Security Directory

V

VT Centrum

vtcentrumbrod.cz

55

VT Centrum is a modern driving school based in Český Brod, Czech Republic, offering professional driving courses primarily for category B licenses. The business targets individuals seeking to obtain their driver's license with a focus on quality instruction and modern training equipment. The website reflects a local service provider with a clear and professional presentation, catering to a regional audience. Technically, the site is built on the Webnode CMS platform and hosted via AWS Cloudfront, employing standard web technologies such as JavaScript and CSS. The site is mobile-optimized and performs moderately well, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and a published privacy policy, which impacts GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, though the website content suggests a legitimate business. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, but improvements in privacy and security policies are recommended.

N

NA CESTÁCH BEZPEČNĚ z.s.

nacestachbezpecne.cz

59

NA CESTÁCH BEZPEČNĚ z.s. is a registered non-profit association founded in 2021 focused on road safety education and prevention across all road user groups, including children and the growing community of caravan enthusiasts. The organization positions itself as a specialized entity within the Czech transportation safety sector, delivering educational content, public awareness campaigns, and interactive activities such as quizzes and lectures at events like Caravaning Brno. The website reflects this mission with relevant content and a clear target audience of road users of all ages. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with good SEO practices. The site includes a cookie consent mechanism and uses Google Tag Manager for analytics, indicating a moderate level of digital maturity. However, some accessibility features and security headers are lacking, which could be improved. From a security perspective, the site enforces HTTPS and provides a cookie consent banner, but lacks visible security headers and explicit privacy or terms of service pages. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and structure appear professional and transparent. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and resolving the domain registration transparency issue to enhance trust and credibility.

Č

Česká obec Sokolská

obchodsokol.cz

71

The website fnshp.cz/ceska-obec-sokolska/ serves as an official e-commerce platform for Česká obec Sokolská, offering licensed merchandise including clothing, accessories, collections, and publications. It targets members and supporters of the organization, providing a professional and branded shopping experience. The site is well-structured with clear navigation and multiple product categories, supporting Czech and English languages. Social media integration with Facebook and Instagram enhances community engagement. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Sentry for error monitoring, and Typekit fonts. It uses HTTPS and has implemented cookie consent mechanisms, reflecting a good level of digital maturity. The CMS appears custom or proprietary, developed by wpj.cz, a partner domain. Performance and mobile optimization are adequate, though accessibility could be improved. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks explicit security headers visible in the HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with accessible privacy and cookie policies, and GDPR adherence is evident. However, WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for e-commerce sites. Overall, the website presents a secure, professional, and user-friendly platform for official merchandise sales. Strategic improvements in security headers and accessibility would enhance its posture. The absence of WHOIS transparency is noted but does not detract significantly from legitimacy.

V

VaK Jesenicka

jesenickavoda.cz

57

Jesenickavoda.cz is a Czech regional water utility website focused on providing information and services related to potable and utility water supply in the Jeseník region. The site features news articles, community engagement content, and water management updates, positioning itself as a key local resource for residents and stakeholders. The business operates in the energy sector, specifically water utilities, and targets local consumers and environmental professionals. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for hosting and Google Analytics for visitor tracking. It employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with a moderate performance profile. Security-wise, the site uses HTTPS and basic security headers but lacks advanced security headers and explicit security policies. The absence of WHOIS data and privacy policy reduces transparency and compliance confidence. Overall, the site is professional and trustworthy in content and design but would benefit from enhanced security and privacy disclosures.

F

FANUC Global

fanuc.eu

82

FANUC Global is a leading enterprise in the manufacturing sector specializing in factory automation solutions. With over 60 years of experience, FANUC offers a broad portfolio including CNC systems, industrial robots, machining centers, injection molding machines, and IIoT solutions. The company targets manufacturing industries worldwide, providing scalable automation technologies to enhance productivity and operational efficiency. Their digital service platform, MyFANUC, supports customers with product registration, orders, and downloads, reflecting a mature digital infrastructure. Technically, the website is built on modern frameworks such as Next.js and Drupal CMS, leveraging cloud CDN services for performance and global reach. The site is well-optimized for SEO, mobile responsiveness, and accessibility, indicating a high level of digital maturity. Security practices include HTTPS enforcement and cookie consent management via Cookiebot, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though explicit security headers could be confirmed. Privacy compliance is robust, with comprehensive privacy and cookie policies and GDPR adherence. The absence of public WHOIS data is typical for .eu domains and does not detract from the domain's legitimacy. Overall, FANUC demonstrates a professional, trustworthy online presence aligned with its market leadership. Recommendations include enhancing transparency on security policies and incident response, publishing a security.txt file, and confirming security headers to further strengthen trust and compliance.

