Security Directory

G

G U A R D 7, v.o.s.

safetybook.cz

44

SafetyBook, operated by G U A R D 7, v.o.s., is a Czech-based online resource specializing in occupational safety and health (BOZP), fire protection, and related legislative information. The website offers documentation templates, best practices, and forms to support compliance and safety management for employers and safety professionals. It also links to an associated e-shop for safety products, positioning itself as a niche provider in the Czech safety market. The content is well-structured, regularly updated, and targeted primarily at Czech-speaking safety practitioners and organizations. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and popular plugins such as Contact Form 7 and Mailchimp integration. The site is mobile responsive and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in security headers and privacy compliance documentation. From a security perspective, the site uses HTTPS and common security plugins but lacks explicit security headers and formal policies such as privacy, cookie, and incident response disclosures. No WHOIS data is available for the domain, which raises some concerns about domain registration transparency, although the website content and branding appear legitimate and professional. Overall, the website presents a moderate risk profile with good content quality and technical implementation but needs to enhance privacy compliance and security posture to improve trust and regulatory adherence.

M

MALEX Group s.r.o.

malex-group.com

42

MALEX Group s.r.o. is a Czech Republic based company specializing in the import and distribution of spare parts for escalators and elevators, serving primarily businesses requiring maintenance and replacement parts. The company positions itself as an experienced and reliable distributor with partnerships with leading global manufacturers, offering comprehensive services including technical assistance and delivery within the Czech Republic. The website reflects a professional business presence with clear service offerings and contact mechanisms, targeting service providers and businesses in the transportation sector. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and Content Security Policy in place, but lacks comprehensive security headers and published policies, indicating room for improvement in compliance and transparency. Overall, the website is safe, professional, and trustworthy, though it would benefit from enhanced privacy compliance and security disclosures to strengthen user trust and regulatory adherence.

P

Phocuswright

phocuswright.com

69

Phocuswright is a specialized market research company focused on the global travel, tourism, and hospitality industries. It provides comprehensive research reports, trend forecasting, and industry events to travel professionals and businesses. The company positions itself as a leading provider of travel market intelligence, serving a professional audience with detailed insights and analysis. The website reflects a mature digital presence with modern technologies and analytics integrations, supporting effective user engagement and data-driven marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not detract from the professional presentation and content quality. Overall, the website is a credible and authoritative source for travel market research with good privacy compliance and user experience.

T

TOPIN

topin.cz

57

TOPIN is a Czech-based professional portal specializing in heating technology, providing a wide range of expert articles, company catalogs, calculators, and a magazine subscription service. The website targets professionals and companies in the heating, ventilation, and energy sectors, offering valuable technical content and industry resources. The business model appears to be content-driven with advertising and subscription revenue streams. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, with a responsive design and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. The absence of WHOIS data is a concern for domain legitimacy verification, though the website content and structure suggest a legitimate and established operation. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Automa – časopis pro automatizační techniku, s. r. o.

automa.cz

48

Automa.cz is the online presence of Automa – časopis pro automatizační techniku, s. r. o., a specialized Czech magazine focused on automation technology and industrial control. Established in 2000, it serves professionals and companies in the automation sector by providing industry news, technical articles, market overviews, and event calendars. The website features a professional design with clear navigation and a consistent brand identity, supported by active social media channels. Technically, the site is built on ASP.NET with common JavaScript libraries and integrates Google Tag Manager for analytics and marketing. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-established but would benefit from enhanced privacy and security transparency.

F

FCC průmyslové systémy s.r.o.

fccps.cz

46

FCC průmyslové systémy s.r.o. is a Czech-based technical and commercial company specializing in industrial automation, embedded computing, robotics, and machine vision solutions. With over 30 years of experience in the Czech market, the company offers a broad portfolio of products and services including industrial systems, custom machinery, and training seminars. Their market position is stable and well-established, targeting industrial enterprises seeking advanced automation technologies. The website reflects a professional digital presence with modern frontend technologies and mobile responsiveness. However, the absence of WHOIS data and explicit privacy policies indicates areas for improvement in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking advanced HTTP security headers and documented incident response. Overall, the site is trustworthy and business-focused but would benefit from enhanced security and privacy documentation.

