Security Directory

S

Sport a kultura Hlučín

sak-hlucin.cz

49

Sport a kultura Hlučín is a community-oriented website providing comprehensive information about sports and cultural events in the town of Hlučín, Czech Republic. It serves residents and visitors by offering event calendars, details about recreational areas, and online reservation services for sports facilities. The website is well-structured, mobile-optimized, and integrates modern technologies such as jQuery, FullCalendar, and Mapy.cz API to enhance user experience. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. However, the absence of WHOIS data and lack of explicit company contact details reduce transparency and business credibility. Security posture is solid with HTTPS and standard security headers, but could be improved with additional policies and disclosures.

M

Muzeum Hlučínska

hlucinske-pamatky.cz

56

The website 'Hlučínské památky' serves as an informational platform dedicated to the cultural and historical monuments of the town of Hlučín in the Czech Republic. It provides detailed listings and descriptions of sacral and secular monuments, targeting a general audience interested in local heritage. The site is managed by 'Muzeum Hlučínska' and features a professional design with good navigation and mobile optimization. Technically, the site uses jQuery libraries, Google Analytics, and Tag Manager, hosted on a CDN provided by arsy.cz. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or terms of service pages. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears trustworthy and professionally maintained. Overall, the site is safe for general audiences and provides valuable cultural information but would benefit from enhanced security and compliance features.

T

Turistické informační centrum Hlučín

ic-hlucin.cz

47

The website www.ic-hlucin.cz serves as the official online presence of the Turistické informační centrum Hlučín, a local government-affiliated tourism information center in the Czech Republic. It provides visitors with historical, cultural, and tourist information about Hlučín and the surrounding region, including an event calendar and an e-shop for local products. The site targets tourists and local visitors interested in exploring the area. Technically, the site employs a modern JavaScript stack including jQuery, FullCalendar, and Mapy.cz API for interactive maps, along with Google Analytics for visitor tracking. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no critical vulnerabilities detected, but security headers are not explicitly observed. WHOIS data is unavailable, limiting domain legitimacy verification, though the site content and external links suggest a legitimate local government entity. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.

W

Webovky123, s.r.o.

webovky123.cz

38

Webovky123, s.r.o. is a Czech Republic-based small technology company specializing in custom web development and internet marketing services. The company offers bespoke websites, e-shops, and digital marketing solutions including SEO and PPC management, targeting businesses seeking professional online presence. Their website demonstrates a professional design with clear navigation and client testimonials, indicating a solid market position within their niche. Technically, the site uses a proprietary CMS built on the Nette Framework, enhanced with jQuery and standard tracking tools like Google Analytics and Facebook SDK. While the site is accessible and functional, it lacks visible privacy and cookie policies, which impacts compliance posture. Security-wise, the site uses HTTPS and avoids exposed sensitive data but lacks advanced security headers and formal incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve overall credibility.

A

Francouzské vinotéky | ELMAXSHOP.CZ

avintage.cz

68

ELMAXSHOP.CZ operates as a Czech-based e-commerce retailer specializing in household appliances and electronics, including niche products such as French wine cabinets. The website demonstrates a mature online retail platform with features like product search autocomplete, customer account management, order tracking, and product comparison. The business targets consumers in the Czech Republic seeking quality home appliances and electronics. Technically, the site is built on the nopCommerce platform, leveraging modern JavaScript libraries and analytics tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data limits domain registration trust verification, but the professional presentation and contact transparency support legitimacy. Overall, the site is well-positioned in its market segment with a solid technical foundation and compliance awareness.

F

Floweb Oy

ekukka.fi

55

eKukka.fi is a well-established Finnish online flower marketplace operated by Floweb Oy, founded in 2011. It aggregates nearly 400 Finnish florists, offering consumers nationwide access to fresh flowers with options for home delivery or store pickup. The website is positioned as the largest flower shop network in Finland, targeting Finnish consumers seeking convenient and reliable flower delivery services. The business model focuses on e-commerce and marketplace aggregation, supported by a strong brand presence and trust certifications such as Avainlippu.