O

ONE SYSTEM

onesystem.cz

56

ONE SYSTEM is a Czech Republic-based company specializing in transportation safety and monitoring systems, primarily serving public transport operators and vehicle fleet managers. Their offerings include camera systems for monitoring passenger boarding and alighting, vehicle interiors, and external surroundings, as well as fleet management solutions. The company emphasizes safety, operational efficiency, and modular system design tailored to client needs. The website reflects a professional small business with a clear focus on transportation safety technology.

K

Komunitní nadace Blanicko – Otavská

konabo.cz

59

Komunitní nadace Blanicko – Otavská is a Czech community foundation dedicated to supporting local projects that benefit residents and foster regional development. The foundation operates primarily in the Blanicko – Otavská region, providing grants and managing donor funds to support social services, environment, culture, education, and local development. The website reflects a small but established non-profit organization with a clear mission and local focus. Technically, the site is built on the Webnode CMS platform, uses HTTPS with Cloudfront CDN for asset delivery, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data and lack of published privacy and terms policies represent gaps in transparency and compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy in content but would benefit from enhanced compliance and security practices.

Č

Černovická dechovka

cernovickadechovka.cz

57

Černovická dechovka is a traditional Czech brass band with a rich history dating back to 1933. The band performs a variety of traditional music styles including polkas, waltzes, tangos, marches, and seasonal music such as Christmas carols. It actively participates in festivals, concerts, and community celebrations, and has recorded CDs and DVDs that have been broadcast on Czech radio and television. The website serves as an informational and promotional platform for the band, targeting music enthusiasts and local community members interested in traditional Czech brass music. Technically, the website is built using the Webnode CMS platform and hosted on AWS Cloudfront CDN, employing modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. It uses HTTPS for secure communication and implements a cookie consent banner to comply with basic privacy regulations. However, it lacks advanced security headers and comprehensive privacy or terms of service documentation. From a security perspective, the site shows a moderate security posture with HTTPS enabled and cookie consent mechanisms in place. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, as it conflicts with the band's claimed long history. No critical vulnerabilities or exposed sensitive data were detected. The site does not collect user data through forms beyond cookie consent, reducing privacy risks. Overall, the website is a well-maintained informational site for a cultural music group with good content quality and user experience. Security and privacy compliance can be improved by adding security headers, privacy policies, and domain registration transparency. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trust and legitimacy.

U

Urban Market

urbanmarket.sk

37

Urban Market is a Slovakian event organizer specializing in large-scale sales exhibitions showcasing local author design, fashion, and artistic creations. The website positions itself as the largest such event in Slovakia, targeting a general audience including families. The business model revolves around organizing events and cultural programs that promote local creators. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by event management plugins and Google Analytics for tracking. Hosting appears to be provided by Websupport with DNSSEC enabled, indicating a secure domain setup. Security posture is good with HTTPS and DNSSEC, but lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

K

KOKOZA, o. p. s.

kokoza.cz

45

KOKOZA, o. p. s. is a Czech non-profit organization dedicated to promoting urban gardening, food cultivation, and composting within city environments. Their website serves as an educational platform inspiring and connecting communities to grow vegetables and fruits even in limited urban spaces such as terraces and window boxes. The organization focuses on community engagement and environmental sustainability. Technically, the website is built on WordPress using Elementor and enhanced with SEO and analytics tools like Rank Math and Google Tag Manager. The site is served securely over HTTPS with a good SSL configuration and uses modern web technologies and CDNs for performance. However, explicit privacy policies and terms of service are not present, which slightly impacts compliance and trust. Security posture is generally good, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional, trustworthy, and well-positioned within its niche, but could enhance transparency and security documentation to improve compliance and user trust.

B

Bastide le confort médical

bastideleconfortmedical.com

59

Bastide Le Confort Médical operates as a leading French e-commerce platform specializing in medical equipment and mobility aids, including fauteuils releveurs (lift chairs), incontinence products, and professional medical supplies. The company positions itself as the premier network for medical equipment in France, targeting both individual consumers and healthcare professionals. Their business model focuses on online retail complemented by physical stores and customer support services, including delivery and installation. Technically, the website is built on the Planet Unified Commerce platform, utilizing AngularJS and Bootstrap frameworks, with integrations for advanced search (Doofinder), marketing (Google Tag Manager, SaleCycle), and cookie consent management (Axeptio). The site is mobile-optimized and employs HTTPS with a moderate performance profile. However, some modern security headers are missing, and the site could improve accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks comprehensive security headers and explicit privacy policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and business information mitigate some risk. Overall, the website presents a trustworthy and professional front for a healthcare retail business but should address WHOIS inconsistencies and enhance security and privacy disclosures to strengthen trust and compliance.