M

Město Havlíčkův Brod

muhb.cz

52

The website www.muhb.cz serves as the official online presence for the city of Havlíčkův Brod, Czech Republic. It provides comprehensive information about city governance, public services, news updates, and tourist information. The site targets residents, local businesses, tourists, and public officials, offering a broad range of municipal services and resources. The business model is government/public service with a medium-sized municipal scope and a historical foundation dating back to the 13th century. Technically, the site employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and Google Analytics, built on the CPedit CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security measures include HTTPS enforcement and use of Google reCAPTCHA, though security headers are not detected, indicating room for improvement. From a security perspective, the site demonstrates good practices such as cookie consent management and secure form handling but lacks visible security headers and an incident response contact. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and official branding strongly support legitimacy. Overall, the site is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency to strengthen trust and compliance.

D

DigitalPA

concorsidiprogettazione.it

41

DigitalPA operates a specialized SaaS platform named Gara Spot, focused on managing online design competitions and telematic procurement procedures primarily for public administrations and companies in Italy. The platform supports the entire competition lifecycle with compliance to relevant regulations, emphasizing security, anonymity, and procedural correctness. The company positions itself as a leader in the Italian e-procurement and design competition market, offering both software and expert consultancy services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and privacy-conscious analytics via Matomo, complemented by a LiveChat support widget. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

DigitalPA

garaspot.it

41

DigitalPA operates the Gara SPOT platform, a certified eProcurement solution designed to manage single telematic procurement procedures and design competitions online. The company targets public administrations and enterprises requiring efficient, compliant digital procurement tools. With a solid market presence in Italy, evidenced by over 10,000 clients and numerous high-profile public sector customers, DigitalPA offers both software platforms and comprehensive consultancy services. The website reflects a professional, well-structured digital presence with clear service offerings and client testimonials. Technically, the website employs modern front-end technologies including Bootstrap, Font Awesome, and jQuery, complemented by Matomo analytics and LiveChat for user engagement. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. Overall, the security and privacy compliance is moderate, with GDPR adherence suggested by the presence of a privacy policy but lacking explicit cookie consent. The WHOIS data aligns well with the business identity, reinforcing legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategically, DigitalPA should focus on enhancing security headers, implementing cookie consent, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance.

T

Techfood s.r.o.

automatizacevpotravinarstvi.cz

52

The website automatizacevpotravinarstvi.cz serves as the official platform for the 'Automatizace v potravinářství' conference, a specialized event focusing on automation in the food and beverage manufacturing sector in the Czech Republic. The organizing entity, Techfood s.r.o., is a small-sized company with a stable presence since 2013. The site provides detailed conference information, including program schedules, partner listings, registration forms, and contact details, targeting industry professionals interested in technological advancements in food production automation. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Slider Revolution, and Contact Form 7, with integration of Google reCAPTCHA for form security. The hosting and domain registration are managed by REG-WEDOS, a Czech provider, ensuring regional consistency. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. From a security perspective, the site employs HTTPS and basic spam protection but lacks advanced security headers and published security policies or incident response contacts. Privacy compliance is minimal, with no dedicated privacy policy or terms of service pages, though a cookie consent banner is present. No vulnerabilities or malicious content were detected. Overall, the website is professional and trustworthy for its niche audience but would benefit from enhanced privacy documentation, security policies, and accessibility improvements to strengthen compliance and user trust.

Geveko Markings Denmark A/S is a well-established company specializing in the development, production, and distribution of road marking materials and traffic safety solutions. With over 100 years of experience, the company serves a broad range of sectors including public traffic, parking, decorative surfaces, and accessibility. Their market position is strong within Denmark and internationally, supported by a consistent brand presence and comprehensive product offerings. The website reflects a professional and mature digital presence with clear navigation and relevant content tailored to business customers and public sector clients. Technically, the website is built on a modern CMS platform (Swift CMS) and employs contemporary web technologies such as Bootstrap, Swiffy Slider, and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, indicating a good level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes important security headers, and manages cookie consent appropriately. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and business demonstrate a solid security posture and compliance with privacy regulations such as GDPR. The absence of WHOIS data limits domain trust analysis, but the professional presentation and certifications like ISO9001 support legitimacy. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to further strengthen security and trust.

