Security Directory

P

Paul Bauder GmbH & Co. KG

bauder.be

34

Bauder is a leading European manufacturer specializing in roofing systems, insulation, and green roof solutions with a history spanning over 160 years. The company holds a strong market position as the number one roofing system provider in Europe, targeting construction professionals and building owners. Their website reflects a mature digital presence with multilingual support and comprehensive product information. Technically, the site is built on TYPO3 CMS with legacy jQuery libraries and modern consent management, indicating moderate digital maturity. Security posture is solid with HTTPS and consent mechanisms, though lacking some advanced security headers and explicit incident response disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Bauder's business credibility and market leadership.

S

SIGN+DESIGN GmbH

signunddesign.com

71

SIGN+DESIGN GmbH is a well-established German advertising agency based in Schwalmtal, offering a broad range of services including strategy, digital and print media, web design, graphic design, photography, videography, augmented reality, and rental of construction site signs. The company positions itself as a trusted partner with over 20 years of experience and a strong market presence in Germany. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern JavaScript libraries and is hosted by IONOS SE, a reputable provider. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the business demonstrates high credibility with transparent contact information and positive trust signals.

C

CLAGE CZ s.r.o.

prutokovy-ohrivac.cz

47

CLAGE CZ s.r.o. operates a professional website focused on the sale and consultation of electronic flow water heaters, targeting residential and commercial customers in the Czech Republic. The company emphasizes energy efficiency and offers multiple product lines including small, compact, and comfort water heaters, as well as drink systems and accessories. The website is well-structured, with clear navigation and interactive forms for customer inquiries and configuration. The technical infrastructure leverages modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Nette Framework, providing a responsive and user-friendly experience. Security measures include HTTPS usage and a comprehensive cookie consent mechanism, although explicit security headers are not detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business presentation are consistent with a legitimate small energy sector company. Overall, the site demonstrates good digital maturity with room for improvement in security and compliance documentation.

C

CLAGE GmbH

clage.com

63

CLAGE GmbH is a German-based manufacturer specializing in decentralized hot water supply solutions, including instantaneous water heaters and hot water storage tanks. The company positions itself as a market leader in small instantaneous water heaters, targeting both consumers and professional sectors seeking energy-efficient hot water systems. Their website is professionally designed, content-rich, and offers comprehensive product information, corporate responsibility details, and customer support services. The company maintains an active presence on multiple social media platforms, enhancing brand visibility and customer engagement. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.0 and integrates LayerSlider and Etracker analytics, indicating a moderately modern infrastructure with room for updates. The site is mobile-optimized and SEO-friendly, providing a good user experience overall. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and uses outdated libraries, which could pose risks. The absence of WHOIS registration data for the domain www.clage.com raises concerns about domain legitimacy, although the website content and company information appear authentic. Privacy and cookie policies are present and GDPR compliant, but no formal security policy or incident response contacts are found. Overall, the website scores well on content quality and privacy compliance but is penalized for domain registration inconsistencies and outdated technical components.

P

Paul Bauder GmbH & Co. KG

bauderfoam.de

45

Paul Bauder GmbH & Co. KG operates a professional website for its BauderFOAM product line, specializing in polyurethane rigid foam insulation for technical applications. The company is a leading European manufacturer with a long history and a strong market position in manufacturing insulation materials. The website is well-structured, content-rich, and targets industrial and manufacturing sectors. Technically, the site uses TYPO3 CMS with JavaScript libraries including jQuery and Usercentrics for consent management, indicating a moderate level of digital maturity. Security posture is good with HTTPS and consent mechanisms, but lacks some advanced security headers and explicit policies. The absence of WHOIS data for the domain is a notable gap in domain legitimacy verification but does not detract from the professional presentation and contact transparency. Overall, the site presents a trustworthy business presence with room for technical and security improvements.

P

Paul Bauder GmbH & Co. KG

bauder.eu

38

Paul Bauder GmbH & Co. KG is a leading European manufacturer specializing in roofing systems including flat roofs, green roofs, pitched roofs, thermal insulation, and photovoltaic systems. With a strong presence across Europe through multiple factories and subsidiaries, the company serves contractors, architects, and building owners with a comprehensive product portfolio. Their website reflects a mature digital presence with multilingual support and extensive technical documentation. The company emphasizes sustainability and innovation in roofing solutions. Technically, the website is built on TYPO3 CMS with legacy jQuery and modern consent management via Usercentrics. The site is well-structured, mobile-optimized, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed policies and consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. The WHOIS data is privacy-protected, which is typical for large enterprises. Overall, the site demonstrates professionalism, trustworthiness, and compliance with European data protection standards. Strategic recommendations include enhancing security headers, publishing explicit security policies, and updating legacy JavaScript libraries to maintain security and performance.