G

Girasole, z. s.

girasole.cz

58

Girasole, z. s. is a Czech non-profit organization providing healthcare and social services focused on home hospice care, personal assistance, and emergency care for seriously ill and elderly individuals in the Hustopeče region. Their mission is to support patients and families to live dignified lives at home during serious illness. The website reflects a local healthcare service provider with a clear focus on palliative and hospice care, supported by community and regional partnerships.

P

Podřipské muzeum v Roudnici nad Labem - příspěvková organizace města Roudnice n. L.

podripskemuzeum.cz

57

Podřipské muzeum in Roudnice nad Labem is a public cultural institution operated as a contributory organization of the city. It focuses on preserving and presenting the history and culture of the Podřipsko region through permanent and temporary exhibitions, workshops, lectures, and public events. The museum targets local residents and visitors interested in regional heritage and cultural education. The website reflects a small but professionally managed institution with clear contact information and active social media presence. Technically, the website is built on the Webnode platform, leveraging modern web technologies including HTTPS, CDN hosting via Amazon Cloudfront, and Google Tag Manager for analytics. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be enhanced. The cookie consent mechanism is implemented, but privacy and terms of service pages are missing, indicating partial compliance with GDPR requirements. From a security perspective, the site uses HTTPS and basic security headers but lacks advanced headers and a security.txt file for vulnerability disclosure. No WHOIS data is available, which limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the security posture is moderate with room for improvement in compliance and security best practices. The overall risk is low given the nature of the institution and the website content. Strategic recommendations include adding privacy and terms policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

Č

Časopis CzechIndustry

casopisczechindustry.cz

54

Časopis CzechIndustry is a specialized magazine focusing on Czech industry, commerce, transport, and construction sectors. It serves a niche audience of industry professionals and stakeholders by providing news, expert interviews, and event information relevant to the Czech industrial landscape. The website content is well-structured and relevant, reflecting a small but focused publishing business. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN and Google Analytics for tracking with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces transparency and trustworthiness, although the presence of clear contact information and consistent branding supports legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

A

Acord, z.s.

acord-spolek.cz

57

Acord, z.s. is a small Czech non-profit organization focused on cultural activities including theater and music, primarily serving the local community of Slatiňany. The organization engages both children and adults in theatrical performances, family events, and charitable concerts, emphasizing community involvement and cultural enrichment. Their business model relies on sponsorships and donations, with transparent public donation accounts and a clear contact presence on their website. Technically, the website is built on the Webnode CMS platform and utilizes Amazon Cloudfront CDN for content delivery. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. The presence of Google Tag Manager indicates moderate user tracking and analytics capabilities. However, the site lacks advanced security headers and comprehensive privacy documentation. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, which are positive indicators. However, the absence of security headers and privacy policies represents compliance gaps, particularly under GDPR. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details suggest a legitimate small non-profit entity. Overall, the security posture is moderate but could be improved with better policy transparency and technical safeguards. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture. The website is safe for general audiences and does not contain any adult or questionable content.

I

Intra-African Trade Fair (IATF)

iatf.africa

55

The Intra-African Trade Fair (IATF) 2025 website serves as a comprehensive platform promoting a major pan-African trade event scheduled in Algiers, Algeria. The event focuses on fostering intra-African trade, investment, and economic development across multiple sectors including agribusiness, creative industries, automotive, and research. The platform targets a diverse audience of businesses, investors, government entities, and entrepreneurs seeking to engage with Africa's growing $3.5 trillion market. The website provides detailed session schedules, speaker profiles, and event information, positioning itself as a key gateway for trade opportunities in Africa. Technically, the website is built on modern web technologies including React and Next.js, leveraging Material-UI for UI components and Amazon Cloudfront for content delivery. It demonstrates good mobile optimization and SEO practices, although accessibility features are basic. The site uses Google Tag Manager for analytics and tracking, indicating moderate user tracking levels. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no accessible privacy policy or terms of service pages. WHOIS data is privacy protected but consistent with a legitimate event domain. Overall, the website is professional and trustworthy, with strong business credibility but some gaps in privacy and security transparency. Strategic improvements in privacy policy publication, security header implementation, and incident response disclosure would enhance trust and compliance.

