Security Directory

K

Koncertzāle "Latvija"

koncertzalelatvija.lv

42

Koncertzāle "Latvija" is a modern concert hall located in Ventspils, Latvia, offering a wide range of cultural events including concerts, children's events, and guided excursions. The venue positions itself as a significant regional cultural hub with excellent acoustics and a curated repertoire, targeting a general audience interested in music, arts, and education. The business model revolves around event hosting and ticket sales, with partnerships for ticketing and virtual tours. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery UI, and Mapbox GL JS for interactive maps. It integrates Google Analytics and Google Tag Manager for user tracking and performance monitoring. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. The presence of cookie consent and a privacy policy indicates awareness of GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers in the HTML content. There is no public incident response or vulnerability disclosure information, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data could not be retrieved due to query limits, limiting domain registration trust analysis. Overall, the website is professional, trustworthy, and well-suited for its cultural and event-driven purpose. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve transparency and security posture.

P

Poligons "Sigulda"

poligon-1.lv

48

Poligon-1 is a Latvian-based laser tag entertainment provider operating primarily in Sigulda. The company offers a variety of active leisure services including laser tag games, action quests, labyrinth games, and event hosting for children, adults, and corporate groups. Their website is multilingual, professionally designed, and includes comprehensive information about their arenas, equipment, pricing, and booking options. Technically, the site uses modern JavaScript libraries and integrates with popular analytics and social media platforms. Security posture is moderate with HTTPS implied but lacks explicit security headers. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. However, WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the business appears legitimate and well-positioned in the local hospitality and active leisure market.

V

Viesnīca Latvija, AS

skylinebar.lv

52

Skyline Bar is a premium cocktail bar located in Riga, Latvia, offering panoramic city views, signature cocktails, and brunch events. The business targets a mature audience interested in nightlife and hospitality experiences. The website is professionally designed using WordPress with modern technologies such as jQuery, Google reCAPTCHA, and MetaSlider for enhanced user experience. Contact information and social media presence are clearly provided, supporting business credibility. However, the absence of a privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Security posture is solid with HTTPS and CAPTCHA protections, but lacks visible security headers and formal security policies. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site is functional, visually appealing, and trustworthy for its hospitality sector audience.

I

ID Mēbeles

idmebeles.lv

46

ID Mēbeles is a Latvian-based furniture retailer operating primarily through an e-commerce platform complemented by a physical showroom in Riga. The company offers a wide range of furniture products for various home and office spaces, targeting Latvian consumers seeking quality and affordable furniture. Their business model combines online sales with in-person consultation and showroom experience, supported by delivery services across Latvia. The website is well-structured, visually appealing, and provides comprehensive product information, customer testimonials, and clear contact details, enhancing trust and user engagement. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring responsive design and moderate performance. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. However, security headers are not visibly implemented, suggesting room for improvement in security hardening. The site uses HTTPS, which is a fundamental security requirement. From a security perspective, the site shows good practices such as encrypted connections and no exposed sensitive data in the HTML. The cookie consent banner with granular controls supports GDPR compliance. The absence of WHOIS data limits domain registration verification, but the website content and business information appear consistent and legitimate. No signs of malicious activity or suspicious content were detected. Overall, the website presents a professional and trustworthy online presence for a medium-sized retail business. Strategic recommendations include enhancing security headers, conducting regular vulnerability assessments, and possibly publishing a security.txt file to improve vulnerability disclosure transparency. These steps would strengthen the security posture and further build customer trust.

L

Liapor s.r.o.

dumjednimtahem.cz

53

Dům jedním tahem is a Czech company specializing in low-energy prefabricated family houses made from ceramic concrete. The company emphasizes rapid construction, excellent insulation, and long durability. Their website offers free project designs, catalogs, consultations, and virtual tours, targeting individuals and families interested in energy-efficient homes in the Czech Republic. The business is positioned as a medium-sized regional player with a professional online presence and consistent branding. Technically, the website uses a variety of JavaScript libraries including jQuery, Google Tag Manager, and Slick Carousel, with good mobile optimization and SEO practices. The site enforces HTTPS and implements a cookie consent mechanism, reflecting a good security posture. However, no explicit security headers were detected, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Security-wise, the site shows good compliance with GDPR, including detailed privacy policies and consent forms. There are no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is a concern but does not negate the legitimacy suggested by the website content and business information. Overall, the website is professional, secure, and compliant, with minor improvements recommended in security headers and domain registration transparency.

K

KH ISMM Kopřivnice

khkoprivnice.cz

52

KH ISMM Kopřivnice is a regional handball sports club based in Kopřivnice, Czech Republic. The website serves as a hub for team information, match schedules, results, youth programs, and club history, targeting handball enthusiasts, players, and the local community. The club operates as a non-profit entity focused on sports development and community engagement. Technically, the website employs a variety of JavaScript libraries including jQuery, Nivo Slider, and Owl Carousel, and is built on the Web Bez starosti CMS platform. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is professional and trustworthy but would benefit from improved compliance and security practices.

