Security Directory

Č

Česká golfová federace

bavsegolfem.cz

41

Bav se golfem is a Czech Republic-based golf information platform operated in association with the Czech Golf Federation. It serves as a comprehensive resource for golf enthusiasts, providing location-based golf course listings, beginner guides, event information, and blog content. The platform targets a broad audience ranging from beginners to advanced players, promoting golf as a healthy and enjoyable leisure activity. The website is well-positioned nationally as a trusted source for golf-related information in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, Google reCAPTCHA, and Mapy.cz API for mapping services. The site is hosted on Czech infrastructure with Active24 as the inferred hosting provider. The website demonstrates good mobile optimization, SEO practices, and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent automated abuse. However, explicit security headers are not evident, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business purpose. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

N

NordNews

nordnews.de

43

NordNews.de is a regional news media website focused on delivering the latest news and updates from northern Germany. The site provides news articles, police reports, local event coverage, and job listings, targeting the general public interested in regional information. The website uses WordPress CMS with popular plugins such as Yoast SEO and Perfecty Push Notifications, indicating a moderate level of digital maturity. The technical infrastructure supports mobile optimization and SEO best practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

A

Archinfo

archinfo.sk

58

Archinfo.sk is a professional Slovak architectural portal providing comprehensive information, news, events, and resources for architects, designers, and related professionals in Slovakia. The site offers a variety of content including articles, discussions, competitions, and a database of firms and products, positioning itself as a key information hub in the Slovak architectural sector. Technically, the website uses a custom CMS with a technology stack including jQuery, Google Fonts, Font Awesome, and various JavaScript plugins. It implements HTTPS with good SSL configuration and integrates Google Analytics, Google Tag Manager, and Facebook SDK for analytics and marketing. Security posture is moderate with HTTPS and reCAPTCHA in place, but the use of an outdated jQuery version and lack of security headers are notable vulnerabilities. Privacy compliance is good with cookie consent and a privacy policy present, though no explicit security or incident response policies are published. Overall, the website is professional, content-rich, and trustworthy, with room for technical and security improvements.

B

BMWeshop.sk

bmweshop.sk

53

BMWeshop.sk is an e-commerce website specializing in BMW lifestyle products such as clothing, accessories, toys, and collectibles targeted primarily at BMW enthusiasts in Slovakia. The website is built on the Shoptet platform and uses common web technologies including jQuery, Google Analytics, and Facebook SDK for tracking and marketing purposes. The site presents a professional design with consistent branding and clear navigation, offering a good user experience. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, the site enforces HTTPS and uses CSRF tokens but relies on an outdated jQuery version and lacks visible security headers, which could expose it to vulnerabilities. The WHOIS data is privacy protected, which is common for small e-commerce businesses but reduces transparency. Overall, the site is functional and trustworthy but would benefit from improved security practices and privacy compliance.

W

Wildwechsel

wildwechsel.de

63

Wildwechsel is a regional German media platform specializing in event listings and cultural information for areas including Kassel, Paderborn, Marburg, Nordhessen, and OWL. The website offers comprehensive event data such as concerts, parties, theater, and local activities, targeting a general audience interested in regional happenings. Technically, the site is built on WordPress and integrates various modern web technologies including Google Fonts, FontAwesome, and multiple analytics and advertising scripts. Hosting is provided via GoDaddy, and the site uses HTTPS with a good SSL configuration. Security measures include anti-spam and bot detection services, but explicit security headers are lacking, and no formal privacy or cookie policies are detected, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy front with moderate technical performance and good content quality.

The website www.eeagrants.ro serves as the official Romanian governmental portal for the EEA and Norwegian Grants 2014-2021, managed by the Ministry of Investments and European Projects. It provides comprehensive information about grant programs, project calls, results, and bilateral relations, targeting Romanian governmental bodies, NGOs, and the general public interested in European funding opportunities. The site is well-branded with consistent use of official logos and government references, establishing high trustworthiness and credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, Google Analytics, Facebook SDK, and Google Charts. It is mobile responsive with good SEO and accessibility basics, though accessibility could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are missing, and privacy and cookie policies are not explicitly present, indicating areas for compliance improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and use of reCAPTCHA for forms, with no visible vulnerabilities or exposed sensitive data. The lack of security headers and formal incident response or vulnerability disclosure information are notable gaps. WHOIS data is privacy protected as per Romanian ROTLD policy, which is standard and justified for this governmental domain. Overall, the site is a professional, trustworthy government resource with solid technical foundations but could enhance privacy compliance and security posture by adding explicit policies and security headers. The risk level is low, but improvements in transparency and security best practices are recommended.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