O

Obecní úřad Hrusice

obec-hrusice.cz

10

The website obec-hrusice.cz serves as the official digital presence for the municipality of Hrusice in the Czech Republic. It provides residents and visitors with essential information such as news updates, official notices, contact details, event calendars, and local services. The site is positioned as a local government authority platform, targeting the community and stakeholders within the municipality. The business model is governmental public service, with a focus on transparency and community engagement. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, hosted on Amazon AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. The site employs HTTPS with good SSL configuration and security headers, reflecting a solid security posture. However, it lacks some advanced privacy compliance features such as a cookie consent mechanism and explicit security or incident response policies. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. The domain registration data is consistent and trustworthy, with a long-standing domain age appropriate for a municipal entity. The absence of a vulnerability disclosure policy and incident response contact points are areas for improvement. Overall, the website is professional, trustworthy, and serves its purpose effectively, though it could enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

M

MetroNews Television

wvmetronewstv.com

68

MetroNews Television is a media streaming platform dedicated to providing comprehensive news, talk, and sports coverage for West Virginia. It offers a variety of programming including live and archived shows, sports broadcasts, and exclusive interviews, positioning itself as the only true statewide medium for the Mountain State. The platform targets West Virginia residents and sports enthusiasts, delivering content accessible across multiple devices without requiring a traditional TV provider. Technically, the website leverages modern web technologies such as React, Google Analytics 4, Google Tag Manager, and Google reCAPTCHA Enterprise for security and analytics. It is hosted likely on AWS infrastructure using Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site includes proper meta tags, SEO elements, and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. While explicit security headers are not fully confirmed, the site demonstrates good security hygiene with CSRF tokens and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, MetroNews Television presents a professional and trustworthy media service with strong technical and security foundations. The main risk lies in the lack of publicly available domain registration information, which should be addressed to enhance trust and credibility.

F

Flowmedik Oy

echat.fi

44

Flowmedik Oy operates the echat.fi website, providing eConsultation services primarily targeting Finnish healthcare consumers. The website is designed in Finnish and offers online medical consultation services, positioning itself as a niche healthcare provider in Finland. The domain is registered since 2018, consistent with the company's business timeline. Technically, the website employs modern web technologies such as Font Awesome icons, Google Fonts, and Raygun for error monitoring, hosted on Cloudpit infrastructure. However, the site lacks comprehensive privacy and cookie policies, and no explicit contact information is present on the homepage, which may impact user trust and compliance. Security-wise, HTTPS is used, and error monitoring is active, but security headers and other best practices are missing, indicating room for improvement in security posture. Overall, the website is functional but basic in content and compliance, scoring moderately in AI evaluation.

P

Perfalytics, Inc.

perfalytics.com

64

Freshpaint is a healthcare-focused privacy platform designed to help healthcare marketers and organizations manage their data in compliance with HIPAA regulations. The company offers a suite of services including a BAA-supported platform, safe-by-default data blocking, complete visitor journey tracking, and secure server-side connections to ensure sensitive health information is never shared with non-compliant advertising and analytics tools. Positioned as a specialized SaaS provider, Freshpaint targets healthcare marketers seeking to balance high-performance marketing with stringent privacy requirements. The website reflects a professional and consistent brand image, emphasizing trust and compliance.

U

U Lidušky

obchodulidusky.cz

57

U Lidušky is a small, family-run retail business operating multiple farm food stores and a bistro in Plzeň, Czech Republic, since 2014. They focus on healthy, local, and farm-sourced products including bakery items, meats, and gluten-free foods. Their market position is that of a trusted local provider emphasizing quality and freshness. Technically, the website is built on the Webnode CMS platform, uses Amazon Cloudfront CDN, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a published privacy policy, which are important for GDPR compliance. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and contact details suggest a legitimate business. Overall, the site scores well on content and technical implementation but should improve privacy and security disclosures to enhance trust and compliance.

T

Tereza Buchalová – fotograf

terezabuchalova.cz

58

The website www.terezabuchalova.cz represents a small local photography business based in the Czech Republic, specializing in portrait and lifestyle photography. The site offers services including studio rental and photography workshops, targeting a general audience primarily in the Pardubice region. The business model is service-oriented with a focus on personal photography sessions and educational offerings. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

Senior Point Zlín

senior-point-zlin.cz

57

Senior Point Zlín is a community-focused service providing a friendly contact point for seniors in the city of Zlín, Czech Republic. The website serves as an informational portal offering details about services, events, and leisure activities tailored for senior citizens. The organization appears to be a small, local non-profit or government-supported entity dedicated to senior welfare. Technically, the website is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and a privacy policy page, which are important for GDPR compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and hosting appear legitimate. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved privacy and security practices.

L

La Fabrica Bistro

lafabricabistro.cz

55

La Fabrica Bistro is a small hospitality business located in the Czech Republic, offering a refined bistro experience with a focus on breakfast, brunch, and lunch menus featuring local farm and forest ingredients. The website presents a professional and visually appealing design with clear navigation and contact information, primarily targeting local customers and visitors interested in quality dining. The technical infrastructure relies on Webnode CMS and AWS Cloudfront CDN, with Google Tag Manager implemented for analytics. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content appears legitimate and business-focused. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

I

RegioRevue.cz | Zpravodajství Ústeckého kraje

iteplice.cz

38

RegioRevue.cz is a regional news website focused on providing news and information about the Ústecký region in the Czech Republic. The site serves local residents and interested readers with regional news coverage and community updates. The business operates as a small-scale online media outlet with a clear regional focus. Technically, the website is built on WordPress using the Divi theme, leveraging Cloudfront CDN and Google Fonts for performance and styling. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, from a security and compliance perspective, the website lacks critical elements such as privacy and cookie policies, security headers, and explicit contact information for incident response or data protection. Analytics usage is present via Google Tag Manager, but privacy compliance is minimal. Overall, the domain registration data is consistent with the website's regional media purpose, and no blocking or WAF challenges were detected, allowing full content access. The site is safe for general audiences with no adult or explicit content detected.

