Security Directory

C

CreativeMornings

creativemornings.com

71

CreativeMornings is a globally recognized breakfast lecture series and community platform serving the creative sector. Founded in 2008, it operates in over 250 cities worldwide, offering free monthly events and online talks to foster creativity and networking. The platform targets creative individuals and companies, providing a blend of in-person and digital engagement. Technically, the website employs a modern tech stack including jQuery, Font Awesome, Google Fonts, and is hosted on Amazon AWS infrastructure. The use of Ruby on Rails is implied by the presence of authenticity tokens and CSRF protections. Security posture is solid with HTTPS, secure login mechanisms, and domain transfer protections, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial, lacking a cookie consent mechanism despite GDPR indicators. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility, with room for improvement in security transparency and privacy controls.

The European Space Agency (ESA) is a well-established intergovernmental organization dedicated to space exploration, science, and technology development in Europe. The website www.esa.int serves as the official portal providing comprehensive information about ESA's missions, news, educational resources, and multimedia content. It targets a broad audience including the general public, researchers, students, and media professionals. The site demonstrates a high level of professionalism, with consistent branding and rich, relevant content that is regularly updated. Technically, the website employs modern web technologies including jQuery, FontAwesome, and Matomo analytics for user tracking. It uses HTTPS with strong SSL configuration and includes cookie consent mechanisms, indicating good privacy practices. The site is mobile-optimized and performs well with fast loading times and clear navigation. From a security perspective, the site follows best practices such as HTTPS enforcement and cookie consent but lacks explicit published security policies, incident response information, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data confirms the legitimacy and long-standing presence of ESA, enhancing trustworthiness. Overall, the website is a reliable and authoritative source for space-related information from ESA, with strong business credibility and good technical and privacy compliance. Strategic improvements could include publishing detailed security policies and incident response contacts to further enhance transparency and trust.

F

Friedhelm Loh Group

friedhelm-loh-group.com

10

The Friedhelm Loh Group is a well-established, family-owned enterprise founded in 1961, specializing in manufacturing, energy, and innovative system solutions. With a global presence through 95 subsidiaries and over 12,000 employees, the group positions itself as an innovation leader and global player. The website reflects a professional corporate image with clear navigation and relevant business content targeting industrial clients and partners. Technically, the site uses legacy and modern JavaScript libraries, is hosted behind Cloudflare, and implements privacy-conscious features such as cookie consent with opt-in and conditional Google Analytics loading. Security posture is solid with HTTPS and domain transfer protection, though improvements are recommended in DNSSEC deployment and security headers. Overall, the site is trustworthy and compliant with GDPR, but lacks explicit contact and security policy information on the homepage. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing incident response contacts to improve transparency and security readiness.

S

Studio Ploc, s.r.o.

studio-ploc.cz

62

Studio Ploc, s.r.o. is a specialized retailer of ergonomic office furniture based in the Czech Republic, offering a wide range of ergonomic chairs, desks, and conference furniture. The company emphasizes quality, user testing, and customer experience, providing additional services such as 3D visualization and consulting for office and commercial space design. Their market position is that of a niche ergonomic furniture provider with a strong local presence and a showroom in Prague. Technically, the website employs modern JavaScript libraries and tracking tools, including Google Analytics and Tag Manager, with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced, though the absence of some security headers suggests room for improvement. The lack of WHOIS data is a concern for domain trust but does not detract from the professional presentation and business legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, targeting both businesses and individual consumers seeking ergonomic solutions.

R

Rentalia

rentalia.cz

52

Rentalia is a Czech Republic based small business specializing in the rental of professional film and photography equipment, positioning itself as the largest rental service of its kind in Zlín. The company targets filmmakers, photographers, and students, offering a broad range of equipment including cameras, lighting, sound, and grip gear. The website is built on WordPress with modern technologies and includes SEO and privacy compliance features. The business model includes direct rentals and a partner platform for equipment owners to list their gear. Technically, the site is well-structured, mobile-optimized, and uses reputable third-party services such as Google Analytics and Facebook Pixel for marketing and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

Simpleview is a well-established technology company specializing in marketing solutions and software for Destination Marketing Organizations (DMOs) and the tourism industry. Their offerings include CMS, CRM, digital marketing services, event management, and data insights. The company operates under the parent company Granicus, indicating a strong market position and backing. The website reflects a mature, professional business with a clear focus on B2B services in the tourism technology sector. Technically, the site employs modern frameworks such as Vue.js and RequireJS, uses secure HTTPS protocols, and integrates advanced analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with proper headers and no visible vulnerabilities, though explicit security policies and incident response details could be improved. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and parent company association support its legitimacy.

The International Congress and Convention Association (ICCA) operates a professional global network serving the international association meetings industry. Their website provides comprehensive resources, networking opportunities, and business intelligence services to meeting strategists, associations, and suppliers. The organization positions itself as a global leader and knowledge hub in this niche market. Technically, the website employs a modern technology stack including jQuery, Vue.js, RequireJS, and Google Tag Manager, hosted on a CMS platform likely Simpleview. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is publicly available. WHOIS data is unavailable due to privacy protection, which is typical for such organizations and does not detract from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained, supporting ICCA's role as a key industry association.