B

Born To Swim s.r.o.

borntoswim.cz

57

Born To Swim s.r.o. operates a Czech-based e-commerce platform specializing in swimming gear and accessories. The company targets swimmers and sports enthusiasts, offering a comprehensive range of products including swim fins, goggles, caps, and training aids. The website positions itself as a trusted local brand with a focus on quality and customer service. Technically, the site is built on the Shoptet platform, utilizing common web technologies such as jQuery, Bootstrap, and tracking tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is unavailable, which slightly impacts trustworthiness, but the visible business information and contact details support legitimacy. Overall, the site is well-structured, compliant with GDPR, and safe for general audiences.

ExtraChorvatsko.cz is a Czech language travel guide website focused on providing detailed information about traveling to Croatia. It offers practical advice on transportation, accommodation options, and popular tourist destinations, targeting Czech-speaking travelers planning independent vacations. The site leverages affiliate marketing by linking to accommodation portals, generating revenue through referrals. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and a weather widget, hosted likely by Wedos, a Czech hosting provider. While the site is mobile-optimized and has good content quality, it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no active analytics tracking despite plugin presence. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from improved security and compliance measures.

P

Prabos plus a.s.

prabos.cz

47

Prabos plus a.s. is a Czech manufacturer specializing in the production and sale of safety and professional footwear, with a heritage dating back to 1860. The company targets professionals and workers requiring durable and secure footwear for extreme conditions. Their market position is supported by direct sales through their website, complemented by after-sales services and warranty support. The website reflects a mature digital presence with modern technologies and integration of multiple marketing and analytics tools. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data is a notable gap in domain legitimacy verification, but the overall business credibility remains high based on website content and trust signals. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust.

GRENA, a.s. is a Czech manufacturing company specializing in insulating vermiculite boards and fire-resistant materials, serving industrial and commercial sectors with a well-established market presence since 1999. Their website offers product information, e-commerce capabilities, and company news, targeting primarily Czech-speaking customers with some English support. The technical infrastructure uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a custom CMS by FlexiSystems. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data confirms domain legitimacy and long-term operation. Overall, the website is professional, trustworthy, and business-focused.

A

ACI - Auto Components International, s. r. o.

aci.cz

56

ACI - Auto Components International, s. r. o. is a well-established Czech company specializing in automotive components and accessories. Founded in 2000, it serves both B2B and B2C markets with a broad product range including auto parts, classic car components, original manufacturer parts, trailers, and air conditioning systems. The company targets automotive professionals and vehicle owners primarily in the Czech Republic. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses a custom CMS with ASP pages and relies on jQuery libraries and Google Fonts, hosted on Dial Telecom infrastructure. While the site is functional and moderately optimized for performance and mobile, some outdated libraries and missing security headers present potential risks. Security posture is adequate but could be improved with modern best practices and explicit policies. Contact information is comprehensive, including phone, email, physical address, and social media links, enhancing business credibility. Cookie consent is implemented, but privacy and terms policies are not clearly found. Overall, the site is trustworthy and professionally maintained with room for security and compliance enhancements.

F

Federal Cars spol. s r.o.

federalcars.cz

57

Federal Cars spol. s r.o. is a Czech Republic based automotive dealership specializing in multiple car brands including Volvo, Peugeot, Mazda, Honda, and Citroen. The company operates through a structured website with dedicated subdomains for each brand, offering new and used car sales as well as servicing. The website targets general consumers in the Liberec region and positions itself as an authorized dealer with a focus on quality and ecological vehicles. Technically, the site uses jQuery and jQuery UI libraries, has a cookie consent mechanism, and is moderately optimized for mobile and SEO. However, the absence of WHOIS data and lack of visible security headers reduce transparency and security posture. No privacy policy or terms of service pages were found, which impacts compliance. Overall, the site is functional and professional but could improve in security and compliance documentation.

C

Chefarena.cz

chefarena.cz

56

Chefarena.cz operates a unique gastronomic studio near Prague, offering cooking courses led by top Czech chefs, children’s culinary classes, and private or corporate event hosting. The business positions itself as a niche leader in culinary education with a focus on personalized experiences and a family atmosphere. The website is professionally designed using WordPress and WooCommerce, integrating modern SEO and performance tools, and complies with GDPR and cookie regulations through a comprehensive consent mechanism. Social media presence and partnerships with related hospitality businesses enhance its market reach. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

A

Asklepion

asklepion.cz

48

Asklepion is a leading clinical and aesthetic medicine institute in the Czech Republic, offering a wide range of specialized medical services including dermatology, stomatology, plastic surgery, and more. The website reflects a mature digital presence with comprehensive service descriptions, customer testimonials, and an integrated e-commerce platform for related products. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and reCAPTCHA integration, although there is room for improvement in security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for patients and clients.