A

Acro Jarmila Podzemská

acro-farm.cz

52

ACRO FARM is a small family-operated breeder specializing in colorful miniature horses and Irish cobs, emphasizing healthy animals with excellent character and active participation in driving, jumping, and therapy activities. The website showcases champion horses and provides detailed descriptions of their breeding goals and achievements. Technically, the site is built on the Webnode CMS platform, uses Cloudfront CDN, and integrates Google Analytics for visitor tracking. The site is accessible without WAF or blocking mechanisms but lacks advanced security headers and privacy compliance features. No WHOIS data is available, limiting domain legitimacy verification. Overall, the site serves a niche equestrian audience with basic but functional digital infrastructure.

A

Asociace chovatelů miniaturních koní

achmk.cz

54

The website www.achmk.cz represents the official online presence of the Asociace chovatelů miniaturních koní, a Czech association dedicated to miniature horse breeding. It serves a niche community of breeders and enthusiasts by providing detailed information on breeding standards, events such as shows and seminars, membership details, and sponsorships. The site is well-structured with clear navigation and relevant content tailored to its target audience. The business model is that of a non-profit association focused on community engagement and promotion of miniature horses within the Czech Republic. Technically, the website is built on the Webnode CMS platform and leverages AWS Cloudfront CDN for content delivery. It uses Google Analytics with IP anonymization for visitor tracking. The site is served over HTTPS with a valid SSL configuration, ensuring secure data transmission. However, it lacks advanced security headers and privacy-related policies, which are areas for improvement. The site shows basic mobile optimization and accessibility features but could benefit from enhancements to improve user experience on mobile devices. From a security perspective, the site demonstrates a moderate posture with HTTPS enabled and minimal tracking practices. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be a risk factor. The WHOIS data is unavailable or privacy protected, limiting transparency about domain ownership, but the website content and contact details support its legitimacy. Overall, the site is functional and serves its community well but should prioritize implementing privacy policies, security headers, and incident response information to enhance trust and compliance. Strategic recommendations include improving security best practices, enhancing mobile responsiveness, and increasing transparency around data protection.

The website going-public.de is currently a parked domain landing page primarily aimed at domain resale. It lacks any substantive business content, contact information, or legal policies, indicating it is not actively used for commercial or organizational purposes. The technical infrastructure relies on basic JavaScript and Cloudfront CDN for content delivery, with external scripts for advertising and tracking. There is no evidence of a CMS or advanced frameworks. Security posture is minimal with no visible security headers or privacy compliance mechanisms. The domain WHOIS data shows use of parkingcrew.net name servers, consistent with domain parking services, and lacks registrant details, reducing trustworthiness. Overall, the site presents low business credibility and poor user experience.

N

Nadácia Pontis

nadaciapontis.sk

59

Nadácia Pontis is a Slovak non-profit foundation dedicated to fostering positive changes through social innovation, philanthropy, and responsible business practices. The organization connects companies, organizations, and individuals to promote social impact initiatives. The website reflects a medium-sized, established non-profit entity with a clear mission and a professional online presence. The target audience includes firms, organizations, and individuals interested in social responsibility and innovation. The foundation offers services such as events, seminars, volunteer programs, and internships to engage its community. Technically, the website is built on WordPress 6.7.1 and leverages modern tools including Google Tag Manager, Google Analytics, Facebook Pixel, and various WordPress plugins for multilingual support, forms, and social media integration. The site is hosted with CDN support (Cloudfront) and uses HTTPS with strong SSL configuration. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, indicating good baseline security practices. However, explicit security headers are missing, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, with extensive user tracking and marketing tools. The absence of explicit privacy and security policies is a gap that should be addressed to enhance compliance and user trust. The domain registration data aligns well with the organization's identity, supporting legitimacy. Strategic recommendations include adding privacy and security policies, implementing security headers, and publishing vulnerability disclosure information.

M

Mad Mimi

madmimi.com

66

Mad Mimi was a SaaS email marketing platform founded in 2006, offering services such as HTML email newsletters, subscriber growth, and email list management. The service was retired as of August 30, 2024, with GoDaddy consolidating its email marketing offerings under GoDaddy Digital Marketing. The website content reflects this transition and directs users to GoDaddy's new platform. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and is hosted via GoDaddy and Cloudfront CDN. However, DNSSEC is not enabled, and no explicit security headers are present, indicating room for security improvements. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service on the homepage. Overall, the site is functional but minimal, reflecting the retirement status of the service.