J

JK Machinery s.r.o.

jk-machinery.cz

41

JK Machinery s.r.o. is a Czech-based manufacturing company specializing in the design and production of agricultural machinery and technology solutions. With over 30 years of experience, the company offers comprehensive services including equipment manufacturing, technology design, installation, and after-sales support. Their market presence spans 42 countries with a strong client base exceeding 2500 satisfied customers. The website reflects a professional and consistent brand image, targeting agricultural businesses and food industry enterprises globally. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and utilizes popular analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Hosting is provided by Active24, a reputable provider, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site employs Google reCAPTCHA on its contact forms to mitigate spam and abuse. However, it lacks explicit security headers and does not provide a public security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance, though more detailed data retention policies are not disclosed. No vulnerabilities or suspicious content were detected during analysis. Overall, JK Machinery's website is a well-maintained digital asset that supports its business objectives effectively. The security posture is solid but could be enhanced by implementing additional security headers and publishing incident response and vulnerability disclosure policies. The company demonstrates strong business credibility and international reach, making it a trustworthy entity in its sector.

S

SBS Cargo

sbscargo.cz

36

SBS Cargo is a traditional forwarding company established in 2012, specializing in rail and maritime transport services. The company leverages generational knowledge in forwarding and transport sectors, serving clients primarily in energy, coal, steel, wood, paper, chemical oil, and industrial products. Their market position is that of a small but established player with a focus on traditional and reliable logistics solutions. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for mobile devices and SEO-friendly through the Yoast SEO plugin. Hosting appears to be provided by Webglobe, consistent with the domain's nameserver information. Performance is moderate with good design quality and navigation clarity, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response details are present on the homepage, limiting transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information to improve trust and regulatory adherence.

Q

Questex

questex.com

60

Questex is a well-established information and events company founded in 2002, focusing on the experience economy across hospitality, healthcare, technology, and wellness sectors. The company operates multiple tradeshows, newsletters, and branding programs to connect professionals and businesses. Their market position is strong, supported by acquisitions such as Affordable Housing Finance and Multifamily Executive. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies and Cloudflare DNS, though DNSSEC is not enabled. Security posture is moderate with HTTPS enabled but lacks some security headers and published security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and business credible, though improvements in security practices are recommended.

W

Wernesgrüner Brauerei GmbH

wernesgruener.de

52

Wernesgrüner Brauerei GmbH operates a professional website showcasing its range of beer products including Pils Legende, Helles, Alkoholfrei, and Naturradler varieties. The company positions itself as a traditional German brewery with a focus on quality and regional heritage. The website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Slick Carousel, providing a good user experience and mobile optimization. Compliance with privacy regulations is well integrated through Carlsberg Group's compliance pack, including cookie consent and GDPR-aligned privacy policies. Security measures include an age verification gateway for alcohol-related content, but explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security transparency. Overall, the website is trustworthy, professionally maintained, and suitable for mature audiences interested in beer products.

A

AdvertServe

advertserve.com

64

AdvertServe is a mature, cloud-hosted ad management platform targeting B2B and niche publishers with direct sales teams. The company offers a comprehensive suite of ad serving, targeting, tracking, and real-time reporting services, including video streaming and VAST/VPAID support. With a claimed 25+ years of experience and a customer base exceeding 30,000 sites globally, AdvertServe positions itself as a reliable and feature-rich solution in the ad tech industry. The platform emphasizes uptime reliability, AI-powered monitoring, and free technical support to differentiate itself in a competitive market. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap, and integrates Google Fonts and Font Awesome for styling. It uses Google Tag Manager and Pingdom for analytics and performance monitoring. The site is mobile-optimized with good SEO practices and a clear navigation structure, providing an excellent user experience. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure asynchronous ad tags. The contact form includes validation and anti-spam measures. Despite these strengths, the absence of WHOIS data for the domain is a notable concern, as it conflicts with the company's claimed long operational history. Additionally, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for trust and compliance. Overall, AdvertServe presents as a professional and trustworthy business with a strong technical foundation and good privacy compliance. The main risk lies in the domain registration opacity, which should be investigated further to ensure legitimacy. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and reduce potential risks.

The website 'eefhsrv.com' represents 'Event Engine', a technology platform focused on event services. The site is built on WordPress with a basic but consistent branding and content structure. It leverages modern web technologies including Bootstrap and Google Analytics, indicating a moderate level of digital maturity. However, the content is minimal, with no privacy policy, terms of service, or contact information readily available, which limits transparency and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published policies. Overall, the site is functional but would benefit from enhanced compliance and security documentation to improve trust and regulatory adherence.