The website drohnenführerschein.eu represents seabirds.de GmbH, a German company specializing in drone pilot training and certification recognized by the Luftfahrt-Bundesamt. The company offers a range of educational services including theoretical and practical courses, official EU drone pilot license preparation, and consulting for drone operations. The site is professionally designed with clear navigation and relevant content targeting both private individuals and businesses interested in drone operation compliance and training. Technically, the site uses established libraries such as jQuery, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. Security posture is moderate with HTTPS implied but lacks explicit security headers and advanced form protections. Privacy compliance is basic with cookie consent and privacy policy present but no detailed security or incident response policies are found. Overall, the site is trustworthy and legitimate with clear business contact information and official certifications.

S

seabirds.de GmbH

seabirds.de

46

seabirds.de GmbH operates a specialized flight school and charter service based at Flugplatz Oldenburg-Hatten, Germany. The company offers pilot training including PPL and LAPL licenses, sightseeing flights, and aircraft chartering. The website is professionally designed with clear navigation and relevant content targeting aviation students and enthusiasts. Technically, the site uses Bootstrap and jQuery with integrations for Google Analytics and Facebook SDK, though it employs an outdated jQuery version which poses some security risks. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is addressed with a cookie consent banner and a privacy policy linked in the imprint. Overall, the site is trustworthy and well-positioned locally but could improve technical security and transparency.

G

Gradska knjižnica Sveti Ivan Zelina

knjiznica-zelina.hr

10

Gradska knjižnica Sveti Ivan Zelina is a public library serving as a cultural, educational, and social hub for the local community in Sveti Ivan Zelina, Croatia. The website provides information about library services, events, special collections, and access to an online catalog. The target audience includes children, youth, and adults interested in literature and cultural activities. The library operates as a non-profit public institution with a focus on community engagement and education. Technically, the website is built on Joomla CMS and utilizes common frontend technologies such as jQuery, Bootstrap, UIkit, and Smart Slider 3. It integrates Facebook SDK for social media and includes an accessibility widget (UserWay). The site is hosted under a Croatian academic registrar (CARNET), indicating a stable and appropriate hosting environment. The website is moderately performant and well-optimized for mobile devices with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no dedicated privacy policy page found, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, serving its public service mission effectively. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, and publishing incident response contacts to enhance security posture and compliance.

D

Dimedia internet tehnologije d.o.o.

dimedia.hr

43

Dimedia internet tehnologije d.o.o. is a Croatian technology company specializing in custom software development, mobile applications, web design, and internet marketing services. Established in 2010, the company targets businesses seeking comprehensive digital solutions to enhance their online presence and operational efficiency. Their market position is supported by a portfolio of clients across real estate, tourism, and corporate sectors, demonstrating a solid foothold in the regional IT services market. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA, ensuring basic security and user engagement features. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Hosting and domain registration are consistent with the company's Croatian location, enhancing trust. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with presence of privacy and cookie policies, but no explicit GDPR compliance statements or data retention policies were found. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business credibility profile. Strategic improvements in security policy transparency and accessibility would further enhance their posture.

Č

Český svaz moderního pětiboje, z.s.

pentathlon.cz

44

Český svaz moderního pětiboje, z.s. is the official Czech Modern Pentathlon Association, established in 2002, serving as the national governing body for modern pentathlon sports in the Czech Republic. The organization focuses on athlete development, competition organization, and promotion of the sport to youth and sports enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of athletes, clubs, and fans. Technically, the site employs modern JavaScript libraries, lazy loading, and integrates social media and analytics tools, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and removal of potentially sensitive inline scripts. Privacy compliance is basic, lacking explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business, supporting high legitimacy and trustworthiness.

N

Nase Media a.s.

parlamentnilisty.cz

10

ParlamentniListy.cz is a well-established Czech political news and commentary website operated by Nase Media a.s. It offers a broad range of political news, interviews, opinion pieces, and profiles of politicians and institutions. The site targets Czech-speaking audiences interested in politics and current affairs, leveraging advertising and subscription models for revenue. Technically, the site employs modern web technologies including Google services for ads and analytics, Facebook SDK, and a consent management platform to ensure GDPR compliance. The website is mobile-optimized and structured for SEO with JSON-LD data. Security-wise, the site enforces HTTPS and uses reCAPTCHA to mitigate bots, but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection.