E

European Handball Federation (EHF)

ehftv.com

66

EHFTV.com is the official streaming platform of the European Handball Federation, providing live and on-demand handball competition content to fans worldwide. The platform offers a subscription-based model with free registration, enabling personalized fan experiences. It holds a strong market position as the primary digital destination for EHF competitions, supported by consistent branding and comprehensive content offerings. Technically, the site leverages modern web technologies including Next.js, cloud CDN services, and integrates multiple analytics and marketing tools while maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is robust, with comprehensive policies and cookie consent mechanisms implemented via Iubenda. Overall, EHFTV.com demonstrates a mature digital presence with high trustworthiness and professional execution.

마

마이페어(MyFair)

myfair.co

63

마이페어(MyFair) is a Korean-based online platform specializing in overseas exhibition booth reservation and comprehensive participation management services. The platform targets businesses, including SMEs, startups, and organizations seeking to participate in global trade shows. It offers key services such as exhibition search, booth reservation, professional partner matching, and management of exhibition-related tasks. The website is professionally designed with a clear structure and good user experience, primarily in Korean language, catering to the Korean market. Technically, the site uses modern frameworks like Next.js and React, integrates multiple marketing and analytics tools, and is hosted on a reliable CDN infrastructure. Security measures include HTTPS enforcement and standard security headers, although explicit privacy and cookie policies are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

The website wp-content.com is currently a parked domain primarily used for domain resale purposes. It displays a prominent domain sale banner linking to Afternic, a known domain marketplace. There is no active business content, no privacy or cookie policies, and no contact information provided. The technical infrastructure relies on basic HTML, CSS, JavaScript, and third-party ad/tracking scripts served via Cloudfront CDN. The site embeds an iframe from an unrelated domain, which may pose security risks. Security posture is weak with no visible HTTPS enforcement or security headers. Overall, the site lacks professionalism, trust indicators, and compliance with privacy regulations. The domain is privacy protected in WHOIS, consistent with domain resale practices but limiting transparency.

A

Axon Enterprise, Inc.

axon.com

70

Axon Enterprise, Inc. is a leading technology company specializing in public safety solutions, including TASER devices, police body cameras, cloud-based evidence management, AI-powered tools, and drone detection systems. The company targets law enforcement, federal agencies, enterprise, fire, EMS, corrections, and campus safety sectors, positioning itself as a market leader with a comprehensive ecosystem designed to protect life and enhance public safety operations. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on AWS with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and privacy policies in place, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Axon's reputation as a credible enterprise in the public safety technology market.

T

TwentyThree

twentythree.net

71

TwentyThree is a leading European video software company specializing in a comprehensive video marketing platform designed for businesses to leverage video content across customer journeys. The company positions itself as a pioneer with a full suite of video tools including webinars, video libraries, and personal video capabilities, targeting medium-sized to large enterprises primarily in the technology sector. The website reflects a mature digital presence with modern infrastructure, leveraging HubSpot CMS, Amazon Cloudfront hosting, and advanced analytics tools such as Google Analytics and Google Tag Manager. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional branding. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the domain registration data corroborates the business legitimacy and history, supporting a high trust level.

I

Robot Challenge Screen

iatfglobaloversight.org

39

The website iatfglobaloversight.org currently serves a robot challenge screen that blocks direct access to its content. This challenge uses a JavaScript-based proof-of-work CAPTCHA mechanism, likely implemented as a Web Application Firewall (WAF) or security measure to prevent automated access. Due to this, no substantive business or contact information is accessible on the page. The domain is registered since 2007 with a reputable registrar and shows no privacy protection, indicating legitimacy. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance policies. Technically, the site uses advanced JavaScript for the CAPTCHA and is hosted on SiteGround with Cloudfront CDN for assets. Security posture is moderate given the presence of a WAF challenge but lacks standard security headers and DNSSEC. Privacy compliance and business credibility cannot be confirmed due to lack of visible policies or contact data.

LAFRENTZ Baugesellschaft mbH is a specialized construction company based in Hannover, Germany, focusing on park deck renovation, building waterproofing, flood protection, and road marking services. The company targets commercial, public, and private clients with comprehensive services from planning to maintenance. Their market position is that of a niche specialist in construction waterproofing and related services within Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed service descriptions, supporting their business credibility. Technically, the site is built on the 1&1 IONOS Website Editor platform, using modern JavaScript libraries and CDN services, with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of a privacy policy and terms of service pages, though a cookie consent mechanism is present. Contact information is limited to a phone number with no email or social media links. WHOIS data lacks detailed registrant information, slightly reducing trust but not contradicting the business claims. Overall, the website is a good representation of a small specialized construction business with room for improvement in privacy and security transparency.