D

Dům dětí a mládeže hlavního města Prahy

ddmpraha.cz

44

Dům dětí a mládeže hlavního města Prahy is a well-established public institution founded in 1998, providing educational and leisure activities for children and youth in Prague. The organization operates multiple branches offering clubs, camps, events, rentals, and educational programs, targeting children, youth, parents, and educators. It is funded and overseen by the city of Prague, positioning it as a key local educational service provider with a strong community presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent and reliable, managed by REG-GRANSY since 1998. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security posture. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain's long history and consistent WHOIS data reinforce its legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the site's digital maturity and compliance.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

C

Cactus

cactus.lu

58

Cactus is a well-established retail supermarket chain based in Luxembourg, offering a broad range of products including fresh food, household goods, and additional services such as restaurants, home delivery, and customer loyalty programs. The website is professionally designed using Drupal 10 and incorporates modern frontend technologies and analytics tools, indicating a mature digital presence. Security posture is moderate with HTTPS usage and anonymized IP tracking in analytics, but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness from a registration perspective, though the website content and branding strongly suggest a legitimate business. Overall, the site provides a good user experience with clear navigation and mobile optimization.

M

MČ Praha 5

praha5.cz

63

The website www.praha5.cz serves as the official online presence for the Municipal District Prague 5, providing residents and visitors with information about local government services, community events, and administrative resources. The site targets the local population of Prague 5 and operates as a government/public service entity. Technically, the site is built on WordPress 6.4.1, utilizing common plugins such as Events Manager and Cookiebot for event management and cookie consent respectively. The infrastructure shows moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, which are positive indicators. However, no explicit security headers were detected, and the WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is partial, with a cookie policy present but no clear privacy policy or terms of service pages identified. Overall, the website is a legitimate municipal government portal with good content quality and user experience. The absence of WHOIS data and some missing compliance documents suggest areas for improvement. Strategic recommendations include implementing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Y

Úvod | Yankeesvicky.cz

yankeesvicky.cz

46

The website www.yankeesvicky.cz is a small-scale e-commerce platform focused on retailing Yankees sports merchandise primarily targeting the Czech Republic market. The site features basic content and design, with a functional user interface and mobile optimization. It integrates several third-party technologies including jQuery, Google Maps API, and delivery service scripts, indicating a moderate level of technical maturity. However, the absence of a privacy policy and limited business information reduces its compliance and trustworthiness. Security posture is moderate with HTTPS usage and CSRF token presence but lacks advanced security headers and explicit vulnerability disclosures. Overall, the site is functional but would benefit from enhanced transparency, security practices, and privacy compliance to improve user trust and regulatory adherence.

A

AllSides

allsides.com

68

AllSides is a media company focused on providing balanced news coverage by revealing media bias across the political spectrum. The platform aggregates news stories from left, center, and right perspectives, enabling users to see multiple viewpoints side-by-side. It offers various services including newsletters, educational resources for schools, media and government services, and mobile applications. The website is well-established with a consistent brand presence and recognized partnerships with major media outlets. Technically, the site is built on Drupal CMS and uses modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly verified and enhanced. Privacy compliance is strong with clear policies and GDPR considerations. WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for media entities. Overall, the site is professional, trustworthy, and serves a general audience interested in media literacy and balanced news.

E

Eko Kvarner

ekokvarner.hr

41

Eko Kvarner is a Croatian non-profit environmental organization focused on promoting sustainable energy, climate change awareness, and ecological protection in the Kvarner region. The website serves as an information hub providing news, activities, projects, and educational resources to local communities and stakeholders interested in environmental issues. The organization appears well-established with a domain registered since 2012 and clear contact information including physical address, phone numbers, and email. The site content is primarily in Croatian and targets regional audiences. Technically, the website uses an older CMS platform called Galaksija and relies on legacy JavaScript libraries such as jQuery and Fancybox. While the site is accessible and contains meaningful content, it loads some external scripts over unsecured HTTP, which introduces mixed content risks. The site lacks modern security headers and advanced privacy or cookie consent mechanisms, indicating room for improvement in security and compliance maturity. Hosting is provided by Totohost, a Croatian hosting provider, and the domain registrar is CARNET, a reputable Croatian academic network. From a security perspective, the site uses HTTPS but does not implement additional security headers or content security policies. No incident response or security policy pages are found, and no vulnerability disclosure or security.txt files are present. The WHOIS data is consistent with the website's business profile and geographic location, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the website is functional and provides valuable content for its target audience but would benefit from technical modernization, improved security practices, and enhanced privacy compliance to strengthen trust and resilience against threats.