Tenisová škola Zýka Hořovice is a small, family-run tennis school based in the Czech Republic with over 20 years of experience. The business focuses on tennis training for children and competitive players, offering services such as racket stringing and court rentals. The website is built on the eStránky.cz platform and integrates basic technologies like jQuery and Facebook SDK for social media connectivity. However, the site lacks critical compliance documents such as privacy and cookie policies and does not provide contact emails, limiting its professional and compliance posture. The absence of WHOIS data raises concerns about domain legitimacy, although the site content appears genuine and targeted at local tennis enthusiasts.

B

Bezplatná právní poradna online zdarma pro všechny

bezplatnapravniporadna.cz

47

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

H

Hotel zámek Berchtold

zamekberchtold.cz

59

Hotel zámek Berchtold is a hospitality business located in the Czech Republic offering a range of services including corporate events, teambuilding, weddings, family vacations, wellness, sports, and restaurant facilities. The website presents a professional and consistent brand image with clear navigation and relevant content targeting corporate clients, families, and tourists. The business is small-sized and has been established since 2006, supported by a domain registration consistent with its history. Technically, the website is built on WordPress hosted on WordPress.com, leveraging Jetpack and other standard plugins. It uses HTTPS with good SSL configuration and includes integrations such as Facebook SDK and Google Translate. Performance and mobile optimization are moderate to good, though accessibility features could be improved. From a security perspective, the site benefits from WordPress.com hosting security but lacks explicit security policies, vulnerability disclosure, and advanced security headers. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy or terms of service pages. Contact information is comprehensive and trustworthy. Overall, the website is safe, professional, and credible with minor gaps in privacy and security documentation. Strategic improvements in privacy policy publication, security headers, and incident response information would enhance trust and compliance.

T

TREKY.CZ - Vít Sykáček

treky.cz

40

TREKY.CZ is a niche outdoor travel website focused on hiking, trekking, and cycling routes primarily in the Czech Republic but also covering international destinations. The site offers route guides, travel tips, and user-submitted content, targeting outdoor enthusiasts and tourists interested in hiking and cycling. The business model centers on content publishing and community engagement. Technically, the site runs on Drupal CMS with common web technologies including jQuery, Google Analytics, and Facebook SDK. The site is moderately optimized for performance and SEO but has basic mobile and accessibility features. Security posture is average with HTTPS usage implied but lacking important security headers and policies. No WHOIS data is available, which raises concerns about domain legitimacy and transparency. Contact is limited to web forms and social media presence. Overall, the site provides valuable content but needs improvements in security, privacy compliance, and domain transparency.

S

Spådam.se

spadam.se

45

Spådam.se is a Swedish website offering professional psychic and medium services including tarot readings, spiritual guidance, and coaching. The business targets adults interested in spiritual and psychic consultations, operating primarily through paid phone lines and online services. The website presents a professional and consistent brand image with clear navigation and multiple contact phone numbers for different service lines. Technically, the site uses a modern tech stack including Materialize CSS, jQuery, and Cookiebot for cookie consent management, with integrations for Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers are not clearly detected and no incident response or security policy pages are found. WHOIS data for the www.spadam.se subdomain is missing, which slightly reduces trustworthiness, but the main domain spadam.se is presumably registered. Overall, the website is compliant with GDPR cookie consent requirements and provides a good user experience with moderate tracking and advertising transparency.

B

Banskobystrický samosprávny kraj

bbsk.sk

59

Banskobystrický samosprávny kraj operates as the regional government authority for the Banská Bystrica region in Slovakia, providing a comprehensive online portal with information and services for citizens, businesses, and organizations. The website offers detailed sections on social services, healthcare, culture, education, transportation, environmental planning, and regional projects, positioning itself as a key informational and service hub for the region. The site targets a broad audience including residents, entrepreneurs, and public institutions within the region. Technically, the website employs modern web technologies including October CMS, Bootstrap framework, service workers for PWA capabilities, and integrates third-party services such as Google Fonts and Facebook SDK. Hosting appears to leverage Azure services for chatbot functionality. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. The WHOIS data confirms the domain's legitimacy and consistent registration with the official government entity. Overall, the website demonstrates a strong digital presence with good content quality, technical implementation, and privacy compliance, suitable for a government institution. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