G

guidle

guidle.com

63

Guidle is a digital advertising and leisure planning platform primarily serving the DACH region, with a focus on providing diverse content such as events, restaurants, museums, and more. The platform targets both end consumers and business clients including municipalities and event organizers, offering services like digital ad mediation, managed content, and sector-specific solutions. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site leverages modern web technologies including Vue.js, Google Analytics, and CDN hosting via Amazon Cloudfront. It implements a comprehensive cookie consent mechanism aligned with GDPR requirements, ensuring user privacy and transparency. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent controls effectively. However, it lacks visible security headers and explicit security or incident response policies, which are recommended for enhanced protection. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate business operation. Overall, Guidle presents a solid digital presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in security headers and incident response documentation would strengthen trust and compliance.

The website rhmerchandise.com is currently inaccessible due to a security challenge page implementing a proof-of-work captcha mechanism. This prevents access to any business-related content, contact information, or policies. The domain is registered since 2017 with GoDaddy and uses Amazon Cloudfront CDN for content delivery. The security challenge page indicates an intent to protect the site from automated access or abuse but severely limits external analysis. No privacy, cookie, or terms of service policies are visible, and no contact details or business information can be extracted. The technical infrastructure includes modern JavaScript with Web Workers and cryptographic functions for the captcha. However, no security headers or DNSSEC are enabled, representing minor security gaps. Overall, the site’s security posture is difficult to assess fully due to the blocking mechanism, but the domain registration appears legitimate.

M

Mixlr Ltd

mixlr.com

60

Mixlr Ltd operates a specialized live audio broadcasting platform that enables users to create, distribute, and host professional-quality live audio streams globally. Founded in 2010, the company has established itself as a trusted provider in the live audio streaming niche, serving diverse audiences including sports teams, podcasters, educators, and faith groups. The platform emphasizes ease of use, reliability, and professional sound quality without the complexity of traditional broadcasting tools. Technically, Mixlr leverages a modern tech stack including Ruby on Rails, Turbo, StimulusJS, and AWS infrastructure with Cloudfront CDN, ensuring fast and scalable performance. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR. Overall, Mixlr presents a credible, professional, and secure online presence with moderate user tracking for analytics and marketing purposes.

A

Aquarium GEOMAR

aquarium-geomar.de

60

Aquarium GEOMAR is a small educational and exhibition aquarium affiliated with the GEOMAR Helmholtz-Zentrum für Ozeanforschung in Kiel, Germany. It focuses on showcasing native marine species from the North and Baltic Seas, as well as some Mediterranean and tropical marine life, including popular local seals. The website serves as an informational portal for visitors, providing details about exhibits, visiting hours, and contact information. The business operates primarily as a local educational and tourist attraction with a non-commercial model. Technically, the website is built on the 1&1 IONOS Website Editor platform, utilizing technologies such as jQuery, skrollr for parallax effects, and Snowplow for analytics. It is hosted on 1&1 IONOS infrastructure with content delivered via Cloudfront CDN. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. From a security standpoint, the website enforces HTTPS with excellent SSL configuration but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, Aquarium GEOMAR's website is professional, trustworthy, and safe for general audiences. It effectively supports the business's educational mission but could improve security posture by adding security headers and incident response information.

C

Constant Content

constant-content.com

66

Constant Content operates as a well-established content marketplace and custom content writing service provider, connecting businesses and brands with a network of freelance writers. The platform offers a wide range of content types including articles, product descriptions, blog posts, and whitepapers, serving a diverse clientele including large enterprises. The website demonstrates a professional and consistent brand presence with strong trust indicators such as client testimonials from reputable companies and a large catalog of content offerings. Technically, the site leverages modern web technologies and third-party analytics and marketing tools, hosted on a reliable CDN infrastructure. Security posture is adequate with HTTPS and secure form handling, though there is room for improvement in security headers and incident response transparency. Privacy compliance is supported by comprehensive privacy and terms pages, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but does not outweigh the strong business signals present on the site.

The website embertone.com is currently inaccessible due to a security challenge page implementing a client-side proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site content. As a result, no meaningful business, contact, or policy information is available from the page. The domain is registered since 2011 with GoDaddy.com, LLC and uses SiteGround nameservers, suggesting a legitimate registration and hosting setup. However, the lack of visible content and policies limits the ability to assess the company's business model or compliance posture. Technically, the site uses JavaScript with Web Workers for the CAPTCHA challenge and assets served via Cloudfront CDN. Security best practices such as DNSSEC and security headers are not enabled or visible. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the blocking mechanism and lack of accessible information.

F

FlixBus Global

flixbus.com.br

63

FlixBus Global operates a comprehensive intercity bus and train travel service spanning over 40 countries with more than 8,000 destinations. The company offers affordable, convenient, and sustainable travel options with modern amenities such as free Wi-Fi and power outlets onboard. Their digital presence includes a well-designed website and mobile app facilitating easy booking and real-time trip tracking. The brand is well-established with a large user base exceeding 90 million travelers in 2024, positioning it as a market leader in the transportation sector. Technically, the website leverages modern web technologies including Drupal CMS, cloud-based CDN services, and advanced analytics tools like Snowplow and Datadog RUM. The site is optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Privacy compliance is robust with a comprehensive privacy policy, cookie consent management, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs best practices such as consent management and responsible disclosure mechanisms. However, explicit security headers and a published security policy are not clearly visible, suggesting room for improvement. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits transparency. Overall, the site demonstrates a strong security posture with no critical vulnerabilities detected. The overall risk assessment is low, with the company maintaining a trustworthy and professional online presence. Strategic recommendations include enhancing security header implementation, publishing detailed security policies, and providing explicit security contact information to further strengthen trust and compliance.

F

Flix SE

flixbus.lt

47

Flix SE operates the www.flixbus.lt website, providing affordable bus travel services across Lithuania and Europe. The company offers a large network of routes, mobile app integration, and customer support, positioning itself as a leading transportation provider in the region. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the site uses Drupal CMS, modern JavaScript frameworks, and integrates multiple analytics and advertising tools with a consent management platform, indicating compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. WHOIS data for the .lt domain is unavailable, likely due to registry restrictions, but the website's branding and infrastructure strongly support legitimacy. Overall, the site is trustworthy, user-friendly, and well-maintained, serving a broad audience of travelers.

F

Flix México

flix.com.mx

59

Flix México operates as a regional branch of the international FlixBus brand, providing affordable and modern intercity bus transportation services across Mexico and North America. The website is well-positioned in the market with a broad route network, mobile app integration, and live tracking features, targeting travelers seeking convenient and economical bus travel. The company leverages a strong brand presence and digital infrastructure to support its business model of online ticket sales and transportation services. Technically, the website employs modern web technologies including Drupal CMS, cloud CDN, advanced analytics, and consent management platforms, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-optimized for its audience, with room for improvement in transparency around security and contact information.

F

Flix SE

flixbus.ie

55

Flix SE operates the website www.flixbus.ie, providing affordable and extensive bus travel services across Ireland and internationally. The company partners with local coach operators and offers a large network of over 8,000 destinations in more than 40 countries. The website is professionally designed, mobile-optimized, and provides comprehensive travel information, booking capabilities, and real-time trip tracking. The technical infrastructure leverages modern technologies including Drupal CMS, cloud CDN, and advanced analytics tools. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit incident response and vulnerability disclosure policies are not publicly found. Overall, the site demonstrates a mature digital presence with high trustworthiness and user experience quality.

F

FlixBus India Private Limited

flixbus.in

58

FlixBus India Private Limited operates a comprehensive online bus ticket booking platform offering affordable and comfortable intercity bus travel across India. The company leverages a large global brand presence and extensive network to connect major Indian cities with modern buses equipped with amenities such as sleeper beds, air conditioning, and real-time GPS tracking. The website reflects a mature digital infrastructure with modern technologies, strong mobile optimization, and good SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policy and incident response information are absent. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

F

FlixBus Inc

flixbus.ca

56

FlixBus Inc operates a leading low-cost intercity bus travel service in Canada and the US, providing affordable and comfortable transportation options with a wide network of over 8,000 destinations across more than 40 countries. The company leverages a modern digital infrastructure including a React-based website, mobile app, and cloud CDN services to deliver a seamless booking and travel experience. Their platform supports real-time trip tracking, online ticketing, and customer support through a dedicated help portal. Security posture is strong with HTTPS, modern security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data due to privacy protection is typical for commercial brands but limits domain registration transparency. Overall, FlixBus presents a professional, trustworthy, and technically mature online presence aligned with its market leadership in transportation.

F

Flix SE

flix.com

63

Flix SE operates a prominent European transportation platform offering bus and train ticket booking services across more than 40 countries and 8,000 destinations. The company emphasizes affordable, comfortable, and sustainable travel with features such as free Wi-Fi and assigned seating. The website is professionally designed, mobile-optimized, and integrates modern technologies including React-based UI components, CDN hosting, and advanced analytics tools like Datadog RUM and Usercentrics for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be verified further. Privacy compliance is well addressed with clear policies and consent mechanisms. Despite the absence of WHOIS data for the domain, the website's branding, external domain relationships, and social media presence strongly support its legitimacy. Overall, Flix presents a trustworthy and user-friendly digital presence aligned with its business goals.