhance domain security. The absence of explicit security policies and incident response contacts is a gap. The WHOIS data is consistent with the business claims, showing a well-aged domain without privacy protection, supporting legitimacy. Overall, the website is trustworthy and professional with room for improvement in privacy compliance and security hardening to better protect user data and enhance trust.

U

UCPA

ucpa.com

55

UCPA is a well-established French organization specializing in sports vacations, youth camps, and weekend sports stays since 1965. The website reflects a mature digital presence with a focus on performance and mobile optimization through AMP technology. It offers a rich user experience with clear navigation, professional design, and comprehensive content tailored to sports enthusiasts and families. The company maintains active social media channels and provides customer service contact via phone and forms. Technically, the site uses modern web standards and integrates Google Analytics and Tag Manager for user behavior tracking. Security posture is solid with HTTPS and security headers, though lacks a publicly available security policy or incident response information. WHOIS data is unavailable, limiting domain legitimacy verification, but the website's branding and structured data suggest a legitimate business. Overall, the site is safe, professional, and user-friendly, with room for improvement in transparency around security and domain registration.

U

Union Sport & Cycle (USC)

filieresport.com

44

Filière Sport is a French media platform dedicated to the sports industry, providing news, data, and insights on topics such as economy, corporate social responsibility, health, territories, and market data. It serves professionals and stakeholders in the sports sector, offering a mix of free and premium content. The website is linked to Union Sport & Cycle, a recognized entity in the sports industry, which acts as the parent organization. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and reCAPTCHA, ensuring a functional and moderately performant user experience with good mobile optimization. Security practices include HTTPS enforcement and use of CAPTCHA for forms, though some security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found on the homepage. The WHOIS data for the domain is unavailable, which slightly reduces trust but the professional presentation and consistent branding mitigate concerns. Overall, the site is a credible and useful resource for its target audience, with room for improvement in privacy transparency and security headers.

P

People in Need (implied from domain and cookie providers)

jedensvetonline.cz

65

Jeden svět online is a Czech Republic-based online streaming platform dedicated to showcasing the best films from the Jeden svět human rights festival. Founded in 2021, it serves a niche audience interested in human rights and cultural content, providing access to festival films across the country. The platform leverages modern web technologies including JavaScript frameworks, Video.js for media playback, and integrates third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. Cookiebot is used to ensure GDPR-compliant cookie consent management, reflecting a commitment to privacy compliance. Security posture is solid with HTTPS enforced and use of CSRF tokens, though some security headers could be explicitly confirmed and enhanced. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns well with the business profile. Overall, the website presents a professional and trustworthy digital presence with good content quality and user experience.

R

Repromeda

repromeda.hr

43

Repromeda is a healthcare provider specializing in assisted reproduction and infertility treatment, targeting couples and individuals seeking to build families. The website presents a professional image with a clear focus on fertility services and has a strong market presence with over 6000 successful births. The company operates multiple country-specific domains, indicating a regional expansion strategy. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Tag Manager and reCAPTCHA, reflecting a modern digital infrastructure. Security posture is adequate with HTTPS and some best practices, but lacks comprehensive security headers and explicit security policies. Privacy compliance is basic, with cookie consent present but no clear privacy policy or terms of service found. WHOIS data shows inconsistencies, notably a future domain creation date, which raises questions about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from improved transparency and security enhancements.

R

Repromeda

repromeda.pl

43

Repromeda is a healthcare provider specializing in fertility treatments and family planning services, operating primarily in Poland with a network of related sites across Central and Eastern Europe. The website presents a professional and content-rich platform targeting individuals and couples seeking fertility assistance, boasting a track record of 6000 children born through their services. Technically, the site is built on WordPress using modern plugins such as Elementor, Yoast SEO, and Fluent Forms, with integration of Google Tag Manager and reCAPTCHA for analytics and security. The security posture is solid with HTTPS and anti-bot measures, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly identified privacy policy page. Overall, the site is trustworthy and well-positioned in its market segment, though improvements in transparency and security documentation are recommended.

