Security Directory

K

Kidrive

kidrive.fr

46

Kidrive is a French website offering a free platform for managing sports clubs and associations, focusing on collective sports such as basketball, volleyball, football, and handball. It targets club leaders, team managers, coaches, players, and parents, providing tools for member administration, legal guardians management, match scheduling, messaging, and collective task organization. The business operates as a small entity founded in 2017, with a niche market position in amateur sports club management in France. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4, Google Analytics, and Font Awesome, hosted by Scaleway. The site is mobile-optimized with good SEO practices but has moderate performance. Security-wise, HTTPS is enforced, and login forms use POST methods; however, the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. The security posture is moderate with no critical vulnerabilities detected but lacks advanced protections such as CSP and anti-CSRF tokens. Privacy compliance is weak due to missing policies and consent mechanisms. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the site is professional and trustworthy but should enhance privacy and security practices. Recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, improving form security, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.

M

Media Mister

mediamister.com

67

Media Mister is a well-established social media marketing service provider operating since 2012, offering a broad range of engagement products such as followers, likes, views, and comments across major social platforms including Instagram, TikTok, YouTube, Facebook, and Spotify. The company targets social media users and marketers seeking to enhance their online presence and social proof through authentic and manual engagement services. Their market position is strong, supported by over 280,000 satisfied customers worldwide and a presence in nearly 200 countries. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Klaviyo, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and secure payment processing via Stripe and CoinPayments, although explicit security headers and policies are not publicly detailed. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

A

ADETEM

adetem.org

44

ADETEM is a well-established French marketing association founded in 1999, serving marketing professionals through clubs, thematic groups, and events. The website is built on a modern WordPress platform using Elementor and WooCommerce, indicating a mature digital infrastructure. The site is professionally designed with good navigation and mobile optimization, targeting marketing professionals and business executives in France. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

V

Valve Corporation

steamdeck.com

57

The Steam Deck website represents Valve Corporation's official platform for promoting and selling their portable gaming hardware, the Steam Deck. The site showcases multiple hardware SKUs with detailed specifications and integrates closely with the Steam digital game distribution platform. The business model focuses on hardware sales complemented by software and ecosystem services, targeting PC gamers seeking portable gaming solutions. The website is professionally designed with consistent branding and global language support, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries such as jQuery, Flickity, and ScrollMagic, and is hosted behind Cloudflare CDN infrastructure, ensuring fast performance and good mobile optimization. Google Analytics and Tag Manager are used for user tracking, although no cookie consent mechanism is present. The site uses HTTPS with strong SSL configuration but lacks some advanced security headers. From a security perspective, the website demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and a vulnerability disclosure page are areas for improvement. The WHOIS data is unavailable or inconsistent, which is unusual for a large company but does not detract significantly from the site's legitimacy given the strong branding and official domain usage. Overall, the site scores well on content quality, technical implementation, and security posture, with minor penalties for privacy compliance gaps and WHOIS transparency. Strategic recommendations include implementing cookie consent, adding security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

E

Evangelisch-reformierte Kirche des Kantons St.Gallen

ref-sg.ch

59

The Evangelisch-reformierte Kirche des Kantons St.Gallen operates as a regional religious institution serving the canton of St.Gallen in Switzerland. The website provides information about church services, community events, pastoral care, and educational offerings. It targets local residents and church members, positioning itself as a trusted non-profit religious organization with a medium-sized operational scope. The site is well-branded and consistent, reflecting its established presence in the community. Technically, the website is built on the Contao CMS platform and leverages modern JavaScript libraries such as Vue.js and jQuery, alongside UI components like Slick Carousel and Colorbox. The site is mobile-optimized and offers a moderate performance profile. SEO and accessibility are basic but functional. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and moderate technical maturity. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance.

M

Missio Schweiz

missio.ch

55

Missio Schweiz is a Swiss non-profit organization affiliated with the Pontifical Mission Societies, dedicated to supporting missionary and social projects in the global south. Their website serves as a digital platform to promote their mission, facilitate donations, and engage supporters through newsletters and an online shop. The organization maintains a professional and consistent brand presence, targeting a general audience interested in charitable and missionary work. Technically, the website is built on the Soulclick CMS platform, utilizing modern web technologies such as jQuery, Selectize.js, and Google Fonts. The site is hosted on a cloud provider with good performance and mobile optimization. SEO and accessibility considerations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF protection. However, some security headers are missing, and no explicit security or incident response policies are published. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its non-profit mission. There are no indications of malicious activity or content safety concerns. Strategic improvements in security headers and incident response transparency could further enhance the security posture.