AGROBAC s.r.o. is a Czech manufacturing company specializing in biologically active substances and dietary supplements, notably the low-calorie sweetener DiChrom enriched with trivalent chromium. Founded in 2006 as a transformation of a company with roots back to 1990, it serves a niche market focused on health-conscious consumers including diabetics. The company operates two production sites and emphasizes research and development with modern laboratory equipment. The website reflects a small but professional business with consistent branding and a clear product focus. Technically, the site uses jQuery and Flexslider for UI elements and is mobile optimized, though it lacks advanced SEO and accessibility features. Security posture is minimal with no visible security headers or privacy policies, and no contact emails or phone numbers are provided on the homepage. The domain WHOIS data is privacy protected, which is common for small businesses, but limits verification of registrant details. Overall, the site is functional and informative but could improve in security and compliance transparency.

Č

Česká advokátní komora

advokatiprotitotalite.cz

55

The website 'Advokáti proti totalitě' is an informational and commemorative platform operated by the Czech Bar Association (Česká advokátní komora). It focuses on honoring lawyers who opposed totalitarian regimes in Czech history, providing exhibitions, publications, conferences, and multimedia content. The target audience includes legal professionals, historians, and the Czech public interested in legal history and democratic values. The site holds a niche position within the Czech legal and historical community, operating as a non-profit educational resource. Technically, the website uses a modern but modest technology stack including jQuery, FontAwesome, Magnific Popup, FancyBox, and Google Analytics. It appears to be built on October CMS and uses the Foundation framework for responsive design. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. HTTPS is enforced, but security headers are missing, and privacy and cookie policies are absent, indicating room for compliance improvements. From a security perspective, the site benefits from HTTPS and no visible vulnerabilities or exposed sensitive data. However, the lack of security headers and absence of privacy and cookie policies reduce its security posture and privacy compliance. No WHOIS data was retrievable, which lowers domain trustworthiness, but the official association branding and content quality provide legitimacy. No forms or contact emails are present, limiting direct user engagement and incident response capabilities. Overall, the website is a professionally presented, content-rich resource with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance. The domain registration status should be verified to ensure legitimacy and reduce risk.

Č

Česká onkologická společnost České lékařské společnosti J. E. Purkyně

linkos.cz

44

The website www.linkos.cz represents the official portal of the Czech Oncology Society (Česká onkologická společnost České lékařské společnosti J. E. Purkyně), a reputable non-profit organization dedicated to oncology education, patient support, and professional collaboration in the Czech Republic. It serves multiple audiences including oncologists, patients, families, and the general public with comprehensive resources on cancer prevention, treatment, and research. The site is well-structured with clear navigation and rich content relevant to its mission. Technically, the website employs standard web technologies such as jQuery and Facebook SDK for social media integration. It uses HTTPS ensuring encrypted communication, and implements a cookie consent mechanism compliant with GDPR requirements. While no advanced security headers were detected in the provided data, the site demonstrates basic security hygiene. The site is mobile-optimized and provides a good user experience with professional design and clear content presentation. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The lack of WHOIS data is likely due to privacy protection common for non-profit entities and does not detract from the site's legitimacy. However, improvements could be made by adding explicit security policies, incident response contacts, and enhancing security headers. Overall, the site maintains a good security posture appropriate for its informational and educational role. The overall risk assessment is low, with the site being a trustworthy source of oncology information in the Czech Republic. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving accessibility features to meet broader compliance standards.

L

Lviv Travel

lviv.travel

22

Lviv Travel operates as the official tourism website for the city of Lviv, Ukraine, providing comprehensive travel information, event listings, guides, and city services such as the Lviv City Card. The website targets tourists and visitors seeking cultural, historical, and practical information about Lviv. It holds a strong market position as an authoritative source backed by city branding and structured data. Technically, the site employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and multiple analytics tools, ensuring a responsive and content-rich user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is basic with a cookie consent mechanism and a privacy policy available, but GDPR compliance indicators are minimal. Overall, the site demonstrates good business credibility with clear contact information and professional content.

G

GSKlub.cz

gsklub.cz

65

GSKlub.cz is a Czech Republic-based e-commerce platform specializing in the sale of dietary supplements. It positions itself as one of the largest online sellers in its market segment, offering exclusive products for all age groups directly from manufacturers. The website is built on WordPress with WooCommerce, leveraging a range of modern marketing and analytics tools such as Google Analytics, Hotjar, and Meta Pixel. The site implements a comprehensive cookie consent mechanism via Cookiebot, reflecting a commitment to privacy compliance. However, the absence of a visible privacy policy and WHOIS data gaps present some concerns regarding transparency and domain legitimacy. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but could improve security headers and explicit privacy documentation.