R

Repromeda

repromeda.it

42

Repromeda is a healthcare provider specializing in reproductive medicine and genetic fertility treatments, operating primarily as a Czech clinic with localized websites for multiple European countries including Italy. The website presents a professional image with a clear focus on advanced fertility technologies and accessible treatments. The business targets individuals seeking fertility solutions, positioning itself competitively against Western European providers by offering high medical standards and no waiting lists. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating Google services like Tag Manager and reCAPTCHA for analytics and security. The security posture is solid with HTTPS and spam protection, though it lacks visible security headers and formal security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, but could improve transparency and security documentation.

R

Repromeda

repromeda.de

49

Repromeda is a healthcare service provider specializing in fertility treatments and family planning support, operating primarily in Germany with a strong regional presence and over 6,000 babies born through their services. The website is professionally designed using WordPress and modern plugins, supporting multiple languages to cater to a broad European audience. The technical infrastructure includes Google Tag Manager, Fluent Forms, and Elementor, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but could improve transparency and compliance aspects.

R

Repromeda

repromeda.hu

46

Repromeda is a healthcare provider specializing in fertility and reproductive services, operating primarily in Hungary with a strong presence across multiple European countries via sister sites. The company has a solid market position, having facilitated the birth of over 6000 babies, targeting individuals and couples seeking family planning and fertility treatments. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, supporting multilingual content and optimized for mobile devices. Security measures include HTTPS enforcement, security headers, and Google reCAPTCHA integration, reflecting a good security posture. However, the absence of explicit privacy policies, terms of service, and incident response documentation indicates room for improvement in compliance and transparency. Overall, the site is trustworthy and well-positioned but would benefit from enhanced privacy and security disclosures.

R

Repromeda

repromeda.com

48

Repromeda is a healthcare service provider specializing in fertility and family planning treatments, with a notable track record of over 6,000 children born through their services. The website is professionally designed using WordPress with Elementor and integrates modern technologies such as Fluent Forms and Google services for analytics and advertising. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a professional front for fertility services but would benefit from improved transparency and compliance documentation.

R

Repromeda

repromeda.sk

45

Repromeda is a healthcare provider specializing in assisted reproduction and infertility treatment, operating primarily in Slovakia with multiple sister sites in neighboring countries. The website presents a professional and consistent brand image, targeting individuals and couples seeking fertility services. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good performance and SEO optimization. Security measures include HTTPS, Google reCAPTCHA, and Google Tag Manager, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy compliance documentation and accessibility features.

I

Italian Trade Agency

machinesitalia.org

69

Machines Italia is a well-established B2B platform operated by the Italian Trade Agency, focused on connecting North American manufacturers with Italian machinery suppliers and associations. The website offers comprehensive sector information, events, educational programs, and B2B services, positioning itself as a key resource in the manufacturing and automation industry. The platform targets manufacturers, academic institutions, and public/private organizations interested in Italian technological innovations. Technically, the site is built on Drupal 10 with modern frameworks and libraries, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC could be improved. Privacy compliance is evident with GDPR-aligned cookie policies and privacy statements. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

S

SafetyGloves by HexArmor

safetygloves.com

67

SafetyGloves by HexArmor operates a professional e-commerce platform specializing in personal protective equipment including gloves, eyewear, helmets, hearing protection, arm and body protection, and footwear. The company positions itself as a leader in safety products for individuals and businesses, leveraging the HexArmor brand. The website is built on the Shopify platform using a modern Turbo theme, integrating multiple marketing and analytics tools such as Klaviyo, Hotjar, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced, domain status locks, and no exposed sensitive data, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is trustworthy, professional, and well-structured, serving a general audience seeking safety equipment.

H

HUisHU. Digitale Kreativagentur GmbH

huishu-agentur.de

48

HUisHU. Digitale Kreativagentur GmbH is a German digital creative agency with offices in Hannover and Hamburg. The company specializes in digital development, campaigns, and communication aimed at fostering growth for individuals, brands, and medium-sized enterprises. Their key services include brand building, social media campaigns, content creation, websites, and applications. The agency holds multiple industry certifications and awards, positioning itself as a reputable player in the media and creative sector within Germany. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Matomo Analytics, Google Tag Manager, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting appears to be managed via kasserver.com, consistent with the domain's nameservers. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious indicators were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, indicating GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and digital maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture.