C

Cyklovize 2030

stavbycyklo.cz

43

Cyklovize 2030 is a Czech Republic based project focused on promoting healthy, affordable, and ecological transportation through cycling infrastructure development. The website serves as a national platform to encourage cycling as a daily transport mode, targeting city residents, families, and local governments. Supported by the Czech Insurance Bureau's Damage Prevention Fund, it positions itself as a key advocate for safer cycling networks. Technically, the site uses a traditional web stack including jQuery, Bootstrap, and Google Fonts, with moderate performance and good mobile optimization. Security-wise, HTTPS is implemented and cookie consent mechanisms are in place, but the use of an outdated jQuery version and lack of security headers present risks. The absence of a privacy policy and WHOIS data limits full trust assessment. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

A

Alma Career Czechia s.r.o.

kdejinde.cz

58

The website kdejinde.jobs.cz serves as the official career portal for the ČEZ Group, a leading energy company in the Czech Republic. It provides job listings, career information, and educational content targeted at students, graduates, and job seekers interested in the energy sector. The portal is professionally designed with consistent branding and clear navigation, reflecting the stature of its parent company, ČEZ, a.s. The site integrates multiple subsidiaries and partner companies, showcasing a broad ecosystem within the energy industry. The content is comprehensive and relevant, supporting the recruitment and employer branding efforts of the group. Technically, the website employs modern web technologies including React, jQuery, and Google Tag Manager, supported by a proprietary CMS from Alma Career. The site is mobile-optimized, accessible, and performs moderately well. It uses a robust cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. Analytics and marketing tools are implemented responsibly, with clear consent management. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. While explicit security headers like CSP or X-Frame-Options are not evident, no critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data suggests privacy protection, which is justified for a corporate recruitment portal. Overall, the site demonstrates a strong security posture and compliance with privacy regulations. The overall risk assessment is low, with the site representing a legitimate, well-maintained corporate career portal. Strategic recommendations include enhancing security headers, increasing visibility of incident response contacts, and continuous monitoring of third-party scripts. These measures will further strengthen the site's security and trustworthiness.

P

Partnerství pro městskou mobilitu z. s.

dobramesta.cz

45

Partnerství pro městskou mobilitu z. s. is a Czech non-profit organization dedicated to promoting urban mobility, cycling, and sustainable transport solutions. The website serves as an information hub for municipalities, non-profit sectors, and stakeholders interested in urban mobility projects, education, and advocacy. It features news, events, project descriptions, and educational resources, positioning the organization as a key player in the Czech urban mobility landscape. Technically, the website employs a custom CMS with a technology stack including jQuery, Bootstrap, and various JavaScript libraries for UI and interactivity. It integrates Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with a good SSL configuration, although some libraries like jQuery are outdated, which could pose security risks. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and explicit contact information for security or incident response. The absence of WHOIS data due to privacy protection reduces transparency but is justified for a non-profit entity. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively. Strategic improvements in security headers, updating libraries, and publishing security policies would enhance its security posture and trustworthiness.

K

KLAS Jaroměřice, spol. s r.o.

klasjaromerice.cz

49

KLAS Jaroměřice, spol. s r.o. is a small family-owned agricultural company based in the Czech Republic, founded in 1992 after the dissolution of a state farm. The company focuses on traditional agricultural primary production including crop cultivation and land management services such as land purchase and rental. Historically, it also engaged in animal husbandry but ceased pig farming in 2009 for economic reasons. The website presents a professional and clear overview of the business, targeting local landowners and agricultural stakeholders. Technically, the site uses legacy JavaScript libraries including jQuery 1.10.2 and integrates Google Analytics for visitor tracking. The site includes a GDPR cookie consent banner but lacks a formal privacy policy or terms of service pages. Security posture is moderate with no HTTPS or security headers data available for review, and outdated libraries pose potential vulnerabilities. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is functional and trustworthy for its business scope but would benefit from improved security and compliance documentation.

Česká pošta, s.p. operates the official e-commerce platform postshop.cz, offering postal supplies such as envelopes, cardboard boxes, postal vouchers, and data security products including chip cards and readers. The website targets both general consumers and businesses within the Czech Republic, positioning itself as a trusted retail channel for postal and related products. The business is well-established with a domain age dating back to 2001, reflecting a mature market presence. Technically, the website is built on ASP.NET Web Forms with a frontend leveraging jQuery and various slider plugins. Hosting and domain registration are managed by Active24, a known provider. The site performs moderately well with basic mobile optimization and SEO practices. Google Tag Manager is used for analytics, indicating some level of digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no cookie consent mechanism, which is a compliance gap under GDPR. No direct contact emails or phone numbers are present on the main page, limiting immediate user support access. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

F

Franklin Electric

franklin-electric.com

74

Franklin Electric is a well-established global manufacturer and distributor specializing in systems and technologies for moving and protecting critical resources such as water, fuel, and electricity. The company serves a diverse range of sectors including residential, commercial, agricultural, industrial, municipal, and energy applications. With over 80 years of history and multiple industry recognitions, Franklin Electric holds a strong market position as a leader in its field. The website reflects a professional corporate presence with clear navigation and comprehensive content about its products, services, and corporate social responsibility initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Microsoft Application Insights for analytics and telemetry, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-maintained, supporting the company's credibility and business objectives.