A

ArtFocus

ubytovani-aktualne.cz

56

The website www.ubytovani-aktualne.cz operates as a Czech-language online catalog specializing in affordable accommodation options across the Czech Republic and select neighboring countries. It targets families and individual tourists seeking budget-friendly lodging such as cottages, pensions, hotels, and campsites. The platform offers categorized listings by region and type, last-minute deals, and travel tips, positioning itself as a niche regional hospitality directory. The business appears to be a small-scale operation, with web design and SEO services provided by ArtFocus since at least 2009. Technically, the site employs traditional web technologies including jQuery, jQuery UI, Font Awesome, and Google Analytics for tracking. While the site is functional with good content quality and navigation, it shows signs of dated technology and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and formal privacy or cookie policies. No explicit contact or incident response information is provided, which limits transparency and compliance. Overall, the security posture is adequate for a small hospitality directory but could be improved by implementing modern security headers, enforcing HTTPS, and adding privacy and cookie policies. The absence of WHOIS registrant data due to privacy protection reduces trust signals but does not necessarily indicate malicious intent. The site content is family-friendly and safe, with no adult or questionable material detected. Strategic recommendations include enhancing security best practices, improving privacy compliance, adding clear contact and incident response channels, and modernizing the technical stack to improve performance and mobile experience.

K

KW-Software AG

kikartei.ch

51

KW-Software AG operates the KiKartei.ch website, providing specialized church administration software tailored for Swiss parishes and pastoral organizations. With over 20 years of experience and more than 1000 customers, the company holds a strong position in the niche market of church software solutions. Their offerings include a core software module, mobile app K!Mobil, and various additional modules, supported by training and customer service. The website is professionally designed using WordPress and modern plugins, hosted securely in a Swiss high-security data center, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no evident vulnerabilities, though explicit security headers and privacy policies are lacking. Overall, the site is trustworthy and well-positioned but would benefit from enhanced privacy compliance and incident response disclosures.

C

ChooseMyCompany - Certified reviews

choosemycompany.com

67

ChooseMyCompany is a well-established platform founded in 2014 that specializes in providing certified ESG reviews, rankings, and job postings for companies and schools. The platform targets businesses, employees, trainees, and job seekers, offering services such as review collection, benchmarking, and certified review broadcasting with a strong emphasis on GDPR compliance and data protection. The website demonstrates a high level of professionalism, content quality, and user experience, supported by multiple language options and recognized certifications like HappyIndex®. Technically, the site employs modern JavaScript libraries including jQuery, Bootstrap Vue, and cookie consent management tools, hosted on a reputable cloud provider. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and credible, though it would benefit from publishing explicit security policies and incident response contacts.

T

tegut... gute Lebensmittel GmbH & Co. KG

basicbio.de

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of products including regional foods, organic (Bio) products, vegan and vegetarian options, and items adhering to their Reinheitsversprechen (purity promise). Founded in 1947, tegut... emphasizes sustainability, fairness, and transparency as core business values. Their business model focuses on retailing quality food products with a strong commitment to environmental and social responsibility. The website reflects a mature digital presence with comprehensive customer engagement features such as a loyalty program (tebonus), recipe collections, and an online shop.

VITON s.r.o. is a Czech manufacturer specializing in industrial coatings and surface treatment products for metals, wood, concrete, and other materials. The company holds ISO 9001 certification and has a market presence of over 20 years, targeting industrial and construction sectors. Their product portfolio includes epoxyester paints, fire-retardant coatings, and protective lacquers, supported by a proprietary toning system vitocolormix®. The website reflects a professional business with clear contact information and product details, although some business history details like founding year are not explicitly stated. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.3 and jQuery UI, alongside modern tracking tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices but lacks advanced accessibility features. Security practices include HTTPS usage and client-side form validation, but the absence of security headers and outdated libraries present potential risks. Security posture is moderate; no critical vulnerabilities are evident from the content, but the lack of privacy and cookie policies, combined with missing WHOIS registration data, reduces overall trust. Advertising and tracking scripts are present without explicit consent mechanisms, indicating privacy compliance gaps. The domain WHOIS data is unavailable, which raises concerns about domain legitimacy and registration status. Overall, the website is functional and business-focused but would benefit from improved security practices, updated technical stack, and enhanced privacy compliance to strengthen trust and regulatory adherence.

P

Pro Natura

pronatura.ch

73

Pro Natura is a well-established Swiss non-profit organization dedicated to nature conservation, managing over 800 nature reserves and engaging the public through education and advocacy. The website reflects a mature digital presence built on Drupal 10, with modern technologies and compliance tools such as Usercentrics for cookie consent and Google Tag Manager for analytics. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its mission, serving a broad audience interested in environmental protection.