V

Vinotéka Děčín - Domů

vinotekadecin.cz

54

Vinotéka Děčín is a small local wine retailer and event organizer based in the Czech Republic, specializing in wine sales and hosting wine tasting events featuring regional wineries. The website is professionally designed with good content quality and clear navigation, targeting wine enthusiasts and local customers. Technically, the site uses a Mozello CMS platform with jQuery and other JavaScript libraries, hosted on Amazon Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a privacy policy. The absence of WHOIS data due to privacy protection is typical for small businesses and does not raise immediate concerns. Overall, the site is trustworthy but could improve privacy compliance and security practices.

K

Ráj korálků, perlí, skla a jablonecké bižuterie. Korálková dílna pro děti.

kristalovyraj.cz

52

The website kristalovyraj.cz represents a retail business specializing in Czech glass, jewelry, and related decorative products, including a creative bead workshop for children. It positions itself as the largest Czech glass and jewelry retail center in Central Europe, targeting a general audience primarily within the Czech Republic. The business model focuses on in-person retail sales combined with experiential creative workshops, supported by partnerships with local cultural and tourism organizations. Technically, the website is built on the Mozello CMS platform, utilizing common JavaScript libraries such as jQuery and Fancybox, and is hosted via Amazon CloudFront CDN. The site demonstrates good mobile optimization and basic SEO practices but lacks advanced security headers and explicit privacy and terms of service documentation. Cookie consent mechanisms are implemented, linking to a cookie policy hosted on the Mozello platform. From a security perspective, the site uses HTTPS (assumed from CDN usage), but no security headers were detected in the provided data. There is no exposed sensitive data or known vulnerabilities from the analysis, but the absence of WHOIS data and domain registration details reduces trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the security posture is moderate but could be improved with better transparency and security best practices. The overall risk assessment suggests the website is functional and legitimate based on content and partner affiliations but lacks critical domain registration transparency and formal privacy documentation. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

O

onWebChat

onwebchat.com

67

onWebChat is a technology company specializing in AI-powered live chat and chatbot software designed to enhance customer support and boost sales for businesses. The company offers a SaaS model with free and paid subscription plans, including a Pro AI plan with advanced features. Their platform supports multiple integrations with popular CMS and e-commerce systems and provides native mobile applications for Android and iOS, indicating a mature and versatile product offering. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting businesses seeking to improve customer engagement through AI-driven chat solutions. Technically, the site uses modern web technologies including jQuery, Socket.IO, Bootstrap, and Google Tag Manager, ensuring a responsive and interactive user experience. Security-wise, the site enforces HTTPS with a reputable SSL certificate and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional presentation and trust indicators such as user testimonials and social media presence. Overall, onWebChat demonstrates a solid digital maturity with room for improvement in security policy transparency and WHOIS data availability.

T

TASR administrácia

imporel.com

58

The website imporel.com serves as an administrative login portal for TASR, a media organization likely based in Slovakia. It provides access to various internal modules related to media content management, including polls, politicians, events, emails, and charts. The platform is built as a Single Page Application using AngularJS and integrates several third-party libraries and services such as Google Analytics and Google Maps API. The domain is well maintained with a consistent registration history dating back to 2015. From a technical perspective, the website employs a moderately modern technology stack but relies on AngularJS, which is deprecated and may pose future maintenance and security challenges. The site is served over HTTPS with Cloudflare DNS, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. Performance and mobile optimization are basic but functional. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure. However, the absence of comprehensive privacy and cookie policies, as well as missing security headers, reduces compliance and security maturity. No WAF or blocking mechanisms are detected, and the site is accessible without restrictions. Overall, the website is a professional internal tool with moderate security and compliance maturity. Strategic improvements in privacy compliance, security headers, and modernization of the technology stack are recommended to enhance security and trustworthiness.

Soufflet Agro a.s. is a well-established agricultural company based in the Czech Republic, founded in 2003. The company specializes in providing certified seeds, agricultural machinery, plant nutrition products, technical consulting, and commodity trading services. Their website reflects a professional and consistent brand presence targeting farmers and agribusiness clients. The company maintains active social media channels and regularly updates news and events, reinforcing its market position. Technically, the website employs a mix of legacy and modern web technologies including AngularJS, jQuery, and Django integration. While the site is mobile-optimized and includes cookie consent mechanisms, the use of older AngularJS versions and lack of explicit security headers present potential security risks. Analytics and marketing tools such as Google Analytics and Facebook Pixel are used with user consent. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS) and cookie consent banners, but lacks visible security policies or incident response contacts. The WHOIS data confirms domain legitimacy with consistent registration details and a long operational history. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website scores well on business credibility and content quality but could improve in privacy compliance and security posture. Strategic enhancements in security headers, updated frameworks, and published policies would strengthen trust and compliance.