T

theTribe

advenir.mobi

45

Advenir.mobi is the official website for the Advenir program, a French national initiative led by Avere-France to finance electric vehicle charging infrastructure. The program targets individuals, professionals, and public entities, providing financial incentives to accelerate the deployment of EV charging points across France. The website offers comprehensive information about the program, including eligibility, project definition, installer directories, and news updates. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices, accessibility features, and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, but the domain's expired status and lack of DNSSEC are notable risks. Overall, the site is professional, trustworthy, and well-positioned to serve its audience, though domain renewal is critical to maintain trust and availability.

N

netzGiraffe

netz-giraffe.de

38

netzGiraffe is a German-based digital agency specializing in web development, e-commerce solutions, and online strategy consulting. The company leverages popular CMS platforms such as WordPress, Drupal, and TYPO3, alongside e-commerce systems like Prestashop, Woocommerce, and Shopware. They also develop custom portals using the Symfony framework. The website presents a professional image with clear service offerings and client references, targeting businesses seeking comprehensive online presence and digital solutions. Technically, the site is built on WordPress with modern libraries including jQuery and Bootstrap, and employs SEO best practices via Yoast SEO. Hosting is provided by a German hosting provider, consistent with the company's regional focus. Security posture is solid with HTTPS enabled and spam protection plugins in use, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is well-structured, performant, and trustworthy, reflecting a mature small business digital presence.

D

Daniel Remler - Videographer | Producer | Cutter

danielremler.com

50

Daniel Remler operates a professional videography and video production service with a strong focus on generative AI content. The website showcases a portfolio of work, emphasizing over 20 years of experience and expertise in both traditional video production and AI-driven content creation. The business targets clients seeking high-quality visual storytelling and AI prompt expertise, positioning itself as a niche expert in the media sector within Germany. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor, Bootstrap, and Google services integration, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but the lack of WHOIS domain registration data introduces a moderate trust concern.

S

Schaubühne Lindenfels Leipzig

schaubuehne.com

47

Schaubühne Lindenfels Leipzig is a cultural venue in Germany offering theater, cinema, concerts, and festival hosting services. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. The site integrates Matomo analytics and a cookie consent mechanism, indicating some privacy awareness. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. The domain WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site is safe and trustworthy for general audiences but would benefit from improved transparency and security disclosures.

P

Peterson Solutions (Malaysia)

petersonmalaysia.com

62

Peterson Solutions (Malaysia) is a well-established sustainability consulting firm offering ESG, sustainability strategy, reporting, GHG management, and sustainable finance advisory services primarily in Malaysia. The company leverages a professional website built on WordPress with modern plugins and SEO optimizations to present its services and engage clients. The technical infrastructure includes Cloudflare DNS and standard WordPress technologies, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with policies present but lacking explicit consent mechanisms. Overall, the website reflects a credible business with strong branding and trust signals, suitable for its target audience of businesses seeking sustainability solutions.

C

Control Union Global

petersoncontrolunion.com

75

Control Union Global is a large international service provider specializing in testing, inspection, certification, laboratory services, collateral management, and pest control. Operating in over 80 countries, the company targets businesses requiring trustworthy trade and compliance services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating a mature approach to privacy compliance. Technically, the site is built on WordPress with modern technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Hotjar, and Sentry. The security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not detected and no explicit security or incident response policies are published. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for global enterprises. Overall, the website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

Mikroregion Chrudimsko is a regional government association website serving 29 municipalities in the Pardubice region of the Czech Republic. The site provides information about member municipalities, official notices, financial management, realized projects, and tourism opportunities. It targets local residents, government officials, and tourists interested in the region. The business model is informational and supportive of regional development, with a small organizational size and a founding date consistent with the domain registration. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is hosted likely by WEDOS, a Czech hosting provider, and shows moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms collect sensitive data, reducing risk, but the absence of privacy and cookie policies indicates compliance gaps with GDPR. No vulnerability disclosures or incident response contacts are provided. The WHOIS data is consistent and trustworthy, with no privacy protection or suspicious patterns. Overall, the website is professional, trustworthy, and well-aligned with its regional government purpose. However, it would benefit from improved privacy compliance, enhanced security headers, and formalized security policies to strengthen its security posture and regulatory adherence.

A

Amazing Media, s.r.o.

reportazezprumyslu.cz

44

Reportáže z průmyslu, operated by Amazing Media, s.r.o., is a Czech media platform specializing in industrial sector news, interviews, and magazine publications. The website targets professionals and stakeholders in manufacturing, energy, and transportation industries, providing relevant content and advertising opportunities. The platform maintains a professional digital presence with modern web technologies and social media integration. Technically, the site uses popular JavaScript libraries and frameworks such as jQuery, Bootstrap, and carousel plugins, ensuring a responsive and user-friendly experience. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. The absence of WHOIS data reduces transparency and trust slightly, but the overall business credibility and content quality remain solid. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact transparency to strengthen trust and compliance.

K

KOSTYMERNA s.r.o.

kostymerna.cz

41

Kostymérna s.r.o. operates a specialized costume rental and custom costume production business based in Prague, Czech Republic. The company targets theatrical groups, event organizers, and individuals seeking costumes and accessories for performances and parties. Their website presents a professional and well-structured digital presence, leveraging modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is moderate with HTTPS enabled but lacking security headers and formal policies. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details support legitimacy. Overall, the business appears to be a small, local service provider with a good online presence but with room for improvement in security and privacy compliance.

Ž

žeLIVE

zelive.cz

50

žeLIVE is a small non-profit organization based in the Czech Republic focused on youth development through experiential programs, camps, and volunteer animator engagement. The website presents a professional and consistent brand image with clear contact information and community-oriented content. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks important security headers and a configured analytics setup. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly impact the legitimacy of the organization based on website content. Overall, the site is trustworthy and serves its community well but should improve compliance and security practices.

T

TravelPulse US

travelpulse.com

63

TravelPulse US operates as a professional online travel news and information platform targeting travelers, travel agents, and hospitality professionals. The website offers a broad range of content including travel news, offers, guides, videos, and industry insights, positioning itself as a reputable source within the travel media sector in the United States. The business model primarily relies on advertising revenue and partnerships with related travel sites. Technically, the website employs modern web technologies such as JavaScript frameworks, Google Tag Manager, and Brightcove video players, with responsive design and good SEO practices. The site is moderately performant and mobile-optimized, though accessibility features could be enhanced. Security posture is strong with HTTPS enforced and appropriate security headers, but lacks visible privacy and cookie policies which are critical for compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and professional presentation suggest a legitimate business. No critical security vulnerabilities or adult content were detected, and the site uses multiple analytics and advertising technologies with moderate user tracking. Overall, TravelPulse US presents a credible and professional online presence with room for improvement in privacy compliance and domain registration transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, establishing vulnerability disclosure mechanisms, and enhancing accessibility and contact information to strengthen trust and compliance.

F

FOX Promo s.r.o.

foxpromo.cz

44

FOX Promo s.r.o. is a Czech Republic-based small marketing agency specializing in web design, SEO, online marketing, and advertising services. Founded in 2018, the company positions itself as a client-focused agency offering tailored solutions to businesses seeking to enhance their online presence. Their website reflects a professional and consistent brand image with clear service offerings and a strong local market presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and tracking purposes. The site is hosted on a Czech hosting provider and uses HTTPS with a Content-Security-Policy header, indicating a good security baseline. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms. However, it lacks some additional security headers and does not publish a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service pages found. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, FOX Promo s.r.o. presents a trustworthy and professional online presence with moderate to good security and privacy practices. Strategic improvements in privacy documentation and enhanced security headers would further strengthen their posture.

E

EUREGIO Bayerischer Wald - Böhmerwald - Unterer Inn

euregio.bayern

57

EUREGIO Bayerischer Wald - Böhmerwald - Unterer Inn is a regional cooperation organization focused on fostering cross-border collaboration between Germany, Czech Republic, and Austria. The website serves as an informational and project facilitation platform, targeting regional stakeholders and the general public interested in EU-funded projects and regional development. The organization positions itself as a key facilitator for cross-border initiatives in the tri-border area, emphasizing education, cultural exchange, and regional growth. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and Leaflet.js for interactive maps. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. The presence of cookie consent and privacy policy indicates awareness of GDPR compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers and explicit incident response contacts. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and contact details mitigate concerns. No vulnerabilities or malicious content were detected. Overall, the website is a credible, well-maintained regional government/non-profit portal with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and WHOIS transparency could enhance trust and security posture.

M

Mung Investments

mung.investments

45

Mung Investments is a medium-sized investment firm specializing in funding and managing portfolios for startups and projects across finance, real estate, event management, and fintech sectors. The company emphasizes community respect and purposeful investment, managing a diversified portfolio worth over half a billion Saudi Riyals. The website presents a professional image with clear business messaging and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Vimeo API, hosted likely on GoDaddy infrastructure. However, the site lacks visible security headers, privacy policies, and contact information, which impacts trust and compliance. The WHOIS data is unavailable due to TLD restrictions, limiting transparency. Overall, the site is accessible and safe but requires improvements in security posture and privacy compliance.

P

Portál naše družina

nasedruzina.cz

50

Naše družina is a Czech educational portal dedicated to providing inspiration, resources, and practical information for educators and leaders of school daycare centers. The website offers a variety of content including articles, podcasts, legislative updates, and interactive calculators tailored to the needs of its niche audience. It maintains an active presence on social media, particularly Facebook, and provides direct contact via phone and a contact page. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. While the site uses HTTPS and has no visible security vulnerabilities, it lacks some security headers and does not display a privacy or cookie policy, which are important for compliance and user trust. The WHOIS data for the domain is unavailable, limiting domain registration transparency, but the site’s content and structure indicate a legitimate and professionally maintained operation.

O

Open Grid Europe GmbH

oge.net

78

Open Grid Europe GmbH operates as a leading gas transmission system operator in Germany, focusing on natural gas, biogas, hydrogen, and CO2 infrastructure. The company provides a broad range of services including transportation, technical services, and market information to shippers, network operators, and connection customers. Their website reflects a strong commitment to sustainability and climate protection, with detailed reporting and active communication channels. Technically, the site is built on Neos CMS with modern libraries such as jQuery and Bootstrap, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

ALIPH Foundation is a reputable non-profit organization focused on protecting cultural heritage in conflict-affected regions globally. Their website demonstrates a professional and consistent brand presence, offering detailed information about their mission, projects, and partnerships. The technical infrastructure leverages modern web technologies including Bootstrap, Mapbox, and Google Analytics, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with minor areas for enhancement in security transparency and WHOIS data availability.

E

Electric Ireland

electricirelandrewards.ie

67

Electric Ireland Rewards is a customer loyalty platform operated by Electric Ireland, a leading energy provider in Ireland. The website offers curated rewards and offers to its customers, encouraging engagement through vouchers, competitions, and green initiatives. The platform targets Irish residents and customers interested in energy-related benefits. The business is well-established with a domain age consistent with its market presence and brand history. Technically, the website employs a modern but somewhat dated AngularJS framework combined with Bootstrap and jQuery for UI and interactivity. It integrates Google Tag Manager for analytics and OneTrust for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were detected in the provided content. Incident response and vulnerability disclosure information are not present, indicating potential gaps in transparency. Overall, the website demonstrates a solid business credibility and privacy compliance posture, with good content quality and user experience. The absence of direct contact emails or phone numbers on the main page suggests reliance on dedicated contact pages. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

E

Electric Ireland

electricireland.com

73

Electric Ireland is a prominent electricity supplier serving Northern Ireland, offering a range of services including electricity supply, online account management, keypad meter top-ups, and direct debit setups. The website targets residential and business customers in Northern Ireland and positions itself as a leading energy provider in the region. The digital infrastructure is built on Sitefinity CMS with modern technologies such as jQuery, Bootstrap, and Google Tag Manager, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The absence of WHOIS data reduces domain trustworthiness, but the overall website professionalism and business presence indicate legitimacy. Strategic recommendations include publishing security policies, vulnerability disclosure, and verifying domain registration details.

The ALIPH Foundation is a non-profit organization focused on protecting cultural heritage in conflict zones to foster peace. The website presents a professional and well-structured digital presence with clear information about their mission, projects, and partners. Their global footprint includes numerous projects and partnerships, positioning them as a recognized actor in heritage preservation. Technically, the site uses modern frameworks such as Bootstrap and Mapbox GL JS, with integration of Google Analytics and reCAPTCHA for security and analytics. The site is mobile-optimized and provides a good user experience with multimedia content and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are absent. WHOIS data is unavailable, which slightly impacts trust but the overall professionalism and transparency mitigate concerns. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the site is trustworthy and serves its audience effectively.

F

Farnost Lomec

lomec.cz

61

Farnost Lomec operates a pilgrimage site known as Poutní místo LOMEC, providing spiritual services, accommodation, and community events primarily for seekers and visitors interested in religious and cultural experiences. The website reflects a small-scale, community-focused non-profit organization with a clear target audience and consistent branding. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and social media SDKs for engagement and tracking. The site is accessible and mobile-optimized, though some SEO and accessibility features could be improved. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected in the provided data, and no explicit privacy or security policies are published. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

B

Bayards Group

workatbayards.com

49

Bayards Group is a well-established global leader specializing in complex aluminium constructions across multiple sectors including offshore, civil infrastructure, yacht building, defense, and urban air mobility. The company operates through five independent business units, each focused on delivering tailored aluminium solutions. Their website reflects a professional and structured approach to recruitment and corporate communication, targeting industry professionals and potential employees. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics and marketing tools like Google Tag Manager, Facebook Pixel, and Klaviyo, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information, which could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional content and business presence. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving domain registration transparency.

B

Bayards Group

bayards.com

49

Bayards Group is a globally recognized leader in complex aluminium constructions, serving diverse sectors including offshore, civil infrastructure, yacht building, defence, transport, architecture, and urban air mobility. The company leverages over 60 years of expertise to deliver customized, high-quality aluminium solutions through its specialized business units. Their market position is strong, supported by a professional digital presence and active engagement on major social media platforms. Technically, the website employs modern frameworks and marketing tools, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policy disclosures. The absence of WHOIS data for the domain is a notable concern, impacting trustworthiness despite the professional appearance and business legitimacy. Overall, the website reflects a mature business with a strong brand but would benefit from enhanced transparency in domain registration and security policies.

B

Bistum Essen

bistum-essen.de

43

Bistum Essen is a well-established Catholic diocese serving over 2.5 million people in the Ruhrgebiet and Sauerland regions of Germany. The website reflects a comprehensive religious and social service organization with a strong community focus, offering pastoral care, social help, education, and cultural events. The institution is positioned as a key religious entity in its region, with a large workforce and multiple parishes. Technically, the website is built on TYPO3 CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and GDPR compliant with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain and website content align with a legitimate and trustworthy religious organization.

4

4toStay GmbH

chronuu.de

53

Chronuu is a German-based digital platform specializing in estate and legacy management, operated by 4toStay GmbH. The company offers a secure, user-friendly service that enables individuals to manage their digital and material estate, document their life story, and provide access to heirs in a compliant and encrypted environment. The platform is positioned as a niche provider in the German market, leveraging modern web technologies and mobile app availability to reach its target audience. Technically, the website is built on WordPress with a robust tech stack including Bootstrap, Slider Revolution, and Matomo analytics, hosted behind Cloudflare DNS services. Security posture is strong with HTTPS enforced, data stored in Germany, and no provider access to user data, complemented by GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, and the site demonstrates good design, navigation, and content quality. Overall, Chronuu presents a trustworthy and professional digital service with room for improvement in security headers and incident response transparency.

L

Locawo

locawo.com

59

Locawo is a German-based e-commerce business specializing in low-carb food products such as pasta, pizza, and bread. Founded in 2021, it targets health-conscious consumers seeking low-carbohydrate alternatives with a focus on taste and fiber content. The website presents a professional and consistent brand image with good design and user experience, optimized for mobile users. Technically, the site leverages modern JavaScript libraries including jQuery, Bootstrap, and Slick Slider, and is built on the JTL Shop platform hosted by IONOS SE. Tracking and marketing tools such as Google Tag Manager and Facebook Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers, which are recommended for enhancement. Privacy compliance is weak due to missing privacy and cookie policies, and no GDPR compliance indicators are found. Overall, the site is functional and credible but would benefit from improved privacy and security practices.

Jens Kunstein Engineering & Consulting is a small German-based engineering and consulting firm specializing in construction project management and related services. The company offers a range of services including project leadership, cost estimation, contract and claim management, and expert reporting primarily targeted at small and medium-sized construction and handcraft businesses. The website is simple and professional, providing clear information about services and contact details but lacks advanced features such as forms or social media integration. Technically, the website uses a basic but modern tech stack including Bootstrap and jQuery, hosted on a German hosting provider's infrastructure. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No CMS or analytics tools are detected, indicating a static or manually maintained site. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. There are no privacy or cookie policies, which raises compliance concerns under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

I

INSPIRELI

inspireli.com

53

INSPIRELI operates as a globally recognized platform hosting the world's largest student architecture competition, engaging participants from over 160 countries. The platform offers multiple competition categories and sub-competitions, fostering architectural education and community building. Its market position is strong within the education and architecture sectors, supported by partnerships with universities and industry leaders. Technically, the website employs modern frameworks such as Bootstrap and Nette, integrates analytics and tracking tools like Google Analytics and Facebook Pixel, and provides a responsive, content-rich user experience. Security posture is solid with HTTPS enforcement and secure form handling, though improvements in security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS registrant data slightly impacts domain trust but is mitigated by professional site presentation and partnerships. Overall, INSPIRELI presents a credible, professional, and well-maintained digital presence with room for security enhancements.

Ř

Římskokatolická farnost Velešín

farnostvelesin.cz

58

Římskokatolická farnost Velešín operates as a non-profit religious organization serving multiple parishes in the Czech Republic. The website provides comprehensive information about sacraments, religious formation, events, and community activities, targeting local parishioners and visitors. It maintains a consistent brand presence and offers clear contact details, enhancing trust and community engagement. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted with Cloudflare DNS and registered via WEDOS. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS and standard security headers, though it lacks a Content Security Policy and vulnerability disclosure mechanisms. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

I

iBohoslužby.cz

ibohosluzby.cz

42

iBohoslužby.cz is a Czech web application focused on providing information about church services, including regular and holiday schedules, primarily in the Brno diocese. The site targets Czech-speaking churchgoers and community members seeking convenient access to service locations and times. The business model is informational, offering map-based and list-based views of church services without commercial or advertising elements. Technically, the site uses a modern but basic tech stack including Bootstrap, jQuery, Leaflet for maps, and DataTables for tabular data. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers or published policies, and privacy compliance is minimal due to absence of privacy and cookie policies. The domain is well-established since 2013 with consistent registration data matching the website's purpose and location. Overall, the site is functional and safe but would benefit from enhanced privacy, security, and compliance measures.

U

UNLIMITED.RS

unlimited.rs

55

UNLIMITED.RS is a Serbian-based web hosting and domain registration provider established in 2015, operating under the parent company United Internet d.o.o. The company offers a range of services including shared web hosting, VPS hosting, dedicated servers, domain registration, SSL certificates, and additional IT services such as colocation and audio streaming. Their market focus is primarily on Serbian and EU customers, emphasizing local hosting infrastructure and performance. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress, Bootstrap, LiteSpeed Web Server, and KVM virtualization. Marketing and customer engagement tools include Google Analytics, Facebook Pixel, MailerLite, and Tawk.to live chat. Security posture is solid with HTTPS enforced and some security best practices in place, but could be improved by enabling DNSSEC, adding security headers, and publishing formal security policies. Privacy compliance is basic, with a privacy policy and terms of service present but lacking explicit cookie consent mechanisms. Overall, the domain registration data is consistent and supports the legitimacy of the business, with no blocking or WAF challenges detected.

I

ICA Events

worldfood-istanbul.com

58

WorldFood Istanbul is a well-established international food exhibition organized by ICA Events, targeting food industry professionals globally. The website presents comprehensive information about the event, including exhibitor and visitor resources, agenda, news, and support partners. The technical infrastructure leverages modern web technologies and CMS, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for security and privacy improvements.

S

Sustainable Skies World Summit

sustainableskies.world

58

Sustainable Skies World Summit is a UK-based event organizer focused on addressing sustainability challenges in the aviation industry. The website promotes the 2026 summit scheduled for March 17-18, positioning itself as a leading UK event in sustainable aviation. The business model revolves around event hosting and industry networking, targeting aviation professionals and sustainability stakeholders. The site content is professionally presented with good SEO and structured data, reflecting a well-maintained digital presence for a newly founded organization in 2024. Technically, the website is built on WordPress with common technologies such as jQuery, Bootstrap, and WP Rocket for performance optimization. It integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, LinkedIn Insight Tag, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS with a good SSL configuration, although no explicit security headers were detected in the provided data. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent with blocking mode, and bot protection via Google reCAPTCHA. However, it lacks published security policies, incident response contacts, and explicit privacy and terms of service pages, which are recommended for compliance and trust. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns with the business timeline, indicating legitimacy. Overall, the website presents a moderate to good security posture and digital maturity for a new event business. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance trust and compliance. The risk level is moderate with no critical issues identified.