Z

Züger Frischkäse AG

frischkaese.ch

52

Züger Frischkäse AG is a Swiss family-run business specializing in the production of fresh regional cheese products including mozzarella, mascarpone, and cream cheese. The company emphasizes quality and regional sourcing, targeting consumers interested in fresh dairy products. The website reflects a mature digital presence with a well-structured design, multilingual support, and active social media engagement. Technically, the site uses Contao CMS with modern JavaScript libraries and integrates multiple analytics and tracking tools with privacy consent mechanisms. Security posture is solid with HTTPS and privacy controls, though lacking explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

L

LV portāls

lvportals.lv

55

LV portāls is a Latvian government-related media portal providing comprehensive legal explanations, news, opinions, and e-consultations primarily targeting Latvian citizens interested in legal and governmental matters. The website is well-structured with rich content in Latvian language and integrates modern JavaScript libraries and analytics tools such as Google Analytics and Gemius. It employs cookie consent mechanisms and reCAPTCHA for bot protection, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage but lacks explicit security headers and published security policies. No contact information or privacy policy was found, which may impact user trust and compliance. Overall, the site is accessible without WAF or blocking mechanisms and presents a professional and trustworthy image within its niche.

L

Latvijas Vēstnesis

vestnesis.lv

54

Latvijas Vēstnesis is the official publication platform of the Republic of Latvia, serving as the authoritative source for legal acts and official announcements. The website targets government officials, legal professionals, businesses, and the general public interested in accessing official legal documents and notices. It operates as a government entity providing essential services related to legal transparency and public information dissemination. Technically, the site employs a modern JavaScript stack including jQuery, jQuery UI, and Google services such as reCAPTCHA and Google Analytics 4, ensuring a functional and moderately optimized user experience. The site is mobile-friendly and well-structured, though SEO is limited by intentional 'noindex' directives, likely due to the nature of official content. Security-wise, the website enforces HTTPS and uses reCAPTCHA for bot protection, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site demonstrates high business credibility as an official government resource but could improve privacy compliance and security transparency.

L

Latvijas Vēstnesis

likumi.lv

55

Likumi.lv is the official Latvian government portal providing comprehensive access to the Republic of Latvia's legal acts, including laws, regulations, and amendments. Maintained by the official publisher Latvijas Vēstnesis, the site serves legal professionals, government officials, businesses, and citizens seeking authoritative legal information. It offers advanced search capabilities, personalized features, and a mobile version to enhance accessibility. The website is well-branded and trusted as a primary source for Latvian legislation. Technically, the site employs a mature technology stack including jQuery, Google Analytics 4, and Gemius tracking, with cookie consent mechanisms in place. The site is served over HTTPS with good security practices, though some security headers are not explicitly detected. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and Open Graph data. From a security perspective, the site demonstrates a solid posture with encrypted connections and consent-based tracking. However, it lacks explicit security policies or incident response contacts and could improve by implementing security headers and publishing a security.txt file. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, Likumi.lv is a high-quality, trustworthy government resource with excellent content and good technical implementation. Strategic improvements in security transparency and accessibility could further enhance its posture and user trust.

C

CHLEBIŠ s.r.o.

chlebis.cz

9

CHLEBIŠ s.r.o. operates as a specialized retailer and service provider of professional garden and municipal machinery based in Hlučín, Czech Republic. The company offers a comprehensive range of high-quality machines, warranty and post-warranty servicing, and spare parts sales. Additionally, it maintains an e-commerce platform for garden technology products from brands like STIHL, Fiskars, and Bahco. The website reflects a small business with a regional market focus, targeting both professional and consumer segments requiring garden and municipal equipment. Technically, the website is built on a custom CMS using the Nette 3.0 framework and incorporates several JavaScript libraries including jQuery 1.9.1, Owl Carousel, and Google Tag Manager for analytics and marketing. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, no security headers were detected in the provided data, and the use of an outdated jQuery version poses potential vulnerabilities. The absence of WHOIS data and expired hosting validity information raise concerns about domain registration transparency, although the website content and contact details appear legitimate. Overall, the website is professional, content-rich, and compliant with privacy standards but would benefit from enhanced security hardening and updated domain registration verification. Strategic improvements in security headers, library updates, and clearer incident response policies are recommended to strengthen trust and resilience.

C

Cirrus Owners & Pilots Association

cirruspilots.org

64

The Cirrus Owners & Pilots Association (COPA) is a well-established non-profit organization founded in 2001, serving a global community of Cirrus aircraft owners, pilots, and aviation enthusiasts. The organization provides a comprehensive suite of services including safety training, proficiency programs, social events, forums, and member discounts, positioning itself as a niche leader in the aviation community. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and EasyDNNnews modules. It is hosted with Cloudflare DNS and uses NameCheap as the registrar. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen the site's trustworthiness and regulatory adherence.