O

OpenSubtitles.org

opensubtitles.org

65

OpenSubtitles.org operates a large, multilingual subtitle database platform providing free subtitle downloads and uploads for movies and TV series. The website targets a broad audience of movie and TV content consumers worldwide, offering advanced search features, API support, and community engagement through forums and blogs. The business model includes free access with optional VIP membership for ad removal. Technically, the site uses a mature stack with jQuery and various third-party scripts, including Google reCAPTCHA for login security and Cloudflare Insights for performance monitoring. Security posture is moderate with HTTPS enforced but missing some recommended security headers. The WHOIS data is malformed and incomplete, limiting domain trust verification. Overall, the site is functional, content-rich, and safe for general audiences but could improve privacy compliance and security headers.

S

Středisko volného času Rosice - RUBIKO

svcrubiko.cz

58

Středisko volného času Rosice - RUBIKO is a local leisure and educational center based in Rosice, Czech Republic, providing a variety of programs such as courses, camps, workshops, and community events primarily targeting children, youth, and families. The organization operates as a non-profit entity focused on youth education and leisure activities within the local community. The website reflects this mission with clear navigation and relevant content about their services and upcoming events. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Google Analytics, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements, although it lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and contact information support its legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving its community effectively.

A

ARVAL CZ s.r.o.

arvalauto.cz

54

ARVAL CZ s.r.o. operates a professional vehicle leasing and sales platform in the Czech Republic, specializing in operational leasing of new and used vehicles. The company targets both individual and business customers, offering a wide range of vehicle brands and flexible leasing options. The website is well-structured, with clear navigation and comprehensive content supporting the business model. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager and Adform, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers suggests room for improvement. The lack of publicly available WHOIS data for the domain slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site presents a credible and professional digital presence for a medium-sized transportation leasing business.

Fundacja na Rzecz Wsparcia Innowacji w JST is a Polish non-profit organization dedicated to supporting local government units (JST) through innovative solutions, training, consulting, and software tools. The foundation targets municipalities, counties, and regions in Poland, aiming to modernize and improve public administration efficiency. Their key services include public relations support, social consultation platforms, legal and economic consulting, and specialized training programs. The website reflects a professional and consistent brand image with clear contact channels and client references from Polish local governments. Technically, the website is built on WordPress 6.6.2 with a modern tech stack including jQuery, Bootstrap, and various UI libraries. It uses HTTPS with Google reCAPTCHA v3 for form protection and integrates Google Analytics and Facebook SDK for tracking and marketing. The site is mobile-optimized and performs moderately well, though accessibility features are basic. No advanced security headers or DNSSEC are implemented, which presents some security improvement opportunities. From a security perspective, the site has a moderate posture with HTTPS and anti-bot measures but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing a legitimate and stable presence since 2016. Overall, the website is a credible and professional platform for a specialized non-profit serving Polish local governments. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture.

S

San Joaquin Delta College

deltacollege.edu

66

San Joaquin Delta College is a well-established public community college serving the San Joaquin Valley and Mother Lode regions. The institution offers over 200 degrees and certificates, focusing on trade skills, academic transfer, and workforce development. The website reflects a strong regional presence with comprehensive educational services and student support. The target audience includes prospective and current students, faculty, staff, and the local community. The college positions itself as an affordable and flexible educational option with a broad range of academic and personal growth programs. Technically, the website is built on Drupal 7 with a mature technology stack including jQuery, Flexslider, and Font Awesome. It integrates marketing and analytics tools such as Google Tag Manager and LiveChat for user engagement and tracking. The site is mobile optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, typical for a content-rich educational site. From a security perspective, the site enforces HTTPS and uses some security best practices, but lacks explicit security headers and a vulnerability disclosure policy. No incident response contacts or security policies are publicly available. The domain WHOIS data is consistent with the institution's identity, showing no privacy protection and a legitimate registration period. Overall, the security posture is solid but could be improved with enhanced headers and transparency. The website is safe for general audiences, with no adult or questionable content. Social media presence is strong and official. Privacy compliance is basic, with a privacy and cookie policy present but no explicit consent mechanism. Business credibility is high, supported by accreditation and clear contact information. Strategic recommendations include improving security headers, publishing incident response contacts, implementing cookie consent, and maintaining up-to-date software to enhance security and compliance.

S

Schiedam - Nieuwsbrieven

nieuwsbriefschiedam.nl

56

The website nieuwsbriefschiedam.nl serves as an official local government portal for newsletters related to the city of Schiedam, Netherlands. It provides community news, cultural updates, subsidy information, and other local government communications. The site is relatively new, established in 2023, and is registered to Gemeente Schiedam, confirming its official status. The target audience includes residents, local businesses, and stakeholders interested in Schiedam's municipal affairs. Technically, the website is built on WordPress 6.6.2 with modern plugins such as Yoast SEO and Advanced Custom Fields Pro, indicating a mature and maintainable infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No major technical issues or vulnerabilities were detected in the provided content. From a security perspective, the site uses HTTPS and DNSSEC, which are positive indicators. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No contact information for security incidents or data protection officers was found, representing an area for improvement. Overall, the website is trustworthy and professional, with a clear government affiliation and consistent branding. The main risks relate to privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and providing clear contact channels for security and privacy matters.