P

Paul Bauder GmbH & Co. KG

bauder.si

38

Paul Bauder GmbH & Co. KG operates as a leading European manufacturer of roofing systems, specializing in flat roofs, green roofs, and pitched roofs. The company offers comprehensive solutions including waterproofing, thermal insulation, and roof greening, targeting architects, contractors, industrial and private investors primarily in Slovenia and the broader European market. The website reflects a mature business with a medium-sized footprint, founded in 2008, and maintains a consistent brand presence with detailed product and service information. Social media integration and references to partner organizations further reinforce its market position. Technically, the website is built on TYPO3 CMS and employs a range of JavaScript libraries including a patched older version of jQuery, bxSlider, and Usercentrics for consent management. The site is served over HTTPS with a good SSL configuration and includes modern cookie consent mechanisms ensuring GDPR compliance. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses a reputable consent management platform. However, the use of an outdated jQuery version, absence of explicit security headers, and lack of publicly available security policies or incident response contacts represent areas for improvement. No critical vulnerabilities or malicious content were detected. The WHOIS data confirms a consistent and legitimate domain registration dating back to 2008, aligning with the company's operational history. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and a trustworthy online presence. Strategic enhancements in security practices and technology stack modernization would further strengthen its posture and resilience.

P

Paul Bauder GmbH & Co. KG

bauder.pl

43

Bauder Polska Sp. z o.o. is a medium-sized manufacturer and supplier of roofing systems and materials in Poland, operating as a subsidiary of the international Paul Bauder GmbH & Co. KG. The company specializes in flat, green, and pitched roof systems, offering products such as bituminous membranes, plastic roofing foils, polyurethane insulation boards, and liquid plastics. The website is professionally designed using TYPO3 CMS and integrates modern JavaScript libraries and a consent management platform to ensure GDPR compliance. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is strong with HTTPS and consent mechanisms, though additional security headers could improve defenses. WHOIS data is privacy protected, which is common for commercial entities. Overall, the site reflects a mature digital presence aligned with the company's market position as a leading roofing system provider in Poland.

P

Paul Bauder GmbH & Co. KG

bauder.nl

37

Paul Bauder GmbH & Co. KG operates a professional and comprehensive website focused on roofing systems, insulation, and green roofing solutions. The company holds a leading market position in Europe with over 160 years of experience and a broad product portfolio. The website targets construction professionals and building owners, providing detailed product information, downloads, and contact options. Technically, the site is built on TYPO3 CMS with standard JavaScript libraries and includes modern consent management for privacy compliance. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

P

Paul Bauder GmbH & Co. KG

bauder.hr

40

Bauder d.o.o. is a Croatian regional branch of Paul Bauder GmbH & Co. KG, a leading European manufacturer of roofing systems including flat, green, and pitched roofs. The company has a long tradition of over 160 years and holds a strong market position in Europe. Their website provides comprehensive product information, technical documentation, and corporate news targeting construction professionals and building owners in Croatia. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries and includes a robust cookie consent mechanism via Usercentrics, ensuring GDPR compliance. Social media integration and multilingual support enhance their digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website reflects a mature, professional business with good technical and security standards.

P

Paul Bauder GmbH & Co. KG

bauder.ro

42

Paul Bauder GmbH & Co. KG operates as a leading European manufacturer specializing in roofing systems including flat roofs, green roofs, and pitched roofs, along with thermal insulation solutions. The company has a strong market position in Europe, particularly in Germany and Romania, offering comprehensive consulting and high-quality materials for sealing, insulation, ecological roofing, and energy generation. Their website targets architects, planners, applicators, distributors, and both industrial and private developers, reflecting a broad B2B and B2C business model. Technically, the website is built on TYPO3 CMS with a moderate performance profile and good mobile optimization. It integrates several JavaScript libraries such as jQuery and bxSlider, and employs Usercentrics for GDPR-compliant consent management. The site uses HTTPS with good SSL configuration but lacks explicit HTTP security headers, which could be improved. From a security perspective, the site demonstrates good practices including encrypted connections and consent management, but could enhance its posture by implementing additional security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The domain WHOIS data is privacy protected as per ROTLD policy, which is typical for Romanian domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing security policies to further strengthen trust and compliance.