N

NUTRISENS ITALIA S.B.R.L

nutrisens-medical.it

60

Nutrisens Italia S.B.R.L is a medium-sized Italian company specializing in clinical nutrition and special alimentation products. The company offers a broad range of nutritional solutions designed for healthcare professionals, patients, and consumers, focusing on effective, safe, and palatable products that enhance quality of life. Nutrisens holds a strong market position in Italy with a well-established brand, supported by active social media presence and customer testimonials. The website reflects a professional and comprehensive digital presence with clear navigation and rich content. Technically, the site is built on a custom ASP.NET platform using modern libraries such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy disclosures and advanced security headers. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, Nutrisens demonstrates a mature digital infrastructure and trustworthy business profile.

F

Funding Centre

fundingcentre.com.au

65

Funding Centre is an Australian-based organization providing a comprehensive grants database and fundraising capacity building services primarily targeting not-for-profits, schools, businesses, government entities, and individuals. The website offers subscription-based membership plans granting access to a rich database of live grants, fundraising tools, and resources, positioning itself as a leading platform in the Australian fundraising ecosystem with over 20 years of experience. The parent company, Our Community, supports the platform, enhancing its credibility and market presence. Technically, the website employs modern web technologies including Bootstrap 4, FontAwesome, Google reCAPTCHA v3, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility and explicit security header implementation. From a security standpoint, the site enforces HTTPS and integrates bot protection via reCAPTCHA. However, it lacks explicit security headers and a visible security or incident response policy. Privacy compliance is partially addressed with a comprehensive privacy policy hosted on the parent domain, but no cookie consent mechanism is present. WHOIS data is privacy-protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website presents a professional, trustworthy, and functional platform with moderate technical maturity and a solid business model. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.

G

GCE Group

gcegroup.com

59

GCE Group is a leading European manufacturer specializing in gas control equipment, serving diverse sectors including industrial, healthcare, and high purity applications. The company operates through multiple business areas such as Process Applications, Cutting and Welding, Medical, and High Purity, positioning itself as a key player in the gas equipment market. Their website reflects a professional and comprehensive digital presence with clear product segmentation and regional subsidiaries to support global operations. Technically, the website employs a mature technology stack including jQuery, Modernizr, and video.js, alongside modern analytics and marketing tools like Google Analytics, Hotjar, and Microsoft Clarity. The site is well-optimized for mobile and SEO, with good accessibility and performance metrics. Security-wise, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA and cookie consent mechanisms, indicating a solid security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure pages suggests room for improvement in transparency and security governance. The lack of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy assessments. Overall, the website presents a credible and professional business front with moderate risk due to incomplete domain registration information.

E

EDELRID

edelrid.de

65

EDELRID is a well-established German company specializing in mountain sports, climbing, and occupational safety equipment with a history spanning over 160 years. The website serves both sports enthusiasts and professional users, offering a broad catalog of products and training services. The company maintains a strong market position with a focus on quality and innovation. Technically, the website is built with modern web technologies, including JavaScript frameworks and consent management tools, hosted on Cloudflare infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

H

HUBER+SUHNER

hubersuhner.com

63

HUBER+SUHNER is a global manufacturer and supplier of electrical and optical connectivity products serving the industrial, communication, and transportation sectors. The company offers a broad portfolio of products and services designed to ensure reliable data and power transmission worldwide. Their website reflects a mature digital presence with a professional design, comprehensive content, and a strong global footprint supported by numerous subsidiaries and locations. Technically, the site uses modern web technologies including Kentico CMS, Vue.js, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy despite the professional business presence. Overall, the website is trustworthy and well-maintained, but the WHOIS inconsistency and lack of explicit security disclosures suggest areas for improvement.