E

Experimental Aircraft Association

eaa.org

59

The Experimental Aircraft Association (EAA) is a well-established non-profit organization founded in 1953, dedicated to supporting recreational aviation enthusiasts worldwide. The website serves as a comprehensive portal offering membership services, educational resources, event information, and community engagement tools. It maintains a strong market position as a leading aviation community with a broad target audience including pilots, youth, and aircraft builders. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience across devices. The use of structured data and extensive social media integration enhances its digital maturity. Security-wise, the website enforces HTTPS and uses standard security practices but lacks some advanced HTTP security headers, which could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, with minor areas for security enhancement.

Biobergün is a small organic farm business located in Bergün, Switzerland, offering bio farm products, holiday apartment rentals, event and catering services, and a small cheese dairy. The website reflects a local, family-run business with a strong emphasis on organic and sustainable farming practices. The business holds a notable local certification, the BioGrischunpreis 2024, enhancing its credibility in the organic sector. Technically, the website uses a mix of legacy and modern web technologies, including jQuery 1.12.4 and CreateJS, and is built on the Contao CMS platform. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could benefit from modernizing some technical components and enhancing security practices.

D

DEMISPORT

demisport.cz

55

DEMISPORT operates an e-commerce platform specializing in sports and football equipment, primarily targeting teams and referees in the Czech Republic. The website offers custom printed football jerseys and a wide range of sports apparel suitable for different seasons. The business appears to be a small regional player with a focused niche in sports retail. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Tag Manager. The site is mobile optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some recommended security headers and uses an outdated JavaScript library, which could pose risks. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information suggest a legitimate business. Overall, the site is professional and functional with moderate risk due to missing WHOIS transparency and minor technical security gaps.

N

net-Com AG

active-city.net

56

net-Com AG operates as a specialized provider of municipal content management systems (CMS) and portal software, branded as active-City. The company targets public sector clients such as municipalities, cities, and counties, offering modular and scalable solutions to manage and present local government information online. With over 200 administrations in Germany and abroad as customers, net-Com AG holds a strong market position as a leader in the municipal CMS sector. Their offerings include a comprehensive suite of modules for citizen services, news, event management, and mobile apps, supporting modern multichannel content distribution.

The website www.luzihory.cz serves as a regional tourism portal for the Lužické hory (Lusatian Mountains) area in the Czech Republic. It provides comprehensive information about local destinations, hiking and cycling routes, sports activities, accommodation, dining, events, and partners. The site targets tourists and visitors interested in exploring this region, positioning itself as a key informational resource for regional tourism promotion. The business model is primarily informational and promotional, supported by partnerships with regional organizations and tourism entities. Technically, the site is built on the Public4u CMS platform and leverages common web technologies such as jQuery, jQuery UI, and the Mapy.cz API for mapping services. The site includes external integrations like Facebook for social media presence and Google Tag Manager for analytics and marketing. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but present through meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some level of privacy compliance. However, no advanced security headers were detected, and no explicit privacy or security policies beyond cookie usage are available. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No contact phone numbers or detailed company information are provided, limiting business credibility verification. Overall, the website is functional and professionally designed for its purpose but would benefit from enhanced security practices, improved privacy disclosures, and clearer business contact information to increase trust and compliance. The domain's lack of WHOIS data is a notable risk factor that should be addressed to improve legitimacy and user confidence.

C

Czechsporttravel.cz

czechsporttravel.cz

57

Czechsporttravel.cz is an online travel agency specializing in organizing travel packages and ticket sales for various sports events including football, hockey, tennis, Formula 1, and horse racing. The website targets sports enthusiasts primarily in the Czech Republic, offering a wide range of services such as air and bus travel packages, VIP tickets, sports camps, and concert tickets. The business appears to hold a niche market position with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs a modern JavaScript technology stack including jQuery, various UI and carousel libraries, Google reCAPTCHA v3 for bot protection, and advanced analytics tools like Exponea and Google Tag Manager. The site is mobile optimized with good SEO practices and clear navigation, although accessibility features are basic. Performance is moderate, suitable for the content-rich nature of the site. From a security perspective, the site enforces HTTPS and uses bot mitigation and cookie consent mechanisms, indicating awareness of privacy and security requirements. However, it lacks some important security headers such as Content Security Policy, X-Frame-Options, and X-XSS-Protection, which could expose it to certain web vulnerabilities. No WHOIS data is available, likely due to privacy protection, which is common for commercial websites but limits domain trust analysis. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to missing security headers and absence of an explicit privacy policy page. Strategic improvements in these areas would enhance compliance and security posture.

