Security Directory

P

ProfiPress s.r.o.

mechanizaceweb.cz

45

Mechanizaceweb.cz is a Czech professional media website operated by ProfiPress s.r.o., specializing in agricultural and forestry machinery news and information. The site serves a niche audience of professionals and enthusiasts in the Czech agricultural sector, offering news articles, event calendars, and advertising opportunities. The business is well-established with a domain age of over a decade and consistent branding and content quality. Technically, the site is built on WordPress with Oxygen Builder and integrates modern web technologies and analytics tools such as Google Tag Manager and Matomo. Security posture is good with HTTPS, GDPR-compliant cookie consent, and use of reCAPTCHA, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate user tracking and transparent advertising practices.

P

ProfiPress s.r.o.

uroda.cz

47

Uroda.cz is a well-established Czech agricultural media website operated by ProfiPress s.r.o., founded in 2003. It provides specialized news, articles, and event information focused on plant production and agricultural research, targeting agricultural professionals in the Czech Republic. The site features a professional design, clear navigation, and is built on WordPress with Oxygen Builder, integrating modern web technologies and advertising solutions. GDPR compliance is robust, with a detailed privacy policy and cookie consent mechanism. Security posture is strong with HTTPS, reCAPTCHA, and no visible vulnerabilities. Contact is primarily via forms, with social media presence on Facebook. Overall, the site is credible, professional, and trustworthy.

P

ProfiPress s.r.o.

profipress.cz

43

ProfiPress s.r.o. is a Czech publishing company specializing in professional magazines, literature, and web portals focused on agriculture, horticulture, veterinary medicine, and municipal sectors. Established in 2003, it holds a strong market position with multiple specialized publications and projects, serving a professional audience. The business model revolves around print and digital subscriptions, advertising, and event organization. The website reflects a mature digital presence with good content quality and consistent branding.

R

Recykluji! Neskládkuji! – Konference Recykluji! Neskládkuji!

recyklujineskladkuji.cz

54

The website www.recyklujineskladkuji.cz represents a professional conference titled 'Recykluji! Neskládkuji!' focused on recycling and sustainable management of construction waste. It targets construction companies, transporters, municipal representatives, recycling advocates, and students in construction fields. The conference offers expert lectures, practical case studies, moderated discussions, and networking opportunities. The event is supported by regional authorities such as the Plzeňský kraj and features reputable industry partners. Technically, the site is built on WordPress using Elementor, with common web technologies like jQuery and Font Awesome. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but security headers are missing, and no privacy or cookie policies are present, indicating compliance gaps. No contact emails or phone numbers are explicitly provided, which limits direct communication channels. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable for this type of small conference site. Overall, the site is legitimate, professional, and safe, but improvements in privacy compliance and security hardening are recommended.

Ú

Údolí Svratky a.s.

udolisportu.cz

51

Údolí sportu is a regional tourism and sports promotion website focused on the Vír area in the Czech Republic. It offers comprehensive information about over twenty sports activities including climbing, kayaking, mountain biking, and via ferratas, targeting active tourists and sports enthusiasts. The website also provides accommodation options and publishes articles and event information to support regional tourism. The business operates as a small entity under Údolí Svratky a.s., with a clear focus on hospitality and outdoor activities. Technically, the website uses a modern tech stack including Google Maps API for interactive location services, Google Fonts for typography, and jQuery for scripting. The site appears to be built on a CMS platform likely WebSynergy, with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is moderate; HTTPS is implied but security headers are not explicitly detected. The site implements a cookie consent mechanism and a basic privacy policy indicating GDPR compliance. However, no explicit security policies or incident response contacts are found. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner references suggest a legitimate regional tourism project. Overall, the site is professional and trustworthy for its target audience, but improvements in security best practices and transparency could enhance its credibility and resilience against threats.

The Motiv Open website serves as the official platform for an international bowling tournament held annually in Brno, Czech Republic. It provides comprehensive event information including registration links, schedules, results, news updates, and partner acknowledgments. The target audience primarily consists of bowling players and enthusiasts across Europe. The business operates as a small-scale event organizer focusing on sports hospitality and community engagement within the bowling niche. Technically, the website employs a traditional tech stack featuring jQuery, Bootstrap 3.3.7, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. While the site is functional and moderately optimized for mobile, it uses somewhat dated frameworks and lacks advanced accessibility features. Performance is moderate with basic SEO and meta tag implementations. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some privacy awareness. However, it lacks visible security headers, published security policies, and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but the absence of privacy and terms of service pages represents a compliance gap. The WHOIS data aligns well with the website's Czech origin and event focus, supporting legitimacy. Overall, the site is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance, improved security practices, and modernization of its technical stack to reduce risks and improve user trust.