S

Smex Ed

smexed.com

55

Smex Ed is a small digital media company operating a free digital magazine focused on sexual empowerment and education. Founded in 2023, it offers educational content, a podcast, and advertising opportunities targeting a general audience interested in sexual health and empowerment. The website is hosted on WordPress.com and uses modern web technologies including embedded social media and podcast platforms. The business model relies on donations and advertising revenue. The site is professionally designed with good navigation and mobile optimization, though it lacks formal privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved with enhanced security headers and published policies. Overall, the domain registration and hosting are consistent and legitimate for the business type.

S

Soulfood Cafe Simonz

cafe-simonz.de

9

Soulfood Cafe Simonz is a small hospitality business located in Wuppertal-Arrenberg, Germany, offering food, drinks, and cultural events including live music and private event hosting. The website provides clear contact information and event announcements, targeting local community members and visitors interested in dining and cultural experiences. Technically, the site is built on the IONOS MyWebsite platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and Facebook SDK for social integration. The site is served over HTTPS, ensuring secure connections, but lacks advanced security headers and formal privacy or cookie policies. Security posture is moderate with room for improvement in compliance and best practices. Overall, the website is functional, moderately optimized, and trustworthy for its business purpose.

B

BREITZMANN Edelmetalle & Diamanten GmbH & Co. KG

breitzmann-edelmetalle.de

9

BREITZMANN Edelmetalle & Diamanten GmbH & Co. KG operates as a local precious metals and diamond trading business based in Bayreuth, Germany. The company offers services including buying and selling gold, silver, diamonds, jewelry, and watches, with a focus on immediate cash payments and free valuations. Their market position is that of a trusted local partner for individuals and investors interested in precious metals and stones. The website content is primarily in German and targets local customers seeking reliable precious metal transactions. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, jQuery, Google Tag Manager, Facebook SDK, and Cookiebot for cookie consent management. The site is served over HTTPS, uses Google reCAPTCHA for form security, and integrates tracking tools for analytics and marketing. However, it lacks advanced security headers and comprehensive privacy and security policies, indicating room for improvement in compliance and security posture. From a security perspective, the site benefits from HTTPS encryption and anti-bot measures but does not publish incident response contacts or security policies. No vulnerabilities or suspicious content were detected. The absence of privacy and terms of service pages represents a compliance gap, especially under GDPR. Overall, the site demonstrates a moderate security maturity level with good business credibility but requires enhancements in privacy and security transparency. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing privacy and terms of service documents, establishing incident response contacts, and improving accessibility and compliance features to enhance trust and security culture.

Z

ZOAA

zoaa.cz

44

ZOAA is a Czech architectural studio specializing in designing hospitality and residential projects. Their website showcases a portfolio of projects including restaurants, hotels, and apartments, emphasizing modern and aesthetic architectural solutions. The company targets private investors and hospitality businesses seeking architectural design services. The website is built on WordPress with modern web technologies and integrates social media and analytics tools. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. WHOIS data is unavailable, which limits domain trust assessment. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

Z

Zavod MOVIT

movit.si

45

Zavod MOVIT is a Slovenian non-profit organization dedicated to the development and management of youth mobility programs, particularly those aligned with European Union initiatives such as Erasmus+. The organization acts as a national coordinator for youth mobility, European youth policy, and international cooperation of local communities, focusing on young people and promoting European citizenship. The website reflects a well-structured and professional digital presence, leveraging TYPO3 CMS and integrating key tools such as Google Analytics and Facebook SDK for user engagement and analytics. However, some technical aspects such as outdated jQuery and mixed content loading indicate areas for modernization. Security posture is moderate, with HTTPS enforced and captcha protection on forms, but lacking advanced security headers and explicit security policies. Contact information is comprehensive, including email, phone, physical address, and a contact form with captcha, supporting user communication. Overall, the website is trustworthy and safe, targeting a general audience interested in youth programs and European initiatives.

N

National Rifle Association

nrahq.org

60

The website explore.nra.org represents the National Rifle Association's Explore platform, providing information about NRA clubs, competitions, events, training, and membership programs. The site targets NRA members, law enforcement, youth, and the general public interested in NRA activities. It positions itself as a large, established non-profit organization in the firearms advocacy sector. Technically, the site uses a mix of legacy and modern web technologies including AngularJS, jQuery, Google Tag Manager, and Facebook SDK, indicating moderate digital maturity. The security posture is adequate with HTTPS and asynchronous loading of third-party scripts, but lacks visible security headers and uses outdated libraries, which could pose risks. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

T

Tempus Public Foundation

europass.hu

44

Europass.hu is the official Hungarian portal managed by the Tempus Public Foundation, providing comprehensive career development and educational services including Europass document creation, job search assistance, and support for educational institutions and partners. The website serves as a trusted national resource for career advancement and learning opportunities in Hungary. Technically, the site employs a modern tech stack including jQuery, Owl Carousel, Google Tag Manager, Facebook SDK, and Hotjar, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting its government-affiliated status.

K

KOMFOS Prešov, s.r.o.

komfos.sk

48

KOMFOS Prešov, s.r.o. operates as a Slovakian retail and wholesale food business, affiliated with the international CBA franchise. The company offers a broad range of food products including meat, dairy, confectionery, beverages, and spices, targeting both households and business customers. Their market position is solid within Slovakia as a medium-sized enterprise with a clear focus on food retail and wholesale services, supported by an e-shop and loyalty programs. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates social media and marketing tools, and provides a responsive user experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible business presence.

O

Obchodné centrum Zemplín

oczemplin.sk

49

Obchodné centrum Zemplín is a regional shopping center located in Michalovce, Slovakia, serving a broad local population with retail shops, dining options, and leasing services. The website reflects a mature business with a clear market position and a focus on providing information about tenants, promotions, and leasing opportunities. Technically, the site uses standard web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics and Smartlook. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though it lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with a privacy policy and cookie banner in Slovak language. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

SAMI spol. s r.o.

babinet.cz

47

Babinet.cz is a well-established Czech media portal focused on women's lifestyle, offering a broad range of content including articles, moderated discussions, recipes, podcasts, contests, and travel tips. The site is operated by SAMI spol. s r.o., with a domain age dating back to 2000, indicating a mature and stable presence in the market. The portal targets primarily women and operates a business model centered on content delivery and advertising revenue. It maintains partnerships with related sites such as zdraviamy.cz and autaprozeny.cz, enhancing its content ecosystem. Technically, the website employs a modern tech stack including jQuery, Swiper.js for UI components, Google Tag Manager, Google Adsense for monetization, and Facebook SDK for social integration. Hosting and domain registration are consistent with the business identity, using REG-WEBGLOBE as registrar and Superhosting.cz for DNS. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. From a security perspective, Babinet.cz uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, the site shows secure form handling and no visible vulnerabilities in the provided content. Privacy policies and terms of service are clearly presented, supporting compliance and user trust. No incident response or security policy pages were found, suggesting an area for improvement. Overall, Babinet.cz presents a low-risk profile with a strong business credibility and good privacy compliance. The site is safe for general audiences, with no adult or explicit content detected. Strategic recommendations include enhancing security headers, publishing explicit security policies and incident response contacts, and improving accessibility compliance to further strengthen trust and security posture.

E

ELSA GROUP s.r.o.

elsaslovakia.sk

61

ELSA GROUP s.r.o. operates a professional e-commerce website specializing in towing devices and roof racks, primarily serving the Slovak and Czech markets. Established since 1995, the company offers a wide range of automotive accessories with a strong emphasis on quality and direct manufacturer sourcing. The website features a comprehensive product catalog, clear navigation, and multiple trusted brand partnerships, positioning it as a reputable player in its niche. Technically, the site uses a custom e-commerce CMS (BSSHOP) with modern tracking and marketing tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates a mature digital presence with high business credibility and trustworthiness.

E

ELSA GROUP s.r.o.

tazne.cz

55

ELSA GROUP s.r.o. operates a professional e-commerce website specializing in automotive towing devices, roof racks, and related accessories primarily serving the Czech Republic market. The company has a strong market position with a comprehensive product catalog, installation services, and a well-established brand since 1995. The website is well-designed, content-rich, and optimized for user experience with clear navigation and localized content. Technically, the site uses a custom ASP.NET MVC platform with modern tracking and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, and Facebook SDK. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS registration data is a notable risk factor, reducing domain trustworthiness despite the professional appearance and business legitimacy. Overall, the site is safe, compliant with privacy regulations, and suitable for general audiences.

ENERKOM RŮŽE, z.s. is a small non-profit community energy organization based in the South Bohemian region of the Czech Republic. The organization focuses on enabling local individuals, businesses, and municipalities to produce, share, and save money on renewable energy through innovative projects such as energy sharing, electric vehicle charging infrastructure, and energy consumption monitoring. Their market position is regional and community-focused, with partnerships supporting local development. Technically, the website uses legacy JavaScript libraries and a basic CMS platform, with moderate performance and basic mobile optimization. Security posture is moderate but lacks advanced security headers and explicit policies. Privacy compliance is partial, with a cookie consent banner but no clear privacy policy or terms of service pages. Contact information and business registration details are clearly presented, enhancing credibility despite missing WHOIS data. Overall, the website is functional and informative but would benefit from technical and security improvements.

P

pardubice.cz

pardubice.cz

45

Pardubice.cz operates as a regional news and cultural events portal serving the Pardubice region in the Czech Republic. The website provides timely news updates, event information, and cultural and sports content targeted at local residents and visitors. The business model centers on information dissemination with a focus on regional relevance, positioning itself as a trusted local media source. The domain is well-established since 1997, reinforcing its credibility and market presence. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and MonsterInsights for analytics. The infrastructure includes modern web technologies like jQuery and Facebook SDK integration. Hosting is managed through a registrar with consistent name servers. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and formal security policies are absent, indicating room for improvement in security posture. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, pardubice.cz presents a professional, trustworthy, and compliant web presence suitable for its regional audience. Strategic enhancements in security headers and incident response disclosures would further strengthen its security maturity and user trust.

E

ERS Respiratory Channel

ers-education.org

60

The ERS Respiratory Channel website appears to be a specialized platform focused on respiratory health content, likely targeting healthcare professionals or patients interested in respiratory topics. The site uses a variety of third-party analytics and tracking tools, indicating a moderate level of digital maturity. However, the lack of visible privacy policies, contact information, and WHOIS registrant data limits the overall trust and compliance posture. The technical infrastructure relies on older versions of jQuery and jQuery UI, along with standard web technologies and popular icon fonts. Security headers and SSL configuration details are not evident from the provided data, suggesting room for improvement in security hardening. Overall, the site is functional but basic in design and content presentation, with limited transparency on privacy and business details.

Georg Thieme Verlag operates Thieme Connect, a comprehensive online platform offering electronic medical and scientific products including e-books, e-journals, and e-learning solutions. The website targets healthcare professionals, researchers, and librarians, positioning itself as a trusted provider of specialized medical knowledge and educational resources. The platform is well-branded and professionally maintained, reflecting a mature digital presence in the healthcare publishing sector. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

W

Wargaming

wargaming.com

65

Wargaming is a well-established online game developer and publisher, recognized as a leader in the free-to-play MMO market. The company offers a portfolio of popular games such as World of Tanks and World of Warships, targeting gamers worldwide as well as potential job applicants and partners. The website serves as a corporate and recruitment portal, providing company news, career opportunities, and partnership information. Technically, the site is built using modern web technologies including React, and integrates common marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, implements standard security headers, and uses a cookie consent mechanism compliant with GDPR. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure information. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a long domain age and consistent WHOIS information.

R

Reboot

reboot.hr

48

Reboot.hr is a well-established Croatian regional media website focused on video game news, reviews, and culture. Founded in 2012, it serves as the largest regional gaming magazine and news portal, offering regular content updates including articles, podcasts, and community forums. The site targets gaming enthusiasts primarily in Croatia and the surrounding region. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google Analytics, hosted by a Croatian registrar and hosting provider. The website is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and consistent branding. Security-wise, the site enforces HTTPS and uses standard security practices but lacks explicit security headers and formal privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are publicly available, limiting transparency. Overall, the domain registration data aligns well with the website content, indicating legitimacy and stability. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture.

K

Kongregate

kongregate.com

71

Kongregate is a well-established online gaming platform offering thousands of free games across various genres including action, strategy, and RPGs. The platform supports a vibrant gaming community with features such as achievements and ratings, targeting gamers of all ages. The business model primarily relies on advertising revenue with options for premium user experiences. Technically, the website employs modern JavaScript frameworks, integrates with major analytics and advertising services like Google Analytics, Google Ads, and Facebook SDK, and is hosted likely on AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and accessibility standards. Security-wise, Kongregate enforces HTTPS, uses standard security headers, and implements CSRF protections, though it lacks a publicly visible security policy or incident response contacts. The WHOIS data is unavailable or protected, which slightly impacts trust but is common for such businesses. Overall, the site is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for users.

P

Publicis Groupe

publicisgroupe.media

58

Publicis Groupe's Slovak media site presents itself as an integrated communication group specializing in media, data, and technology services. The company emphasizes a unified team approach under the 'Power of One' philosophy, aiming to build strong brands and succeed in platform-driven markets. The website content is professional, targeting business clients and showcasing certifications that reinforce its market credibility. Technically, the site is built on WordPress with modern marketing and analytics tools such as Google Tag Manager and Facebook SDK, ensuring a solid digital infrastructure. Security posture is good with HTTPS enabled and GDPR cookie compliance implemented, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy and well-positioned in its industry segment.

C

Children's of Alabama

childrensalblog.org

57

Children's of Alabama operates a dedicated blog platform providing educational and awareness content focused on pediatric health and safety. The site serves as a trusted resource for parents, caregivers, and healthcare professionals in the Alabama region, leveraging its affiliation with Children's of Alabama and the University of Alabama at Birmingham. The content is professionally presented, relevant, and consistent with the organization's mission to support children's health. Technically, the website is built on WordPress and hosted on WordPress.com, utilizing common web technologies such as jQuery and Jetpack for analytics and social integration. While the site benefits from HTTPS and domain registration protections, it lacks advanced DNS security features and security headers, representing areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website demonstrates a solid business credibility and content quality but requires enhancements in privacy and security posture to strengthen trust and compliance.

A

ACHAVA Festspiele Thüringen

achava-festspiele.de

37

ACHAVA Festspiele Thüringen is a regional cultural festival organizing concerts and dialogues primarily in the German state of Thuringia. The website presents event highlights for 2025 and showcases awards such as the Margot-Friedländer-Preis 2025, indicating recognition in the cultural sector. The organization operates as a non-profit entity focused on media and cultural events, targeting a general audience interested in arts and culture. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party libraries such as Flickity for carousels and the Facebook SDK for social media integration. Hosting is provided by a known German hosting provider (kasserver.com). The site is moderately optimized for mobile devices and has basic SEO and accessibility features. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is not directly visible on the main page, which may impact user trust and support accessibility. Overall, the website is functional, professionally designed, and trustworthy for its cultural event purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

S

STIEFEL EUROCART s.r.o.

stiefel.sk

47

STIEFEL EUROCART s.r.o. is a Slovak company specializing in providing comprehensive educational solutions and didactic aids for kindergartens, primary, and secondary schools. Their offerings include digital interactive tools, educational materials, and workshops, targeting educational institutions and parents. The website reflects a niche market position focused on supporting modern teaching methods through digital technologies. Technically, the website employs common web technologies such as jQuery, Facebook SDK, and Google Tag Manager, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and published privacy or incident response policies, suggesting room for improvement in security posture. Overall, the website is professional and functional with clear contact information, but enhancing privacy compliance and security best practices would strengthen trust and compliance.

I

Irving Shipbuilding Inc.

shipsforcanada.ca

46

Irving Shipbuilding Inc. operates the Halifax Shipyard as a key partner in Canada's National Shipbuilding Strategy, focusing on constructing naval combatant ships for the Royal Canadian Navy. The company has invested heavily in modernizing its facilities and emphasizes Canadian economic impact, supplier engagement, and career opportunities. The website reflects a professional and consistent brand image targeting government stakeholders, suppliers, and potential employees. Technically, the site uses modern web technologies including JavaScript frameworks, social media integrations, and video content, hosted under a reputable registrar with HTTPS enabled. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

B

BigRock

bigrock.com

68

BigRock is a well-established web presence solutions provider focusing on domain registration, web hosting, and related services primarily targeting small businesses, professionals, and individuals. The website indicates a transition away from the .com domain for new orders, directing new customers to the .in domain, which suggests a strategic regional focus. The company is part of Newfold Digital, a known parent company in the web services industry. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Analytics, with a moderate performance and good mobile optimization. Security practices include HTTPS usage and cookie consent mechanisms, though explicit security headers are not evident in the provided content. The WHOIS data for the domain www.bigrock.com is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is professional and trustworthy from a user perspective but would benefit from improved security header implementation and clearer domain registration information.

I

International Transport Workers' Federation

itfshipbesure.org

54

The ITFShipBeSure website is an informational platform operated by the International Transport Workers' Federation, focusing on guiding seafarers through the recruitment process, helping them find registered recruitment agents, and raising awareness about recruitment scams. The site targets maritime workers primarily from countries like Bangladesh, India, Indonesia, Myanmar, and the Philippines. It serves as a trusted resource within the maritime labor sector, providing directories, scam reporting mechanisms, and educational content aligned with international labor conventions. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics for user tracking and Facebook SDK for social media integration. The site is mobile-optimized, accessible, and demonstrates good SEO practices. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The absence of WHOIS data due to privacy protection is justified given the non-profit nature of the organization. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site maintains a good security posture but would benefit from enhanced transparency around privacy and security policies. The overall risk assessment is low, with the site presenting as a credible and professional resource for its target audience. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to further strengthen trust and compliance.

T

Terra Incognita - Krajina nespoznaná

terraincognita.sk

43

Terra Incognita - Krajina nespoznaná is a Slovak website focused on exploration or travel related to unknown or less explored landscapes. The site uses WordPress with the Divi theme and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. The website is moderately optimized for SEO and mobile devices, providing a generally good user experience with clear navigation and professional design elements. However, it lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance and trustworthiness. Security posture is basic with HTTPS enabled but missing important security headers and formal security policies. No contact information or incident response details are provided, limiting direct communication channels for users or security issues. Overall, the website is legitimate and consistent with its domain registration data but would benefit from enhanced privacy and security practices.

I

International Transport Workers’ Federation (ITF)

itfseafarers.org

57

The International Transport Workers’ Federation (ITF) Seafarers website serves as a comprehensive resource and advocacy platform dedicated to the rights, welfare, and support of seafarers worldwide. It provides a wide range of resources including news, directories, apps, and guidance on employment rights and wellbeing. The organization holds a strong global position as a non-profit leader in maritime labor rights. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party integrations such as Facebook SDK and Google Translate for multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but explicit security policies and incident response information are absent. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, which is common and justified for such organizations. The website is trustworthy, professional, and safe for general audiences.

P

Politiets Fellesforbund

pf.no

60

Politiets Fellesforbund is the largest police trade union in Norway, representing approximately 17,000 members. The organization provides membership services, advocacy on wages and working conditions, training, legal assistance, and insurance partnerships. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of police employees and stakeholders in Norway. Technically, the site uses Craft CMS, integrates modern JavaScript libraries, and employs a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS, CSRF protection, and anonymized analytics, though explicit security policy and incident response contacts are not publicly visible. Overall, the domain age and registrant data align well with the organization's profile, indicating high legitimacy and trustworthiness.

D

Delta

delta.no

72

Delta is a Norwegian trade union organization affiliated with YS, providing membership benefits, labor rights advocacy, and professional development services to workers in Norway. The website is professionally designed, content-rich, and targets Norwegian workers seeking union support. Technically, the site uses AngularJS, Bootstrap, and integrates multiple third-party analytics and social media scripts, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy policy and security headers, which are areas for improvement. Overall, the site is trustworthy and serves its audience well, though enhancing privacy compliance and security practices would strengthen its position.

D

Detroit Grand Prix, Inc

detroitgp.com

64

Detroit Grand Prix, Inc operates the Chevrolet Detroit Grand Prix, an annual motorsport street racing event held in Downtown Detroit. The website serves as a comprehensive platform for ticket sales, event information, news updates, and partnership opportunities, targeting motorsport fans and event attendees. The company holds a strong market position within the motorsport and event promotion sectors, leveraging digital channels and social media to engage its audience. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Marketo forms, and social media SDKs. It features multimedia content such as videos and social feeds, with good mobile optimization and accessibility. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the site uses HTTPS and integrates secure third-party services. However, explicit security headers are not detected, and there is no visible cookie consent mechanism, which are areas for improvement. The absence of WHOIS data limits domain trust assessment but the professional presentation and consistent branding support legitimacy. Overall, the website demonstrates a mature digital presence with strong business credibility but could enhance privacy compliance and security posture to further strengthen trust and regulatory adherence.