Communications 4 Expats is an official Portuguese government service provided by ANACOM, designed to assist expatriates with telecommunications contracts and services in Portugal. The website offers comprehensive guidance on topics such as arriving in Portugal, choosing operators, contracting, usage, switching, and cancelling services. It serves as a trusted consumer resource with links to official regulatory and consumer protection bodies. The platform is positioned as a government-backed consumer assistance portal targeting expatriates and consumers in Portugal.

ANACOM's Portal do Consumidor is an official Portuguese government website dedicated to providing consumers with comprehensive information and tools related to electronic communications and postal services. The portal offers services such as internet speed comparison, tariff simulations, consumer rights education, complaint submission, and updates on telecommunications developments like 5G and roaming. It serves as a trusted resource for Portuguese consumers seeking guidance and support in these sectors. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Tag Manager, and Alloy UI. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with room for improvements in modernizing some JavaScript libraries. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR and privacy best practices. However, it lacks explicit security policies, incident response contacts, and security headers, which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, the portal is a professional, trustworthy, and well-maintained government resource with strong business credibility and good privacy compliance. Strategic improvements in security transparency and technical modernization would further strengthen its position.

E

ERSAR

ersar.pt

60

ERSAR is the Portuguese Water and Waste Services Regulation Authority, tasked with regulating and supervising water supply and waste services across Portugal. The website serves as an official communication channel providing regulatory information, public consultations, complaint management, and sector data. It targets Portuguese consumers, regulated entities, and government bodies, positioning itself as a national authority with legal powers in its sector. The business model is government-funded and focused on regulatory oversight. Technically, the website is built on Microsoft SharePoint, leveraging standard web technologies including jQuery and modern UI components. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO best practices. Performance is moderate, typical for SharePoint-based sites. From a security perspective, the site enforces HTTPS, uses form digest tokens for CSRF protection, and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers like Content-Security-Policy are not evident, and there is no visible vulnerability disclosure or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It lacks some advanced security disclosures and terms of service documentation but maintains a solid security posture appropriate for a government regulatory entity.

A

AS Sadales tīkls

e-st.lv

56

AS Sadales tīkls operates a professional and secure customer portal aimed at business clients in Latvia's energy sector. The portal facilitates service applications, electricity consumption monitoring, and meter reading submissions, leveraging multiple secure authentication methods including eID, Smart-ID, and major Latvian banks. The website demonstrates a moderate to high level of digital maturity with modern JavaScript libraries, cookie consent management, and integration with Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and CSRF protections, though some security headers and explicit security policies are absent. Overall, the site is trustworthy and well-aligned with the company's business identity, with no signs of suspicious activity or content.

H

Heidelberg Materials CZ, a.s.

heidelbergcement.cz

62

Heidelberg Materials CZ, a.s. is a leading Czech manufacturer of cement, ready-mix concrete, and aggregates, operating as part of the global Heidelberg Materials group. The company targets construction industry professionals and business clients within the Czech Republic, offering a broad portfolio of building materials. The website is professionally designed using Drupal 10, with modern JavaScript libraries and Google Tag Manager for analytics. It is mobile optimized and accessible, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is privacy protected, which is typical for corporate domains, and no suspicious patterns were detected. Overall, the website is trustworthy, compliant with GDPR, and safe for general audiences.

G

Gynekologicko-porodnická klinika Fakultní nemocnice Brno

gynporbrno.cz

44

The Gynekologicko-porodnická klinika Fakultní nemocnice Brno is a specialized healthcare provider focused on comprehensive gynecological and obstetric care within the Faculty Hospital Brno in the Czech Republic. The website presents a professional and well-structured digital presence highlighting multiple subspecialties and partnerships with related specialized centers. The target audience primarily consists of patients seeking expert women's health services. Technically, the site employs modern web technologies including jQuery, Nette Framework, and Google reCAPTCHA, ensuring a secure and interactive user experience. However, the absence of WHOIS data and privacy policy pages indicates areas for improvement in transparency and compliance. Security posture is solid with HTTPS and anti-bot measures but lacks some security headers and formal incident response information. Overall, the website is trustworthy and professional but would benefit from enhanced compliance documentation and security hardening.