The domain quadpay.com currently hosts no active website content and instead displays a placeholder page indicating the site is not available on the WP Engine platform. This suggests the website is either under maintenance, decommissioned, or not yet launched. The lack of any business-related content, contact information, or policies prevents a meaningful assessment of the company's online presence or services. The domain registration is consistent and long-term, registered since 2016 with GoDaddy.com, LLC, and uses Cloudflare DNS servers, indicating legitimate domain ownership but no active digital footprint at this time. From a technical perspective, the site is hosted on WP Engine but is not mapped to an active site, resulting in no detectable CMS, scripts, or analytics tools. No security headers or SSL configuration details were available from the provided data, and no privacy or cookie policies were found. The absence of content and technical implementation details limits the ability to assess digital maturity or performance. Security posture is minimal due to the lack of an active site. No security policies, incident response contacts, or certifications are present. The domain WHOIS data is public and consistent, with no suspicious patterns, but the absence of an active website reduces trustworthiness and business credibility. Overall, the site is currently non-functional and provides no information to users or customers. Given these factors, the overall risk is low in terms of malicious content but high in terms of business credibility and user trust. Strategic recommendations include launching an active website with proper security and privacy policies, enabling HTTPS, and providing clear business and contact information to improve trust and compliance.

R

Reims Légend’R

reims-legend-r.fr

61

Reims Légend’R is a regional promotional brand dedicated to enhancing the attractiveness and visibility of the Grand Reims territory in France. The website serves multiple audiences including tourists, businesses, students, and cultural participants by providing news, events, and resources related to economic development, culture, innovation, and tourism. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Photoswipe, and Slick Carousel, with Matomo analytics for user tracking and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and privacy controls in place, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable, which limits domain legitimacy verification, but the professional presentation and consistent branding suggest a trustworthy official entity. Overall, the site is well-structured, accessible, and provides valuable regional information with moderate tracking and good privacy practices.

Reims Campus is a city-supported platform dedicated to student life in Reims, France. It provides comprehensive information on education, housing, transport, health, student associations, and civic engagement. The website serves as a centralized hub for students to access resources and stay informed about local events and opportunities. The platform is positioned as a public service initiative backed by the city of Reims and Grand Reims, targeting students and young adults in the region. Technically, the website employs modern web technologies including Bootstrap 5 and Google Fonts, ensuring responsive design and good mobile optimization. The site is well-structured with clear navigation and professional design elements. However, there is no evidence of advanced CMS usage or analytics tools in the provided content. Performance is moderate, and accessibility features are basic but present. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance with EU regulations. No vulnerability disclosure or incident response information is published. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the official branding and content quality support trustworthiness. Overall, the website is a reliable and professional resource for its target audience but would benefit from enhanced security practices and privacy compliance measures to improve its risk posture and user trust.

L

La maison de l'habitat – Reims

lamaisondelhabitat-reims.fr

49

La Maison de l'Habitat – Reims is a community-focused organization providing housing services and support to residents of the Grand Reims territory. The website serves as an informational and service portal, offering assistance with housing procedures, renovation, and property accession. It targets a broad audience including youth, students, families, seniors, and professionals, positioning itself as a local government or non-profit entity dedicated to housing facilitation. Technically, the website is built on WordPress with common plugins such as LayerSlider and Contact Form 7, indicating a standard CMS infrastructure. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, and SEO practices are adequately implemented. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS, but lacks visible security headers and does not provide explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present. The WHOIS data is missing, which reduces trust in domain legitimacy, although the website content and social media presence suggest a legitimate entity. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance documentation, and improved transparency regarding domain registration to strengthen trust and compliance.

R

Reims Tourisme et Congrès

reims-tourisme.com

62

Reims Tourisme et Congrès operates as the official tourism organization for the city of Reims, France, providing comprehensive visitor information, event promotion, and accommodation services. The website serves as a key digital platform to attract tourists and support local hospitality businesses, positioning itself as a trusted regional tourism authority. The business model focuses on destination marketing and cultural promotion, targeting tourists, event organizers, and local stakeholders. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Google Analytics, Matomo, and Rocket Lazy Load for performance optimization. The site demonstrates good mobile responsiveness and basic accessibility features, with a moderate performance profile. SEO and content quality are well managed, supporting effective visitor engagement. From a security perspective, the site enforces HTTPS and includes several security headers, reflecting a good security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information including a Data Protection Officer email. However, the absence of public WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and branding strongly indicate a legitimate and professional operation. Overall, the website presents a low-risk profile with strong business credibility and adequate technical and security controls. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility to further strengthen trust and compliance.