N

Nike, Inc.

nike.com

70

Nike, Inc. operates a globally recognized e-commerce platform delivering innovative sportswear, footwear, and related services. The Finnish localized site targets athletes and consumers in Finland, offering a comprehensive product range with a strong brand presence. The website leverages modern web technologies including React and Next.js frameworks, supported by advanced analytics and performance monitoring tools such as New Relic and Adobe Experience Platform. Security posture is robust with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, Nike's digital infrastructure demonstrates high maturity, supporting a seamless and secure user experience.

EDF is a leading French energy company specializing in electricity production and supply, with a strong commitment to decarbonization and sustainable energy solutions. The website serves multiple audiences including individual consumers, businesses, communities, and job seekers, providing comprehensive information and services. The digital infrastructure is built on Drupal 10 with modern analytics and privacy management tools, reflecting a mature and professional technical setup. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Overall, the site is well-designed, accessible, and trustworthy, supporting EDF's market position as a major energy provider in France.

V

VIP Studio 360

vip-studio360.fr

45

VIP Studio 360 is a French-based small business specializing in virtual tours, 360° imaging, and virtual reality solutions aimed at enhancing online presence and customer engagement. The company targets sectors such as education, industry, institutions, tourism, and training, providing immersive digital experiences to boost conversions and visibility. The website is professionally designed using WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google Ads. Cookie consent is managed via Tarteaucitron, reflecting some level of privacy compliance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit privacy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but reduces transparency. Overall, the site is functional, professional, and business-focused with moderate technical maturity and security awareness.

E

EXHOBBY LIMITED

exhobby.com

68

EXHOBBY LIMITED operates a professional e-commerce platform specializing in remote control hobby products including planes, boats, trucks, and accessories under the VOLANTEXRC brand. The company targets hobbyists primarily in Europe and globally, offering localized storefronts and free shipping from US stock. The website is built on Shopify, leveraging a modern tech stack with multiple marketing and analytics integrations, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional retail experience with room for enhanced transparency in security and privacy disclosures.

A

AvalonKing

avalonking.com

69

AvalonKing is a specialized e-commerce business focused on providing high-quality automotive ceramic coating products directly to consumers. Established in 2017, the company has positioned itself as a leading provider of DIY ceramic coating kits with a strong reputation supported by thousands of positive customer reviews. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive product information. The business targets automotive enthusiasts and vehicle owners seeking durable and effective car protection solutions. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a robust digital presence and good performance. Security posture is strong with HTTPS enforced, domain registration consistent and stable, and privacy compliance evident through detailed policies and consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online store.

P

PHYSICS TODAY

physicstoday.org

65

Physics Today is a reputable publication operated by the American Institute of Physics, serving the physics community with news, analysis, and career resources. The website demonstrates a mature digital infrastructure with modern web technologies, including MathJax for scientific notation, and integrates comprehensive privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

S

STUDENTS

spsnational.org

66

The SPS website serves as a comprehensive resource for physics students, operated under the American Institute of Physics umbrella. It provides news, educational content, event information, and opportunities for student involvement, positioning itself as a key platform for the physics student community. The affiliation with AIP lends credibility and trust to the site, reinforcing its role in the educational and non-profit sector. Technically, the website employs modern web technologies including JavaScript, Web Components, and a CMS platform (Brightspot). It integrates Google Tag Manager for analytics and Osano for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively. However, explicit security headers and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to privacy protection is common for organizations but limits domain trust analysis. Overall, the security posture is solid but could benefit from additional transparency and policy disclosures. The overall risk assessment is low, with the site appearing legitimate, professional, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and implementing a security.txt file to improve transparency and trust.

A

AIP Publishing

scitation.org

65

AIP Publishing is a well-established academic publisher specializing in the physical sciences, offering a broad range of peer-reviewed journals, conference proceedings, and books. The website reflects a mature digital presence with comprehensive content targeting researchers, authors, and librarians. The company maintains a consistent brand identity and provides extensive resources and special topic collections to support the scientific community. Technically, the site uses modern JavaScript libraries, consent management tools, and integrates advertising and analytics services responsibly. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the domain and website present a trustworthy and professional front for a large academic publisher.

V

Viessmann

viessmann.com

60

Viessmann is a large, well-established company operating in the energy sector, specializing in heating, climate, and energy solutions. The website serves as a corporate portal linking to its main business units, including Viessmann Climate Solutions, now part of Carrier, and the Viessmann Generations Group focused on sustainability. The site targets both B2B and end customers interested in sustainable energy solutions. Technically, the website uses modern frameworks such as Astro and Storyblok CMS, with integration of Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly with good navigation and professional branding. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, with minor recommendations to enhance security transparency and incident response readiness.

S

Sensitech Inc.

sensitech.com

74

Sensitech Inc. is a well-established company specializing in supply chain visibility solutions, particularly focusing on real-time temperature monitoring and cold chain logistics for industries such as life sciences, food, and industrial sectors. The company operates under the parent organization Carrier Global Corporation, indicating a strong market position and corporate backing. Their website reflects a mature digital presence with comprehensive product and solution offerings, targeting business customers requiring advanced supply chain monitoring technologies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. The use of Carrier CMS suggests a tailored content management approach. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy and regulatory compliance. However, explicit security headers are not clearly visible in the provided data, and no dedicated security or incident response policies are published on the site. The WHOIS data for the domain is unavailable or not found, which is unusual for a company of this stature but does not detract significantly from the overall trustworthiness given the strong branding and parent company association. Overall, Sensitech's website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, making it a trustworthy and credible source for its target audience. Strategic improvements in publishing explicit security policies and ensuring WHOIS transparency could further enhance trust and security posture.

I

Innovatif

innovatif.com

66

Innovatif is a Slovenian-based company specializing in brand communication, digital platform development, and media buying with over 20 years of experience. Their website demonstrates a professional and modern digital presence, targeting businesses and brands seeking comprehensive communication and digital solutions. The company serves a diverse client base including government entities and large enterprises, positioning itself as a trusted partner in the technology and communication sectors. Technically, the website is built on SilverStripe CMS and uses modern JavaScript libraries and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but the active and professional website mitigates concerns. Overall, Innovatif presents a credible and well-established business with a strong digital footprint.

C

CRMT d.o.o.

crmt.si

43

CRMT d.o.o. is a well-established Slovenian technology company specializing in data-driven business transformation, controlling modernization, corporate performance management, and regulatory reporting solutions. With over 20 years of experience, CRMT serves business clients seeking to leverage advanced data management and analytics technologies to improve operational efficiency and compliance. The company maintains strong partnerships with leading technology providers such as Exasol, Qlik, and Wolters Kluwer, reinforcing its market position as a trusted consulting and solutions provider. Technically, the website is built on a modern WordPress CMS platform with common optimization and analytics tools including Google Tag Manager and Cookiebot for consent management. The site demonstrates good mobile optimization, clear navigation, and professional design, supporting a positive user experience. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, CRMT's website reflects a mature, professional business with a solid digital presence and good security posture. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.

G

GENERALI zavarovalnica d. d.

generali.si

61

GENERALI zavarovalnica d. d. is a well-established Slovenian insurance company offering a wide range of insurance products including vehicle, home, health, accident, travel, and pension insurance for both individuals and businesses. The company is part of the larger Generali Group, a recognized global insurance provider. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information tailored to the Slovenian market. Technical infrastructure leverages Liferay CMS, jQuery, and Google Tag Manager, indicating a modern and maintainable platform. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

F

Facts.net

cookiesdirective.com

59

Facts.net is an established online media platform founded in 1997, specializing in publishing factual and educational content across diverse categories including technology and computing. The website targets a general audience interested in knowledge discovery and provides content supported by advertising revenue. The platform demonstrates consistent branding and professional content quality, supported by expert verification and editorial guidelines. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Matomo, hosted with GoDaddy and utilizing Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is evident with cookie consent mechanisms and GDPR-aligned policies. Overall, the website is trustworthy, safe for general audiences, and maintains a solid business credibility profile.

B

Best of Realty

bestofrealty.cz

64

Best of Realty is a prestigious Czech real estate competition established in 1999, recognizing outstanding developers, architects, and real estate professionals in the Czech Republic. The website serves as an information hub for the competition, showcasing nominated projects, news, and partner information. The site is professionally designed, mobile-optimized, and includes modern analytics and tracking tools, reflecting a mature digital presence. However, the absence of WHOIS data and explicit contact details slightly reduces trustworthiness. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved with additional security headers and published security policies. Overall, the site is a credible and well-maintained platform for its niche audience.

P

PUMA

puma-catchup.com

61

PUMA CATch up is a corporate media platform operated by PUMA SE, focusing on delivering news, stories, and updates related to the brand's business, sports, sustainability, and employee engagement. The website serves as an internal and external communication channel targeting PUMA employees and brand enthusiasts. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, with progressive web app capabilities. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and detailed privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with PUMA's corporate identity. Overall, the site demonstrates a moderate to good digital maturity level but would benefit from enhanced transparency and security practices.

P

PUMA Europe GmbH

puma.com

72

PUMA Europe GmbH operates a professional e-commerce platform targeting the Finnish market under the global PUMA brand, a leading sportswear company founded in 1948. The website offers footwear, apparel, and accessories with a strong focus on performance and lifestyle products. The platform is built on Salesforce Commerce Cloud, integrating advanced personalization and analytics tools such as Emarsys and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, strong branding consistency, and compliance with GDPR, supporting a high trustworthiness rating.

C

Crownpeak Technology, Inc

attraqt.com

67

Crownpeak Technology, Inc offers Fredhopper, an advanced AI-powered product discovery solution designed to enhance e-commerce experiences for enterprise retailers and brands, particularly in fashion and beauty sectors. The platform provides intelligent merchandising, personalized recommendations, and AI-driven search capabilities that significantly boost conversions and average order values. The website demonstrates a mature digital presence with integrations across major e-commerce platforms such as Shopify and Salesforce Commerce. Technically, the site employs modern tracking and marketing technologies, robust consent management, and enforces HTTPS with security headers, reflecting a strong security posture. However, the absence of WHOIS registration details slightly reduces trust but is mitigated by the professional site content and branding. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

C

Cognigy GmbH

cognigy.ai

75

Cognigy GmbH is a German-based technology company specializing in conversational AI solutions designed to automate and enhance customer service operations. Positioned as a leader in the conversational AI market, as evidenced by its recognition in the 2025 Gartner Magic Quadrant, Cognigy offers a comprehensive AI platform that supports voice and chat AI agents, agent assist tools, and integrations with major contact center platforms. The company targets enterprise customers seeking to deploy AI-powered customer service automation across multiple channels and languages. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including JavaScript, CSS3, and HTML5, with embedded video content hosted on Vimeo. The site demonstrates good digital maturity with mobile optimization, accessibility considerations, and SEO best practices. Analytics and marketing tools such as Google Tag Manager and HubSpot Analytics are employed with appropriate cookie consent mechanisms, reflecting compliance with privacy regulations including GDPR. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. No exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and a vulnerability disclosure policy are not publicly available, representing areas for improvement. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with a reputable technology enterprise. The absence of WHOIS data is a minor concern but is offset by strong business and trust indicators. Strategic recommendations include enhancing transparency around security incident response and vulnerability reporting to further strengthen trust and compliance.

FatCow Web Hosting is a well-established provider of small business web hosting and domain registration services, now operating under the umbrella of iPage by Network Solutions, a Newfold Digital brand. The website serves as a login portal for customers to access their control panel and webmail services. It targets small business owners and website administrators seeking reliable hosting solutions. The company offers a range of services including web hosting, domain registration, email hosting, WordPress hosting, e-commerce, and marketing services, positioning itself as a comprehensive provider in the web hosting industry. Technically, the website employs a modern technology stack including Bootstrap 3, jQuery, YUI, and integrates third-party services such as Google Tag Manager, Sift for fraud detection, AudioEye for accessibility, and Genesys for live chat support. The site is hosted on infrastructure managed by iPage/Network Solutions, ensuring moderate performance and good mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure login forms with POST methods. It includes cookie consent mechanisms and privacy policies that indicate GDPR compliance. While explicit security headers like Content-Security-Policy are not detected, the use of script integrity attributes and cross-origin policies reflect good security hygiene. No vulnerabilities or exposed sensitive data were found in the analysis. However, recommendations include implementing additional security headers and publishing a vulnerability disclosure policy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. The lack of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the site, which aligns with the parent company’s branding and services. Strategic recommendations focus on enhancing security headers, transparency, and incident response readiness to further strengthen trust and compliance.

F

FTV Prima

cnnprima.cz

58

FTV Prima operates the CNN Prima NEWS website, a leading Czech news media outlet providing trustworthy, fast, and clear news coverage for a broad audience. The site offers live TV streaming, news articles, video content, and a mobile app, targeting general audiences in the Czech Republic. The business is positioned as a major player in the Czech media industry with consistent branding and a comprehensive content offering. Technically, the website uses modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. The site is mobile-optimized, accessible, and integrates multiple trusted third-party services for analytics and advertising. Performance is moderate with good SEO and accessibility practices. Security posture is strong with HTTPS enforced, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers should be verified and a security.txt file or incident response contact could enhance transparency. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website presents a low risk profile with high professionalism and trustworthiness. The lack of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts.

Transparency International Czech Republic is a well-established non-profit organization dedicated to combating corruption within the Czech Republic. The website clearly communicates its mission, ongoing projects, and impact metrics, supported by a professional and modern web presence built on WordPress. The organization provides legal assistance, advocacy, and educational services, funded primarily through donations facilitated by a trusted third-party platform. Technically, the site employs modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the organization's credibility given the consistent branding and external references.

D

Deník Referendum

denikreferendum.cz

59

Deník Referendum is an independent Czech media outlet founded in 2009, focusing on political, social, and climate-related journalism without paywalls or oligarch influence. The website is well-structured, uses modern web technologies including Svelte, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Facebook Pixel. The site implements a comprehensive cookie consent mechanism, allowing users granular control over cookie categories. Security posture is strong with HTTPS enforced and Cloudflare Bot Management in place, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, content-rich, and trustworthy, serving a Czech-speaking audience interested in independent journalism.

W

Web7master

web7.cz

53

Web7master is a Czech digital agency specializing in professional web development, e-shop creation, and custom applications tailored to business needs. They offer comprehensive services including website management, SEO optimization, and effective online marketing to help clients establish a strong digital presence. The company targets businesses seeking modern, responsive websites and digital marketing solutions primarily within the Czech Republic. The website is well-structured, mobile-optimized, and uses modern web technologies such as Joomla CMS and Bootstrap framework. Tracking and analytics tools like Google Analytics and Facebook Pixel are integrated for marketing insights. Security posture is strong with HTTPS and security headers implemented, though visible privacy and cookie policies are absent, which is a compliance gap. WHOIS data is unavailable, which slightly reduces trust but the website content and contact information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, and business credibility but should improve privacy compliance to enhance trust and regulatory adherence.

C

Církev adventistů s.d.

hopetv.cz

42

HopeTV is a Czech Christian internet television channel affiliated with the international Hope Channel network and operated by the Církev adventistů s.d. It provides religious video content including sermons, live church services, and thematic programs targeting the Christian community and general public interested in faith-based media. The website features a professional design with good navigation and mobile optimization, supporting a positive user experience. Technically, it employs a mix of legacy and modern web technologies including jQuery, Nette AJAX, Video.js, and Google Analytics, but some components like jQuery are outdated and may pose security risks. Security posture is moderate with HTTPS enforced but lacking security headers and updated libraries. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. The WHOIS data is unavailable, limiting domain registration trust assessment, but the website's affiliation with known organizations supports legitimacy. Overall, the site is functional and trustworthy but requires improvements in security and privacy compliance.