M

Měšťanský pivovar v Poličce, a.s.

pivovar-policka.cz

46

Měšťanský pivovar v Poličce, a.s. is a Czech brewery specializing in the production and sale of various traditional beer types, including light and dark beers, strong beers, and non-alcoholic options. The company also engages in sustainable energy initiatives such as photovoltaic systems. The website targets local consumers and business partners, providing detailed product information, employment opportunities, and contact details primarily via phone. The digital infrastructure includes modern analytics tools like Google Tag Manager and TikTok pixels, indicating a moderate level of digital maturity. Security measures include an age verification gate to comply with alcohol sales regulations, but lack explicit privacy policies and security headers, which are areas for improvement. The absence of WHOIS data reduces transparency and trust, though the website content and business presentation appear professional and consistent with a medium-sized manufacturing entity.

P

PHP7.Hosting

php7.hosting

59

PHP7.Hosting is a small technology company specializing in PHP web hosting services, offering support for PHP versions 5.3 through 7.3 with real-time switching capabilities. The company also provides domain registration, automated SSL certificates via Let's Encrypt, email services, DNSSEC, and URL redirection. Their market position is niche, targeting developers and businesses requiring flexible PHP hosting solutions. The website is professionally designed with good navigation and mobile optimization, leveraging modern frontend technologies such as Bootstrap and jQuery. However, no CMS or hosting provider details are explicitly identified. Security-wise, the site supports HTTPS with automated SSL but lacks visible security headers and published security or incident response policies, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced compliance and security transparency.

The website tlds.africa operates as a domain registration service specializing in African country code top-level domains (ccTLDs) and a broad range of other domain extensions. It targets individuals and businesses seeking to establish an African online identity through domain registrations. The business is relatively small, founded in 2017, and operates under a privacy-protected domain registration, which is common in this industry. The site provides clear domain pricing, a domain search function, and contact information, positioning itself as a niche regional registrar with a focus on African domains. Technically, the website employs a standard modern web technology stack including jQuery, Bootstrap, Popper.js, and FontAwesome, ensuring a responsive and user-friendly interface. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced SEO and accessibility features, and no CMS is detected. Hosting is provided by Gransy s.r.o., a known registrar and hosting provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to enhance domain and web security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure mechanisms are not present, indicating room for improvement in security posture and transparency. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and better transparency to increase trustworthiness and regulatory adherence.

S

Sirius investiční společnost a.s.

siriusis.cz

48

Sirius investiční společnost a.s. is a Czech investment company specializing in alternative investments for qualified investors. The company manages multiple sub-funds focused on hedge funds, distressed credit, real estate loans, and other alternative strategies, aiming to provide diversified portfolios with attractive risk-return profiles and low correlation to traditional financial markets. The website presents detailed fund performance data, downloadable official documents, and clear contact information, reflecting a professional and trustworthy business presence. Technically, the site uses jQuery, Snap.svg, and Google Maps API, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy or cookie policies. Overall, the site is accessible, content-rich, and targets a niche investor audience in the Czech Republic.

K

Kubík, akciová společnost

kubik.cz

51

Kubík a.s. is a well-established Czech company with a diversified portfolio spanning retail and wholesale food, textile sales, engineering construction, quick service food, travel services, art gallery operations, real estate development, and property rental. The company targets a broad audience including general consumers and business clients within the Czech Republic. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site employs a modern technology stack including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, hosted via WEDOS, a reputable Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent with an opt-in mechanism, indicating GDPR compliance awareness. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the business.

E

EPRAVO.CZ, a.s.

epravo.cz

51

EPRAVO.CZ, a.s. operates a well-established Czech legal information portal providing comprehensive legal content including laws, court decisions, articles, and educational resources. The platform targets legal professionals and the general public interested in law, offering subscription-based premium services and an e-shop for courses and publications. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as jQuery, Bootstrap, and various analytics and marketing tools. Security posture is solid with HTTPS enforcement, bot protection via Cloudflare Turnstile, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the professional presentation and trust signals evident on the site. Overall, the site is a credible and valuable resource in the Czech legal domain.

U

UNIWEB s.r.o.

uniweb.cz

57

UNIWEB s.r.o. is a Czech online agency specializing in web design, SEO, and custom software development, targeting primarily small to medium-sized businesses and entrepreneurs in the Czech Republic. The company has a professional web presence with a focus on responsive design and comprehensive online marketing services. Their market position is supported by a portfolio of client references and a media partnership with REGION24. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, and popular marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. WHOIS data is unavailable, which slightly impacts trust but does not negate the professional appearance and business legitimacy. Overall, the website is well-structured, user-friendly, and trustworthy for its target audience.

C

CEN-CENELEC

cen.eu

62

CEN-CENELEC is a prominent European standardization organization focused on developing and coordinating standards to support European industry, consumers, and sustainability goals. The website reflects a mature and professional entity with a clear market position as a leading standards body in Europe. Their key services include European standardization, technical work, governance, and stakeholder engagement. The target audience includes European industry partners, SMEs, societal stakeholders, and research sectors. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Owl Carousel, and integrates Google services like Fonts and reCAPTCHA. The site is responsive and well-structured, providing good user experience and accessibility. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and has a cookie consent mechanism aligned with GDPR. However, explicit security headers are not evident in the HTML source, and no public security or incident response policies are found. WHOIS data is privacy protected, which is typical for European organizations, and no suspicious indicators are present. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though it could improve security posture by publishing explicit policies and enhancing technical security controls.

C

CEN-CENELEC

cencenelec.eu

72

CEN-CENELEC is a leading European standardization organization focused on developing and coordinating standards to support the European economy, industry, and sustainability goals. The website presents a professional and comprehensive digital presence, targeting industry partners, SMEs, societal stakeholders, and research communities. It offers extensive information on European standardization topics, sectors, and events, supported by a modern technical infrastructure including Bootstrap, jQuery, and various JavaScript libraries. The site is well-optimized for mobile and accessibility, with clear navigation and consistent branding. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosure information are absent. WHOIS data is privacy protected, which is justified for this type of organization. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

P

Patria Online, a.s.

patria.cz

63

Patria.cz is a Czech financial news and investment portal operated by Patria Online, a.s., providing comprehensive market data, financial news, analyses, and investment tools targeted at investors and financial professionals. The website offers real-time and delayed data on stocks, currencies, commodities, and economic indicators, along with educational content and brokerage account services. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Tag Manager and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and basic security headers, though improvements are recommended in security headers and incident response transparency. The absence of publicly available WHOIS data limits domain trust assessment, but the professional content and consistent branding support legitimacy. Overall, the site is a reliable resource for financial market information in the Czech Republic.

R

REICO

reico.cz

65

REICO is a Czech-based asset management company specializing in real estate investment funds and capital market instruments, with over 15 years of market presence. The company operates under the umbrella of Česká spořitelna a.s., a major Czech financial institution, which enhances its market credibility and trustworthiness. The website reflects a professional and well-structured digital presence, targeting investors interested in real estate and financial products. The content is relevant, well-organized, and supported by comprehensive legal and privacy documentation, indicating a mature compliance posture. Technically, the website leverages modern web technologies including JavaScript, jQuery, and the proprietary GEM framework by Erste Group, hosted on Erste Group's CDN infrastructure. The site is responsive and optimized for mobile devices, with good SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. No critical vulnerabilities or suspicious content were detected, and the domain's WHOIS data is privacy protected, which is typical for financial services. Overall, REICO's website demonstrates a solid business and technical foundation with good security hygiene, suitable for its industry and audience. Strategic improvements in security transparency and performance optimization would further strengthen its posture.

V

VLTAVA LABE MEDIA a.s.

mojepredplatne.cz

55

Mojepředplatné.cz is an established Czech online subscription platform operated by VLTAVA LABE MEDIA a.s., offering a broad portfolio of magazine and newspaper subscriptions. The platform targets Czech-speaking consumers seeking convenient access to print and digital media products. The website is professionally designed with good content quality and consistent branding, reflecting its position as a leading media subscription service in the Czech Republic. Technically, the site employs a modern JavaScript stack with popular libraries and integrates multiple marketing and analytics tools with consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though improvements could be made by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits transparency but does not detract significantly from the site's legitimacy given its affiliation with a reputable media company. Overall, the site presents a trustworthy and user-friendly experience with moderate technical and security maturity.

R

RENOMIA BENEFIT

renomiabenefit.cz

56

RENOMIA BENEFIT is a Czech financial services brand operating under RENOMIA, a.s., with a history dating back to 1993. The company offers a broad range of financial products including risk management, insurance for businesses and employees, consumer loans, investment funds, and employee benefits programs. Their market presence extends beyond the Czech Republic into Central and Eastern Europe, positioning them as a regional player in the finance sector. The website targets both individual consumers and corporate clients seeking comprehensive financial solutions. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and integrates analytics tools such as Microsoft Clarity and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design, supporting a positive user experience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit security or incident response policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the website presents a professional front for a legitimate financial services business but would benefit from enhanced security disclosures and domain registration clarity.

N

Národní síť Místních akčních skupin České republiky, z.s.

mistniakcniskupiny.cz

45

The Národní síť Místních akčních skupin České republiky, z.s. is a Czech non-profit organization that unites 176 local action groups covering 91% of the Czech Republic's territory. It supports rural development through project funding, community engagement, and strategic planning, collaborating with government ministries and other partners. The website reflects a well-established entity with a clear mission to support rural communities and local entrepreneurship. Technically, the site is built on WordPress with common plugins and uses HTTPS with Google Analytics for tracking. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enforced but missing security headers and incident response information. WHOIS data is unavailable, which reduces trust but the website content and partner affiliations indicate legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

W

Wendepunkt e.V.

wendepunkt-ev.de

46

Wendepunkt e.V. is a German non-profit organization dedicated to promoting respect and non-violence in upbringing, partnerships, and sexuality. It offers a broad range of services including trauma counseling, child protection, family support, prevention programs, offender relapse prevention, and professional training. The organization targets children, youth, families, and professionals, positioning itself as a key regional player in Schleswig-Holstein for social and educational services. The website is built on WordPress with a moderate to good technical infrastructure, including modern plugins and responsive design. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive GDPR privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its mission.

Č

Česká tisková kancelář (ČTK)

ctk.cz

62

Česká tisková kancelář (ČTK) is the Czech Republic's national press agency providing a wide range of news and media services including daily news reporting, multimedia content, photo and video banks, and crisis communication support. The website reflects a professional and well-established media organization targeting media professionals, institutions, and the general public. The business model centers on delivering reliable and independent news content and communication services, positioning ČTK as a leading media entity in the Czech market. Technically, the website employs modern web technologies such as Google Tag Manager, jQuery, SVG graphics, and lightbox galleries, ensuring a responsive and accessible user experience. The site is well-optimized for SEO and mobile devices, with clear navigation and comprehensive content. Privacy and cookie consent mechanisms are robust, reflecting good compliance with GDPR and related regulations. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent with granular controls. However, it lacks explicit security policy documentation, incident response contacts, and security headers that could further enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data is notable but likely due to registry policies or privacy protection, not detracting significantly from the site's legitimacy. Overall, ČTK's website is a trustworthy, professional platform with strong content quality and privacy compliance. Strategic improvements in security transparency and incident response readiness would further strengthen its security posture and stakeholder trust.

A

ALTIMA LZ s.r.o.

altima.cz

47

ALTIMA LZ s.r.o. operates the website altima.cz, specializing in the retail of reflective safety products such as bands, vests, and patches designed to enhance visibility and safety for pedestrians, cyclists, children, and pets. The company holds a strong market position in the Czech Republic, emphasizing product quality and compliance with European safety standards. The website is well-structured, mobile-optimized, and integrates modern technologies including jQuery, Bootstrap, Google Analytics, and Facebook SDK, supported by a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. The lack of WHOIS data for the domain reduces trustworthiness and should be investigated further. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in transparency and security documentation.

T

TASTE FEEL s.r.o.

turistickamapa.cz

58

TuristickaMapa.cz is a Czech tourism and cultural events portal operated by TASTE FEEL s.r.o., founded in 2019. It provides comprehensive travel tips, maps, and information about historical sites, nature, and cultural events across the Czech Republic. The website targets tourists and locals seeking outdoor and cultural activities, offering a rich content experience supported by active social media channels. Technically, the site uses a custom CMS with jQuery, Google Tag Manager, and Adsense for monetization. It is hosted with WEDOS, a Czech hosting provider, and employs HTTPS with good SSL configuration. Security posture is moderate with room for improvement in security headers and incident response transparency. Privacy and cookie policies exist, but no explicit cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and content-rich, serving a niche tourism market effectively.

S

Springfield Art Museum

sgfmuseum.org

59

The Springfield Art Museum website serves as the official online presence for a government-affiliated non-profit art museum located in Springfield, Missouri. The site provides information about exhibitions, classes, public programs, and museum expansion updates, targeting the general public and local community members interested in art and cultural activities. The business model is primarily government-supported with public engagement and donation facilitation. The website is moderately mature, having been established in 2013, and maintains consistent branding and trust indicators appropriate for a public institution. Technically, the website is built on the CivicPlus CMS platform and employs common web technologies such as jQuery, AlpineJS, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and accessible, with moderate performance. However, there is room for improvement in SEO and security configurations, particularly in enabling DNSSEC and implementing security headers. From a security perspective, the site uses HTTPS and anti-forgery tokens in forms, but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with no explicit cookie consent mechanism or comprehensive privacy policy, which may pose compliance risks under GDPR. The domain registration is consistent and trustworthy, with no privacy protection, aligning with the public nature of the institution. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures to improve compliance and user trust.

The website www.springfieldmo.gov serves as the official digital portal for the City of Springfield, Missouri, providing residents, businesses, and visitors with access to government services, news, events, and community resources. The site is well-branded with official logos and maintains a consistent government identity. It targets a broad audience including local citizens and stakeholders, offering key municipal services and information. The business model is that of a government entity focused on public service and community engagement. Technically, the site is built on the CivicPlus CMS platform and utilizes a mix of JavaScript libraries including jQuery, jQuery UI, and AlpineJS, alongside Google Tag Manager and Microsoft Application Insights for analytics and telemetry. The site is mobile responsive and offers a moderate level of performance and accessibility, though some improvements could be made in accessibility and updating legacy libraries. From a security perspective, the site enforces HTTPS and implements anti-forgery tokens in forms, indicating attention to secure data handling. However, some security headers are not explicitly detected, and the use of an older jQuery version may pose risks if not patched. Privacy compliance is limited by the absence of clearly accessible privacy and cookie policies, which should be addressed to meet modern regulatory standards. Overall, the site is trustworthy and professional, with no signs of malicious or adult content. The domain is a .gov TLD, which inherently carries legitimacy, though WHOIS data is not publicly available as typical for government domains. Strategic recommendations include updating JavaScript libraries, enhancing security headers, publishing comprehensive privacy and cookie policies, and improving accessibility features to ensure compliance and user trust.

B

BUNTOGEL

baeyprime.com

50

BUNTOGEL is an Indonesian online gambling platform specializing in lottery (togel), slot games, and live casino offerings. It positions itself as a trusted and large-scale operator with jackpots up to 10 million IDR for 4D lottery games. The platform targets adult users interested in online gambling within Indonesia, providing a variety of games and a referral program. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Owl Carousel, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is hosted with Cloudflare DNS and secured with HTTPS, but lacks DNSSEC and some advanced security headers. Security posture is moderate with some best practices observed, but privacy compliance is weak due to missing privacy and cookie policies. The domain WHOIS data is minimal and shows an unusual future creation date, which slightly impacts trust. Overall, the site is functional and professionally designed but requires improvements in privacy, security disclosures, and transparency to enhance trust and compliance.

B

BUNTOGEL

klikdisini.pro

49

BUNTOGEL is an Indonesian online gambling platform specializing in lottery (togel), slot games, and live casino offerings. It positions itself as a trusted bandar togel with large jackpots and multiple game providers. The website infrastructure uses common web technologies including jQuery, Bootstrap, and Cloudflare DNS services. However, the domain WHOIS data shows inconsistencies with a future creation date, which raises concerns about legitimacy. Security posture is moderate with HTTPS usage but lacks advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. The site collects sensitive user data including banking details via registration forms. Overall, while the platform appears operational and professionally designed, the domain inconsistencies and lack of transparency in privacy and security policies present risks.

V

VSRD Verband selbständiger Reiseberater Deutschlands e.V.

verband-selbstaendiger-reiseberater.de

64

The VSRD Verband selbständiger Reiseberater Deutschlands e.V. is a German association representing self-employed travel consultants. It focuses on promoting the interests, quality standards, and public awareness of mobile and independent travel advisors in Germany. The website serves as an informational and membership recruitment platform, highlighting the benefits and quality criteria for joining the association. The organization positions itself as a key player in the German travel consultancy sector, advocating for equal treatment of its members compared to traditional travel agencies. Technically, the website is built on the 1&1 MyWebsite Editor platform, hosted by 1&1 IONOS, and uses standard web technologies including jQuery, FontAwesome, and Snowplow analytics. The site is secured with HTTPS and includes cookie consent mechanisms, though it lacks advanced security headers and detailed security or incident response policies. Overall, the site is professional, accessible, and trustworthy, with clear contact information and partner links. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic but present. No critical vulnerabilities or blocking mechanisms were detected.

R

Retail Rocket

retailrocket.com.br

68

Retail Rocket is a technology company specializing in customer retention management platforms, offering advanced AI-driven personalization and marketing automation tools. Their platform targets medium to large businesses across multiple sectors including e-commerce, banking, insurance, and SaaS, aiming to increase customer lifetime value and repeat purchases. The company has a strong international presence with multiple localized websites and over 1,000 clients worldwide. Technically, the website is built on WordPress with modern SEO and analytics integrations, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, Retail Rocket presents a professional, trustworthy, and mature digital presence.

R

Retail Rocket

retailrocket.it

69

Retail Rocket is a technology company specializing in retention management platforms designed to help businesses increase customer loyalty, lifetime value, and repeat purchases through advanced data segmentation, AI personalization, and cross-channel marketing campaigns. The company serves a global client base with over 1000 customers and operates multiple subsidiaries in Europe and Latin America. Their platform integrates data warehousing, AI-driven personalization engines, campaign management, and customer intelligence to provide a comprehensive marketing solution. Technically, the website is built on WordPress with modern SEO and tracking tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the website and business present a professional, trustworthy, and well-established presence in the technology and retail marketing sectors.

R

Retail Rocket

retailrocket.pt

71

Retail Rocket is a technology company specializing in retention management platforms designed to help businesses increase customer lifetime value and repeat purchases through AI-driven personalization and marketing automation. The company operates globally with a strong presence in multiple regions via localized partner sites. Their platform includes modules such as Data Warehouse, AI Personalization Engine, Campaign Management System, and Customer Intelligence Platform, targeting medium to large enterprises across sectors like e-commerce, banking, insurance, and SaaS. Technically, the website is built on WordPress with modern marketing and analytics integrations including Google Tag Manager and LinkedIn Insight. The site is well-optimized for SEO and mobile devices, featuring professional design and clear navigation. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the security posture is mature with no critical vulnerabilities detected, and privacy compliance is strong with clear policies and consent mechanisms. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information. This analysis indicates a professional, trustworthy, and technically competent online presence suitable for its B2B audience.

R

Retail Rocket

retailrocket.nl

69

Retail Rocket is a Netherlands-based technology company specializing in AI-driven retention management and personalization platforms for businesses with large customer bases. Their platform integrates big data analytics, campaign management, and customer intelligence to boost customer lifetime value and repeat purchases. The company serves diverse sectors including e-commerce, banking, insurance, and SaaS, with a strong global client base and proven revenue impact. Technically, the website is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager and LinkedIn Insight, and employs security best practices like HTTPS and reCAPTCHA. However, it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the website is professional, well-structured, and compliant with GDPR and cookie regulations, reflecting a mature digital presence.

R

Retail Rocket

retailrocket.fr

69

Retail Rocket is a French-based technology company specializing in retention management platforms designed to enhance customer loyalty and lifetime value through AI-driven personalization and multichannel marketing. The company serves a diverse range of sectors including e-commerce, finance, insurance, and SaaS, targeting businesses with large customer bases. Their platform integrates modules such as Data Warehouse, AI Personalization Engine, Campaign Management System, and Customer Intelligence Platform, enabling strategic marketing and customer segmentation. Technically, the website is built on WordPress with modern plugins and tracking tools, hosted behind Cloudflare for performance and security. The security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site demonstrates professionalism, good technical implementation, and strong business credibility.

R

Retail Rocket

retailrocket.de

67

Retail Rocket is a German-based technology company specializing in retention management platforms designed to enhance customer loyalty and increase lifetime value through AI-driven personalization and multichannel marketing solutions. The company serves a broad range of sectors including e-commerce, banking, insurance, and SaaS, targeting businesses with large customer bases. Their platform includes modules such as Campaign Management, Customer Intelligence, Data Warehouse, and AI Personalization Engine, positioning them as a competitive player in the marketing automation space. Technically, the website is built on WordPress and integrates modern analytics and marketing tools such as Google Tag Manager, LinkedIn Insight, and proprietary Retail Rocket tracking scripts. The site is hosted behind Cloudflare, ensuring good performance and security. The website demonstrates good mobile optimization and SEO practices, with comprehensive privacy and cookie policies reflecting GDPR compliance. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit HTTP security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The company shows strong privacy compliance with cookie consent mechanisms and detailed policies. Overall, Retail Rocket presents a professional, trustworthy online presence with a solid technical foundation and compliance posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen their security and compliance maturity.

R

Retail Rocket

retailrocket.net

70

Retail Rocket is a mature B2B SaaS company specializing in retention management and personalization platforms for e-commerce and related industries. The company offers a suite of modules including campaign management, customer intelligence, AI personalization, and data warehousing to help businesses boost customer lifetime value and repeat purchases. With a strong international presence and multiple localized websites, Retail Rocket positions itself as a trusted partner for strategic marketing driven by big data. Technically, the website is built on WordPress with Elementor and uses modern tracking and analytics tools such as Google Analytics, LinkedIn Insight, and Leadinfo. The site is well-optimized for SEO, mobile-friendly, and demonstrates good performance and accessibility standards. The use of Cloudflare DNS and HTTPS ensures a secure browsing experience, although DNSSEC is not enabled. From a security perspective, the site follows good practices including HTTPS enforcement and domain transfer protection. However, there is room for improvement by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, Retail Rocket presents a professional, trustworthy, and technically sound online presence with a solid business model and international reach. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and continuous monitoring of third-party scripts to maintain security posture.

S

Springest B.V.

springest.nl

71

Springest B.V. operates a leading Dutch online platform specializing in the comparison and booking of educational courses, training, and personal development products. Founded in 2008 and headquartered in Utrecht, Netherlands, Springest serves both individual learners and organizations with a comprehensive catalog of over 101,000 offerings from more than 9,200 providers. The platform emphasizes user reviews, free information requests, and corporate learning solutions, positioning itself as a trusted marketplace in the education sector. Technically, the website employs a modern and performant infrastructure with technologies such as jQuery, Mixpanel analytics, and custom CSS/JS assets. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security measures include HTTPS enforcement, CSRF tokens, and a cookie consent mechanism, although formal security policies and incident response contacts are not publicly documented. The security posture is strong with no detected vulnerabilities or exposed sensitive data, but there is room for improvement in publishing explicit security policies and enhancing HTTP security headers. Privacy compliance is well addressed with GDPR-aligned policies and user consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness. Strategic recommendations include formalizing security and incident response documentation, enhancing security headers, and maintaining vigilance on third-party scripts. These steps will further strengthen Springest's security posture and user trust while supporting its market leadership in educational services.

T

TUM4Health

tum4health.de

62

TUM4Health is a student health management initiative affiliated with the Technical University of Munich, focused on promoting health and well-being among students through educational content, surveys, and health programs. The website serves as a portal for students to access health knowledge, participate in surveys, and engage with health promotion activities. Techniker Krankenkasse is a key health partner, enhancing the program's credibility. Technically, the website is built on the 1&1 IONOS Website Editor platform, utilizing technologies such as jQuery, skrollr for animations, PhotoSwipe for galleries, and Snowplow Analytics for tracking. The site is hosted on 1&1 IONOS infrastructure with HTTPS enforced and a service worker registered for PWA capabilities. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie notification. Contact information is limited to an email address. Overall, the website is professional, trustworthy, and well-aligned with its educational and health promotion mission. It poses low risk but could improve security posture and privacy transparency.