U

Ulita Blansko, z.s.

ulitablansko.cz

41

Ulita Blansko, z.s. is a small non-profit community organization based in Blansko, Czech Republic, focused on providing cultural, social, and recreational activities through clubs, a tea house, and volunteer engagement. The website serves as an information hub for events, club activities, and contact details, targeting local community members interested in cultural enrichment and social interaction. The organization is supported by local government entities, enhancing its community trust and legitimacy. Technically, the website is built on CMS Made Simple with a modern but basic tech stack including jQuery, Foundation CSS, and FontAwesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used but no explicit security headers or incident response information are present. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent banner is implemented. Overall, the website is functional, trustworthy, and safe for general audiences but would benefit from enhanced security and compliance documentation.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

I

Ingenta

ingenta.com

61

Ingenta is a UK-based company specializing in business publishing software and publishing technology solutions. Their offerings include intellectual property systems, rights and royalty management, and content publishing platforms, targeting media companies, publishers, and content creators globally. The company positions itself as a world-leading provider with a strong focus on configurable software and professional services to support complex business environments. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses reCAPTCHA for forms but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but the professional web presence and contact information support legitimacy. Overall, Ingenta presents a credible and professional digital footprint with room for enhanced security and privacy compliance.

D

DT - Výhybkárna a strojírna, a.s.

dtvs.cz

48

DT - Výhybkárna a strojírna, a.s. is a traditional Czech manufacturer specializing in the development, construction, production, assembly, and regeneration of railway and tramway switch components. With decades of experience, the company serves both domestic and international markets, including metro systems. Their business model focuses on manufacturing and servicing railway infrastructure components, supported by a subsidiary in Slovakia. The website reflects a professional and consistent brand image targeting transportation infrastructure clients. Technically, the website employs a moderately modern technology stack including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA for form protection. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details support legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its industry. Strategic improvements in security headers, updated libraries, and enhanced accessibility would further strengthen its posture.

K

Objevujte a relaxujte na Vysočině - korunavysociny.cz

korunavysociny.cz

55

The website www.korunavysociny.cz serves as a regional tourism portal promoting the Vysočina region in the Czech Republic. It provides information on tourist destinations, thematic trips, accommodation, events, and an experience card aimed at visitors and tourists interested in exploring the region. The site is built on the xartCMS platform and integrates common JavaScript libraries such as jQuery, MooTools, and Google Tag Manager for analytics and tracking. The content is primarily in Czech with Google Translate support for multiple languages, enhancing accessibility for international visitors. The website design is professional with good navigation and mobile optimization, supporting a positive user experience. From a technical perspective, the site uses HTTPS ensuring encrypted communication, but lacks important security headers that could enhance protection against common web vulnerabilities. The absence of privacy, cookie, and terms of service policies indicates gaps in compliance with data protection regulations such as GDPR. No explicit contact emails or phone numbers are visible, which may affect user trust and business credibility. Social media presence is established on Instagram, Facebook, and Threads, supporting community engagement. Security-wise, no critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS registration data raises concerns about domain transparency and legitimacy. This lack of WHOIS information could be due to privacy protection or registry issues, which reduces the overall trust score. The website does not appear to be blocked by any WAF or security challenge, allowing full content access. Overall, the website is a functional and informative regional tourism resource with good content quality and technical implementation. However, it requires improvements in privacy compliance, security headers, and transparency of domain registration to enhance trustworthiness and regulatory adherence.

S

Státní fond dopravní infrastruktury (SFDI)

ceskobezbarier.cz

43

The website 'Česko bez bariér' is operated by the Státní fond dopravní infrastruktury (SFDI), a Czech government fund focused on financing projects that remove barriers in public spaces to improve accessibility and safety. The site provides information about funding programs, supported projects, and consultation services for municipalities and other entities. The content is professionally presented, with clear navigation and a focus on public infrastructure improvements. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Owl Carousel, with Google Analytics integrated for visitor tracking. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, though some improvements are recommended such as updating libraries and adding security headers. The absence of WHOIS data limits domain registration trust analysis, but the website's consistent government branding and contact details support its legitimacy. Overall, the site is a reliable resource for its target audience, though privacy policy documentation and enhanced security practices would strengthen compliance and trust.

S

STUDIOELF

studioelf.at

44

STUDIOELF is a small creative agency based in Tirol, Austria, specializing in graphic design, web design, and branding services. The company targets businesses seeking to enhance their visual communication and brand identity, offering handcrafted and original design solutions. Their market position is regional with a strong local client portfolio and a professional online presence. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Bootstrap, and GSAP, providing a good user experience with multimedia content and responsive design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and incident response information. The absence of WHOIS data is a notable gap, slightly impacting trust but not undermining the overall legitimacy given the professional site content. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a mature digital presence with room for security enhancements.