P

Paul Bauder GmbH & Co. KG

bauder.no

43

Bauder AS, a subsidiary of Paul Bauder GmbH & Co. KG, is a leading European manufacturer and supplier of roofing systems, insulation materials, green roofs, and solar energy roofing solutions. The company has a strong market position in Europe, combining over 160 years of tradition with innovation and sustainability. Their website targets architects, planners, craftsmen, dealers, contractors, and building owners, offering comprehensive product information and consulting services. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant consent management via Usercentrics. The site is well-structured, mobile-optimized, and integrates analytics responsibly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, but the website's professionalism and certifications support legitimacy. Overall, the site reflects a mature digital presence aligned with business goals and compliance requirements.

P

Paul Bauder GmbH & Co. KG

bauder.hu

39

Paul Bauder GmbH & Co. KG is a well-established European manufacturer specializing in roofing systems including flat roofs, green roofs, and pitched roofs. The company operates in multiple countries, including Hungary, where it provides localized content and services. Their business model integrates manufacturing, technical consulting, and certified installation services, targeting architects, contractors, traders, and private builders. The website reflects a professional and consistent brand image with comprehensive product and service information.

P

Paul Bauder GmbH & Co. KG

bauder.fr

37

Bauder is a well-established European manufacturer specializing in roofing systems, insulation, and green roofing solutions. With a history spanning over 160 years, the company holds a leading market position in Europe, particularly in Germany and France. The website reflects a professional business presence targeting construction professionals and building owners, offering comprehensive product information and services. Technically, the site is built on TYPO3 CMS with integration of modern consent management tools and multimedia content, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some improvements in security headers and explicit incident response policies could enhance resilience. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its audience.

P

Paul Bauder GmbH & Co. KG

bauder.cz

41

Paul Bauder GmbH & Co. KG operates the Czech regional website bauder.cz, providing comprehensive roofing solutions including flat, green, and pitched roofs. The company is a leading European manufacturer of roofing systems and insulation materials, targeting architects, planners, traders, processors, public sector, and private investors. The website offers detailed product information, technical documentation, and support resources, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is moderate with HTTPS usage and client-side validation but lacks visible security headers and explicit incident response information. WHOIS data is unavailable, which slightly reduces trustworthiness but the professional presentation and active social media presence support legitimacy. Overall, the site is well-structured, privacy-conscious, and business-focused, suitable for its target audience.

V

Verband für Dämmsysteme, Putz und Mörtel e.V.

wdvs-planungsatlas.de

55

The website wdvs-planungsatlas.de is a specialized German platform providing free CAD details and technical construction resources focused on thermal insulation composite systems (WDVS). It is operated by the Verband für Dämmsysteme, Putz und Mörtel e.V., a construction industry association. The site targets architects, planners, and construction professionals seeking optimized construction details for energy-efficient building envelopes. The business model centers on offering free technical content and research reports to support planning and compliance with thermal protection standards. The site is positioned as a niche authoritative resource within the German construction sector. Technically, the website uses a traditional web stack with jQuery, jQuery UI, FancyBox, and Piwik/Matomo analytics. It employs cookie consent mechanisms and CSRF tokens in forms, indicating moderate digital maturity and privacy awareness. The site is mobile optimized with SVG graphics and structured navigation, though no CMS or hosting details are evident. Performance is moderate with room for improvement in security headers and advanced SEO. From a security perspective, the site uses HTTPS and cookie consent but lacks visible HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response information is provided. The login form includes CSRF protection, but no phone or physical address contact details are listed, limiting direct support channels. WHOIS data is minimal but consistent with the site's German construction association identity. Overall, the security posture is moderate with recommendations to enhance header policies and publish security policies. The overall risk assessment is low; the site is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies. Strategic recommendations include improving security headers, publishing terms of service and security policies, and enhancing contact transparency to strengthen trust and compliance.

C

CLAGE GmbH

clage.de

64

CLAGE GmbH is a German-based company specializing in decentralized warm water supply solutions, including a wide range of instantaneous water heaters, warm water storage, and Zip water systems. The company holds a market-leading position in small instantaneous water heaters and offers extensive product consultation, support, and training services. Their website is professionally designed, well-structured, and targets end consumers, architects, planners, and partners in the energy and water heating sector. Technically, the website uses a mix of legacy and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS registration data is a concern but does not detract significantly from the website's credibility given the professional presentation and active content. Overall, the website demonstrates a mature digital presence with room for security and compliance improvements.

P

Paul Bauder GmbH & Co. KG

bauder.de

47

Paul Bauder GmbH & Co. KG operates as a leading European manufacturer specializing in roofing systems including flat roofs, pitched roofs, green roofs, and photovoltaic solutions. The company targets architects, planners, roofers, and both industrial and private builders, positioning itself as a market leader in the energy and construction sector. Their website reflects a professional business model focused on manufacturing and supplying high-quality roofing materials and services. The presence of multiple localized websites indicates a broad international market reach.

S

Sport a kultura Hlučín

sak-hlucin.cz

49

Sport a kultura Hlučín is a community-oriented website providing comprehensive information about sports and cultural events in the town of Hlučín, Czech Republic. It serves residents and visitors by offering event calendars, details about recreational areas, and online reservation services for sports facilities. The website is well-structured, mobile-optimized, and integrates modern technologies such as jQuery, FullCalendar, and Mapy.cz API to enhance user experience. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. However, the absence of WHOIS data and lack of explicit company contact details reduce transparency and business credibility. Security posture is solid with HTTPS and standard security headers, but could be improved with additional policies and disclosures.

M

Muzeum Hlučínska

hlucinske-pamatky.cz

56

The website 'Hlučínské památky' serves as an informational platform dedicated to the cultural and historical monuments of the town of Hlučín in the Czech Republic. It provides detailed listings and descriptions of sacral and secular monuments, targeting a general audience interested in local heritage. The site is managed by 'Muzeum Hlučínska' and features a professional design with good navigation and mobile optimization. Technically, the site uses jQuery libraries, Google Analytics, and Tag Manager, hosted on a CDN provided by arsy.cz. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or terms of service pages. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears trustworthy and professionally maintained. Overall, the site is safe for general audiences and provides valuable cultural information but would benefit from enhanced security and compliance features.

T

Turistické informační centrum Hlučín

ic-hlucin.cz

47

The website www.ic-hlucin.cz serves as the official online presence of the Turistické informační centrum Hlučín, a local government-affiliated tourism information center in the Czech Republic. It provides visitors with historical, cultural, and tourist information about Hlučín and the surrounding region, including an event calendar and an e-shop for local products. The site targets tourists and local visitors interested in exploring the area. Technically, the site employs a modern JavaScript stack including jQuery, FullCalendar, and Mapy.cz API for interactive maps, along with Google Analytics for visitor tracking. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no critical vulnerabilities detected, but security headers are not explicitly observed. WHOIS data is unavailable, limiting domain legitimacy verification, though the site content and external links suggest a legitimate local government entity. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.

W

Webovky123, s.r.o.

webovky123.cz

38

Webovky123, s.r.o. is a Czech Republic-based small technology company specializing in custom web development and internet marketing services. The company offers bespoke websites, e-shops, and digital marketing solutions including SEO and PPC management, targeting businesses seeking professional online presence. Their website demonstrates a professional design with clear navigation and client testimonials, indicating a solid market position within their niche. Technically, the site uses a proprietary CMS built on the Nette Framework, enhanced with jQuery and standard tracking tools like Google Analytics and Facebook SDK. While the site is accessible and functional, it lacks visible privacy and cookie policies, which impacts compliance posture. Security-wise, the site uses HTTPS and avoids exposed sensitive data but lacks advanced security headers and formal incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve overall credibility.

A

Francouzské vinotéky | ELMAXSHOP.CZ

avintage.cz

68

ELMAXSHOP.CZ operates as a Czech-based e-commerce retailer specializing in household appliances and electronics, including niche products such as French wine cabinets. The website demonstrates a mature online retail platform with features like product search autocomplete, customer account management, order tracking, and product comparison. The business targets consumers in the Czech Republic seeking quality home appliances and electronics. Technically, the site is built on the nopCommerce platform, leveraging modern JavaScript libraries and analytics tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data limits domain registration trust verification, but the professional presentation and contact transparency support legitimacy. Overall, the site is well-positioned in its market segment with a solid technical foundation and compliance awareness.

F

Floweb Oy

ekukka.fi

55

eKukka.fi is a well-established Finnish online flower marketplace operated by Floweb Oy, founded in 2011. It aggregates nearly 400 Finnish florists, offering consumers nationwide access to fresh flowers with options for home delivery or store pickup. The website is positioned as the largest flower shop network in Finland, targeting Finnish consumers seeking convenient and reliable flower delivery services. The business model focuses on e-commerce and marketplace aggregation, supported by a strong brand presence and trust certifications such as Avainlippu.

D

Dům dětí a mládeže hlavního města Prahy

ddmpraha.cz

44

Dům dětí a mládeže hlavního města Prahy is a well-established public institution founded in 1998, providing educational and leisure activities for children and youth in Prague. The organization operates multiple branches offering clubs, camps, events, rentals, and educational programs, targeting children, youth, parents, and educators. It is funded and overseen by the city of Prague, positioning it as a key local educational service provider with a strong community presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent and reliable, managed by REG-GRANSY since 1998. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security posture. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain's long history and consistent WHOIS data reinforce its legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the site's digital maturity and compliance.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

C

Cactus

cactus.lu

58

Cactus is a well-established retail supermarket chain based in Luxembourg, offering a broad range of products including fresh food, household goods, and additional services such as restaurants, home delivery, and customer loyalty programs. The website is professionally designed using Drupal 10 and incorporates modern frontend technologies and analytics tools, indicating a mature digital presence. Security posture is moderate with HTTPS usage and anonymized IP tracking in analytics, but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness from a registration perspective, though the website content and branding strongly suggest a legitimate business. Overall, the site provides a good user experience with clear navigation and mobile optimization.

M

MČ Praha 5

praha5.cz

63

The website www.praha5.cz serves as the official online presence for the Municipal District Prague 5, providing residents and visitors with information about local government services, community events, and administrative resources. The site targets the local population of Prague 5 and operates as a government/public service entity. Technically, the site is built on WordPress 6.4.1, utilizing common plugins such as Events Manager and Cookiebot for event management and cookie consent respectively. The infrastructure shows moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, which are positive indicators. However, no explicit security headers were detected, and the WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is partial, with a cookie policy present but no clear privacy policy or terms of service pages identified. Overall, the website is a legitimate municipal government portal with good content quality and user experience. The absence of WHOIS data and some missing compliance documents suggest areas for improvement. Strategic recommendations include implementing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Y

Úvod | Yankeesvicky.cz

yankeesvicky.cz

46

The website www.yankeesvicky.cz is a small-scale e-commerce platform focused on retailing Yankees sports merchandise primarily targeting the Czech Republic market. The site features basic content and design, with a functional user interface and mobile optimization. It integrates several third-party technologies including jQuery, Google Maps API, and delivery service scripts, indicating a moderate level of technical maturity. However, the absence of a privacy policy and limited business information reduces its compliance and trustworthiness. Security posture is moderate with HTTPS usage and CSRF token presence but lacks advanced security headers and explicit vulnerability disclosures. Overall, the site is functional but would benefit from enhanced transparency, security practices, and privacy compliance to improve user trust and regulatory adherence.

A

AllSides

allsides.com

68

AllSides is a media company focused on providing balanced news coverage by revealing media bias across the political spectrum. The platform aggregates news stories from left, center, and right perspectives, enabling users to see multiple viewpoints side-by-side. It offers various services including newsletters, educational resources for schools, media and government services, and mobile applications. The website is well-established with a consistent brand presence and recognized partnerships with major media outlets. Technically, the site is built on Drupal CMS and uses modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly verified and enhanced. Privacy compliance is strong with clear policies and GDPR considerations. WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for media entities. Overall, the site is professional, trustworthy, and serves a general audience interested in media literacy and balanced news.

E

Eko Kvarner

ekokvarner.hr

41

Eko Kvarner is a Croatian non-profit environmental organization focused on promoting sustainable energy, climate change awareness, and ecological protection in the Kvarner region. The website serves as an information hub providing news, activities, projects, and educational resources to local communities and stakeholders interested in environmental issues. The organization appears well-established with a domain registered since 2012 and clear contact information including physical address, phone numbers, and email. The site content is primarily in Croatian and targets regional audiences. Technically, the website uses an older CMS platform called Galaksija and relies on legacy JavaScript libraries such as jQuery and Fancybox. While the site is accessible and contains meaningful content, it loads some external scripts over unsecured HTTP, which introduces mixed content risks. The site lacks modern security headers and advanced privacy or cookie consent mechanisms, indicating room for improvement in security and compliance maturity. Hosting is provided by Totohost, a Croatian hosting provider, and the domain registrar is CARNET, a reputable Croatian academic network. From a security perspective, the site uses HTTPS but does not implement additional security headers or content security policies. No incident response or security policy pages are found, and no vulnerability disclosure or security.txt files are present. The WHOIS data is consistent with the website's business profile and geographic location, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the website is functional and provides valuable content for its target audience but would benefit from technical modernization, improved security practices, and enhanced privacy compliance to strengthen trust and resilience against threats.