L

Liapor s.r.o.

djt.cz

53

Dům jedním tahem is a Czech company specializing in the design and construction of low-energy prefabricated family houses made from ceramic concrete. The company offers a range of housing options including classic, premium, and modular homes, emphasizing quick construction, excellent insulation, and long durability. Their business model includes providing free project designs, printed catalogs, and personalized consultations, targeting individuals and families in the Czech Republic seeking sustainable and modern housing solutions. The website reflects a mature digital presence with professional design, clear navigation, and GDPR-compliant data collection practices. Technically, the website employs a variety of JavaScript libraries such as jQuery, Slick Carousel, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers are not detected, and WHOIS data is unavailable, which slightly impacts transparency and trust. From a security perspective, the site uses HTTPS and has implemented cookie consent and form validation, but lacks visible advanced security policies or incident response information. No vulnerabilities or suspicious content were detected. Overall, the site presents a secure and professional front but could improve in security header implementation and WHOIS transparency. The overall risk assessment is moderate to low, with recommendations to enhance security headers, update libraries regularly, and provide clearer security policies to strengthen trust and compliance.

C

Chodovské technicko-ekologické služby s.r.o.

chotes.cz

36

Chodovské technicko-ekologické služby s.r.o. is a municipal service company founded in 2000 by the city of Chodov, Czech Republic. It specializes in communal services including waste collection, public lighting operation, road maintenance, and environmental management. The company holds a strong regional position as a trusted partner for local government and residents, offering a broad range of public utility services. The website reflects a professional municipal service provider with clear service offerings and local community focus. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Leaflet, and the Nette framework, providing a responsive and user-friendly experience. The site includes GDPR-compliant cookie consent mechanisms and links to a comprehensive privacy policy document. Security posture is adequate with HTTPS enforced and email obfuscation implemented, though the absence of visible HTTP security headers and incident response contacts suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high due to consistent branding, certifications, and official partner links. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving WHOIS transparency to strengthen trust and compliance.

C

Ceeinno

ceeinno.eu

45

Ceeinno is a small-scale innovation support entity based in the Czech Republic, with its website first published in 2016. The site presents basic information about the company and its mission to support innovation but lacks detailed business descriptions, contact information, or comprehensive policies. Technically, the website is built on WordPress, utilizing common plugins such as Mailchimp and Yoast SEO, and includes Google Analytics for user tracking. The site demonstrates moderate technical maturity with basic mobile optimization and SEO features but lacks advanced security headers and explicit privacy or cookie policies. Security posture is limited, with no visible incident response or vulnerability disclosure mechanisms. Overall, the website is accessible and safe, but improvements in compliance, security, and business transparency are recommended to enhance trust and professionalism.

U

United States Geological Survey

usgs.gov

73

The United States Geological Survey (USGS) is a premier federal scientific agency providing comprehensive research and data on natural hazards, water resources, energy, minerals, ecosystems, and environmental health. Positioned as the authoritative source for earth science information in the United States, USGS serves government agencies, researchers, educators, and the public with timely and relevant scientific data. The website reflects this mission with rich content, authoritative descriptions, and a focus on public service. Technically, the USGS website is built on Drupal 10, leveraging modern web technologies including jQuery UI, Google Tag Manager, Google Analytics, and Hotjar for analytics and user experience insights. The site demonstrates good performance, excellent mobile optimization, and accessibility features, ensuring broad usability. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not prominently published. Security-wise, the site benefits from robust SSL configuration and standard security headers, with no visible vulnerabilities or exposed sensitive data. However, the absence of a published vulnerability disclosure policy or security.txt file and limited incident response contact details suggest areas for improvement in transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR considerations. Overall, the USGS website is a highly credible, professional, and secure government resource. The incomplete WHOIS data is typical for .gov domains and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security policies, incident response procedures, and vulnerability disclosure information to enhance trust and compliance further.

M

MicronesiaTour.com

micronesiatour.com

55

MicronesiaTour.com serves as the official travel and tourism website for the Micronesia region, including Guam, Northern Mariana Islands, Palau, FSM, and Marshall Islands. It provides comprehensive travel information, destination guides, event announcements, and cultural insights aimed at attracting tourists and promoting regional tourism. The website is positioned as a key regional tourism portal with a clear focus on hospitality and government tourism sectors. Technically, the site is built on Drupal 7 with a range of JavaScript libraries and integrates Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured, it uses some outdated libraries and lacks advanced security headers and cookie consent mechanisms. The domain is well aged and registered with a reputable registrar, enhancing its credibility. However, the absence of explicit contact information and privacy compliance features are notable gaps. Overall, the website is functional and professional but would benefit from security and privacy improvements.

N

New Orleans Jewish Community Center

nojcc.org

66

The New Orleans Jewish Community Center (JCC) is a well-established non-profit organization serving the New Orleans and Metairie communities. It offers a broad range of services including fitness centers, aquatics programs, early childhood education, summer camps, and cultural events focused on Jewish heritage and community engagement. The website reflects a community-oriented business model targeting local families and individuals interested in health, education, and cultural enrichment. The organization maintains partnerships with recognized entities such as the Jewish Community Centers Association, Jewish Federation of Greater New Orleans, and United Way, enhancing its market position and trustworthiness. Technically, the website is built on the Accrisoft CMS platform and employs a modern technology stack including jQuery libraries, Google Tag Manager, Google Analytics 4, Facebook Pixel, and Hotjar for analytics and user behavior tracking. The site is mobile optimized with good navigation and SEO practices, though performance is moderate. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and explicit incident response or security policies. From a security and compliance perspective, the site does not expose vulnerabilities in the HTML content and uses secure analytics tools. However, the absence of WHOIS data due to a malformed WHOIS response limits domain trust assessment. Privacy compliance is basic with a privacy policy present but no explicit cookie policy banner. No incident response or vulnerability disclosure information is publicly available. Overall, the site is safe with no adult or malicious content detected. Strategically, the organization should enhance transparency by publishing security policies, improving cookie consent mechanisms, and implementing security headers. Addressing these gaps will strengthen user trust and compliance posture while maintaining its strong community presence.

C

CZ.NIC, z. s. p. o.

jaknainternet.cz

58

Jak na Internet is an educational initiative operated by CZ.NIC, the Czech national domain registry. The website provides a comprehensive series of short educational videos and accompanying texts aimed at increasing public awareness and understanding of the Internet and its various aspects. The project targets a broad audience including educators and general users interested in Internet literacy. The site is well-structured with categorized content covering topics from Internet safety to technical explanations and social aspects. Technically, the site uses standard web technologies including jQuery and embeds YouTube videos securely with sandboxing. Analytics are handled via Piwik with cookies disabled, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not present, and no direct contact information is provided on the site. The domain WHOIS data is not publicly available, consistent with CZ.NIC's registry policies, but the domain's legitimacy is strongly supported by its association with CZ.NIC. Security headers and advanced security configurations are not detected, suggesting room for improvement in security posture.

A

Accrisoft Corporation

accrisoft.com

66

Accrisoft Corporation operates a professional SaaS platform named Accrisoft Freedom, targeting non-profit organizations such as chambers of commerce, REALTOR associations, and community centers. The company provides a comprehensive suite of cloud-based software solutions including website design, membership management, event registration, finance, sales, and marketing applications. Their market position is specialized and focused on delivering industry-specific expertise to help organizations grow and thrive. Technically, the website employs a mature technology stack with jQuery, Flickity, Fancybox, Google reCAPTCHA, Hotjar, HubSpot, and other modern tools. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Analytics and marketing tools are extensively used, indicating a data-driven approach to customer engagement. From a security perspective, the site enforces HTTPS and uses bot protection and accessibility compliance tools. However, it lacks visible HTTP security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance and content of the website. Overall, Accrisoft presents a credible and professional online presence with strong business and technical foundations. Addressing WHOIS transparency and enhancing security disclosures would further strengthen their trust profile and compliance posture.

I

iPublish® Media Solutions

capublicnotice.com

58

The website www.capublicnotice.com operates as a specialized platform providing access to legal public notices and classifieds primarily for California counties. It aggregates various types of legal notices including court filings, summons, name changes, bids, auctions, and government publications. The platform targets residents, legal professionals, and government entities seeking official public notices. The business is positioned as a niche regional media service under the parent company iPublish® Media Solutions, leveraging a searchable database and alert system to serve its audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap 5, Select2, Google Maps API, and Google Tag Manager for analytics. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Security is robust with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and a formal vulnerability disclosure mechanism. From a security perspective, the site demonstrates good practices such as secure forms and bot protection, but the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration transparency despite the legitimate business presence. No adult or inappropriate content is present, making the site safe for general audiences. Overall, the site is functional, professional, and serves a clear business purpose, but improvements in privacy compliance and domain registration transparency would enhance trust and security posture.

I

International Mountain Bicycling Association

imba.com

67

The International Mountain Bicycling Association (IMBA) operates a professionally designed website focused on creating, enhancing, and protecting mountain biking trails across the United States. The organization targets mountain biking communities and enthusiasts, providing services such as trail development guidance, community engagement, funding support, and educational programs. The website leverages modern technologies including Drupal 10, Google Maps API, and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforcement and CAPTCHA on login forms, though additional security headers and public security policies could enhance protection. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the website's professional content and active social media presence support its credibility. Privacy and cookie policies are not detected, indicating an area for compliance improvement.