Hotel pro kočky Trubská is a specialized hospitality service provider offering premium boarding and care for cats in the Czech Republic. Established in 2008, the business targets cat owners seeking luxury accommodation with features such as temperature-controlled rooms, secured balconies, veterinary care, and online webcam monitoring. The website reflects a small local business with clear contact information and a focused service offering. Technically, the site uses common web technologies including jQuery, Bootstrap, and Google Analytics, hosted likely via WEDOS, a Czech hosting provider. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic, with HTTPS usage implied but missing explicit security headers and advanced protections on forms. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

P

Parlement de Wallonie

parlement-wallonie.be

48

The website parlement-wallonie.be serves as the official portal for the Walloon Parliament, providing parliamentarians with access to dossiers, agendas, and related resources. It is a government entity website targeting regional legislators and officials in Belgium. The site uses a basic technical infrastructure including Bootstrap, jQuery 1.11.0, and Google Analytics for tracking. AJAX is employed for dynamic content loading, enhancing user experience but with limited mobile optimization and accessibility features. Security posture is moderate but weakened by the use of outdated JavaScript libraries and absence of visible security headers or privacy policies. No contact information or compliance documentation is present on the main page, which reduces transparency and privacy compliance. Overall, the site is functional but would benefit from modernization and enhanced security and privacy practices.

V

VICTOR Bozar Café

victorbozarcafe.be

50

VICTOR Bozar Café is a small hospitality business located in Brussels, Belgium, offering café and restaurant services with a strong emphasis on art and architecture, integrated within the Bozar arts center. The website provides detailed information about the café, its menu, event spaces, and contact details, targeting visitors to the cultural center and local clientele. Technically, the website uses a modern JavaScript stack including jQuery, Owl Carousel, and Google Maps API, with integration of the Zenchef booking system. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate; HTTPS is used but no advanced security headers or privacy policies are present, indicating room for improvement in compliance and security best practices. The WHOIS data for the domain is not publicly available due to restrictions, limiting domain trust verification. Overall, the website is functional, professional, and safe for general audiences, but lacks some compliance and security features.

F

FERRING Slovakia s.r.o.

ferring.sk

54

FERRING Slovakia s.r.o. operates as a specialized biopharmaceutical company focusing on reproductive medicine, maternal health, gastroenterology, and urology. The company positions itself as a leader in these healthcare sectors, providing innovative therapeutic solutions and supporting families and patients. The website reflects a professional and consistent brand image with clear business descriptions and contact information. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API, hosted by HostCreators. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

A

Alida, spol. s r.o.

prima-receptar.cz

53

Príma receptář.cz is a Czech internet hobby magazine operated by Alida, spol. s r.o., established since 2010. The website offers content focused on gardening, cooking, animals, and lifestyle topics, targeting a general Czech-speaking audience interested in hobby and lifestyle subjects. It maintains a strong social media presence and monetizes primarily through advertising. The site uses WordPress CMS with several plugins for SEO, event management, and popular posts, supported by advertising and tracking technologies including Google Analytics, Gemius, and Didomi for consent management. The technical infrastructure is modern but uses some older libraries like jQuery 1.12.4, which may pose minor security risks. Security posture is adequate with HTTPS and basic security headers, but lacks advanced headers and explicit security policies. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-positioned in its niche, though it could improve security and compliance documentation.

VECTOR TUB GmbH operates the VECTOR Training® website, providing specialized training, practical internships, and qualification examinations in nondestructive testing (NDT) methods according to recognized standards such as DIN EN ISO 9712, SNT-TC-1A, and ASME B&PV Code. The company targets professionals and organizations seeking certification and qualification in various NDT techniques. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence with good mobile optimization and accessibility. Technical infrastructure is based on Contao CMS with modern JavaScript libraries enhancing user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy, but the overall business credibility is supported by certifications, partnerships, and active content. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust.

U

Ubytovanie, ubytovací portál, ubytovacie zariadenia | UbytujSa.sk

ubytujsa.sk

47

UbytujSa.sk is a Slovak online accommodation portal offering a wide range of lodging options including hotels, guesthouses, apartments, chalets, and more across Slovakia. The platform targets tourists and travelers seeking accommodation tailored to various preferences and locations within Slovakia. It provides search functionalities by city, region, thematic stays, and user reviews, positioning itself as a comprehensive regional hospitality service provider. Technically, the website is built on Drupal 7 CMS, enhanced with modern JavaScript libraries such as Vue.js and Axios, and integrates Google Analytics with privacy-conscious settings. The site is mobile-optimized with a clear navigation structure and good content relevance. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit privacy or terms of service documentation. The domain uses privacy protection in WHOIS, which slightly reduces transparency but is common for such portals. Overall, the website is functional, moderately secure, and compliant with basic privacy requirements, serving its business purpose effectively.