V

Volcanica

jvolcanica.org

46

Volcanica is a specialized academic journal dedicated to volcanology research, operating under a diamond open access model that eliminates fees for authors and readers. It is supported institutionally by Presses universitaires de Strasbourg and holds recognized open access certifications such as the DOAJ Seal and memberships in the Free Journal Network and OASPA. The website is built on Open Journal Systems, leveraging modern web technologies including Bootstrap and MathJax, and integrates analytics tools like Google Analytics and Tag Manager for user tracking. The site is mobile responsive, accessible, and professionally designed, providing a positive user experience for its target audience of researchers and professionals in volcanology. Security posture is generally good with HTTPS enforced, but lacks some security headers and visible cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of academic publishing entity. Overall, the website demonstrates a strong trust profile and professional operation.

T

Technical Design Jakub Zima

technical-design.cz

46

Technical Design, operated by Jakub Zima, is a small Czech web development business specializing in creating websites and web systems with nearly 20 years of experience. The website serves as a portfolio and contact point for potential clients, showcasing various completed projects. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with Google reCAPTCHA implemented for form security. The site is served over HTTPS, ensuring encrypted communication. Security posture is solid but could be improved by adding security headers and formal policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of businesses and individuals seeking custom web development services.

Elsevier's Scopus is a leading global abstract and citation database providing comprehensive access to peer-reviewed literature across multiple disciplines including science, technology, medicine, social sciences, and humanities. The platform targets researchers, academics, and institutions, offering subscription-based access to extensive research content and author profiling services. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React and advanced monitoring tools like New Relic and Adobe Launch, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit cookie consent mechanisms could be improved. The absence of publicly available WHOIS data suggests privacy protection, which is justified given the enterprise nature of the business. Overall, the site reflects a professional, trustworthy, and well-maintained academic resource.

T

Michal Tučný revival

tucny-revival.cz

54

The website tucny-revival.cz represents a small Czech music band dedicated to the revival of Michal Tučný, a legend in Czech country music. The site provides information about band members, upcoming events, media galleries, and contact options primarily for fans and event organizers. The business model is focused on entertainment and local cultural promotion with a niche audience in the Czech Republic. The website is modest but functional, reflecting a small-scale operation with limited digital maturity.

K

Kramářova chata

suchak.cz

40

Kramářova chata is a small hospitality business located in the Orlické Mountains, Czech Republic, offering accommodation, wellness services, and a restaurant. The website provides detailed information about their offerings including wellness packages, gastronomic experiences, and local attractions. The business targets tourists, families, and wellness seekers looking for a peaceful mountain retreat. Technically, the website is built on CMS Bakery and uses common JavaScript libraries such as jQuery and Colorbox, with integrated Google Analytics and advertising retargeting scripts. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear professional and legitimate. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

M

Město Týniště nad Orlicí

tyniste.cz

62

Město Týniště nad Orlicí operates an official municipal website serving residents and visitors with local government information, news, events, and public services. The site positions itself as a trusted source for municipal updates and community engagement, supported by clear contact details and social media presence. The business model is typical for a local government entity, focusing on public service delivery rather than commercial activities. Technically, the website uses a proprietary CMS called Public4u, supplemented by common JavaScript libraries such as jQuery and Swiper.js. The site is mobile-optimized and provides a moderate performance experience. SEO and accessibility features are basic but functional. HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates good baseline practices such as HTTPS and cookie consent mechanisms. However, the absence of security headers and lack of explicit security or privacy policies indicate room for improvement. The missing WHOIS data is a notable gap, reducing confidence in domain legitimacy, though the website content and official contact information mitigate this concern. Overall, the website is a reliable and professional municipal portal with moderate technical sophistication and a generally good security posture. Strategic improvements in security headers, policy transparency, and WHOIS data availability would enhance trust and compliance.

H

Hradecká kulturní a vzdělávací společnost s.r.o.

hradecko.info

46

The website hradecko.info represents a regional non-profit destination management organization focused on promoting tourism and cultural heritage in the Hradec Králové region of the Czech Republic. The organization operates key tourist attractions such as the White Tower, Bílá věž, and Kostel sv. Mikuláše, and collaborates closely with local government and tourism partners. The business model is centered on sustainable tourism development, funded by membership fees and local tourism taxes. Technically, the website is built on a Joomla CMS platform with a modern front-end stack including Bootstrap, jQuery, and various UI libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Hosting is provided by Webglobe, and the domain is relatively new but consistent with the organization's founding date. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks advanced security headers and DNSSEC is not enabled. HTTPS status is unknown from provided data and should be verified. Privacy compliance is partially addressed with a GDPR document available, and cookie consent mechanisms appear implemented. Contact information is clearly provided, but no incident response or security policy pages are present. Overall, the website is trustworthy and professionally maintained with a clear business purpose. Strategic improvements in security headers, HTTPS enforcement, and explicit security policies would enhance the security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

R

Riga Investment and Tourism Agency

liveriga.com

57

The LiveRiga website serves as the official digital platform for the Riga Investment and Tourism Agency, promoting Riga as a vibrant capital city of Latvia with opportunities for tourism, investment, events, and work relocation. The site is well-structured, visually appealing, and targets a broad audience including tourists, investors, event organizers, and professionals considering relocation. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA, ensuring a responsive and interactive user experience. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are not explicitly published. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website demonstrates a strong digital presence with good privacy compliance and user engagement through social media and newsletter subscriptions.

S

Statutární město Hradec Králové

hk800.cz

49

The website hk800.cz is the official digital platform for the 800th anniversary celebrations of the city of Hradec Králové in the Czech Republic. It serves as a comprehensive resource for cultural events, exhibitions, and community engagement activities related to the milestone. The site is operated by the city government, providing authoritative and trustworthy information to residents and visitors. The business model is centered on governmental and cultural event promotion, supported by partnerships with local businesses and media. The website demonstrates a consistent brand identity aligned with the city’s heritage and celebration theme. Technically, the site is built on Joomla CMS with a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience such as carousels and lazy loading. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes, all managed with a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with Czech providers, and the site shows good mobile optimization and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the provided data, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s purpose and geographic location, indicating legitimacy. However, the site lacks explicit security policies or incident response contacts, which could be improved. Overall, the website is a well-structured, professional, and trustworthy platform for the city’s anniversary celebrations. It balances user experience, privacy compliance, and technical soundness effectively, though there is room for enhancement in security policy transparency and advanced security headers implementation.

A

as4u.cz, s.r.o.

mladoboleslavsko.eu

64

The website www.mladoboleslavsko.eu serves as the official regional tourism portal for the Mladá Boleslav area in the Czech Republic. It provides comprehensive information on tourist regions, nature, history, culture, sports, accommodation, events, and local attractions. The site targets tourists and visitors interested in exploring this region, offering services such as event calendars, photo galleries, a mobile app, and an e-shop. The business behind the site appears to be a small regional tourism promotion entity, operated by as4u.cz, s.r.o., a Czech company specializing in publishing and editorial systems.

M

Město Bakov nad Jizerou

vcasbakov.cz

61

Volnočasový areál Bakov nad Jizerou is a municipally operated leisure and accommodation facility located in the Czech Republic. It offers a variety of recreational services including sports facilities, children's playgrounds, natural swimming areas, and seasonal accommodation options such as cottages and apartments. The website serves as an information portal for visitors and local residents, providing event calendars, booking options, and contact details. The business model is focused on community service and tourism support, positioning itself as a local hub for leisure activities. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized with good navigation and SEO practices. However, there is room for improvement in accessibility and performance optimization. The absence of advanced analytics or tracking scripts suggests a minimalistic approach to user data collection. From a security perspective, the site uses HTTPS but lacks important security headers that could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed through a GDPR and cookie policy page with a consent mechanism, indicating awareness of regulatory requirements. The lack of WHOIS data is a concern for domain legitimacy verification but does not directly impact the operational security of the website. Overall, the website presents a trustworthy and professional front for a local government-operated leisure facility. Strategic improvements in security headers, WHOIS transparency, and accessibility could further strengthen its digital maturity and user trust.

T

Tepelné hospodárstvo Košice, s.r.o.

teho.sk

59

Tepelné hospodárstvo Košice, s.r.o. is a municipal energy company based in Košice, Slovakia, specializing in the supply of heat and hot utility water to local customers. The company operates as a local municipal utility provider with a strong focus on reliable service delivery and customer support. Their website reflects a mature digital presence built on Drupal 11, featuring comprehensive information for residents, customers, and stakeholders, including outage schedules, news updates, and service details. The company demonstrates compliance with GDPR and cookie regulations, providing clear privacy and cookie policies with consent mechanisms. Technically, the site uses modern web technologies and is optimized for mobile and accessibility, though performance is moderate. Security posture is good with HTTPS and cookie management, but could benefit from explicit security policies and headers. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

I

IMEG s.r.o.

musicserver.cz

55

Musicserver.cz is a well-established Czech online media portal specializing in music news, reviews, interviews, and event coverage. Operated by IMEG s.r.o., the site targets Czech-speaking music enthusiasts and offers a broad range of content including photo galleries and editorial articles. The business model relies primarily on advertising revenue, supported by partnerships and a strong social media presence. The domain's long history since 1999 reinforces its market position as a trusted source in the Czech music media landscape. Technically, the website employs a custom CMS with a technology stack including jQuery, Google APIs, and third-party ad and analytics services such as Revive Adserver and Gemius Audience. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO practices. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and publicly disclosed security policies or incident response procedures. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is basic but present, with a privacy policy and cookie banner aligned with GDPR requirements. Overall, musicserver.cz presents a professional and trustworthy online presence with good content quality and business credibility. Strategic improvements in security headers, mobile responsiveness, and transparency of security policies would enhance its security posture and user trust.

P

PS Works s. r. o.

brunofamilypark.cz

43

BRuNO Family Park is a family-oriented entertainment center located in Brno, Czech Republic, offering a wide range of indoor and outdoor attractions primarily targeting children and youth up to 15 years old. The business provides additional services such as birthday party hosting, school programs, corporate events, and food and beverage options, positioning itself as a comprehensive leisure destination for families. The website is professionally designed with clear navigation and multimedia content, supporting a positive user experience and strong brand presence. Technically, the site uses modern JavaScript libraries and tracking tools with consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data is a minor concern but does not significantly detract from the overall legitimacy given the professional web presence and active social media engagement. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

F

Fondazione Fiera Milano

fondazionefieramilano.com

53

Fondazione Fiera Milano is a non-profit foundation dedicated to supporting the economic, social, cultural, and scientific development of Milan and Italy. It manages significant assets including real estate, art collections, and historic archives, and operates educational initiatives such as the Accademia and specialized Master courses. The foundation maintains a strong institutional presence with a clear focus on exhibitions, research, and cultural heritage. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery UI, and Slick Carousel for UI components, alongside Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content structure, though accessibility features could be enhanced. Performance is moderate with asynchronous script loading. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security policies, incident response contacts, and a vulnerability disclosure mechanism, which are recommended for improved security posture and transparency. Privacy compliance is generally good with clear privacy and cookie policies, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is professional, trustworthy, and well-aligned with the foundation's mission. Strategic improvements in security transparency and privacy consent would further enhance its compliance and user trust.

Fondazione Fiera Milano is a well-established non-profit foundation focused on supporting the economic, social, cultural, and scientific development of Milan and Italy. It manages significant assets including real estate, art collections, and historic archives, and operates educational programs such as the Accademia and specialized Master courses. The foundation also conducts research and market analysis to support the exhibition and event sectors. The website reflects a mature digital presence with professional design, clear navigation, and integration of analytics via Matomo. Social media channels are actively linked, enhancing outreach and engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and a cookie consent mechanism. Privacy policies are comprehensive and GDPR compliant, but terms of service and incident response contacts are not found. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy organization.

P

Polski Lek Sp. z o. o.

polskilek.pl

65

Polski Lek Sp. z o. o. is a well-established Polish manufacturer of dietary supplements, operating since 2000 and part of the Maspex group since 2003. The company targets sensitive consumer groups such as pregnant women, infants, children, and adults, offering a broad portfolio of products and contract manufacturing services. The website reflects a mature digital presence with multilingual support and clear brand positioning. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though it lacks visible cookie consent and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in privacy transparency and incident response documentation are recommended.

C

CBC Poland

cbcpoland.pl

47

CBC Poland is a well-established provider of security systems, monitoring, and alarm solutions operating primarily in Poland with a 25-year market presence. The company is part of the CBC Group, a European security technology group, and serves various sectors including transport, banking, retail, and public utilities. Their offerings include hardware, software, AI video analysis, and comprehensive technical support and training. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting security professionals and businesses. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Tag Manager for analytics. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is addressed with visible cookie consent and privacy policy pages. Overall, the site is trustworthy and professionally maintained, though it could improve in security transparency and incident response readiness.

L

LEDS C4, SA

leds-c4.com

66

LEDS C4, SA is a well-established Spanish company specializing in advanced LED lighting solutions for architectural, decorative, emergency, and smart lighting applications. The company emphasizes sustainability and digital innovation, offering a broad product catalog and digital configurators to support customers. Their market position is solid within the energy and lighting sector, targeting architects, designers, and commercial clients. The website is built on Drupal 9 with modern web technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, domain locks, and no evident vulnerabilities, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

U

UCB Canada Inc.

ucbcaresforimmunology.ca

66

The website www.ucbcaresforimmunology.ca serves as a specialized platform targeting healthcare professionals in the immunology sector, operated by UCB Canada Inc., a subsidiary of the UCB Group. It provides access to scientific data, promotional resources, and exclusive event information, positioning itself as a trusted resource within the Canadian healthcare market. The site demonstrates consistent branding aligned with the parent company and maintains a professional and user-friendly interface. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates cookie consent and analytics tools to ensure compliance and user experience. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response information are not publicly disclosed. The domain WHOIS data is not publicly available, indicating privacy protection, which is common for healthcare-related domains. Overall, the site is trustworthy, compliant, and professionally maintained, serving its target audience effectively.

O

OTP Travel Kft

otptravel.hu

57

OTP Travel Kft is a leading Hungarian travel agency backed by OTP Bank Nyrt, offering a wide range of travel services including group tours, beach holidays, cruises, corporate travel, and travel insurance. The website is professionally designed with good content quality and clear navigation, targeting a broad audience interested in travel. Technically, the site uses modern JavaScript libraries and tracking tools with a custom CMS, providing good mobile optimization and SEO. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The WHOIS data confirms the legitimacy and consistency of the business identity. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance.

mailbox.org is a well-established German secure email provider operated by Heinlein Support GmbH, founded in 1998. The company offers privacy-focused email services, cloud storage, online office tools, and secure video conferencing, targeting private individuals, businesses, and public sector institutions. The website reflects a strong commitment to data protection, leveraging German privacy laws and certifications such as SHiG, SMiG, and BSI IT Security Labels. The business model is subscription-based, with tiered pricing plans and a free 30-day trial, emphasizing ad-free and encrypted communication.

L

LEDS C4, SA

ledsc4.com

67

LEDS C4, SA is a Spanish company specializing in advanced LED lighting solutions for architectural, decorative, emergency, and smart lighting applications. The company has a strong market presence supported by sustainability certifications and a comprehensive product catalog. Their website is built on Drupal 9 and integrates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, domain locks, and cookie consent mechanisms, though there is room for improvement in DNSSEC and explicit security policies. Overall, the company demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

The website hotelcms.hu serves as an administrative login portal for RoomSome, a hospitality management system likely targeting hotels or accommodation providers in Hungary. The platform provides secure access to administrative functions, including user authentication with two-factor authentication support. The site is designed primarily for internal users rather than public visitors, which explains the minimal public-facing content and absence of marketing materials. The business appears to be a small-sized entity founded in 2015, focusing on providing software solutions for the hospitality sector. Technically, the website uses a modern but basic technology stack including jQuery, Bootstrap 4, and Noty for notifications. The design is functional but basic, with some mobile responsiveness and accessibility features. External dependencies are minimal, limited to Google Fonts and common JavaScript libraries. SEO and public content optimization are minimal due to the nature of the site as an admin portal. From a security perspective, the site implements two-factor authentication, which is a positive security control for user access. However, there is no visible evidence of security headers such as Content Security Policy or HSTS, and no privacy or cookie policies are present. The absence of contact information and security incident response details limits transparency and trust. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent and appropriate for the business age and type. Overall, the site is functional for its intended purpose but lacks comprehensive privacy, security, and compliance disclosures. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance posture.

SORGA is a Polish technology company specializing in a Membership Management System platform designed to automate and streamline administrative processes for membership-based organizations such as associations, chambers, sports unions, and non-profits. The platform offers modules for member management, recruitment, communication, payment processing, event registration, and analytics. With nearly 200 clients and over 50 implementations, SORGA positions itself as a flexible and customizable solution tailored to diverse organizational needs. The website reflects a professional and consistent brand image, targeting organizations seeking digital transformation in member administration. Technically, the website employs a modern but somewhat dated tech stack including jQuery 2.1.3, Bootstrap 4.5.2, Animate.css, and integrates Google Analytics and Drift chat for user engagement and analytics. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent with a Polish business entity, registered since 2017. From a security perspective, the website uses HTTPS for external resources but lacks visible security headers and DNSSEC is not enabled on the domain. There is no published privacy or cookie policy, nor a security policy or incident response contact, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, implementing security headers, enabling DNSSEC, and publishing clear security and incident response policies to enhance trust and regulatory adherence.

C

CIAC Sàrl

batiguide.ch

43

Batiguide is a Swiss platform dedicated to connecting property owners with trusted local construction and renovation professionals. Established since 1982 and operated by CIAC Sàrl, it serves the French-speaking Swiss market by providing a curated directory of artisans and companies, facilitating informed decision-making for property-related projects. The platform offers services such as emergency repairs, professional listings, and educational guides related to construction trades. Technically, the website is built on a modern WordPress CMS with standard libraries like jQuery and Bootstrap, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and HTTPS indicates a baseline commitment to privacy and security. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency. Overall, the site is professionally maintained, trustworthy, and well-positioned within its niche market.

S

SwissCenter

swisscenter.com

59

SwissCenter is a Swiss-based web hosting and datacenter service provider with a long-standing presence since 1995. The company offers a range of hosting solutions including shared web hosting, dedicated servers, server housing, datacenter services, and hosted Exchange email solutions, targeting businesses and professionals seeking reliable Swiss-quality internet services. The website is professionally designed, primarily in French, and showcases key services and customer references from reputable companies, reinforcing its market position as a trusted hosting provider. Technically, the website employs a modern JavaScript stack including jQuery, LayerSlider, and FancyBox, delivering a functional and visually appealing user experience. While mobile optimization and accessibility are basic, the site maintains good SEO practices and performance. Hosting appears to be managed internally with a Swiss datacenter focus, emphasizing data locality and performance with SSD storage and SSL certificates via Let's Encrypt. From a security perspective, the site enforces HTTPS and supports email security standards like DKIM. However, no explicit security headers were detected in the HTML source, and no published security or incident response policies were found. The cookie consent mechanism is present and functional, but privacy policy documentation is lacking or not easily discoverable. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site and business references. Overall, SwissCenter presents a credible and professional hosting business with solid technical infrastructure but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

N

Netherlands Board of Tourism & Conventions

nbtc.nl

59

The Netherlands Board of Tourism & Conventions (NBTC) operates as the national destination management organization for the Netherlands, focusing on the development, branding, and marketing of the country as a tourism destination. The website reflects a professional and authoritative presence, targeting residents, visitors, companies, and tourism stakeholders with relevant insights and services. NBTC positions itself as a connector and facilitator for cities, regions, and businesses to enhance the Netherlands' appeal as a liveable and valuable destination. Technically, the website is built on the XperienCentral CMS platform and incorporates modern JavaScript libraries and Piwik PRO analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and uses HTTPS with CSRF protection mechanisms, indicating a mature digital infrastructure. SEO is basic but functional, with proper meta tags and structured data. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, consent management for cookies, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The absence of direct contact emails or phone numbers is mitigated by a contact form and social media presence. The domain registration aligns well with the organization's identity, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response information, and enhancing SEO and accessibility further.

dispi software engineering is a small Dutch software company specializing in the development and support of e-Captain, an online relationship management platform tailored for associations and non-profit organizations. The platform offers comprehensive modules including member management, bookkeeping, invoicing, event registration, website management, and mailing services. Established in 1996, dispi positions itself as a dedicated provider focused on simplifying administrative tasks for its target audience. Technically, the website employs a traditional tech stack featuring jQuery 1.11.3, Bootstrap 3.3.7, and FontAwesome, with custom CMS components. While the site is mobile responsive and well-structured, some technologies are outdated, and security headers are not evident. Google Analytics and Tag Manager are used for tracking, with basic consent mechanisms implemented. From a security perspective, the site lacks visible HTTP security headers and uses an older jQuery version, which may expose it to vulnerabilities. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear consistent and professional. Privacy and terms of service pages exist, but a clear cookie policy is missing. Overall, the website is functional and professional but would benefit from modernizing its technical stack, enhancing security practices, and clarifying privacy compliance. The domain registration status should be verified to ensure legitimacy and trustworthiness.

Mediq is a well-established Dutch healthcare company specializing in the distribution of medical aids and supplies, including products for incontinence, diabetes, respiratory care, stoma, wound care, medical nutrition, and infusion therapy. Founded in 2005, the company operates a professional e-commerce platform targeting healthcare providers and patients in the Netherlands. The website reflects a mature digital presence with a focus on user experience and compliance with privacy regulations. Technically, the site leverages modern frameworks such as Sitecore SXA, Bootstrap, and integrates analytics and monitoring tools like Google Analytics, Datadog RUM, and Hotjar. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating stable operations. Overall, Mediq demonstrates a strong market position in healthcare supplies with a trustworthy and compliant online presence.

D

Dispi Software Engineering

e-captain.nl

65

e-Captain is a Dutch software company specializing in an all-in-one software package designed for associations, clubs, and various organizations to manage memberships, invoicing, bookkeeping, communications, and website management. The company positions itself as a comprehensive SaaS provider with modular offerings and a free app to enhance user engagement. Their market niche focuses on non-profit and membership-based organizations, supported by partnerships with relevant sector bodies and payment providers. The website reflects a mature digital presence with consistent branding and professional content.

Π

Πανεπιστήμιο Μακεδονίας

uom.gr

59

The University of Macedonia (Πανεπιστήμιο Μακεδονίας) is a well-established public higher education institution in Greece, offering a wide range of academic programs including economics, business administration, informatics, music, and international studies. The website reflects a strong market position as a recognized academic and research hub in Northern Greece, targeting students, academics, and researchers. The digital infrastructure is built on modern web technologies such as jQuery and accessibility tools, with a focus on user experience and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

M

Magyar Reklámszövetség

mrsz.hu

47

The Magyar Reklámszövetség website represents a national marketing communication association in Hungary, providing industry research, regulatory guidance, events, and education to marketing professionals and businesses. The site is professionally designed with clear branding and relevant content targeting Hungarian marketing stakeholders. Technically, the site uses a Yii PHP framework-based CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics for tracking. Performance and mobile optimization are moderate but could be improved. Security posture is basic with HTTPS implied but no visible security headers or published security policies. Privacy compliance is limited with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the site is functional and credible but would benefit from enhanced security and privacy practices.

N

Net-s M. Chmielewski, J. Chmielewska spółka jawna

net-s.pl

50

Net-s.pl is a Polish e-commerce retailer specializing in a wide range of consumer products including computers, notebooks, household appliances (AGD), RTV, toys, tools, and networking equipment. The company positions itself as a trusted local online store offering competitive pricing and a broad product catalog targeting general consumers in Poland. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technical infrastructure leverages common JavaScript libraries such as jQuery and Owl Carousel, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement with additional headers and explicit cookie consent mechanisms. The absence of public WHOIS data reduces transparency but is common for small e-commerce businesses. Overall, the site is safe, trustworthy, and compliant with GDPR requirements based on available privacy policies.

L

Lausanne University Hospital

lausanneuniversityhospital.com

54

Lausanne University Hospital (CHUV) is a prominent Swiss academic hospital providing advanced medical care, research, and education. It is internationally recognized and ranked among the top hospitals worldwide. The website showcases innovative medical projects and collaborations with the University of Lausanne, targeting patients, researchers, and healthcare professionals. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes analytics via Matomo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the legitimacy of the hospital itself. Overall, the website is professional, trustworthy, and informative.

N

Nederlandse Leverpatiënten Vereniging (NLV)

leverpatientenvereniging.nl

64

The Nederlandse Leverpatiënten Vereniging (NLV) is a Dutch non-profit patient association dedicated to supporting individuals affected by a wide range of liver diseases. The organization provides information, advocacy, and community support for patients and their families. The website serves as a comprehensive resource with educational content, news updates, event agendas, and calls to action for membership and donations. The NLV holds a credible position within the healthcare non-profit sector in the Netherlands, supported by affiliations with recognized organizations such as EASL and EURORDIS.

H

Huid Nederland

huidnederland.com

66

Huid Nederland is a Dutch non-profit organization dedicated to supporting individuals with skin and hair conditions by advocating for improved healthcare quality and patient positioning. The organization operates primarily through membership and donations, providing educational resources, patient advocacy, and collaboration with healthcare providers. The website reflects a focused mission with clear contact information and active social media engagement, targeting patients and healthcare stakeholders in the Netherlands. Technically, the website is built on a mature technology stack including Bootstrap 3.3.7, jQuery 1.11.3, and FontAwesome, hosted by a reputable Dutch registrar. The site uses HTTPS with valid SSL certificates and employs domain transfer protection, though DNSSEC is not enabled. The site is mobile-optimized with good navigation and SEO practices, though some JavaScript libraries are outdated. From a security perspective, the site follows basic best practices such as HTTPS and email obfuscation but lacks advanced security headers and a cookie consent mechanism despite using Google Analytics. No vulnerability disclosure or incident response information is provided. The WHOIS data is consistent with the organization's profile, indicating legitimacy. Overall, the website presents a trustworthy and professional front for a healthcare non-profit, with moderate technical maturity and some room for improvement in privacy compliance and security hardening.