P

Public Notice Resource Center

pnrc.net

43

The Public Notice Resource Center (PNRC) is a nonprofit organization dedicated to promoting government transparency through education and advocacy focused on the importance of public notices in local newspapers. It serves as a national resource monitoring public notice legislation across all 50 states and provides newsletters, policy briefings, and resources to journalists, policymakers, and the general public. The organization maintains partnerships with various press associations and offers donation capabilities via PayPal. Technically, the website is built on WordPress with common plugins and social media integrations, delivering a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks some security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and affiliations support its credibility. Overall, PNRC presents a professional and trustworthy online presence with room for improvement in privacy compliance and security hardening.

M

Mark Spencer Hotel

markspencer.com

66

Mark Spencer Hotel is a well-established boutique hotel located in downtown Portland, Oregon, with a rich history dating back to 1907. The hotel offers upscale accommodations, including renovated guest rooms and suites, extended stay options, and event spaces. It targets business and leisure travelers seeking a stylish and arts-oriented lodging experience in the heart of the city. The website is professionally designed using WordPress and integrates modern technologies and marketing tools, including Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The presence of trust badges and active social media channels enhances its market credibility. Security posture is good with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and publishing a security policy are recommended. Overall, the website reflects a mature digital presence with strong business credibility and good privacy compliance.

S

Schiedam Partners

sdam.nl

66

SDAM.NL is a city marketing and information platform managed by Schiedam Partners, focusing on promoting tourism, events, housing, and business activities in Schiedam, Netherlands. The website serves residents, visitors, and local businesses by providing event calendars, tours, housing information, and partner programs. It holds a strong local market position as the official city marketing portal with consistent branding and good content quality. Technically, the site is built on the DotNetNuke CMS platform using modern JavaScript libraries and frameworks, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and secure form handling, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with active social media engagement and clear contact information.

M

Museo Eduardo Carrillo

museoeduardocarrillo.org

42

Museo Eduardo Carrillo is a small non-profit cultural institution dedicated to preserving and promoting the legacy of the artist Eduardo Carrillo. The website serves as a digital museum showcasing his artworks, murals, and educational resources, targeting art enthusiasts, educators, and the general public interested in Chicano art and cultural heritage. The organization appears well-established with a domain registered since 2003 and hosted on SiteGround. Technically, the site uses WordPress with modern themes and plugins, including Gravity Forms and Google Analytics integration, providing a good user experience with mobile optimization and accessibility features. However, the site lacks explicit privacy and cookie policies, and no security headers are detected, which are areas for improvement. The security posture is decent with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled. Overall, the website is professional and trustworthy but could enhance privacy compliance and security best practices.

3

344 Design LLC

344design.com

49

344 Design LLC is a small boutique branding and design agency specializing in media and publishing sectors. The company offers brand strategy and design services aimed at engaging audiences through creative and efficient solutions. Their market position is supported by a professional portfolio featuring notable clients and long-term brand stewardship relationships. The website content is well-structured and professionally presented, targeting clients in arts, media, and publishing industries. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery libraries. The site is moderately optimized for performance and mobile responsiveness, though accessibility and SEO optimizations are basic. There is no evidence of a CMS or advanced frameworks. Hosting details and SSL configuration are not available from the provided data. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating gaps in compliance and security best practices. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional nature of the website and clear contact information mitigate some risk. No forms or analytics scripts were detected, suggesting minimal data collection and tracking. Overall, the website presents a professional business front but requires improvements in privacy compliance, security posture, and domain registration transparency to enhance trust and reduce risk.

U

University of Iowa Center for Advancement

foriowa.org

60

The University of Iowa Center for Advancement website serves as a digital platform for the university's advancement and fundraising activities. It targets alumni, donors, and the university community, providing information and engagement opportunities to support the institution. The site reflects a large, established educational entity with consistent branding and professional content. Technically, the website employs modern JavaScript libraries such as jQuery, AngularJS, and Bootstrap, indicating a moderate level of digital maturity. However, some areas such as accessibility and SEO could be improved. Security posture is moderate; while HTTPS is presumably enabled, the absence of security headers and privacy policies indicates room for enhancement. The lack of WHOIS data limits domain trust assessment but does not detract significantly from the site's legitimacy given its university affiliation. Overall, the site is functional and professional but would benefit from improved privacy compliance and security best practices.

B

Bookmanager

bookmanager.com

51

Bookmanager is a well-established Canadian company specializing in providing comprehensive bookstore management software and services, including POS systems, inventory management, and webstore solutions. With over 30 years of experience, it serves booksellers and vendors primarily in North America, positioning itself as a trusted provider in the retail book industry. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses a custom-built platform leveraging common JavaScript libraries such as jQuery and CKEditor, hosted with Google Domains DNS and registered through GoDaddy. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is limited, with no cookie consent mechanism or detailed privacy policy beyond a basic page. Overall, the site is trustworthy and professional but would benefit from enhancements in security and privacy transparency.

M

MSAConnectsForGood

msaconnectsforgood.org

61

MSAConnectsForGood is a small US-based non-profit or community-oriented website established in 2020. The platform appears to focus on connecting individuals or organizations for social good initiatives, although explicit business details are limited. The website is built on WordPress with a variety of plugins to support content management, user interaction, and e-commerce capabilities. The technical infrastructure includes Cloudflare DNS and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain registration locks in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is weak due to the lack of visible privacy and cookie policies, which could expose the organization to regulatory risks. Overall, the website is functional but would benefit from enhanced transparency and security measures.

P

P1

p1.nl

66

P1 is a leading Dutch parking service provider specializing in both offstreet and onstreet parking management. The company offers a comprehensive range of services including parking control, management, centralized monitoring, and digital customer services. Their website reflects a mature digital presence with clear navigation, customer testimonials, and detailed service descriptions targeting Dutch parking customers and municipalities. Technically, the site employs modern JavaScript libraries and frameworks, integrates Google Tag Manager and Usercentrics for privacy-compliant analytics and consent management, and is served over HTTPS ensuring secure communications. However, there is room for improvement in security headers and explicit security policy disclosures. Overall, the website is professional, trustworthy, and well-optimized for user experience and privacy compliance.

D

Duke Corporate Education

dukece.com

61

Duke Corporate Education (Duke CE) is a globally recognized leadership development organization affiliated with Duke University and its Fuqua School of Business. With over 25 years of experience, Duke CE offers customized leadership programs, advisory services, and ready-to-learn offerings designed to empower business leaders and organizations to navigate disruption and drive transformation. Their market position is strong, supported by a global footprint across more than 85 countries and a robust network of educators and clients. The company emphasizes sustainability and ESG leadership, reflecting contemporary business priorities. Technically, the website is built on a modern WordPress CMS platform, leveraging popular libraries such as jQuery, Bootstrap, and Slick Carousel, alongside HubSpot marketing and analytics tools. The site demonstrates good performance, mobile optimization, and SEO practices, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses several third-party analytics and marketing scripts responsibly. However, some security headers are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is notably absent or private, which introduces some uncertainty regarding domain registration transparency, but the strong brand affiliation and professional content mitigate this risk. Overall, Duke CE presents a credible, professional, and secure online presence suitable for its educational and corporate audience. Strategic recommendations include enhancing security headers, verifying domain registration details, and formalizing incident response contact information to further strengthen trust and compliance.

R

Rebel Travel

rebeltravel.nl

65

Rebel Travel is a specialized Dutch travel agency focusing on self-drive tours across Europe, offering personalized and affordable travel experiences. With over 25 years of market presence and more than 15,000 tours sold, the company holds a reputable position in the niche travel market. Their website is professionally designed, providing clear navigation and comprehensive travel options tailored to active and adventurous travelers. Technically, the site employs modern web technologies including Google Analytics, Google Maps API, and jQuery, ensuring a functional and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS enforcement and standard security headers, though the absence of a visible cookie consent mechanism and published security policies indicates room for compliance and transparency improvements. Overall, the website reflects a trustworthy and credible business with a strong focus on customer service and travel expertise.

W

William Harrison

hrsn.net

66

The website status.hrsn.net serves as an uptime status page for William Harrison, leveraging the HetrixTools uptime monitoring platform. It provides detailed uptime statistics and performance metrics for various services categorized under Dedicated Servers, Email, Hosting, and Storage. The site is technically well-implemented with modern frontend technologies such as Bootstrap, jQuery, and DataTables, and is served over HTTPS with CSRF protection tokens, indicating a good level of technical maturity. However, the absence of WHOIS registration data for the domain status.hrsn.net raises concerns about domain legitimacy and ownership transparency. The site lacks privacy, cookie, and terms of service policies, as well as contact information, which limits its compliance posture and business credibility. Overall, the site functions effectively as a status page but would benefit from enhanced transparency and compliance documentation.

W

Web Order Pharmacy

weborderpharmacy.md

55

Web Order Pharmacy operates as an online pharmacy specializing in the sale of brand name and generic medications with worldwide shipping. The website targets a general audience seeking affordable pharmaceutical products and provides key services such as order tracking and customer support. The business appears to be a small-sized healthcare e-commerce entity based in Moldova, with a consistent domain registration and business focus. Technically, the website employs common JavaScript libraries like jQuery and Owl Carousel, integrates Google Analytics and Tag Manager for tracking, and shows moderate performance and mobile optimization. However, it lacks a CMS indication and advanced hosting details. Security posture is moderate with HTTPS usage but missing critical security headers and explicit privacy or cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the content is safe for general audiences without adult or explicit material. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

W

Web Order Pharmacy

weborderpharmacy-uk.md

55

Web Order Pharmacy operates as an online pharmacy providing a wide range of brand name and generic medications primarily targeting customers in the United Kingdom and internationally. The business model focuses on e-commerce sales with worldwide shipping and includes customer support and order tracking features. The website content is professionally presented with clear navigation and a good user experience, although it lacks some compliance elements such as privacy and cookie policies. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, hosted behind Cloudflare, indicating moderate digital maturity. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies, which are areas for improvement. The domain registration is privacy protected, which is common for this business type but reduces transparency and trust. Overall, the site is functional and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.