A

AkeVino.sk

akevino.sk

46

AkeVino.sk is a Slovak online wine retailer established in 2009, offering a curated selection of wines directly sourced from winemakers. The business emphasizes fast delivery within 24 hours, free shipping, and exclusive promotional packages, targeting mature wine consumers primarily in Slovakia. The website is built on a modern Drupal 10 platform with commerce capabilities, ensuring a robust e-commerce experience. The technical infrastructure includes popular libraries and frameworks such as jQuery and Bootstrap, hosted likely by Active24, a known hosting provider in the region. Security posture is solid with HTTPS and DNSSEC enabled, complemented by GDPR-compliant cookie consent mechanisms and privacy policies. However, explicit security headers and incident response information are not published, representing areas for improvement. Overall, the site presents a professional and trustworthy e-commerce platform with moderate user tracking and good privacy compliance.

D

Dopravní podnik města Olomouce, a.s.

dpmo.cz

48

Dopravní podnik města Olomouce, a.s. (DPMO) is a well-established public transportation company operating in Olomouc, Czech Republic, providing urban bus and tram services including electronic ticketing and vehicle rental. The company is a medium-sized entity, part of the statutory city of Olomouc's group, with a domain registered since 1999, reflecting its long-standing presence in the market. The website offers comprehensive information for passengers, including schedules, ticketing options, and service updates, targeting local commuters and residents. Technically, the site uses a modern JavaScript stack with jQuery and related plugins, Google Tag Manager, and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. Privacy compliance is strong with a detailed privacy policy and cookie banner. Overall, the site is professional, trustworthy, and aligned with the company's business model and market position.

M

MDML s.r.o.

mdml.cz

42

MDML s.r.o. operates the public transportation system in Mariánské Lázně, Czech Republic, providing trolleybus and bus services with integrated electronic ticketing solutions including the Mariánka chip card and contactless payment options. The company positions itself as a local essential transportation provider with a focus on customer convenience and regional integration. Technically, the website is built on a traditional stack including jQuery, Bootstrap, and a proprietary CMS (ADENT CMS), offering a responsive and accessible user experience with clear navigation and relevant content. Security posture is moderate, with HTTPS assumed but lacking visible security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy document. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner integrations support its authenticity. Overall, the site is professional and trustworthy for its intended audience.

C

Compagnia Italiana Oftalmologica S.c.a.r.l.

cioitalia.com

46

Compagnia Italiana Oftalmologica (C.I.O.) is a small-sized Italian company specializing in the distribution of ophthalmologic products and equipment. Established in 2003, the company operates primarily in the healthcare sector, targeting ophthalmologists and eye care professionals. Their website presents basic information about their services, brands, and distributors, with a focus on regional market presence in Italy. The business model centers on product distribution and brand representation within the ophthalmology field. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery, Modernizr, Bootstrap, and CKEditor. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of modern frameworks or platforms, and no structured data markup is present. From a security perspective, the website lacks visible HTTPS enforcement confirmation and security headers, and DNSSEC is not enabled for the domain. No explicit security or incident response policies are published. Privacy compliance is minimal, with only a basic privacy policy PDF linked and no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but basic, with moderate trustworthiness and some security and privacy gaps. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance the company's digital maturity and risk profile.

D

Dopravní podnik města České Budějovice, a.s.

dpmcb.cz

56

Dopravní podnik města České Budějovice, a.s. is the primary public transportation operator in České Budějovice, Czech Republic. The company provides a comprehensive range of services including operation of bus and trolleybus lines, ticket sales through various channels (mobile app, SMS, ticket machines), advertising opportunities within the transport system, vehicle repair and maintenance, and fuel sales. The website reflects a well-established business with a history of over 110 years, supported by references to EU funding and a broad service portfolio targeting local residents and visitors. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel, with integration of analytics tools like Google Analytics, Facebook Pixel, and Smartlook. The site is mobile-optimized, accessible, and SEO-friendly, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security best practices such as HTTP security headers are not visibly implemented. From a security perspective, the site uses HTTPS and provides cookie consent with granular controls, but lacks explicit incident response contacts and a published security policy. The absence of WHOIS data limits domain registration trust assessment, though the website's content, social media presence, and official partnerships support its legitimacy. Overall, the website is professional, user-friendly, and compliant with privacy regulations, with moderate technical and security maturity. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and resilience.

E

select-language

eucerin-me.com

66

The website www.eucerin-me.com serves as a language selection landing page for the Eucerin brand targeting the Middle East region. It links to multiple regional Eucerin websites in various languages, indicating a global brand presence with localized content. The site uses modern tracking technologies such as Google Tag Manager and Hotjar, reflecting a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is limited due to missing security headers and unknown SSL configuration. Overall, the site appears functional and professionally designed but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness.