Security Directory

N

Novinykraje.cz

novinykraje.cz

50

Novinykraje.cz is a Czech regional news media website operated by Regionální vydavatelství s.r.o. It provides news, interviews, and reports focused on various Czech regions, targeting the general public interested in local news. The website is built on WordPress and uses a modern tech stack including Yoast SEO, Google Analytics, and Facebook SDK, indicating a mature digital infrastructure. The site is mobile optimized with good navigation and content relevance. Security posture is solid with HTTPS enforced, but lacks some security headers and visible privacy/cookie policies. No WHOIS data is publicly available, suggesting privacy protection, which is typical for media outlets. Overall, the site is professional and trustworthy with moderate risk due to missing privacy disclosures and security headers.

F

Faster.cz

faster.cz

56

Faster.cz is a Czech-based telecommunications and technology company specializing in internet services, data center operations, voice (VoIP) services, and cybersecurity. The company operates its own optical network in Brno with continuous 24/7/365 monitoring, targeting ISP providers and businesses requiring reliable connectivity and security solutions. The website reflects a professional B2B service provider with a clear market position in the regional telecommunications sector. Technically, the site is built on WordPress with modern plugins for SEO and multilingual support, and it employs Google services for analytics and advertising with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, which slightly reduces trust but the website content and branding are consistent and professional. Overall, Faster.cz presents a credible and mature digital presence suitable for its business domain.

A

A 11 s.r.o.

a11.cz

59

A 11 s.r.o. is a significant Czech media group specializing in regional, premium, lifestyle, and professional print media, alongside operating a national television channel and organizing events. The company targets a broad audience ranging from preschool children to specialized medical professionals and general TV viewers. Their market position is strong within the Czech media landscape, supported by multiple branded media properties and membership in ASCOPA. Technically, the website is built on WordPress with Oxygen builder, utilizing modern web technologies such as jQuery and GSAP for animations, and Google Fonts for typography. The site is mobile-optimized and SEO-friendly with structured data implemented. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but does not critically impact trust given the professional presentation and multiple trust signals. Overall, the website is functional, professional, and safe, but could improve privacy compliance and security posture.

S

Samosebou.cz

samosebou.cz

41

Samosebou.cz is an educational website dedicated to promoting waste sorting and recycling awareness primarily in the Czech Republic. The platform offers a variety of content including articles, infographics, interactive dictionaries, and competitions aimed at educating the general public about proper recycling practices. The site targets environmentally conscious individuals and communities interested in sustainable waste management. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as Bootstrap and jQuery. It integrates analytics and user behavior tracking tools like Google Analytics and Hotjar, and implements cookie consent mechanisms to comply with privacy regulations. Security-wise, the site enforces HTTPS and shows good SSL configuration but lacks explicit security headers and publicly available security policies. The absence of WHOIS data for the domain reduces the trustworthiness score, although the website content and technical setup appear professional and legitimate. Overall, the site provides valuable environmental education content with a moderate to good security posture and privacy compliance.

J

Jihočeská plavební společnost s.r.o.

jihoceskaplavebni.cz

46

Jihočeská plavební společnost s.r.o. is a small regional transportation company specializing in passenger boat services and sightseeing cruises on the Vltava and Lužnice rivers in South Bohemia, Czech Republic. The company offers scheduled boat rides, group bookings, and online ticket sales, targeting tourists and local residents. Their website is built on WordPress with WooCommerce and Tickera plugins, indicating a moderate level of digital maturity with e-commerce capabilities. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS and bot protection via Google reCAPTCHA, but lacks some security headers and explicit security policies. The absence of WHOIS data reduces domain transparency and trust slightly, but the presence of clear contact information, social media links, and partner logos supports legitimacy. Overall, the website is professional and trustworthy with room for security and compliance improvements.

B

Breeze-Eastern, LLC

breeze-eastern.com

49

Breeze-Eastern, LLC is a specialized aerospace manufacturing company focused on designing and producing helicopter rescue hoists, winches, cargo hooks, and weapons handling systems for both military and civilian operators. The company holds a unique market position as the world's only dedicated helicopter hoist and winch provider and is recognized as the largest cargo hook OEM globally. Their offerings include comprehensive OEM training and customer support, emphasizing operational safety and efficiency. The website reflects a medium-sized enterprise with a professional and consistent brand presence, targeting aerospace operators worldwide. Technically, the website is built on a modern WordPress CMS platform with popular plugins such as WPBakery Page Builder and Popup Maker. It uses HTTPS with good SSL configuration and integrates multimedia content including YouTube videos. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses AJAX with nonce tokens for form validation, indicating attention to secure data handling. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, Breeze-Eastern's website presents a credible and professional digital presence aligned with its aerospace manufacturing business. Strategic improvements in security policy transparency, WHOIS data availability, and enhanced accessibility would further strengthen its security posture and trustworthiness.

B

Brno iD

brnoid.cz

54

Brno iD is a government-operated digital platform providing residents and visitors of Brno city with online access to a wide range of municipal services including public transport ticketing, waste tax payments, family vouchers, and cultural institution tickets. The platform serves a large user base exceeding 781,000 registered users, positioning it as the primary e-shop portal for city services in Brno. The website is professionally designed with consistent branding and clear navigation, supporting multiple service modules tailored to different public needs. Technically, the site leverages modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA, and is built on the PrestaShop CMS platform. HTTPS is enforced, ensuring secure communications. However, the absence of WHOIS registration data and lack of visible contact emails or phone numbers slightly reduce trust from a domain registration perspective. Privacy compliance is partially addressed with a comprehensive privacy policy available, but cookie consent mechanisms are missing. Security headers are not detected, indicating room for improvement in security hardening. Overall, the site is functional, secure, and trustworthy from a user perspective but would benefit from enhanced transparency and security practices.

HOLIDAY WORLD & REGION WORLD is a well-established international trade fair focused on tourism and regional travel, organized by ABF, a.s. The website presents comprehensive information about the event, including visitor and exhibitor details, partner logos, and news updates. The business holds a strong market position in the Czech tourism event sector, with a history dating back to 1998. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its audience effectively.

J

Jihoměstská majetková a.s.

jihomestska.cz

48

Jihoměstská majetková a.s. is a municipal property management company serving the Prague 11 district in the Czech Republic. The company provides professional services managing residential and non-residential properties, parking facilities, maintenance of greenery and roads, sports facilities, and construction projects. Their website reflects a well-established local presence with a focus on community and municipal services. The target audience includes residents, property owners, and municipal stakeholders in Prague 11. The business model centers on property and facility management with a medium-sized operational scale and a history of over a decade in the market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Ajax Search Lite, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with good SSL configuration, but lacks some advanced security headers and explicit privacy and cookie policies. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses nonce tokens in forms to prevent CSRF attacks. However, it lacks published security policies, incident response plans, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security best practices to enhance its security posture and regulatory adherence.

U

Ukrainian American Coordinating Council (UACC)

uaccusa.org

44

The Ukrainian American Coordinating Council (UACC) is a non-profit organization dedicated to supporting the Ukrainian-American community in the United States through cultural promotion, business support, humanitarian aid, and political advocacy. The organization has a longstanding history dating back to the 1960s and maintains an active online presence with donation mechanisms and community engagement via social media. Technically, the website is built on WordPress using Elementor and jQuery, hosted via GoDaddy, and employs HTTPS for secure communications. However, there are gaps in privacy and cookie policies, and no explicit security headers or vulnerability disclosures are present, which could be improved to enhance trust and compliance. The domain registration is consistent with the organization's profile, showing no suspicious patterns and appropriate domain age.

U

United Help Ukraine

unitedhelpukraine.org

50

United Help Ukraine is a registered 501(c)(3) non-profit organization founded in 2014, dedicated to supporting the Ukrainian people through humanitarian aid, tactical medicine, and medical assistance. The organization has a strong market position as a trusted charity with multiple programs targeting defenders, medical aid, and humanitarian welfare. Their website is professionally designed, content-rich, and optimized for user engagement and donations. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting, and employs HTTPS with good security practices, although some security headers and DNSSEC are missing. Privacy compliance is well addressed with a cookie consent mechanism, but explicit privacy and security policies are not clearly found. The domain registration data aligns well with the organization's history, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for its non-profit mission.

R

Razom

razomforukraine.org

69

Razom is a well-established non-profit organization dedicated to supporting Ukraine through humanitarian aid, advocacy, cultural promotion, and community engagement. The website reflects a mature digital presence with comprehensive program descriptions and active social media integration, positioning Razom as a credible and impactful entity in its sector. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data limits domain trust analysis but is likely justified given the organization's geopolitical context. Overall, Razom's website is professional, trustworthy, and effective in communicating its mission and services.

E

European Students' Union

esu-online.org

50

The European Students' Union (ESU) is a well-established non-profit umbrella organization representing 43 National Unions of Students across 40 European countries. Founded in 1982 and headquartered in Brussels, ESU advocates for the educational, social, economic, and cultural interests of nearly 20 million students at the European level. The organization maintains a strong presence with comprehensive content, active social media channels, and partnerships with major European institutions such as the European Commission, Council of Europe, and UNESCO. Technically, the website is built on WordPress with modern plugins including Yoast SEO and GDPR compliance tools, ensuring good SEO, accessibility, and privacy adherence. The site is mobile-optimized and features a professional design with clear navigation and user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and some advanced security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism aligned with GDPR. Overall, the ESU website demonstrates a mature digital presence with solid business credibility and privacy compliance. Security posture is good but could be improved by enabling DNSSEC, adding security headers, and publishing security policies. The site is safe for general audiences and free from adult or questionable content.

S

SmartEmailing 2.1

se-forms.cz

52

The website se-forms.cz hosts a login page for SmartEmailing 2.1, an email marketing platform primarily targeting businesses and marketers seeking email campaign management solutions. The site offers a user login form with client-side validation and promotes a new application portal at portal.smartemailing.cz. The business appears to be a small technology company founded around 2019, operating in the Czech Republic. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Parsley.js for form validation, and the Nette PHP framework. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is moderately optimized for mobile and accessibility, with a clean and professional design. However, SEO and accessibility features are basic. From a security perspective, the site uses HTTPS and includes client-side validation but lacks visible security headers such as CSP or HSTS. No privacy or cookie policies are present, which is a compliance gap under GDPR. The presence of a third-party tracking pixel (Leady) indicates moderate user tracking. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professionally designed but would benefit from enhanced security headers, explicit privacy and cookie policies, and improved transparency regarding contact and incident response. These improvements would strengthen compliance and user trust.

D

Dataport AöR

dataport-kommunal.de

70

Dataport.kommunal is a large, government-sector focused IT service provider dedicated to supporting municipalities in Germany with digital transformation solutions. Their offerings include specialized IT applications, cloud services, IT security, and consulting to improve citizen services and administrative efficiency. The website is professionally designed using TYPO3 CMS and modern web technologies, providing excellent user experience, accessibility, and mobile optimization. Security posture is strong, evidenced by ISO 27001 certification and proper security headers, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information and social media presence further enhance trust and credibility.

N

New Communication GmbH & Co. KG

new-communication.de

48

New Communication GmbH & Co. KG is a full-service advertising and marketing agency based in Kiel, Germany. The company offers comprehensive marketing solutions across digital, print, and crossmedia channels, positioning itself as a trusted partner for effective communication strategies. Their website reflects a professional and modern digital presence, showcasing a diverse client portfolio and active engagement on major social media platforms. The agency targets businesses seeking integrated marketing services with a focus on quality and innovation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Modernizr, and includes advanced features like Lottie animations and responsive design. The site demonstrates good SEO practices, accessibility, and mobile optimization, providing a smooth user experience. Cookie consent and privacy compliance mechanisms are well implemented, reflecting adherence to GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent controls but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in publishing security policies and incident response information would enhance trust and compliance further.

E

EBZ Akademie

ebz-akademie.de

51

EBZ Akademie is a specialized educational and consulting institution focused on the real estate industry in Germany. It offers a comprehensive portfolio of services including learning modules, certified career building blocks, consulting in personal and organizational development, and networking opportunities. The organization positions itself as an expert and trusted partner for housing companies and real estate professionals, providing tools and knowledge to support a sustainable and future-proof real estate economy. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern plugins such as Yoast SEO and Borlabs Cookie for compliance, alongside Matomo and HubSpot for analytics and marketing. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though it lacks some advanced security headers and explicit security policies. Overall, the site is safe, trustworthy, and compliant with GDPR cookie consent requirements, but could improve transparency by publishing privacy and terms of service documents and providing direct contact details. The domain WHOIS data is consistent with the business profile, showing no suspicious patterns or privacy protection that would raise concerns.

B

Brandboy Design h/o Stoere Binken Design

stoerebinken.nl

53

Stoere Binken Design is a well-established full-service digital agency based in Maastricht, Netherlands, specializing in branding, web design, and typography with a strong emphasis on AI-driven solutions. The company has a solid market position supported by a long history since 1995 and excellent client reviews. Their business model includes innovative offerings such as Branding-as-a-Service, targeting ambitious businesses seeking comprehensive brand and digital presence solutions. Technically, the website is built on a modern WordPress platform with robust SEO, performance optimizations, and compliance with GDPR through a detailed cookie consent mechanism. Security posture is strong with HTTPS, bot management, and standard security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

T

Technická správa komunikací hl. m. Prahy, a.s.

libenak.eu

59

The website libenak.eu serves as the official information portal for the extensive reconstruction project of the Libeňský most in Prague, managed by Technická správa komunikací hl. m. Prahy, a.s. It provides detailed updates, project descriptions, and visualizations targeting residents, professionals, and stakeholders interested in the infrastructure development. The site is well-structured, professionally designed, and optimized for SEO and mobile devices, leveraging WordPress with Elementor and Yoast SEO plugins. Technically, it employs modern web technologies and integrates Google Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy. Business credibility is supported by consistent branding, official partner links, and transparent project information. Overall, the site presents a trustworthy and authoritative source for the Libeňský most reconstruction project.

T

Technická správa komunikací hl. m. Prahy, a.s.

cdsw.cz

56

Technická správa komunikací hl. m. Prahy, a.s., through its CDSw department, provides specialized geographic information system (GIS) solutions focused on municipal infrastructure management in Prague. The company develops proprietary GIS applications, maintains geographic data, and offers related services such as hosting, training, and consulting. Their market position is that of a trusted municipal technology provider with a medium-sized operation and a history dating back to 1998. The website reflects a professional and consistent brand image with clear focus on their core services and target audience. Technically, the website is built on WordPress with Elementor and several plugins supporting SEO, cookie compliance, and UI components. Hosting assets are served via Azure Blob Storage, indicating a modern infrastructure. Performance and mobile optimization are good, though accessibility could be improved. The site uses Google Tag Manager and Google Analytics for tracking, with a cookie consent mechanism in place, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing a long-established presence and no suspicious patterns. Overall, the website is secure, professional, and compliant with privacy regulations, though it could benefit from enhanced security headers and clearer incident response information. The risk level is low, and the site effectively supports the business objectives of the municipal GIS service provider.

S

Správa služeb hlavního města Prahy

sshmp.cz

47

Správa služeb hlavního města Prahy operates as the official municipal service provider for the city of Prague, focusing on vehicle towing, civil protection, and related public services. The website serves residents and visitors by providing information on impounded vehicles, towing locations, and emergency services. The organization holds a strong market position as a government entity with authoritative service offerings. Technically, the website is built on OctoberCMS, uses modern web technologies including jQuery and Google Fonts, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data is a notable concern for domain legitimacy verification but does not detract from the professional presentation and trustworthiness of the site content. Overall, the website is functional, professional, and trustworthy, serving its public service mission effectively.

D

Dataport

dataport.de

67

Dataport is a prominent IT service provider specializing in digital transformation for public administration in Germany. The company offers a broad range of services including consulting, project management, software development, and IT infrastructure tailored for governmental bodies, municipalities, and citizens. Their market position is strong within the public sector, supported by a large organizational size and a focus on digital sovereignty and security. The website reflects a professional and comprehensive digital presence with clear navigation, modern design, and extensive content relevant to their audience. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and frameworks such as jQuery and Foundation. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent mechanism and detailed privacy policies indicates a mature approach to privacy compliance. Security-wise, the site enforces HTTPS and holds ISO 27001 certification, reflecting a robust security posture, although some security headers could be improved. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. The company maintains transparent contact channels and social media presence, enhancing trustworthiness. The domain registration data aligns well with the company's public identity, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content accessibility. Strategic recommendations include enhancing security headers, publishing an incident response policy, and establishing a vulnerability disclosure program to further strengthen security and compliance. The website scores highly across content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable and professional digital asset for Dataport.

M

Metrostav DIZ

metrostavdiz.cz

51

Metrostav DIZ is a modern and rapidly growing construction company operating in the Czech Republic with over 25 years of experience in the construction market. It is a member of the Metrostav Group since 2017, expanding its expertise across energy, industrial, healthcare, sports, education, civil construction, and historical reconstruction sectors. The company positions itself as a reputable and ethical partner with a focus on innovation and environmental responsibility. The website reflects a professional digital presence with multilingual support and comprehensive business information. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a detailed cookie policy and GDPR-aligned consent management. Overall, the website and business demonstrate a high level of professionalism and trustworthiness, suitable for their B2B target audience.

E

EDIH Northeast | Evropský digitální inovační hub Libereckého a Královéhradeckého kraje

edih-northeast.cz

55

EDIH Northeast is a European Digital Innovation Hub serving the Liberec and Hradec Kralove regions in the Czech Republic. It supports small and medium-sized enterprises (SMEs) and public organizations by providing consulting, testing, training, and grant management services to facilitate digital transformation. The organization is part of a European network backed by the European Commission's Digital Europe programme for 2021-2027. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it runs on WordPress with modern plugins and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS and cookie consent mechanisms, though HTTP security headers could be improved. No WHOIS data is available, likely due to privacy protection, but the website's affiliations and content indicate legitimacy. Overall, the site presents a trustworthy and authoritative digital innovation service hub for its regional audience.

Fond Vysočiny operates an official regional government website providing comprehensive information about grant programs available in the Vysočina region of the Czech Republic. The site targets applicants, grant committee members, and local government entities, offering resources such as application portals, program details, and technical support. The business model centers on facilitating public funding distribution and transparency for regional development projects. The domain is well-established since 2003, reinforcing its legitimacy and trustworthiness. Technically, the website employs a combination of jQuery, Bootstrap, and the Nette PHP framework, with additional libraries for numeric input formatting and UI components. While the site is functional and moderately optimized, it loads multiple versions of jQuery, which may introduce conflicts and security risks. The site uses HTTPS and integrates analytics tools like Google Analytics and Smartlook for user behavior tracking, though it lacks visible security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates basic best practices such as HTTPS and form validation but lacks advanced protections like Content Security Policy headers and explicit privacy policies. The absence of cookie consent and privacy documentation poses compliance risks under GDPR. No critical vulnerabilities or blocking mechanisms were detected, but the use of multiple jQuery versions and missing security headers are notable concerns. Overall, Fond Vysočiny's website is a credible and professionally maintained government portal with good content quality and user experience. However, enhancements in privacy compliance, security header implementation, and technical modernization are recommended to strengthen its security posture and regulatory adherence.

K

Královéhradecká krajská centrála cestovního ruchu, p. o.

ccrkhk.cz

55

Královéhradecká krajská centrála cestovního ruchu, p. o. is a regional destination management organization established by the Královéhradecký region in the Czech Republic. The organization focuses on promoting tourism, cultural events, and regional attractions within the Královéhradecký kraj. It operates as a non-profit entity with advisory bodies including local destination companies, municipalities, and professional organizations. The website serves as an information hub for tourists and stakeholders, providing news, event updates, and regional tourism resources. Technically, the website is built on WordPress 6.5.3 using the Themify Ultra theme, with jQuery and Google Analytics integrated for tracking. The site is hosted likely by the registrar REG-WEDOS, a known Czech hosting provider. The website is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, it lacks some advanced security headers and privacy compliance mechanisms such as cookie consent banners and privacy policies. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement security headers or publish security policies or incident response contacts. No forms or data collection points are visible on the homepage, reducing immediate data exposure risks. The site uses Google Tag Manager and Google Analytics for user tracking, indicating moderate user tracking levels but lacks explicit privacy compliance disclosures. Overall, the website is trustworthy and professional, reflecting a legitimate regional government-supported tourism organization. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

M

Montala Limited

resourcespace.com

75

ResourceSpace, developed by Montala Limited, is an open source Digital Asset Management (DAM) software solution targeting a broad range of organizations including nonprofits, educational institutions, public sector bodies, and cultural organizations. The company positions itself as an ethical, employee-owned Certified B Corporation with a strong emphasis on security, privacy, and user empowerment. The website reflects a mature digital presence with comprehensive content, multimedia integration, and clear calls to action for demos and free trials. Technically, the website employs modern JavaScript libraries such as jQuery and FontAwesome Pro, uses HTTPS with good SSL configuration, and integrates Google reCAPTCHA for form security. The site is mobile responsive and optimized for accessibility and SEO. However, some security best practices like explicit security headers and public vulnerability disclosure mechanisms are not evident. From a security perspective, ResourceSpace demonstrates a solid posture with GDPR compliance, ISO 27001 certification, granular user permissions, and encrypted data handling. The presence of cookie consent mechanisms and privacy policies further supports compliance. The absence of WHOIS data transparency is a notable concern, potentially impacting trust, although the overall business credibility remains high based on website content and certifications. Overall, ResourceSpace presents a trustworthy and professional offering in the DAM market with strong ethical and security commitments. Strategic improvements in domain registration transparency and enhanced security header implementation would further strengthen its security posture and trustworthiness.

K

Královéhradecký kraj (implied)

skolstvikhk.cz

46

The website skolstvikhk.cz serves as a comprehensive regional educational portal for the Královéhradecký kraj in the Czech Republic. It provides a wide range of educational news, resources, event information, and support services targeted at students, teachers, school management, parents, and the general public. The portal also links to various educational projects and initiatives, including Erasmus programs and AI in education communities, positioning itself as a key information hub in the region's education sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Analytics 4 and Google Consent Mode shows a commitment to data-driven insights while respecting privacy regulations. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a granular cookie consent mechanism, reflecting good privacy compliance. However, explicit security headers and incident response policies are not publicly documented, suggesting areas for improvement. No critical vulnerabilities or suspicious patterns were detected in the analysis. Overall, skolstvikhk.cz presents a trustworthy, professional, and well-maintained educational portal with strong regional relevance. Strategic enhancements in security policy transparency and contact information availability could further strengthen its credibility and user trust.

T

Technická správa komunikací hlavního města Prahy, a.s.

tsk-praha.cz

56

Technická správa komunikací hlavního města Prahy, a.s. (TSK Praha) is a large public company responsible for managing and maintaining the transportation infrastructure of Prague, including roads, bridges, tunnels, greenery, cycling paths, and parking facilities. The company operates under the ownership of the City of Prague and aims to improve the quality of life in the city through efficient infrastructure management and development. Their website reflects a professional and comprehensive digital presence with detailed information about their activities, projects, and public services. The technical infrastructure of the website is built on WordPress with modern plugins such as Yoast SEO, WPForms, and Instagram Feed integration. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security measures include HTTPS enforcement, security headers, Google reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the website lacks explicit incident response contact information and a vulnerability disclosure policy, which are recommended for enhanced security transparency. Privacy compliance is robust, with clear privacy and cookie policies and user consent mechanisms. Overall, TSK Praha presents a trustworthy and professional online presence consistent with its role as a public infrastructure manager. Strategic recommendations include publishing incident response contacts, establishing a vulnerability disclosure program, and enhancing security policy disclosures to further strengthen trust and security posture.

J

Jonak

jonak.fr

71

Jonak is a French e-commerce retailer specializing in high-end women's footwear. The website showcases a broad collection of fashionable shoes and accessories, targeting women seeking trendy and premium products. The brand maintains a consistent and professional online presence with clear navigation, structured data, and integration of modern web technologies such as Vue.js, jQuery, and Google Maps API. The site supports customer engagement through social media and offers customer service contact options. Technically, the website is well-implemented with HTTPS and performance optimizations, though explicit privacy and terms of service pages are not clearly identified in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding explicit security headers and a vulnerability disclosure policy. WHOIS data is unavailable, which slightly reduces domain trust verification. Overall, Jonak presents a credible and professional e-commerce platform with room for enhanced privacy and security transparency.

A

Antica Terra

lillianwinery.com

43

Lillian Winery operates as a premium wine brand associated with Antica Terra, focusing on direct-to-consumer wine sales and exclusive membership experiences. The website serves as a digital storefront and membership portal, targeting wine enthusiasts and hospitality clientele. The brand positions itself in the niche hospitality sector with a focus on quality and customer engagement through wine club memberships and curated experiences. Technically, the website is built on WordPress with integration of Commerce7 for e-commerce, Klaviyo for marketing automation, and Google Analytics for visitor tracking. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal policies such as privacy and cookie notices. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional branding and linkage to Antica Terra mitigate some risk. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

D

Deutsches Institut für Urbane Transformation

diut.de

41

The Deutsches Institut für Urbane Transformation (DIUT) is an independent research and think tank affiliated with the EBZ Business School, focusing on urban transformation and innovative neighborhood development primarily in the Ruhr region and North Rhine-Westphalia, Germany. The institute serves as a collaborative platform connecting academia, municipalities, businesses, and policymakers to address social, economic, and ecological challenges in urban areas. The website presents professional content with a clear focus on its mission and services but lacks explicit privacy and security policies. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent but could be improved by publishing formal security and incident response policies.

P

PrivacyBee

privacybee.io

53

PrivacyBee is a specialized technology company providing an automated privacy policy generation service tailored for small and medium-sized enterprises, primarily in the German-speaking market. The service emphasizes legal compliance with GDPR and Swiss data protection laws, offering automatic updates every 8 weeks and integration with popular CMS platforms. The website is professionally designed, content-rich, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages WordPress with modern plugins and tracking tools, maintaining good performance and mobile responsiveness. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit incident response information are absent. WHOIS data is privacy-protected, which aligns with the company's privacy-centric business model and does not raise immediate legitimacy concerns. Overall, PrivacyBee presents a trustworthy and professional service with a clear market focus and strong legal backing.

T

The Interline

theinterline.com

62

The Interline is a specialized online magazine delivering news, editorial content, and analysis focused on fashion technology and beauty technology. It targets professionals in these sectors, providing insights on market intelligence, product development, manufacturing, retail, and innovation. The website demonstrates a strong niche market position with consistent branding and high-quality content updated regularly since its founding in 2020. Technically, the site is built on WordPress with modern plugins for SEO and analytics, offering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and no obvious vulnerabilities, though some security headers and incident response policies are absent. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, though the professional presentation and active social media presence support legitimacy. Overall, the site is a credible resource for its target audience but would benefit from enhanced transparency and security practices.

P

Pražská integrovaná doprava

pid.cz

59

Pražská integrovaná doprava (PID) operates as the integrated public transportation system for Prague and the Central Bohemia region, providing comprehensive transit information including schedules, fares, route maps, and real-time updates. The website serves as a critical information hub for commuters and travelers, offering tools such as connection search, ticketing information, and news about service changes. The organization maintains a strong market position as a key public transportation provider in the region, supported by a large and well-maintained digital presence. Technically, the website is built on WordPress with modern libraries like Leaflet for mapping and Google reCAPTCHA for security on user forms, reflecting a mature and well-maintained infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR and cookie policies. Overall, the site is professional, trustworthy, and well-optimized for user experience.

F

FUNKE Digital

mediapartisans.com

51

FUNKE Digital is a digital media powerhouse and a 100% subsidiary of the FUNKE Mediengruppe, specializing in news websites, content verticals, and digital investments. The company positions itself as the digital motor of its parent group, leveraging modern technologies and agile teams to innovate and expand its digital offerings. The website reflects a professional and consistent brand image, targeting digital media consumers, advertisers, and investors primarily in Germany. Technically, the site is built on WordPress with modern plugins for SEO and interactive content, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS and consent management in place, though some security headers and policies could be improved. Privacy compliance is robust, with clear GDPR-aligned cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its business objectives.

O

O2 Czech Republic a.s.

o2knihovna.cz

58

O2 Knihovna is a digital content platform operated by O2 Czech Republic a.s., offering a wide range of e-books, audiobooks, e-magazines, ringtones, and applications primarily targeting Czech-speaking consumers. The platform leverages modern web technologies and integrates advanced analytics and consent management tools to ensure compliance with privacy regulations. The website demonstrates a professional design and user-friendly navigation, supporting a secure login process via SMS verification. Despite the absence of WHOIS data, the strong brand presence and official social media links reinforce its legitimacy. Security practices are sound with HTTPS enforcement and secure forms, though there is room for improvement in publishing explicit security policies and vulnerability disclosures.

booklookerforum.de is a German language community forum dedicated to supporting users and sellers on the booklooker.de marketplace, which specializes in used and antiquarian books as well as related media such as films, music, and games. The forum provides discussion areas for new features, user help, shipping, payment methods, and various book genres, fostering an engaged user base with thousands of topics and posts. The business model centers on community engagement to support and enhance the marketplace experience. Technically, the site runs on the phpBB forum platform with modern JavaScript libraries like jQuery and Font Awesome for UI elements. The hosting appears stable with dedicated nameservers, and the site is accessible via HTTPS, although explicit security headers are not visible in the provided content. Security posture is moderate with secure login forms but lacks published security policies or vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, serving a niche e-commerce community effectively.

P

Projektträger Jülich

ptj.de

49

Projektträger Jülich (PtJ) is a leading German project funding agency affiliated with Forschungszentrum Jülich, specializing in managing and implementing innovative government-funded research and innovation programs. With over 50 years of experience, PtJ holds a strong market position in the government and energy sectors, offering services such as project funding, strategic development, monitoring, communication, and procurement. The website reflects a professional and comprehensive digital presence, targeting government bodies, research institutions, and companies seeking funding. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Matomo analytics, ensuring excellent performance, mobile optimization, and accessibility. Security posture is strong, supported by ISO certifications and HTTPS enforcement, though explicit security headers could be enhanced. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, PtJ demonstrates high business credibility and trustworthiness with consistent branding and detailed service information.

Rie Koizumi's website serves as a professional portfolio showcasing the artist's illustrations and works, targeting art enthusiasts and potential buyers. The site includes galleries of artwork, links to an external shop, and social media presence on Instagram. The business model is primarily personal branding and direct-to-consumer sales through an external platform. Technically, the site is built on WordPress with a child theme and uses common web technologies like jQuery. SEO is supported by the All in One SEO plugin, and the site is mobile optimized with good navigation and design quality. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is a well-maintained artist portfolio with room for improvement in security and compliance.

MOS is a small, US-based architecture and design practice with a strong focus on theoretical and experimental architecture, publishing, and exhibitions. The website serves as a comprehensive archive of their projects, writings, and exhibitions spanning over two decades, targeting architects, students, and design professionals. Technically, the site is built on WordPress with modern JavaScript libraries and hosted on Linode, offering good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

B

booklooker.de: antiquarische und gebrauchte Bücher kaufen und verkaufen, Hörbücher, CDs, Filme und Spiele

booklooker.de

67

Booklooker.de operates as a specialized online marketplace focused on the buying and selling of used and antiquarian books, audiobooks, music, films, and games. Established since 1999, it serves a large customer base exceeding 4.1 million users, offering a secure shopping experience with buyer protection and personalized customer service. The platform provides extensive search and filtering capabilities, user account management, and a seller depot system, positioning itself as a trusted intermediary in the German retail media sector. Technically, the website employs modern web technologies including jQuery and jQuery UI for dynamic user interface elements, and integrates a consent management platform to ensure compliance with privacy regulations. The site is served over HTTPS with no detected blocking or WAF interference, indicating good accessibility and security practices. However, some security headers are missing, which could be improved to enhance protection against common web threats. From a security perspective, the site demonstrates a mature posture with encrypted communications, secure login forms, and no visible exposure of sensitive data. Privacy policies and cookie consent mechanisms are clearly implemented, supporting GDPR compliance. The absence of direct contact emails or phone numbers is mitigated by a contact form, though adding verified contact details could improve trust. The domain registration is consistent with the website branding, though WHOIS data is limited due to DENIC privacy restrictions. Overall, booklooker.de presents a professional, secure, and user-friendly platform with a strong market position in the German used media retail sector. Strategic improvements in security headers and enhanced transparency in contact information could further strengthen its trustworthiness and compliance posture.

J

JungeWelt Shop

jungewelt-shop.de

51

JungeWelt Shop is a German e-commerce platform specializing in the sale of media products such as DVDs, books, postcards, and merchandise related to the JungeWelt brand. The website targets German-speaking customers interested in JungeWelt publications and associated cultural products. The business operates a niche online retail model with a focused product catalog. Technically, the site uses modern web technologies including jQuery, Bootstrap, and integrates PayPal for payments, indicating a moderate level of digital maturity. The website is mobile optimized and provides a basic but functional user experience. Security posture is adequate with HTTPS enabled and secure login forms, but lacks visible security headers and comprehensive privacy or cookie policies, which are important for GDPR compliance. No contact information or incident response details are publicly available, limiting transparency. Overall, the site is functional and moderately secure but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

V

Verlag 8. Mai GmbH

unblock-cuba.org

46

The website www.unblock-cuba.org is a German-language non-profit advocacy platform dedicated to ending the US economic blockade against Cuba. It is operated by Verlag 8. Mai GmbH and serves as a hub for information dissemination, campaign coordination, and donation collection. The site targets activists and supporters interested in Cuba solidarity, providing multilingual resources and calls to action. The business model is donation-based, focusing on political advocacy rather than commercial services. Technically, the site is built on WordPress 6.8.3 using the GeneratePress theme and several plugins including Contact Form 7 and DSGVO cookie compliance tools. It employs HTTPS with a valid SSL certificate, ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. No advanced frameworks beyond WordPress are detected. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks advanced security headers and publicly available security policies or incident response information. No vulnerabilities or malicious indicators are found, but the absence of WHOIS data limits domain trust assessment. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy. Overall, the website presents a trustworthy and professional front for a small non-profit campaign. Recommendations include enhancing security headers, publishing security and incident response policies, and improving contact transparency. The domain's missing WHOIS data is a concern but does not currently indicate malicious intent. The site is safe for general audiences and free from adult or questionable content.

N

Národní plán obnovy, Ministerstvo průmyslu a obchodu ČR

planobnovycr.cz

46

The website planobnovy.gov.cz represents the official National Recovery Plan (Národní plán obnovy) coordinated by the Ministry of Industry and Trade of the Czech Republic. It serves as a government platform to communicate reforms and investments funded by the European Union, aimed at modernizing the Czech Republic across multiple sectors including digital transformation, green energy, education, and public administration. The site is well-positioned as a key government initiative with strong branding and clear messaging targeted at Czech citizens, public institutions, and stakeholders involved in national development. Technically, the website is built on a modern WordPress CMS platform, leveraging Bootstrap for responsive design, FontAwesome for icons, and several plugins including Complianz for GDPR compliance and Lightbox Photoswipe for media display. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, though some HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the security posture is solid for a government site, with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is likely due to privacy protection, which is justified given the nature of the domain. The site maintains compliance with GDPR and provides clear privacy and cookie policies. The risk assessment is low, with no suspicious content or security red flags detected.

U

UniverCity Bochum e.V.

univercity-bochum.de

50

UniverCity Bochum e.V. is a non-profit interdisciplinary knowledge network focused on fostering collaboration between scientific institutions, municipal administration, economic actors, and the wider city society in Bochum, Germany. The organization facilitates knowledge exchange, organizes events, and offers certification programs to strengthen the knowledge city concept. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Complianz for GDPR compliance. It features a clear navigation structure, multilingual support (German and English), and integrates social media channels for broader engagement. Security measures include HTTPS enforcement and hCaptcha integration for form protection, although some technical improvements are recommended such as fixing broken lazy loading images and implementing security headers. Overall, the site demonstrates a good security posture and strong privacy compliance, with comprehensive cookie and privacy policies in place. Contact information is available via email and a contact form with explicit consent mechanisms, but no phone number is provided. The domain registration data aligns well with the organization's regional and business focus, supporting legitimacy and trustworthiness.

C

Campus Start-ups.NRW

exzellenz-start-up-center.nrw

59

Campus Start-ups.NRW is a government-backed platform dedicated to fostering the academic start-up ecosystem in North Rhine-Westphalia, Germany. It provides comprehensive resources, support program information, and showcases success stories from universities and applied sciences institutions. The website is professionally designed, well-structured, and optimized for accessibility and mobile use. Technically, it employs modern JavaScript libraries such as jQuery, Swiper, and AOS for interactive and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, with a clear privacy policy and cookie management. The absence of WHOIS registrant data is due to privacy protection, which is justified for this type of public initiative. Overall, the website is trustworthy, authoritative, and serves its target audience effectively.

�

🚀Local Ads at Scale for Media Companies | Smartico

smartico.one

67

Smartico is a technology company specializing in AI-powered local advertising solutions tailored for regional news publishers and SMB advertisers. Their platform enables the creation and delivery of thousands of high-impact digital display and video ads with instant landing pages, combining artificial intelligence with human creativity. The company offers a suite of products including Smart Ads, Ad Studio, Smart Inserts, Social Job Ads, Marketplaces, Advertorials, and Digital Magazines, positioning itself as a leader in the media advertising technology sector. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and marketing automation tools such as Brevo (Sendinblue). The site is well-optimized for SEO and mobile devices, with good performance and accessibility features. Security practices include HTTPS, reCAPTCHA integration, and cookie consent management, although some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of explicit privacy and terms of service pages and the lack of public WHOIS data reduce transparency. The domain is privacy protected, which is common for commercial entities but limits trust verification. Overall, the website demonstrates a professional and trustworthy presence with room for enhanced compliance documentation. Strategically, Smartico should focus on publishing comprehensive privacy and security policies, enhancing security headers, and improving transparency around domain registration to strengthen trust and compliance posture.

F

FUNKE Digital GmbH

funkedigital.de

53

FUNKE Digital GmbH is a digital media powerhouse and a wholly owned subsidiary of the FUNKE Mediengruppe, based in Germany. The company specializes in operating news websites, content verticals, and digital investments, serving as the digital engine for its parent group. Their business model integrates modern technologies, agile methodologies, and interdisciplinary teams to innovate and expand digital media offerings. The website reflects a strong market position with a professional and consistent brand presence, targeting digital media consumers, advertisers, and investors. The company also actively recruits talent, emphasizing flexibility and a performance culture.