V

Volcanica

jvolcanica.org

46

Volcanica is a specialized academic journal dedicated to volcanology research, operating under a diamond open access model that eliminates fees for authors and readers. It is supported institutionally by Presses universitaires de Strasbourg and holds recognized open access certifications such as the DOAJ Seal and memberships in the Free Journal Network and OASPA. The website is built on Open Journal Systems, leveraging modern web technologies including Bootstrap and MathJax, and integrates analytics tools like Google Analytics and Tag Manager for user tracking. The site is mobile responsive, accessible, and professionally designed, providing a positive user experience for its target audience of researchers and professionals in volcanology. Security posture is generally good with HTTPS enforced, but lacks some security headers and visible cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of academic publishing entity. Overall, the website demonstrates a strong trust profile and professional operation.

T

Technical Design Jakub Zima

technical-design.cz

46

Technical Design, operated by Jakub Zima, is a small Czech web development business specializing in creating websites and web systems with nearly 20 years of experience. The website serves as a portfolio and contact point for potential clients, showcasing various completed projects. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with Google reCAPTCHA implemented for form security. The site is served over HTTPS, ensuring encrypted communication. Security posture is solid but could be improved by adding security headers and formal policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of businesses and individuals seeking custom web development services.

Elsevier's Scopus is a leading global abstract and citation database providing comprehensive access to peer-reviewed literature across multiple disciplines including science, technology, medicine, social sciences, and humanities. The platform targets researchers, academics, and institutions, offering subscription-based access to extensive research content and author profiling services. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React and advanced monitoring tools like New Relic and Adobe Launch, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit cookie consent mechanisms could be improved. The absence of publicly available WHOIS data suggests privacy protection, which is justified given the enterprise nature of the business. Overall, the site reflects a professional, trustworthy, and well-maintained academic resource.

T

Michal Tučný revival

tucny-revival.cz

54

The website tucny-revival.cz represents a small Czech music band dedicated to the revival of Michal Tučný, a legend in Czech country music. The site provides information about band members, upcoming events, media galleries, and contact options primarily for fans and event organizers. The business model is focused on entertainment and local cultural promotion with a niche audience in the Czech Republic. The website is modest but functional, reflecting a small-scale operation with limited digital maturity.

K

Kramářova chata

suchak.cz

40

Kramářova chata is a small hospitality business located in the Orlické Mountains, Czech Republic, offering accommodation, wellness services, and a restaurant. The website provides detailed information about their offerings including wellness packages, gastronomic experiences, and local attractions. The business targets tourists, families, and wellness seekers looking for a peaceful mountain retreat. Technically, the website is built on CMS Bakery and uses common JavaScript libraries such as jQuery and Colorbox, with integrated Google Analytics and advertising retargeting scripts. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear professional and legitimate. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

M

Město Týniště nad Orlicí

tyniste.cz

62

Město Týniště nad Orlicí operates an official municipal website serving residents and visitors with local government information, news, events, and public services. The site positions itself as a trusted source for municipal updates and community engagement, supported by clear contact details and social media presence. The business model is typical for a local government entity, focusing on public service delivery rather than commercial activities. Technically, the website uses a proprietary CMS called Public4u, supplemented by common JavaScript libraries such as jQuery and Swiper.js. The site is mobile-optimized and provides a moderate performance experience. SEO and accessibility features are basic but functional. HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good baseline practices such as HTTPS and cookie consent mechanisms. However, the absence of security headers and lack of explicit security or privacy policies indicate room for improvement. The missing WHOIS data is a notable gap, reducing confidence in domain legitimacy, though the website content and official contact information mitigate this concern. Overall, the website is a reliable and professional municipal portal with moderate technical sophistication and a generally good security posture. Strategic improvements in security headers, policy transparency, and WHOIS data availability would enhance trust and compliance.

H

Hradecká kulturní a vzdělávací společnost s.r.o.

hradecko.info

46

The website hradecko.info represents a regional non-profit destination management organization focused on promoting tourism and cultural heritage in the Hradec Králové region of the Czech Republic. The organization operates key tourist attractions such as the White Tower, Bílá věž, and Kostel sv. Mikuláše, and collaborates closely with local government and tourism partners. The business model is centered on sustainable tourism development, funded by membership fees and local tourism taxes. Technically, the website is built on a Joomla CMS platform with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Hosting is provided by Webglobe, and the domain is relatively new but consistent with the organization's founding date. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and DNSSEC is not enabled. HTTPS status is unknown from provided data and should be verified. Privacy compliance is partially addressed with a GDPR document available, and cookie consent mechanisms appear implemented. Contact information is clearly provided, but no incident response or security policy pages are present. Overall, the website is trustworthy and professionally maintained with a clear business purpose. Strategic improvements in security headers, HTTPS enforcement, and explicit security policies would enhance the security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

R

Riga Investment and Tourism Agency

liveriga.com

57

The LiveRiga website serves as the official digital platform for the Riga Investment and Tourism Agency, promoting Riga as a vibrant capital city of Latvia with opportunities for tourism, investment, events, and work relocation. The site is well-structured, visually appealing, and targets a broad audience including tourists, investors, event organizers, and professionals considering relocation. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA, ensuring a responsive and interactive user experience. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are not explicitly published. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website demonstrates a strong digital presence with good privacy compliance and user engagement through social media and newsletter subscriptions.

S

Statutární město Hradec Králové

hk800.cz

49

The website hk800.cz is the official digital platform for the 800th anniversary celebrations of the city of Hradec Králové in the Czech Republic. It serves as a comprehensive resource for cultural events, exhibitions, and community engagement activities related to the milestone. The site is operated by the city government, providing authoritative and trustworthy information to residents and visitors. The business model is centered on governmental and cultural event promotion, supported by partnerships with local businesses and media. The website demonstrates a consistent brand identity aligned with the city’s heritage and celebration theme. Technically, the site is built on Joomla CMS with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience such as carousels and lazy loading. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes, all managed with a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with Czech providers, and the site shows good mobile optimization and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s purpose and geographic location, indicating legitimacy. However, the site lacks explicit security policies or incident response contacts, which could be improved. Overall, the website is a well-structured, professional, and trustworthy platform for the city’s anniversary celebrations. It balances user experience, privacy compliance, and technical soundness effectively, though there is room for enhancement in security policy transparency and advanced security headers implementation.

A

as4u.cz, s.r.o.

mladoboleslavsko.eu

64

The website www.mladoboleslavsko.eu serves as the official regional tourism portal for the Mladá Boleslav area in the Czech Republic. It provides comprehensive information on tourist regions, nature, history, culture, sports, accommodation, events, and local attractions. The site targets tourists and visitors interested in exploring this region, offering services such as event calendars, photo galleries, a mobile app, and an e-shop. The business behind the site appears to be a small regional tourism promotion entity, operated by as4u.cz, s.r.o., a Czech company specializing in publishing and editorial systems.

M

Město Bakov nad Jizerou

vcasbakov.cz

61

Volnočasový areál Bakov nad Jizerou is a municipally operated leisure and accommodation facility located in the Czech Republic. It offers a variety of recreational services including sports facilities, children's playgrounds, natural swimming areas, and seasonal accommodation options such as cottages and apartments. The website serves as an information portal for visitors and local residents, providing event calendars, booking options, and contact details. The business model is focused on community service and tourism support, positioning itself as a local hub for leisure activities. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized with good navigation and SEO practices. However, there is room for improvement in accessibility and performance optimization. The absence of advanced analytics or tracking scripts suggests a minimalistic approach to user data collection. From a security perspective, the site uses HTTPS but lacks important security headers that could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed through a GDPR and cookie policy page with a consent mechanism, indicating awareness of regulatory requirements. The lack of WHOIS data is a concern for domain legitimacy verification but does not directly impact the operational security of the website. Overall, the website presents a trustworthy and professional front for a local government-operated leisure facility. Strategic improvements in security headers, WHOIS transparency, and accessibility could further strengthen its digital maturity and user trust.

T

Tepelné hospodárstvo Košice, s.r.o.

teho.sk

59

Tepelné hospodárstvo Košice, s.r.o. is a municipal energy company based in Košice, Slovakia, specializing in the supply of heat and hot utility water to local customers. The company operates as a local municipal utility provider with a strong focus on reliable service delivery and customer support. Their website reflects a mature digital presence built on Drupal 11, featuring comprehensive information for residents, customers, and stakeholders, including outage schedules, news updates, and service details. The company demonstrates compliance with GDPR and cookie regulations, providing clear privacy and cookie policies with consent mechanisms. Technically, the site uses modern web technologies and is optimized for mobile and accessibility, though performance is moderate. Security posture is good with HTTPS and cookie management, but could benefit from explicit security policies and headers. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

I

IMEG s.r.o.

musicserver.cz

55

Musicserver.cz is a well-established Czech online media portal specializing in music news, reviews, interviews, and event coverage. Operated by IMEG s.r.o., the site targets Czech-speaking music enthusiasts and offers a broad range of content including photo galleries and editorial articles. The business model relies primarily on advertising revenue, supported by partnerships and a strong social media presence. The domain's long history since 1999 reinforces its market position as a trusted source in the Czech music media landscape. Technically, the website employs a custom CMS with a technology stack including jQuery, Google APIs, and third-party ad and analytics services such as Revive Adserver and Gemius Audience. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO practices. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and publicly disclosed security policies or incident response procedures. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic but present, with a privacy policy and cookie banner aligned with GDPR requirements. Overall, musicserver.cz presents a professional and trustworthy online presence with good content quality and business credibility. Strategic improvements in security headers, mobile responsiveness, and transparency of security policies would enhance its security posture and user trust.

P

PS Works s. r. o.

brunofamilypark.cz

43

BRuNO Family Park is a family-oriented entertainment center located in Brno, Czech Republic, offering a wide range of indoor and outdoor attractions primarily targeting children and youth up to 15 years old. The business provides additional services such as birthday party hosting, school programs, corporate events, and food and beverage options, positioning itself as a comprehensive leisure destination for families. The website is professionally designed with clear navigation and multimedia content, supporting a positive user experience and strong brand presence. Technically, the site uses modern JavaScript libraries and tracking tools with consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data is a minor concern but does not significantly detract from the overall legitimacy given the professional web presence and active social media engagement. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

F

Fondazione Fiera Milano

fondazionefieramilano.com

53

Fondazione Fiera Milano is a non-profit foundation dedicated to supporting the economic, social, cultural, and scientific development of Milan and Italy. It manages significant assets including real estate, art collections, and historic archives, and operates educational initiatives such as the Accademia and specialized Master courses. The foundation maintains a strong institutional presence with a clear focus on exhibitions, research, and cultural heritage. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery UI, and Slick Carousel for UI components, alongside Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content structure, though accessibility features could be enhanced. Performance is moderate with asynchronous script loading. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security policies, incident response contacts, and a vulnerability disclosure mechanism, which are recommended for improved security posture and transparency. Privacy compliance is generally good with clear privacy and cookie policies, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is professional, trustworthy, and well-aligned with the foundation's mission. Strategic improvements in security transparency and privacy consent would further enhance its compliance and user trust.

Fondazione Fiera Milano is a well-established non-profit foundation focused on supporting the economic, social, cultural, and scientific development of Milan and Italy. It manages significant assets including real estate, art collections, and historic archives, and operates educational programs such as the Accademia and specialized Master courses. The foundation also conducts research and market analysis to support the exhibition and event sectors. The website reflects a mature digital presence with professional design, clear navigation, and integration of analytics via Matomo. Social media channels are actively linked, enhancing outreach and engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and a cookie consent mechanism. Privacy policies are comprehensive and GDPR compliant, but terms of service and incident response contacts are not found. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy organization.

P

Polski Lek Sp. z o. o.

polskilek.pl

65

Polski Lek Sp. z o. o. is a well-established Polish manufacturer of dietary supplements, operating since 2000 and part of the Maspex group since 2003. The company targets sensitive consumer groups such as pregnant women, infants, children, and adults, offering a broad portfolio of products and contract manufacturing services. The website reflects a mature digital presence with multilingual support and clear brand positioning. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though it lacks visible cookie consent and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in privacy transparency and incident response documentation are recommended.

C

CBC Poland

cbcpoland.pl

47

CBC Poland is a well-established provider of security systems, monitoring, and alarm solutions operating primarily in Poland with a 25-year market presence. The company is part of the CBC Group, a European security technology group, and serves various sectors including transport, banking, retail, and public utilities. Their offerings include hardware, software, AI video analysis, and comprehensive technical support and training. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting security professionals and businesses. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Tag Manager for analytics. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is addressed with visible cookie consent and privacy policy pages. Overall, the site is trustworthy and professionally maintained, though it could improve in security transparency and incident response readiness.