Security Directory

S

Centrum.cz: Fandíme dobrému obsahu

stdout.cz

49

Centrum.cz is a prominent Czech internet portal providing a variety of services including email, current news, weather updates, and search functionalities. It serves a broad Czech audience seeking reliable and timely information. The website leverages modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience. The presence of multiple reputable news sources and professional design indicates a mature digital presence. Security-wise, the site enforces HTTPS and includes essential security headers, reflecting a good security posture. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for compliance and transparency improvement. Overall, Centrum.cz appears to be a trustworthy and well-established media portal with room to enhance privacy compliance and user trust through clearer policy disclosures.

C

Centrum.cz

xsd.cz

57

Centrum.cz is a well-established Czech internet portal providing a variety of online services including email, news, and weather updates. The website targets Czech-speaking users seeking reliable and diverse content. Technically, the site is built on modern frameworks such as Next.js and React, leveraging multiple third-party analytics and advertising platforms to monetize and analyze user engagement. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by publishing clear privacy and cookie policies. The absence of WHOIS data is likely due to privacy protection, which is common for media portals. Overall, the site presents a professional and trustworthy online presence with room for enhancement in privacy transparency and contact accessibility.

Z

ZONER, s.r.o.

zonercloud.com

73

ZonerCloud, operated by ZONER, s.r.o., is a Slovakia-based cloud services provider specializing in high-performance virtual private servers (VPS), managed hosting, email hosting, cloud storage, and AI/GPU server rentals. The company positions itself as a market leader in VPS performance within its region, leveraging partnerships with VMware and Microsoft to deliver reliable and scalable cloud infrastructure solutions. Their offerings target businesses and developers seeking affordable, powerful, and flexible cloud computing resources with rapid deployment times and strong uptime guarantees. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as Bootstrap, jQuery, and various UI/UX libraries. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside a live chat support system. The site is well-optimized for mobile devices, features comprehensive cookie consent mechanisms, and employs HTTPS with a DigiCert SSL certificate, indicating a strong commitment to security and privacy. From a security perspective, while the site enforces HTTPS and uses secure forms with CSRF tokens, it lacks publicly available formal security policies or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registrant data slightly reduces trust but is mitigated by the professional presentation and trust signals such as certifications and partner logos. Overall, ZonerCloud presents a trustworthy and professional cloud service platform with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and incident response, as well as WHOIS data availability, would further enhance trust and compliance posture.

G

Galaksija

galaksija.hr

42

Galaksija.hr is a Croatian online magazine focused on popularizing science across various disciplines including natural sciences, technology, social sciences, ecology, and medicine. The website offers news articles, blogs, multimedia galleries, and videos targeting a general audience interested in science and education. The business model appears to be content publishing supported by advertising and partnerships with related portals. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Flexslider, and integrates analytics tools like Google Analytics, Histats, and Mixpanel. The site is accessible via HTTPS and includes a login form for registered users, but lacks advanced security headers and explicit GDPR cookie consent mechanisms. No incident response or security contact information is provided, which could be improved to enhance trust and compliance. Overall, the website is professionally designed with good content quality and moderate technical implementation, suitable for its niche media role.

World Nuclear News is a well-established information service operated by the World Nuclear Association, providing authoritative news, features, and analysis on the global nuclear energy sector. The website targets industry professionals, policymakers, and stakeholders, offering a comprehensive range of content including news articles, podcasts, and newsletters. The business model is centered on information dissemination supported by an industry association, positioning itself as a trusted source within the energy sector. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates analytics tools including Google Analytics and Microsoft Clarity, and is hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. The infrastructure supports a professional and responsive user experience with moderate performance. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and maintains domain registration safeguards. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, indicating a solid security posture but with room for improvement in transparency and DNS security. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. It provides clear contact information and maintains consistent branding. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further enhance security and trust.

EM-Immobilien is a small real estate company based in Vienna, Austria, specializing in property management and brokerage services. The website serves as a basic informational portal targeting individuals and businesses seeking real estate services locally. The company branding is moderately consistent, with a focus on personal and individual service as indicated by the tagline and logo. The website content is primarily in German and includes references to key services such as property management and real estate brokerage. However, the site lacks comprehensive business contact details and formal privacy or terms of service documentation.

Mic Dorin Bau GmbH is a small, family-run construction company based in Austria, specializing in residential building services including shell construction, facades, outdoor areas, and renovations. With over 10 years of experience, the company targets private homeowners and clients seeking personalized construction solutions. The website reflects a professional and consistent brand image, providing clear contact information and a user-friendly interface. Technically, the site is built using modern frameworks like React and Phenomic, with Google Analytics integrated for visitor tracking and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

U

UDICE

udice.org

54

UDICE is a French alliance of 13 major universities focused on promoting research excellence, enhancing higher education performance, and developing attractive innovation ecosystems. The website presents a professional and consistent brand image, targeting academic institutions and stakeholders in higher education and research. The business model is non-profit and collaborative, positioning UDICE as a key player in the French academic landscape. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. The SSL configuration is excellent, ensuring secure HTTPS connections. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks security headers and a formal security policy or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected, which is a gap given GDPR relevance. Overall, the site is trustworthy and professional, though transparency is reduced by the absence of WHOIS data and limited security disclosures. Strategic improvements in security headers, privacy compliance, and incident response communication would enhance the site's security maturity and user trust.

S

SCRIPT (Service de Coordination de la Recherche et de l’Innovation pédagogiques et technologiques)

script.lu

59

SCRIPT is a Luxembourg governmental agency focused on coordinating research and innovation in education and technology. It plays a central role in implementing educational policy priorities and enhancing school quality in Luxembourg. The website reflects this mission with relevant content, news, publications, and project information targeted at educators, government stakeholders, and the public. Technically, the site is built on Drupal 9 with modern libraries and provides a responsive, accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.

S

SCRIPT

heydoo.lu

47

Heydoo.lu is an official educational content platform operated under the auspices of Luxembourg's Ministry of National Education, Childhood and Youth, branded as SCRIPT. The platform aggregates a wide range of educational materials including publications, audio, video, apps, and websites, targeting students, teachers, parents, and educators. It supports multilingual content in Luxembourgish, French, and German, enhancing accessibility for its diverse audience. The website is built on Drupal 10 with modern UI frameworks and integrates analytics tools such as Google Analytics and Facebook Pixel for user behavior insights. Technically, the site demonstrates a solid infrastructure with good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS enforced and anti-bot measures, though some security headers could be improved. Privacy compliance is strong, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. Contact information is primarily provided via a contact form, with no direct emails or phone numbers publicly listed. The absence of WHOIS data due to a malformed domain query limits domain registration trust analysis. However, the official government affiliation and quality content strongly support the site's legitimacy. No adult or questionable content is present, making it safe for general audiences. Overall, Heydoo.lu is a credible, well-maintained educational resource platform with room for minor security enhancements.

I

Istra Bike

istria-bike.com

44

Istra Bike is an official regional cycling tourism portal for the Istria region in Croatia, providing comprehensive information on bike trails, accommodation, events, and related services. The website targets cycling tourists and outdoor enthusiasts, positioning itself as a key resource for promoting cycling tourism in the area. The platform offers detailed trail information, event calendars, multimedia content, and service listings such as bike rentals and transport. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Slick Carousel, and Lightbox2, ensuring a responsive and user-friendly experience. The site is served over HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, some security best practices such as explicit security headers and detailed security policies are missing. From a security perspective, the site maintains a good baseline with HTTPS and cookie consent but lacks advanced security headers and incident response information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and partner affiliations suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professionally designed and functional, with good content quality and user experience. The main risk lies in the missing WHOIS registration data, which slightly reduces trustworthiness. Strategic improvements in security headers, transparency policies, and domain registration clarity are recommended to enhance trust and compliance.

Istra Trails is an official regional tourism website focused on promoting cycling trails, accommodation, and events in the Istrian peninsula, Croatia. The site targets tourists and outdoor enthusiasts seeking detailed trail information and related services. It maintains a consistent brand presence with partner tourism companies and active social media channels. Technically, the website uses a mix of legacy and modern technologies including jQuery, Google Analytics, Facebook SDK, and Google Maps API v2, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and uses deprecated APIs. Privacy compliance is addressed with a privacy policy and cookie consent banner, though terms of service and incident response policies are absent. Overall, the site is trustworthy and professionally maintained but could improve security and compliance aspects.

A

Autoklub servisní s.r.o.

autoklub-servisni.cz

60

Autoklub servisní s.r.o. operates a historic event venue located in central Prague, offering rental spaces and catering services primarily targeting event organizers and corporate clients. The business leverages the unique appeal of a protected first republic style building, positioning itself as a niche hospitality provider with a focus on quality and tradition. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials enhancing trust. Technically, the website is built on WordPress 5.7.2 with common modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Smartlook for user behavior tracking. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. The absence of WHOIS data is a notable concern, reducing domain trustworthiness and raising questions about registration transparency. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices. Strategically, the company should focus on improving transparency through WHOIS data, publishing comprehensive privacy and security policies, and implementing stronger security headers to bolster trust and compliance.

V

Ventia s.r.o.

ventia.cz

56

Ventia s.r.o. is a Czech-based company specializing in technical building equipment with a focus on renewable energy solutions. Founded in 2019, the company offers comprehensive project design, consulting, and subsidy services to a diverse clientele including municipalities, developers, and industrial clients. Their market position is supported by a portfolio of over 500 projects and significant contract values, reflecting a solid presence in the local energy sector. The website presents a professional image with consistent branding and detailed service descriptions.

S

Solar Action Alliance

solaractionalliance.org

42

Solar Action Alliance is a small environmental advocacy group focused on promoting solar energy as a clean, reliable, and abundant renewable energy source. The website provides comprehensive information on solar panel costs, financing options, and state-specific installation guides, targeting homeowners and environmentally conscious individuals in the US. The business model centers on education and advocacy, supported by donations and informational content. Technically, the site is built on WordPress with Bootstrap for responsive design, leveraging common plugins and tracking tools such as Google Analytics and Facebook Pixel. Hosting is provided by SiteGround, and the domain is registered since 2015, indicating a stable presence. Security posture is moderate with HTTPS enforced and some security best practices observed, but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved compliance and security transparency.

E

Excited Agency

excited.agency

66

Excited Agency is a professional product design and branding agency specializing in digital products such as websites, SaaS platforms, and mobile applications. The company targets startups and established companies worldwide, offering comprehensive design services that enhance user experience and brand identity. Their portfolio includes award-winning projects, indicating a strong market position and expertise in the technology sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, and Google reCAPTCHA, ensuring a robust digital presence with good performance and mobile optimization. Security-wise, the site uses HTTPS and implements privacy and cookie consent mechanisms, though explicit security headers and incident response information are not publicly disclosed. Overall, the website demonstrates high professionalism, good privacy compliance, and a trustworthy business model, although WHOIS data is privacy protected, which is common for agencies. Strategic recommendations include enhancing security headers, publishing security policies, and providing direct contact information for improved trust and compliance.

S

Select2

select2.org

55

Select2.org is the official documentation website for Select2, a popular open source jQuery plugin that enhances HTML select boxes with features such as searching, tagging, remote data support, and infinite scrolling. The website serves primarily web developers and software engineers seeking to implement or customize Select2 in their projects. It is maintained by named individuals and hosted by NextGI, reflecting a small but focused open source project. The site is built on GravCMS and uses modern frontend technologies including jQuery, FontAwesome, and syntax highlighting libraries. Google Analytics and Google Tag Manager are used for visitor tracking, though no cookie consent mechanism or privacy policy is present, indicating potential compliance gaps. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No contact information or formal security policies are published, limiting direct communication channels. Overall, the website is professional, content-rich, and trustworthy for its target audience but would benefit from improved privacy and security disclosures.

D

demch.co

demch.co

51

demch.co is a Ukrainian-based web development company specializing in creating websites and digital services for non-profit organizations and social change initiatives. With over 12 years of experience and more than 300 projects completed, the company positions itself as a trusted partner for NGOs, government agencies, and international organizations. Their key services include full-cycle website development, consulting, technical support, branding, design, and animation. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing user trust and engagement. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like jQuery, TweenMax, and AOS for animations. Google Analytics and Google Tag Manager are used for tracking, indicating a moderate level of user data collection. Hosting appears to be managed via NameCheap with custom DNS servers. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are present, representing compliance gaps especially under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy with a strong focus on serving the non-profit sector. Strategic improvements in privacy compliance and security hardening would further strengthen its position and reduce risk.

S

Solidgate

solidgate.com

68

Solidgate is a mature and established payment processing company founded in 2007, offering a comprehensive one-stop platform for online payments including card acquiring and alternative payment methods globally. The company targets online businesses and merchants seeking streamlined payment infrastructure with a unified API. Their market position is strong with global coverage, extensive payment options, and value-added services such as chargeback management, antifraud, and treasury solutions. The website reflects a high level of professionalism, with excellent content quality, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern plugins and integrations for analytics, marketing, and user engagement. Security posture is good with HTTPS, domain protections, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR readiness. Overall, the business credibility is high, supported by trust indicators like PCI DSS compliance and transparent contact options.

Oy Suomen Tietotoimisto operates the STT Info platform, a Finnish press release distribution service targeting media professionals and companies. The website facilitates the dissemination of over 17,000 press releases annually, positioning itself as a key player in the Finnish media communication sector. The business model centers on subscription and one-time purchase of press releases, serving a professional audience seeking timely and relevant news content. The company maintains a consistent brand presence and provides comprehensive contact and privacy information, reinforcing trust and professionalism. Technically, the website employs modern web technologies including React, Google Fonts, and Cloudflare for content delivery and security. It integrates Google Analytics and social media tracking tools while implementing a robust cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS, employs standard security headers, and manages session cookies securely. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

C

culture.lu, Inc.

culture.lu

47

culture.lu is a specialized cultural portal serving the Luxembourg cultural community and enthusiasts. It offers a variety of content including articles, videos, podcasts, event listings, calls for participation, and job offers, positioning itself as a key media hub in the Luxembourg cultural sector. The website is built on Drupal 10 with modern web technologies and integrates social media and newsletter marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some HTTP security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of explicit contact information and terms of service pages is noted but does not significantly detract from overall credibility. The domain registration aligns well with the website's cultural and governmental affiliations, supporting legitimacy. Overall, culture.lu presents a professional, trustworthy, and content-rich platform for its target audience.

1

100Shoppers

100shoppers.com

50

100Shoppers is a technology company specializing in B2B2C solutions designed to convert website visitors into shoppers through their 'Where To Buy' widget and sales analysis tools. The company operates a professional WordPress-based website with a focus on marketing and analytics integration, targeting brands and retailers seeking to enhance sales conversion. The technical infrastructure includes modern marketing and analytics technologies such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for cookie consent management. Hosting is provided by OVH sas, a reputable provider, and the domain is registered since 2018, consistent with the company's business timeline. Security posture is moderate with HTTPS enabled and domain protection statuses set, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service policies. Overall, the website is professionally designed and functional but would benefit from enhanced security practices and clearer compliance documentation.

H

Hrvatsko meteorološko društvo

meteohmd.hr

43

Hrvatsko meteorološko društvo (HMD) is a well-established Croatian non-profit meteorological society dedicated to promoting meteorological science and practice. The website serves as an information hub for members and enthusiasts, offering news, events, project details, and membership services. The organization has a clear national presence with a domain registered since 2001 and consistent WHOIS data aligning with its Croatian roots. Technically, the website uses a traditional tech stack with jQuery and Google Analytics, but some libraries are outdated, posing potential security risks. Accessibility features are commendable, though mobile optimization is basic. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms, indicating partial GDPR compliance. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

T

TZ Poreč

myporec.com

54

The website www.myporec.com serves as the official tourism portal for the City of Poreč in Istria, Croatia. It provides comprehensive information on local accommodations, events, gastronomy, and travel planning, targeting tourists and visitors interested in the region. The site is well-branded under the TZ Poreč identity and offers multilingual support, rich multimedia content, and accessibility features, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Analytics, and Facebook SDK for tracking and engagement, alongside cookie consent and accessibility compliance tools. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing trust slightly, but the overall content and presentation suggest a legitimate and professional operation. Strategic recommendations include enhancing security headers, clarifying incident response policies, and investigating the WHOIS inconsistency to improve business credibility and trust.

M

Median

hellomedian.com

65

Median is a technology company specializing in cobrowsing and screen sharing software designed to enhance customer support experiences. Their platform enables real-time screen sharing, audio, and video communication without requiring downloads or installs, integrating seamlessly with popular chat and support tools. The company positions itself as a leading solution with a significant user base and global reach. Technically, the website is built on modern web technologies including Webflow CMS and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and ProfitWell. The site is well optimized for performance and mobile devices, offering a professional user experience. Security posture is solid with HTTPS enforced and bot protection via Cloudflare Turnstile, though explicit security headers and incident response information are lacking. Privacy compliance is minimal with no visible privacy or cookie policies, which is a notable gap. WHOIS data is unavailable, raising some concerns about domain registration transparency, but the professional site and client testimonials support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security transparency.

World Nuclear Association is a well-established UK-based industry association focused on the nuclear energy sector. It provides authoritative information, advocacy, events, and membership services to a global audience of industry professionals and policymakers. The website reflects a mature digital presence with comprehensive content and professional design. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and domain registration protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

M

Materiom

materiom.org

67

Materiom is a technology-driven organization focused on accelerating the development of next-generation bio-based materials through open data and AI tools. The company serves a diverse audience including scientists, producers, and brands, positioning itself as an innovative leader in sustainable materials innovation. Their platform offers AI-assisted ingredient discovery, an open-access biomaterials recipe database, and a collaborative community environment. Technically, the website is built on modern Webflow infrastructure, leveraging Google Analytics and Tag Manager for insights, and implements a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Overall, the site demonstrates high professionalism, excellent content quality, and strong trust indicators, despite the lack of publicly available WHOIS registrant data due to privacy protection.

C

cOAlition S

coalition-s.org

54

cOAlition S operates as an international consortium promoting Plan S, an initiative to accelerate full and immediate Open Access to scientific publications. The organization targets research funders, academic institutions, and publishers to ensure publicly funded research is openly accessible. The website reflects a professional and authoritative presence with clear information about their mission, principles, and tools supporting Open Access. Technically, the website is built on WordPress, leveraging modern web technologies such as jQuery, Font Awesome, Google Analytics, and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a mature digital infrastructure. However, some security headers are missing, which could be improved to enhance security posture. Security-wise, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance, supporting user privacy and regulatory adherence. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. The main limitation is the absence of WHOIS data, which restricts domain registration trust analysis. Strategic improvements in security headers and explicit security policies would further strengthen the site's security posture.

J

JJ68

jj68byjagr.com

61

JJ68 by Jaromír Jágr is a Czech e-commerce business specializing in premium CBD products, including oils, protein drinks, and supplements, targeting sports enthusiasts and wellness consumers. The website is professionally designed, localized in Czech, and offers a clear navigation structure with multiple product categories. The business model combines online retail with a physical store presence in Prague. Technically, the site uses the Shoptet e-commerce platform, integrates multiple analytics and marketing tools, and is hosted via Amazon Cloudfront CDN. Security posture is moderate with HTTPS enforced and CSRF protections, but the use of an outdated jQuery version and lack of explicit security headers are notable weaknesses. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanism in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional and trustworthy but should address technical and registration transparency issues to enhance credibility.

L

Lokálny trh

lokalnytrh.sk

56

Lokálny trh is an established Slovak online platform founded in 2014 that maps and catalogs local food and beverage producers, providing consumers with an interactive map and search tools to discover regional producers. The platform also supports producers, retailers, and event organizers by offering free online profiles and promotional tools. The website demonstrates a good level of digital maturity with modern technologies such as Algolia search, Google Analytics, Facebook SDK, and responsive design. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the platform serves a niche retail market in Slovakia with a focus on local and regional products, maintaining a trustworthy and professional online presence.

A

APERITIF

le-aperitif.com

62

APERITIF is a small creative studio based in Spain specializing in design, creativity, strategy, advertising, and illustration services. The website showcases a professional portfolio targeting brands, businesses, and individuals worldwide who value high-quality creative work. The company maintains an active social media presence across major platforms, reinforcing its market position as a niche creative agency. Technically, the website is built on the Portfoliobox CMS platform, leveraging AngularJS and jQuery, hosted on Amazon Cloudfront CDN, and includes Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data is a notable concern, reducing domain trustworthiness despite the professional site content. Overall, the site is functional and professional but would benefit from enhanced privacy, security policies, and transparent contact information.

C

Center for Sustainable Energy

energycenter.org

70

The Center for Sustainable Energy is a well-established nonprofit organization focused on advancing decarbonization through sustainable, equitable, and resilient transportation, buildings, and communities. Their services include program implementation, advisory, incentive management, policy analysis, and outreach, supported by their proprietary software platform Caret® for electric vehicle policy. The organization targets government agencies, utilities, policymakers, and clean energy stakeholders, positioning itself as a national leader in clean energy program management. Technically, the website is built on Drupal 10 with modern frameworks such as Bootstrap and FontAwesome, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Marketo. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely via GoDaddy infrastructure. Performance is moderate with good technical implementation. From a security perspective, the site uses HTTPS and follows some best practices like external link security attributes, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a long-established domain with privacy protection appropriate for a nonprofit. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security headers. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to enhance trust and compliance.

B

Blackfish

blackfish.co

57

Blackfish is a well-established 360° software development and design studio based in the Czech Republic, founded in 2017. The company positions itself as an industry leader in Denmark and the Czech Republic, offering a comprehensive range of services including brand identity, UX/UI design, front-end and back-end development, 3D visuals, motion design, and marketing strategy. Their clientele includes notable companies, supported by strong trust indicators such as Clutch awards and Deloitte recognition. Technically, the website is built on WordPress with modern analytics and tracking tools integrated, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and domain protection, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

Č

Časopis Motorbike

motorbike-czech.cz

52

Časopis Motorbike is a Czech independent motorcycle magazine targeting motorcycle enthusiasts and motorsport fans. The website serves as a digital platform for publishing articles, offering magazine subscriptions, and providing advertising opportunities. The business operates primarily in the media and transportation sectors within the Czech Republic, with a small-sized organizational footprint and a founding date around 2021. The website demonstrates a professional and consistent brand presence with good content quality and user experience.

C

CZECHIA (Zoner)

czechia.cz

72

CZECHIA.COM is a professional Czech-based online service provider specializing in domain registration, webhosting, email solutions, virtual servers, and SSL/TLS certificates. The company positions itself as a market leader in the Czech Republic with over 30 years of experience and a large customer base. Their offerings include advanced WordPress hosting, AI-assisted domain name suggestions, and 24/7 live customer support. The website is well-designed, mobile-optimized, and rich in content, targeting individuals and businesses seeking reliable internet services. Technically, the site uses modern frameworks and analytics tools, ensuring good performance and user experience. Security practices include HTTPS enforcement and email security standards, though explicit security headers and policies are not published. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and association with the parent company Zoner. Overall, the site demonstrates strong business credibility but would benefit from improved transparency in privacy and security policies.

A

Autoklub České republiky

autoklub.cz

66

Autoklub České republiky is a well-established national automobile club in the Czech Republic, providing a broad range of services including motorsport event organization, membership management, driver training, insurance, and road safety advocacy. The organization is affiliated with major international automotive bodies such as FIA, FIM, and FIVA, reinforcing its authoritative position in the automotive and motorsport sectors within the country. The website serves as a comprehensive portal for members and the public, offering detailed information on disciplines, commissions, and various automotive activities. Technically, the website is built on WordPress CMS, enhanced with performance optimization tools like WP Rocket, and integrates Google Analytics and Google Tag Manager for visitor tracking and marketing insights. The site demonstrates good mobile optimization and SEO practices, with structured navigation and consistent branding. Security measures include HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. From a security and compliance perspective, the site implements cookie consent mechanisms aligned with GDPR requirements, though a formal privacy policy page is not clearly identified. WHOIS data for the domain is unavailable, likely due to registry policies or privacy protection, which slightly impacts trust signals but is mitigated by the professional presentation and affiliations. No critical vulnerabilities or security issues were detected in the accessible content. Overall, Autoklub České republiky presents a credible and professional online presence suitable for its audience. Strategic recommendations include publishing a clear privacy policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust. Continued attention to security best practices and compliance will support the organization's reputation and operational resilience.

F

SGP - FIM Speedway

fimspeedway.com

63

The website www.fimspeedway.com serves as the official digital platform for the FIM Speedway Grand Prix and related speedway events. It offers comprehensive information including event calendars, standings, results, rider profiles, news, media access, ticket purchasing, and an e-commerce shop. The site targets speedway fans and sports enthusiasts globally, positioning itself as a central hub for speedway racing content and engagement. Technically, the site is built using modern web technologies such as React and Next.js, ensuring good mobile optimization and SEO performance. It integrates Google Tag Manager and Google Analytics for tracking and uses OneTrust for cookie consent management, reflecting a moderate level of digital maturity. The site loads with moderate speed and provides a good user experience with clear navigation and consistent branding. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No contact information or privacy policy was detected in the provided content, which may impact user trust and compliance with data protection regulations. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and official social media presence suggest a legitimate operation. Overall, the site is professionally designed and functional but would benefit from enhanced transparency regarding privacy, security policies, and contact information. Verification of domain registration and addition of security best practices would strengthen its trustworthiness and compliance posture.

R

Rieker Holding AG

remonte.us

62

Remonte Shoes operates as an e-commerce retailer specializing in footwear products, leveraging the Shopify platform for its online presence. The website is professionally designed with a focus on user experience and mobile optimization, targeting general consumers interested in shoes. The technical infrastructure is modern, utilizing Shopify's modular theme, Cloudflare DNS, and various third-party marketing and analytics tools. Security posture is adequate with HTTPS enabled and domain transfer protections in place; however, there is room for improvement in DNS security and HTTP security headers. Privacy and compliance documentation are notably absent or not easily discoverable, which may pose risks in regulatory adherence. Overall, the domain registration data aligns well with the business identity, supporting legitimacy. Strategic enhancements in privacy transparency and security hardening are recommended to bolster trust and compliance.

R

Rieker Holding AG

rieker.us

63

Rieker Shoe Corporation USA operates an e-commerce platform specializing in stylish and comfortable footwear, including shoes, boots, sandals, and sneakers. The company is part of Rieker Holding AG, a Swiss entity with a long-standing presence since 2002. The website targets consumers seeking quality and comfort in footwear, leveraging modern e-commerce technologies to deliver a seamless shopping experience. The brand positions itself as a blend of fashion and comfort, catering to a broad audience with diverse footwear needs. Technically, the website is built on the Shopify platform, utilizing various third-party tools for marketing, sizing assistance, and analytics. The infrastructure includes Cloudflare DNS and reputable hosting via Shopify's CDN, ensuring reliable performance and moderate loading speeds. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. The site employs multiple asynchronous scripts for enhanced user engagement and marketing effectiveness. From a security perspective, the site enforces HTTPS and uses domain locking mechanisms to prevent unauthorized changes. However, DNSSEC is not enabled, and several security headers are not explicitly present, representing areas for improvement. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the company to regulatory risks. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is professional, trustworthy, and well-maintained, with a solid business foundation. The main risks relate to privacy compliance and some security best practices. Addressing these gaps would enhance the site's security posture and regulatory adherence, fostering greater customer trust and reducing potential liabilities.

R

Rieker UK

rieker.co.uk

66

Rieker UK operates a professional e-commerce platform specializing in men's and women's footwear, offering a variety of shoes, boots, and accessories primarily targeting independent retailers in Europe. The website demonstrates a solid market position as an established footwear brand with a consistent and professional online presence. Technically, the site employs modern JavaScript libraries and analytics tools such as Google Analytics and Microsoft Clarity, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and partial security headers present, though improvements are recommended to enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is trustworthy and user-friendly, though the lack of accessible WHOIS data introduces some uncertainty regarding domain registration legitimacy.

H

Hemex-P S.R.L.

rieker-eshop.ro

53

Rieker-eshop.ro is an e-commerce platform operated by Hemex-P S.R.L., specializing in the retail of Rieker and Remonte branded footwear and bags for men and women. The website positions itself as the official distributor of the Rieker brand in Romania, targeting consumers seeking comfortable and stylish shoes and accessories. The business model is focused on online sales with value-added services such as free delivery and returns, supported by customer service channels. Technically, the website is built as a modern single-page application using Angular and Ionic frameworks, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and TikTok Pixel. The site demonstrates good mobile optimization and a professional design, though SEO and accessibility features are basic. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data confirms the domain is newly registered consistent with the business launch, with no suspicious patterns detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security and transparency could enhance its posture.

H

Hemex-C Kft.

rieker-eshop.hu

56

Rieker-eshop.hu is a Hungarian e-commerce platform operated by Hemex-C Kft., specializing in the sale of Rieker and Remonte branded footwear and bags. The website positions itself as an official reseller with a focus on combining fashion and comfort, targeting Hungarian consumers seeking quality shoes and accessories. The platform offers free shipping and returns, a mobile app, and emphasizes product technologies such as water resistance. Technically, the site is built on modern Angular and Ionic frameworks, integrating popular analytics and marketing tools like Google Analytics, Facebook Pixel, and TikTok Pixel. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made in cookie consent and security headers. Overall, the site demonstrates good business credibility and technical maturity, suitable for its market niche.

R

Rieker

rieker-eshop.sk

63

Rieker-eshop.sk is a specialized e-commerce platform offering the largest selection of Rieker footwear in Slovakia. The website targets Slovak consumers seeking quality and comfortable shoes, providing a broad range of styles for both women and men. The business model focuses on direct online retail with value-added services such as free shipping, free returns, and seasonal promotions. The site holds a strong market position as a leading Rieker footwear retailer in the region, supported by multiple ShopRoku awards indicating customer trust and quality service. Technically, the website employs a modern JavaScript stack with integrations for analytics and advertising, including Google Analytics, Facebook Pixel, Bing Ads, and Criteo retargeting. The platform is built on the ineShop CMS, optimized for desktop and mobile users with good SEO and accessibility practices. Security posture is strong with HTTPS enforced and appropriate security headers, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website demonstrates a professional and trustworthy online retail presence with room for improvement in explicit contact information and security transparency.

R

Rieker

rieker-eshop.cz

61

Rieker-eshop.cz is a well-established e-commerce platform specializing in the sale of Rieker footwear and related accessories in the Czech Republic. The website positions itself as the largest Rieker footwear seller in the country, supported by 35 physical stores and a strong online presence. It offers a wide range of products for both women and men, emphasizing comfort, style, and quality. The site includes customer trust signals such as ShopRoku awards and a high recommendation rate on Heureka.cz, enhancing its credibility. Technically, the website employs a modern tech stack including Google Tag Manager, Google Analytics, Facebook Pixel, and other marketing and tracking tools, integrated with a custom CMS platform (ineShop). The site is mobile-optimized, has good SEO practices, and provides a user-friendly shopping experience with clear navigation and product presentation. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though some security headers could be improved. The security posture is solid with no detected vulnerabilities or blocking mechanisms, and privacy compliance is well addressed with clear privacy and cookie policies. However, the WHOIS data is unavailable, which limits the ability to fully verify domain registration legitimacy. Despite this, the website's content, branding, and trust indicators strongly suggest a legitimate and professional business. Overall, Rieker-eshop.cz demonstrates a mature digital presence with strong business credibility, good technical implementation, and a secure environment for customers. Continued improvements in security headers and transparency in domain registration would further enhance trust and compliance.

F

Fischis Skischule Flachau

fischis-skischule.at

55

Fischis Skischule Flachau is a small, family-oriented ski school based in Flachau, Austria, offering professional ski and snowboard courses for children and adults. The business emphasizes personal attention with qualified, state-certified instructors and provides additional services such as ski equipment rental and all-inclusive packages. The website is well-structured, multilingual, and supports online booking with multiple payment options, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern web technologies and includes privacy-conscious analytics implementations. Security posture is solid with HTTPS and anonymized tracking, though some advanced security headers are missing. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the overall trustworthiness given the professional presentation and clear contact information. Privacy and cookie policies are comprehensive and GDPR compliant, with an opt-in consent mechanism. Social media presence on Facebook and YouTube supports marketing efforts and customer engagement.

S

Study in Prague Consortium

studyinprague.cz

47

Study in Prague is an educational information portal dedicated to providing comprehensive resources for international students interested in studying in Prague, Czech Republic. The website aggregates detailed information about Prague's universities, study programmes, admission requirements, visa processes, scholarships, and student life. It serves as a centralized platform supported by the Study in Prague Consortium and partners such as the Prague city government and tourism organizations. The target audience is international students seeking higher education opportunities in Prague. The business model focuses on information dissemination and promotion of Prague as a study destination.

I

Intergovernmental Panel on Climate Change

ipcc.ch

63

The Intergovernmental Panel on Climate Change (IPCC) is a globally recognized United Nations body established in 1988 to provide policymakers with scientific assessments on climate change, its impacts, and mitigation strategies. The organization operates with 195 member countries and produces comprehensive reports that are key inputs for international climate negotiations. The website reflects a mature digital presence with extensive content, including reports, working group information, and activities, targeting policymakers, researchers, and the public interested in climate science. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various UI libraries. It is well-optimized for mobile and accessibility, though performance is moderate. Security posture is strong with HTTPS enforced and no exposed sensitive data, but could be improved by adding explicit security headers and a cookie consent mechanism to enhance GDPR compliance. Overall, the IPCC website demonstrates high professionalism, trustworthiness, and content quality. However, it lacks explicit contact emails or phone numbers on the homepage and does not display a cookie consent banner, which are areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

I

International Civil Aviation Organization

icao.int

68

The International Civil Aviation Organization (ICAO) operates as a specialized United Nations agency focused on establishing global standards and regulations for civil aviation. The website serves as a comprehensive portal for aviation safety, security, environmental protection, economic development, and capacity building. It targets governments, aviation stakeholders, and the public, providing authoritative information, news, and resources. Technically, the site is built on Microsoft SharePoint, leveraging modern JavaScript libraries and hosted on Microsoft Azure DNS, reflecting a mature and stable digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though improvements such as CSP headers and a vulnerability disclosure page are recommended. Privacy compliance is moderate, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with minor areas for enhancement in security and privacy transparency.

N

Northwest Podiatric Laboratory

nwpodiatric.com

65

Northwest Podiatric Laboratory is a specialized healthcare company focused on the design and manufacture of premium custom orthotics. Established since 1964, it holds a strong market position as a leader in orthotic solutions, serving healthcare professionals and patients primarily in the United States. The website reflects a professional and consistent brand image with clear service offerings including custom orthotics, SmartCast® technology, and provider search functionalities. The target audience includes healthcare providers and patients seeking foot pain relief through custom orthotics. Technically, the website is built on WordPress, leveraging modern JavaScript libraries and analytics tools, hosted with Cloudflare for performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain registration transparency, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

A

American College of Foot and Ankle Surgeons

acfas.org

62

The American College of Foot and Ankle Surgeons (ACFAS) operates as a professional society dedicated to foot and ankle surgeons, providing education, advocacy, research, and membership services. Established in 1942, it serves a large membership base of over 7,800 professionals, positioning itself as a leading authority in its niche healthcare sector. The website reflects this professional stature with comprehensive resources, educational content, and active social media engagement. Technically, the site is built on the Kentico CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Swiftype for search functionality. The site is mobile optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response contacts are absent. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The WHOIS data is privacy protected, which is typical for professional organizations, and does not raise legitimacy concerns given the website's professional content and branding. Overall, the site is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements could focus on enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.