F

Fondation Oeuvre Notre-Dame

oeuvre-notre-dame.org

63

The Fondation de l’Œuvre Notre-Dame website represents a well-established non-profit organization dedicated to the preservation and promotion of the Strasbourg cathedral, a cultural heritage site with historical significance dating back to the 13th century. The foundation offers educational resources, visitor experiences, and fundraising opportunities, positioning itself as a key player in cultural heritage preservation with UNESCO recognition. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, employs modern JavaScript libraries, and integrates privacy-focused cookie consent mechanisms. Security posture is strong with HTTPS and reCAPTCHA usage, though some security headers are not explicitly detected. The absence of explicit privacy policy and WHOIS data slightly reduces trust but does not undermine the overall professionalism and legitimacy of the site. No adult or questionable content is present, making it safe for general audiences.

V

Ville et Eurométropole de Strasbourg

strasapp.eu

67

StrasApp is an official mobile application developed for the residents and visitors of the City and Eurométropole of Strasbourg, France. It provides real-time access to municipal services, notifications, event agendas, and personalized dashboards to enhance daily life in the metropolitan area. The website serves as a promotional and informational portal linking to the app stores and official city resources. The business model is a public service offering free access to digital municipal services, positioning StrasApp as a key digital tool for local governance and citizen engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics with a strong emphasis on privacy and consent management via Tarteaucitron.js. The site is mobile-optimized and accessible, with features such as contrast toggling to support users with disabilities. Hosting and analytics are managed through trusted providers, and the site maintains good SEO and performance standards. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms that comply with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the official nature of the site, registered through a reputable registrar, and the site links to official social media and city domains, reinforcing trustworthiness. Overall, StrasApp's website demonstrates a high level of professionalism, privacy compliance, and user-centric design. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contact information to further strengthen trust and security posture.

O

Office eurométropolitain de tourisme, des loisirs et des congrès de Strasbourg

visitstrasbourg.fr

56

The website www.visitstrasbourg.fr serves as the official online presence of the Office eurométropolitain de tourisme, des loisirs et des congrès de Strasbourg, a public tourism office dedicated to promoting Strasbourg and its surrounding region. It provides comprehensive information on local attractions, events, leisure activities, and offers services such as the Strasbourg City Card. The site targets tourists, visitors, and event attendees, positioning itself as a key regional tourism resource. The business model is primarily informational and promotional, supported by public funding and tourism-related services. Technically, the website is built on the WordPress CMS platform, utilizing the Elementor page builder and several plugins including Rank Math SEO and GDPR cookie consent tools. The infrastructure supports modern web standards with responsive design, SEO optimization, and moderate performance. The site integrates tracking and analytics tools such as Google Analytics and Facebook Pixel, with user consent mechanisms in place to comply with GDPR. From a security perspective, the website enforces HTTPS, employs standard security headers, and implements cookie consent banners. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management readiness. Overall, the website presents a professional, trustworthy, and user-friendly platform for tourism promotion. The lack of publicly available WHOIS data for the domain slightly reduces transparency but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing accessibility, publishing security policies, and establishing formal vulnerability disclosure channels to further strengthen security posture and user trust.

V

Ville et Eurométropole de Strasbourg

strasbourgaimesesetudiants.eu

63

The website 'Strasbourg aime ses étudiants' is a public service platform managed by the Ville et Eurométropole de Strasbourg, aimed at supporting and informing students studying in Strasbourg and its surrounding communes. It provides comprehensive information on housing, transport, cultural events, student aid, and integration activities. The platform is well-positioned as a local government initiative with strong partnerships and a clear target audience of students. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as React, Swiper.js, and Bootstrap, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and standard security headers, though it lacks explicit published security policies or incident response contacts. Privacy compliance is addressed with visible cookie consent mechanisms and links to privacy policies, reflecting good GDPR adherence. Overall, the site is trustworthy, professional, and serves its public service mission effectively.

B

Bílý kruh bezpečí, z. s.

116006.cz

43

The website www.116006.cz represents a Czech Republic based non-profit social service operated by Bílý kruh bezpečí, z. s., providing a free, 24/7 telephone helpline (116 006) for victims of crime and domestic violence. The service is officially registered under Czech social service law and offers expert, anonymous, and free crisis intervention. The website content is well-structured, professionally designed, and targeted at victims seeking help, with clear navigation and relevant information. Technically, the site is built on WordPress using the Foundation CSS framework and includes standard tracking via Google Analytics and Tag Manager. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and a published privacy policy. WHOIS data is missing, which limits domain registration transparency but does not detract from the apparent legitimacy of the service. Overall, the website is a credible, well-maintained resource for victim support in the Czech Republic.

budvidetnawebu.cz is a Czech small business specializing in website creation and redesign services primarily using WordPress. The company targets local small businesses and individuals seeking affordable and professional web development solutions. The website demonstrates a good level of digital maturity with modern technologies such as WordPress 6.8.3, Oxygen builder, and integration of analytics tools like Google Analytics and Microsoft Clarity. Cookie consent is managed via CookieYes, indicating awareness of GDPR requirements. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and well-optimized for performance and mobile devices.

R

REI Registro Eccellenze Italiane SRL

eccellenzeitaliane.com

67

Eccellenze Italiane is an Italian company focused on promoting and certifying small and medium enterprises (SMEs) that produce authentic Made in Italy products. The website serves as a portal offering listings, e-commerce, events, and marketing services to support Italian SMEs. The company holds official trademark registrations in Italy and the EU, reinforcing its market credibility. Technically, the website uses modern frameworks like Bootstrap and integrates social media and marketing tools, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with cookie consent implemented but lacks explicit security headers and detailed incident response information. The absence of WHOIS data limits domain trust verification, but the overall business presentation and certifications suggest legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure policies, and improving privacy compliance documentation.

G

GoFox - Tecnologias de Informação

ffletter.com

46

FFLetter is an online email marketing platform operated by GoFox - Tecnologias de Informação, targeting businesses and marketers primarily in Portuguese-speaking markets. The platform offers tools for newsletter creation, subscription form integration, campaign analytics, and anti-spam enforcement. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses established libraries such as jQuery and Swiper.js, integrates Google reCAPTCHA for bot protection, and employs Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-spam policies actively monitored using AI, though some improvements in security headers and library updates are recommended. The absence of WHOIS data for the domain is a notable concern, impacting trust and business credibility. Overall, the site is functional, compliant with privacy regulations, and positioned as a niche SaaS provider in the email marketing industry.

O

Okolo bytu

okolobytu.cz

56

Okolo bytu is a Czech informational portal established in 2009, targeting owners and managers of apartment buildings and housing cooperatives. It offers a comprehensive range of services including articles, a community forum, e-letter subscriptions, and partnerships with reputable companies. The website maintains a consistent brand presence and provides valuable content relevant to its niche audience. Technically, the site is built on WordPress with popular plugins such as WooCommerce and bbPress, supported by Cloudflare DNS and enhanced with SEO and structured data. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and standard security headers present, though it lacks a visible cookie consent mechanism and dedicated security policy pages. Overall, the domain registration data aligns well with the website content, supporting its legitimacy and trustworthiness.

S

Sousedé

sousede.cz

59

Sousedé.cz is a Czech Republic based digital platform specializing in the management and collaboration of residential communities, specifically SVJ (homeowners associations) and apartment buildings. The platform connects committees, property managers, management companies, and unit owners to streamline communication, legal compliance, and administrative tasks. It offers key services such as duty monitoring, online voting, document management, and integration with established property management systems like DOMUS. The website positions itself as a leading portal in its niche with over 2,000 buildings and 45,000 users, emphasizing ease of use and comprehensive features for all stakeholders. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance and excellent mobile responsiveness. It integrates analytics and marketing tools such as Google Analytics and HubSpot, and employs security best practices including HTTPS and security headers. The site features a well-structured user interface with clear navigation and professional design, supporting a positive user experience. From a security perspective, the platform demonstrates good practices with encrypted connections and role-based access controls. However, there is no publicly visible incident response or vulnerability disclosure policy, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. Overall, Sousedé.cz presents a mature and professional digital service for residential community management in the Czech market. Strategic recommendations include improving transparency by publishing domain registration details, establishing a formal security incident response policy, and adding a security.txt file to facilitate vulnerability reporting.

A

Asociace realitních kanceláří České republiky

arkcr.cz

42

The website www.arkcr.cz represents the Asociace realitních kanceláří České republiky, the largest professional association of real estate offices in the Czech Republic. Founded in 1991, it serves over 300 member offices and provides services including education, MLS cooperation systems, publications, and real estate listings. The site targets real estate professionals and the general public interested in property. The business model is centered on membership benefits, professional development, and market collaboration. The association holds a strong market position as a key industry player in Czech real estate. Technically, the website is built on WordPress with a modern tech stack including Foundation CSS, jQuery, and FontAwesome. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, HTTPS is enforced, and a cookie consent mechanism is implemented, indicating some privacy awareness. However, the absence of explicit security headers such as Content-Security-Policy and X-Frame-Options is a concern. No direct contact emails or phone numbers are visible, and no privacy policy or terms of service pages were found on the homepage, which may impact compliance and trust. The WHOIS data is missing or not publicly available, which raises questions about domain registration transparency. Overall, the website is professional and trustworthy in content and business representation but could improve its security posture and privacy compliance. Strategic recommendations include implementing security headers, publishing clear privacy and terms policies, and verifying domain registration details to enhance legitimacy and trust.

P

Profesionální předseda SVJ

profipredsedasv.cz

44

The website www.profipredsedasv.cz represents a professional service provider specializing in external chairmanship and management of homeowners associations (SVJ) in the Czech Republic. The company claims a strong market presence of 33 years and offers comprehensive services including accounting, meeting organization, and oversight of property management. The business is linked to RAK CZ a.s., a real estate agency, indicating a credible backing. Technically, the site is built on WordPress using modern plugins and frameworks such as Breakdance Builder, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. WHOIS data is unavailable, which slightly impacts trust but the overall site professionalism and business information support legitimacy. The site is safe for general audiences with no adult or questionable content.

RAK CZ a.s., operating under the brand Doktor House, provides specialized consulting services addressing complex real estate issues such as inheritance disputes, unclear property boundaries, and legal encumbrances. The company positions itself as a trusted expert in diagnosing and resolving 'diseases' affecting properties, targeting property owners and stakeholders primarily in the Czech Republic. The website is professionally designed using WordPress with modern plugins and frameworks, offering a user-friendly experience including a contact form secured by Google reCAPTCHA. However, the absence of WHOIS data and lack of explicit privacy and terms policies present trust and compliance gaps. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing key security headers. Overall, the site is functional and credible but would benefit from enhanced transparency and security hardening.

R

RAK CZ a.s.

spravujemenemovitosti.cz

43

The website www.spravujemenemovitosti.cz represents RAK CZ a.s., a Czech company specializing in residential property management services including economic, technical, advisory, and professional chair services for housing associations. The company positions itself as a local specialist with multiple references in Prague, targeting property owners and housing associations. The website is professionally designed, content-rich, and provides clear contact information, indicating a medium-sized business with a solid market presence in the Czech real estate sector. Technically, the site is built on WordPress CMS using modern technologies such as jQuery, Gutenberg, and Foundation CSS framework. It integrates Google Analytics and Google reCAPTCHA for analytics and security. The site is mobile-optimized and has good SEO practices, though accessibility is basic. Security posture is good with HTTPS and bot protection but lacks some security headers and formal security policies. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site. Overall, the site is safe, business-focused, and compliant with GDPR through a visible privacy policy and cookie consent mechanism.

T

The Pub – Trocadero

the-pub.ro

56

The Pub – Trocadero is a hospitality business based in Bucharest, Romania, specializing in live music events, self-service beer, and comfort food. The venue hosts a variety of cultural and musical events including jazz, pop, rock, and theater performances, targeting a mature audience interested in nightlife and entertainment. The business model revolves around food and beverage sales, event ticketing, and table reservations, positioning itself as a local entertainment hub with an innovative self-service beer concept. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern JavaScript libraries such as jQuery and Swiper.js. It integrates Facebook Pixel for marketing and tracking purposes. The site is mobile optimized with a good user experience and clear navigation, although accessibility features are basic. Performance is moderate with room for improvement in SEO and accessibility compliance. From a security perspective, the website enforces HTTPS and does not expose sensitive data in the HTML. However, it lacks important security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common for hospitality businesses, and no suspicious registration patterns were detected. No incident response or vulnerability disclosure information is provided. Overall, the website presents a professional and trustworthy front for a small hospitality business but would benefit from enhanced privacy compliance, security best practices, and transparency to improve user trust and regulatory adherence.

T

The PUB

thepubworld.com

62

The PUB operates a chain of pubs primarily in the Czech Republic with additional locations in Berlin and Bucharest. The business focuses on providing a unique beer experience including self-service taps, master bartenders, and beer pouring education, complemented by food offerings. The website is professionally designed with good mobile optimization and clear navigation, supporting their hospitality business model. Technically, the site uses common web technologies such as jQuery and GSAP, with Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain age and WHOIS data support the legitimacy of the business.

U

Univention GmbH

univention-summit.de

52

Univention GmbH organizes the Univention Summit, a prominent open source event in Germany focused on digital sovereignty, IT trends, and community networking. The summit attracts IT service providers, software manufacturers, public sector officials, and educators from Germany and Europe. The website presents a professional, well-branded platform with detailed information about the event, speakers, partners, and registration. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are clearly stated with consent mechanisms, indicating GDPR compliance. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

T

Turku PET Centre

turkupetcentre.fi

54

Turku PET Centre is a Finnish National Research Institute specializing in the use of short-lived positron emitting isotopes for medical research. It is jointly hosted by the University of Turku, Åbo Akademi University, and Turku University Hospital, with a history dating back to the 1970s and national status since 1996. The center offers a range of services including core facilities, diagnostic services, and educational programs, targeting scientists, healthcare professionals, academia, and industry partners. The website reflects a reputable academic institution with a strong market position in medical imaging research. Technically, the website is built on WordPress with modern frameworks such as Gantry5 and Bootstrap, and uses plugins for events and online applications. It is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced, but lacks comprehensive security headers and explicit privacy and cookie policies. Google Analytics is used for user tracking, indicating moderate data collection practices. Overall, the security posture is solid but could be improved by implementing additional security headers and privacy compliance features. The domain registration details are consistent with the institution's identity, enhancing trustworthiness. No blocking or WAF challenges were detected, allowing full content access and analysis.

ThingLink is a well-established company founded in 2010, specializing in immersive and spatial learning solutions powered by AI and no-code tools. Their platform supports a wide range of industries including education, business, healthcare, and museums, offering scalable and interactive training experiences across devices including XR headsets. The website demonstrates a high level of professionalism, rich multimedia content, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong, evidenced by ISO 27001 certification and a dedicated Trust Center, although WHOIS data is missing, which slightly impacts trust but does not undermine the overall credibility. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, ThingLink presents as a credible and trustworthy business with a robust technical and security foundation.

M

MTV Oy

mtv.fi

69

MTV.fi is the official website of MTV Oy, a leading Finnish media company offering a broad range of entertainment, news, and sports content. The site prominently features streaming services including subscription-based premium content branded as MTV Katsomo+. The platform targets the Finnish general public with a focus on popular TV shows, live sports, and news programming. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile devices and accessibility. Technically, it leverages modern web technologies such as React and Next.js, with robust performance and security configurations including HTTPS and security headers. However, explicit privacy policy and terms of service pages were not detected in the provided content, indicating an area for improvement in privacy compliance. No direct contact information or incident response contacts were found, which could be enhanced to improve transparency and trust. Overall, the site demonstrates a strong security posture and business credibility, supported by consistent WHOIS data and legitimate domain registration.

E

Echo360

echo360.org.uk

58

Echo360 is an educational technology company providing a video-based learning platform primarily targeting students and educators through LMS and VLE integrations. The website analyzed is a login portal subdomain designed for user authentication via email, supporting access to video lecture content. The platform positions itself as a medium-sized player in the education sector with a focus on SaaS delivery of lecture capture and learning management services. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates the Userpilot SDK for user experience enhancements. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is moderate with secure form submission and cookie checks but lacks visible security headers and explicit privacy or cookie policies on this page. No WHOIS data is available for the subdomain, which is consistent with it being a subdomain of echo360.org.uk, a legitimate domain. Overall, the site is safe, professional, and trustworthy but could improve transparency and security practices.

W

Wuppertal Institut

ressourcen-rechner.de

9

The website 'ressourcen-rechner.de' is an informational platform provided by the Wuppertal Institut, offering a calculator to measure the ecological footprint or 'ecological backpack' of an individual's lifestyle. It targets environmentally conscious users interested in understanding and reducing their resource consumption. The site is positioned as a niche educational tool within the sustainability sector, leveraging research data to inform users. Technically, the website uses a straightforward stack including HTML5, CSS, JavaScript, and jQuery, hosted likely on servers associated with the nameservers your-server.de and second-ns.de. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS integration. SEO and accessibility are basic but adequate for the content provided. From a security perspective, the site does not exhibit advanced security headers or explicit policies but does not expose sensitive data or use vulnerable libraries visibly. The absence of HTTPS information limits full security assessment. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Contact information is minimal but present. Overall, the website presents a low-risk profile with good business credibility and content quality. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance trust and user experience.

W

Wuppertal Institut

zukunftswissen.fm

11

The Wuppertal Institut is a well-established German research institute specializing in climate, environment, and energy sustainability. It operates as a leading think tank with a strong focus on transformative research and science communication, exemplified by its extensive podcast series Zukunftswissen.fm. The website is professionally designed, content-rich, and targets a broad audience including scientists, policymakers, industry stakeholders, and the general public interested in sustainability topics. Technically, the site is built on TYPO3 CMS, uses modern web standards, and is hosted under a reputable registrar. Security posture is solid with HTTPS and standard security headers, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, but no explicit terms of service or security incident response information is found. The site maintains a strong social media presence across major platforms. Overall, the website reflects a credible, trustworthy, and authoritative source in its domain.

C

Centrum pro rodinu Zlín z. s.

cpr-zlin.cz

58

Centrum pro rodinu Zlín z. s. is a Czech non-profit organization established in 2008, dedicated to supporting families, parents, children, and seniors through counseling, material assistance, and community programs. The website reflects a well-structured and community-focused entity with clear contact information and active event management. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and several UI libraries, hosted behind Cloudflare DNS with HTTPS enabled, indicating a reasonable level of digital maturity. Security posture is adequate with HTTPS and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

C

Centrum pro rodinu a sociální péči Hodonín

cprhodonin.cz

53

Centrum pro rodinu a sociální péči Hodonín is a small non-profit organization based in the Czech Republic, providing social services, child care groups, mediation, therapy, and counseling primarily to the local community of Hodonín. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard web technologies and integration of Facebook Pixel for marketing and analytics. The site implements a cookie consent mechanism, demonstrating some awareness of privacy compliance, although no explicit privacy policy or terms of service are published, representing a compliance gap. Security posture is moderate with HTTPS usage implied but lacking visible security headers and incident response information. Overall, the website is professional and functional but would benefit from enhanced privacy and security documentation to improve trust and compliance.

C

Centrum pro rodinu Vysočina, z. s.

centrumrodin.cz

44

Centrum pro rodinu Vysočina, z. s. is a Czech non-profit organization dedicated to supporting families through various programs such as residential stays, marriage preparation, counseling, and events targeting parents, couples, and families in the Vysočina region. The website is built on Joomla! CMS and employs common web technologies including jQuery, Bootstrap, and tracking tools like Google Analytics and Facebook SDK. It presents a professional and consistent brand image with clear contact information and testimonials, indicating a trustworthy and community-focused organization. Security posture is moderate with HTTPS enforced and CSRF tokens in forms, but lacks advanced security headers and explicit privacy or cookie policies. The website is accessible without WAF or blocking mechanisms and contains no adult or questionable content, making it safe for general audiences. Overall, the site scores well on business credibility and content quality but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

The website dcpr.cz appears to be a small Czech site currently offline or under maintenance, as indicated by the message 'Stránky jsou mimo provoz.' The site uses Joomla CMS and MooTools JavaScript library, hosted on cesky-hosting.eu. There is minimal content available, no visible contact information, privacy policies, or terms of service. The login form is present but lacks visible advanced security features such as CSRF tokens. The domain is registered since 2014, consistent with a small organization or business in the Czech Republic. Overall, the site shows low digital maturity and limited business information, which impacts trust and credibility. Technically, the site uses an older CMS and JavaScript framework, with no evidence of modern security headers or HTTPS enforcement in the provided data. The performance and mobile optimization appear basic. No analytics or marketing tools are detected. Security posture is weak due to lack of visible security best practices and policies. The security evaluation highlights the absence of HTTPS enforcement, security headers, and privacy compliance mechanisms. No critical vulnerabilities are visible from the provided data, but the lack of security controls and policies is a concern. The site does not appear to be blocked by any WAF or security challenge. Overall risk is moderate due to minimal content and weak security posture. Strategic improvements in security, privacy compliance, and content quality are recommended to enhance trust and operational readiness.

S

Salesiánský klub mládeže, z. s. Zlín

skmzlin.cz

48

Salesiánský klub mládeže, z. s. Zlín is a Czech non-profit organization focused on youth development and social prevention services. The website serves as an information hub for their activities including youth clubs, summer camps, educational programs, and volunteer opportunities. The organization targets young people and families in the Zlín region, positioning itself as a community-centric youth support entity. The website is professionally designed with consistent branding and clear navigation, supporting its role as a trusted local institution. Technically, the site uses a modern stack including jQuery, Bootstrap, and Matomo analytics, hosted with Cloudflare DNS and registered via WEDOS. While performance and mobile optimization are good, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance elements such as cookie consent and privacy policies. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

S

Salesiánský klub mládeže z. s. Rumburk – Jiříkov

salesianirumburk.cz

42

Salesiáni Rumburk operates as a non-profit religious and community organization serving the local Czech community, focusing on youth and parish activities. The website provides information about the Salesian youth club and associated Roman Catholic parishes in the Rumburk region. The organization maintains partnerships with recognized religious entities such as Salesians of Don Bosco and Loreta Rumburk. Technically, the website is built on WordPress using the Divi theme and includes GDPR-compliant cookie consent mechanisms. The site is accessible, mobile-optimized, and uses modern web technologies, though some improvements in security headers and contact transparency are advisable. Security posture is moderate with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data limits domain legitimacy verification. Overall, the site is trustworthy and serves its community purpose effectively.

S

Salesiánský klub mládeže, z. s. Centrum Don Bosco

dozivota.cz

50

Salesiánský klub mládeže, z. s. Centrum Don Bosco is a Czech non-profit organization dedicated to supporting young people who have had to leave their families or are at risk. Their services include social rehabilitation accompaniment, life preparation courses, and providing safe spaces for youth. The organization has a strong local presence with partnerships including government bodies and foundations, and a history dating back to 1995. Technically, the website is built on Drupal CMS with modern front-end technologies and includes GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

The website salesianipardubice.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. The domain was registered in late 2021 and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business details, contact information, or compliance policies are visible, preventing a full analysis of the company's operations or digital maturity. The technical infrastructure relies on Cloudflare's security platform, but no CMS or other technologies are detectable. Security posture cannot be fully assessed beyond the presence of Cloudflare's WAF. Overall, the site is effectively protected but inaccessible for content or compliance evaluation.

S

Salesiánská asociace Dona Boska

sadba.org

44

Salesiánská asociace Dona Boska (SADBA) is a Czech non-profit organization dedicated to supporting disadvantaged children and youth worldwide through volunteer missions and educational initiatives. The organization focuses on training and sending volunteers abroad, supporting salesian missions, and fostering development cooperation. Their website reflects a professional and well-structured digital presence, targeting volunteers, donors, and supporters primarily in the Czech Republic. The site offers detailed project descriptions, news updates, and partner affiliations, reinforcing its credibility in the non-profit sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution. It employs Google Analytics and Google Tag Manager for tracking and analytics, and includes a cookie consent mechanism compliant with EU regulations. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Security-wise, HTTPS is enforced, and reCAPTCHA is used for form protection; however, additional security headers are recommended to enhance protection. The security posture is solid but could benefit from implementing more comprehensive HTTP security headers and regular plugin updates to mitigate vulnerabilities. The absence of a visible privacy policy and terms of service pages is a compliance gap that should be addressed to meet GDPR and other privacy regulations fully. WHOIS data is unavailable due to a malformed response, which slightly reduces trustworthiness, but the website content and partner endorsements support legitimacy. Overall, SADBA presents a trustworthy and professional online presence suitable for its non-profit mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and conducting periodic security audits to maintain a robust security posture.

G

GYMIFY

gymify.cz

64

GYMIFY.cz is a Czech-based fitness software provider specializing in online reservation systems, membership management, and integrated tools for gyms and sports centers. The company offers a SaaS model with mobile applications for Android and iOS, targeting fitness centers, yoga studios, wellness centers, and other sports facilities primarily in the Czech Republic and Slovakia. The website demonstrates a professional digital presence with modern technologies such as Nuxt.js, Vue.js, and Vuetify, and integrates third-party services like Stripe for payments and Microsoft Clarity for analytics. Customer testimonials and Trustpilot reviews indicate a positive market reputation. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust.

B

Bates Saddles

batessaddles.eu

56

Bates Saddles is a specialized e-commerce retailer focused on high-performance equestrian saddles and accessories, targeting primarily the German market with localized domains for other regions. The company emphasizes innovation and comfort for horse and rider, supported by official partnerships with major equestrian organizations and ambassador endorsements. Their business model centers on direct online sales via the Shopify platform, complemented by rich content such as blogs and testimonials to engage their audience. Technically, the website leverages a modern Shopify infrastructure with integrations for payment solutions (ZipMoney/QuadPay), marketing (Klaviyo), and geolocation services. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, explicit privacy and cookie policies are not detected, which is a gap in compliance. From a security perspective, the site uses HTTPS and employs CAPTCHA on forms, but lacks visible security headers and formal vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data shows partial consistency with the business claims, though the use of Australian name servers for a German domain is notable but not necessarily suspicious. Overall, Bates Saddles presents a professional and trustworthy online presence with room for improvement in privacy compliance and security best practices to enhance user trust and regulatory adherence.

B

Bates Saddles

batessaddles.co.uk

56

Bates Saddles operates a professional e-commerce website focused on selling high-quality equestrian saddles and accessories, targeting primarily the German market with regional stores globally. The company holds official partnerships with major equestrian organizations, enhancing its market credibility and trustworthiness. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Zip.co for payment options. The site demonstrates good design quality, user experience, and mobile optimization, with clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the business presents a credible and trustworthy online presence with room for improvement in privacy compliance and security transparency.

B

Bates Saddles

batessaddles.us

56

Bates Saddles operates a professional e-commerce platform specializing in high-performance equestrian saddles and accessories, targeting primarily the German market with regional support for other countries. The company maintains a strong market position supported by official partnerships with major equestrian organizations and endorsements from ambassadors. The website is built on the Shopify platform, leveraging modern web technologies and payment integrations such as Zip Co and Quadpay. While the site demonstrates good design quality, mobile optimization, and user experience, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, but could be enhanced with additional security headers and published incident response information. Overall, Bates Saddles presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency.