Security Directory

B

Bates Saddles

batessaddles.com.au

56

Bates Saddles operates a professional e-commerce platform specializing in high-performance equestrian saddles and accessories, targeting primarily the German market with regional support for other global markets. The company holds official partnerships with major equestrian organizations, enhancing its market credibility and positioning it as a trusted brand in the equestrian sports industry. The website content is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience and clear navigation. The business model focuses on direct online retail supported by strong social media engagement and customer testimonials. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and integrations such as Flickity for carousels, Klaviyo for email marketing, and Zip.co for payment options. The site benefits from Shopify's CDN hosting, ensuring fast load times and good performance. Accessibility and SEO optimizations are adequately implemented, contributing to a positive digital maturity profile. From a security perspective, the site enforces HTTPS and uses hCaptcha to protect forms, demonstrating good baseline security practices. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for GDPR compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows some minor inconsistencies in DNS hosting and address information, likely due to multi-region operations, but no suspicious patterns that would undermine legitimacy. Overall, Bates Saddles presents a secure, professional, and credible online presence with room for improvement in privacy compliance and explicit security policy disclosures. Strategic enhancements in these areas would further strengthen trust and regulatory adherence.

S

Septeo Notaires

mondossiernotairepro.fr

55

Mondossiernotairepro.fr is a professional web portal operated by Septeo Notaires, designed to allow notaries and related professionals to track the progress of their dossiers. The platform offers services such as dossier tracking, document management, notifications, and appointment scheduling integration. The business targets professional users in the French real estate and notary sector, positioning itself as a niche SaaS provider with a medium-sized operation founded in 2017. The website is well-branded and consistent with the parent company Septeo, reflecting a focused business model serving the legal and real estate industry. Technically, the site uses modern web technologies including ASP.NET MVC, JavaScript, and CSS, hosted likely via DNSimple with a moderate performance profile. Mobile optimization and user experience are good, though accessibility features are basic. Security posture is adequate with HTTPS and anti-CSRF tokens implemented, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and legitimate, supporting the trustworthiness of the site.

The website konferencezdc2022.cz is currently a parked domain page primarily redirecting users to the regery.com platform, which offers domain registration, SSL certificates, and hosting services. The site content is minimal and serves as a placeholder rather than an active business site. The domain WHOIS data is suspicious due to a future creation date, indicating possible placeholder or inaccurate registration information. The technical infrastructure uses Cloudflare DNS and includes Bootstrap and particles.js for UI effects, but lacks advanced security headers and privacy mechanisms. Security posture is basic with HTTPS enabled but no visible security policies or incident response contacts. Overall, the site is safe for general audiences but lacks business credibility and privacy compliance on this domain.

S

Správa železnic

konferenceszt.cz

40

The website konferenceszt.cz serves as the official platform for the 12th annual conference on communication and security technologies in the railway sector, organized primarily by Správa železnic and supported by regional and industry partners. It provides detailed event information, registration options, advertising opportunities, and multimedia content to engage industry professionals. The site is well-branded and targets railway technology experts and stakeholders. Technically, it is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google Fonts, hosted likely by WEDOS, a Czech provider. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented with professional emails and phone numbers. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

ProBowling.cz is a Czech Republic-based small business specializing in bowling-related services including an e-shop for bowling equipment, a sports club for training and competitions, and organizing bowling tournaments. The website presents a clear business focus on the bowling community with relevant content and navigation. Technically, the site uses basic HTML and CSS with hosting provided by Active24, but lacks advanced frameworks or CMS indications. Mobile optimization and accessibility are basic but functional. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and lack of privacy and cookie policies. Contact information is clearly provided, supporting business credibility. Overall, the site is legitimate and consistent with its WHOIS registration data but requires improvements in security and compliance to enhance trust and user protection.

S

Storm Bowling

stormbowling.com

62

Storm Bowling operates a professional e-commerce platform specializing in bowling equipment and accessories. The website showcases multiple brands and a wide product range targeting bowling enthusiasts. The business model is retail-focused with a medium-sized market presence. Technically, the site uses Magento CMS with modern JavaScript libraries and analytics tools, hosted on DigitalOcean infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced, but lacks visible security headers and privacy compliance mechanisms. WHOIS data is unavailable, which slightly impacts trust but the site content and branding appear legitimate. Overall, the site is functional and trustworthy for its business purpose but could improve privacy and security transparency.

Xbowling.cz is a Czech Republic-based bowling entertainment service provider operating since at least 2011. The website offers information about bowling services and multiple branches, targeting general leisure customers. The technical infrastructure includes common web technologies such as jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel, with cookie consent implemented via CookieYes. The website is accessible without any WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide clear contact information. Security posture is moderate with HTTPS enabled but missing security headers and use of an outdated jQuery version. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

B

Bowling Brno

bowlingbrno.cz

41

Bowling Brno is a medium-sized hospitality and leisure business located in Brno, Czech Republic, offering a variety of sports and entertainment services including bowling, adventure golf, beach volleyball, a golf simulator, and restaurant facilities. The website is professionally designed with good content quality and clear navigation, targeting families, sports enthusiasts, and corporate clients. The business maintains an active social media presence and community engagement through youth sports programs and tournaments. Technically, the website uses modern JavaScript libraries and frameworks such as Foundation, jQuery, and LightGallery, with Google Analytics and Facebook SDK for tracking. However, there is no evidence of a CMS or hosting provider information. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing, which reduces domain trustworthiness and should be investigated further. Overall, the website is functional, trustworthy, and suitable for its business purpose but could improve in security and privacy compliance.

B

Bowling Zone

bowlingzone.cz

51

Bowling Zone is a small hospitality and entertainment business based in Liberec, Czech Republic, specializing in bowling and related leisure activities. The company offers professional bowling lanes, certified coaching, and additional entertainment options such as pinball and darts, targeting families, friends, and corporate groups. Their website is built on WordPress with a modern tech stack including Bootstrap and various plugins for enhanced user experience and functionality. The site supports online reservations and newsletter subscriptions, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks some security headers and a published privacy policy, which are areas for improvement. Overall, the business presents a trustworthy and professional online presence with room to enhance compliance and security practices.

The domain etbf.eu currently serves only a standard HTTP 404 Not Found error page, indicating that the website content is inaccessible or not yet deployed. There is no visible business information, metadata, or structured data to analyze. The domain is registered through a reputable registrar, team.blue Denmark A/S, but no further registrant details or business identity are provided. Due to the lack of content, the technical infrastructure cannot be assessed beyond the registrar information. Security posture is minimal with no HTTPS or security headers detected in the provided data. Overall, the website presents a high risk due to lack of content, absence of privacy and security policies, and no contact information, making it unsuitable for business or user trust at this time.

P

0 - Chyba: 0

pap-brezinaservis.cz

36

The website pap-brezinaservis.cz appears to represent a small Czech business established in 2014, but currently only displays an error page indicating a PHP coding issue. The site uses Joomla CMS with common frontend libraries such as jQuery, Bootstrap, and Font Awesome. There is no accessible business content, contact information, or privacy and cookie policies, which significantly limits the ability to assess the business model or market position. Technically, the site shows signs of moderate performance and basic mobile optimization but lacks security best practices such as security headers and visible HTTPS enforcement. The presence of a PHP error message is a security concern as it may expose internal implementation details. Overall, the website is not currently functional for end users and lacks critical compliance and security features.

B

Bartoň Studio s.r.o.

bartonstudio.cz

65

Bartoň Studio s.r.o. is a Czech-based company specializing in custom and pre-built e-commerce solutions tailored for B2B and B2C online businesses. Positioned as an expert e-commerce development studio in Plzeň, the company offers services focused on creating performant, user-friendly online shops with a strong emphasis on design and technical quality. The website reflects a professional digital presence using WordPress CMS with the Divi theme, integrating common marketing and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection, alongside a cookie consent mechanism indicating some privacy compliance awareness. However, the absence of a dedicated privacy policy and terms of service pages represents a compliance gap that should be addressed.

L

LEX z.s.

gunlex.cz

51

LEX z.s. is a Czech non-profit organization dedicated to protecting the rights of firearms owners. The website serves as an information hub providing legislative updates, articles, training information, and advocacy activities related to firearms ownership in the Czech Republic. The organization has a long-standing presence since 2002, reflected in the domain age and consistent WHOIS data. The site targets firearms owners, sport shooters, and those interested in firearms legislation, offering multilingual support and active content updates. Technically, the website is built on Joomla CMS with common JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. While the site is functional and professionally designed with good navigation and content relevance, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure information. Overall, the site is trustworthy and serves its community well but would benefit from enhanced privacy compliance and security best practices.

2

210 Gym Plzeň

avalonfitness.cz

44

210 Gym Plzeň is a modern fitness center located in Plzeň, Czech Republic, offering a large facility of 2100 square meters equipped with over 80 Grün Sport machines. The gym provides personal trainers, group fitness classes, and specialized zones such as strength training and Booty builder areas. The website reflects a professional local business targeting fitness enthusiasts in the region. Technically, the site is built on WordPress using Elementor, with integrations for analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is good with HTTPS and security headers in place, but lacks published security policies or incident response information. Privacy compliance is basic with a cookie consent mechanism but no clear privacy or terms of service pages. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable, likely due to privacy protection.

A

ADREX BASE CAMP

adrex.cz

44

Adrex Base Camp is a small outdoor sports business located in Vír, Czech Republic, specializing in year-round sports equipment rental, test centre services, and organizing company and group events focused on adventure and outdoor activities. The website presents a professional and consistent brand image with clear contact information and active social media presence. The business targets outdoor enthusiasts and corporate groups seeking organized sports and adventure experiences in the Svratka Valley region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and MonsterInsights for analytics and SEO optimization. It employs HTTPS with a valid SSL certificate and integrates Google Maps API for location services. The site is moderately optimized for performance and mobile devices, with basic accessibility features. However, some security best practices like security headers are missing. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks a published privacy policy, terms of service, and security policy pages. WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced privacy compliance documentation and improved security headers. The absence of WHOIS data is a notable gap in trust assessment and should be addressed to improve domain transparency and credibility.

P

Positive Activities z.s.

trailyvir.cz

41

Trails in Vír is a small regional business operating a biking resort in the Vysočina region of the Czech Republic. The company, Positive Activities z.s., offers groomed and wilderness biking trails, bike rental, servicing, and shuttle services through partnerships. The website is professionally designed with good content quality and clear navigation, targeting biking enthusiasts and tourists interested in outdoor activities. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Analytics integration, providing a solid digital infrastructure. However, the absence of WHOIS data limits domain trust assessment. Security posture is adequate with HTTPS enabled but lacks some security headers and privacy compliance mechanisms such as cookie consent. Overall, the site is functional and trustworthy for its niche audience but could improve privacy and security transparency.

I

INFINITY ACADEMY

infinityacademy.cz

53

INFINITY ACADEMY is a specialized educational organization focused on waste management, particularly in the recycling of construction and demolition waste. With 25 years of industry experience, it offers training programs, workshops, conferences, and consulting services targeted at recycling companies, construction engineers, architects, and related professionals in the Czech Republic. The website is built on a modern WordPress platform using Elementor and Astra theme, providing a professional and responsive user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data limits full trust verification, though the website content and contact information support legitimacy. Strategic improvements in privacy compliance and security hardening are recommended.

A

AZS 98 Holding s.r.o.

azs98holding.cz

52

AZS 98 Holding s.r.o. is a Czech Republic-based holding company with a family of subsidiaries operating primarily in construction, real estate rental and sales, concrete production, and recycling services. Established since 1998, the company manages a large site in Plzeň and offers a broad portfolio of services and properties. The website reflects a professional and consistent brand image, targeting businesses and individuals in the Czech market seeking construction and real estate services. Technically, the site is built on WordPress with Elementor and Ninja Forms, hosted likely via Forpsi, and uses modern web technologies with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy compliance are recommended.

L

LYNT services s.r.o.

lynt.agency

50

LYNT services s.r.o. is a premium PPC agency specializing in performance-driven campaign management, business reporting, and international PPC expansion. With over 15 years of experience and a Google Premier Partner certification, LYNT manages substantial advertising budgets across more than 100 countries. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on WordPress using modern frameworks and includes advanced analytics and marketing tools. Security posture is strong with HTTPS and security headers, though explicit security policies are not published. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, LYNT presents a credible and trustworthy business profile with a solid technical foundation.

Teco a.s. is a Czech-based company specializing in industrial automation and intelligent building management systems. The company offers a range of modular control and regulation systems, including PLCs and smart home solutions, targeting industrial clients, building managers, and energy sectors. Their market position is strong within the Czech Republic, supported by a professional website, active news updates, and comprehensive product catalogs. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and various UI libraries, with a CMS identified as Khaki. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. The WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the company's legitimacy given the professional online presence and contact information. Overall, the website scores well on content quality, technical implementation, and security, making it a trustworthy and professional digital asset for Teco a.s.

A

ACOND a.s.

acond.com

64

ACOND a.s. is a Czech Republic-based manufacturer specializing in high-quality, whisper-quiet stainless steel heat pumps. The company emphasizes European precision manufacturing, competitive pricing, and a strong partnership model including OEM production. Their market position is supported by over 20 years of in-house R&D and certifications such as Q label, Keymark, and TUV. The website demonstrates a mature digital presence with professional design, detailed product information, and clear contact channels. Technically, the site uses modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and Wistia for video content, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a concern but does not outweigh the professional presentation and trust signals on the site. Overall, the site is well-positioned for its business goals with room for enhanced security and compliance transparency.

P

ProfiPress s.r.o.

zemedelec.cz

45

Zemedelec.cz is a well-established Czech agricultural news portal operated by ProfiPress s.r.o., founded in 2003. The website provides comprehensive news coverage across all agricultural sectors, targeting professionals and stakeholders in the Czech agricultural industry. It offers advertising opportunities, subscription services, and event information, positioning itself as a key media player in its niche. The site is professionally designed with consistent branding and good content quality, supported by structured data and SEO best practices. Technically, it runs on WordPress with Oxygen Builder and integrates multiple modern plugins and analytics tools, ensuring a robust digital presence. Security measures include HTTPS, GDPR-compliant cookie consent, and use of reCAPTCHA, although some security headers could be enhanced. Overall, the website is accessible, trustworthy, and compliant with privacy regulations, with a moderate to good security posture.

3EC International, s.r.o. is an independent accredited certification company based in the Czech Republic, specializing in QHSE system certifications, product certifications, and related training services. Established in 2009, the company operates with experienced auditors and holds accreditation from the Czech Institute for Accreditation, positioning itself as a trusted partner for businesses seeking certification and compliance services. The website reflects a professional and consistent brand image targeting corporate clients in need of certification and training solutions. Technically, the website is built on WordPress using the Divi theme, incorporating standard JavaScript libraries such as jQuery and MediaElement.js. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. Hosting details are not explicitly identified, but the site uses HTTPS ensuring secure communication. From a security perspective, the website enforces HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or incident response contact information, indicating gaps in privacy compliance and security transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a trustworthy and professional front for the business but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

H

Hello Design | Tisková grafika, webdesign

hellodesign.cz

40

Hello Design is a small Czech Republic based graphic and web design service provider specializing in print graphics, web design, UX, and UI. The website presents a professional and visually appealing design with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, and integration with Facebook Customer Chat for user engagement. However, the security posture is weak due to lack of visible security headers and unknown SSL/TLS configuration. Privacy compliance is minimal with no visible privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in security and compliance are recommended to enhance credibility and user trust.

B

Breman Machinery B.V.

breman-machinery.com

58

Breman Machinery B.V. is a specialized manufacturing company based in the Netherlands, offering innovative metal solutions characterized by extreme weight, large dimensions, and precise engineering. Their services include machining, welding, rolling, bending, and finishing, catering to diverse sectors such as offshore, nuclear energy, defense, astronautics, amusement parks, maritime, machine construction, and medical technology. The company positions itself as a contractor and supplier of critical steel components and finished products with a global client base. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and features multimedia content such as videos and image carousels. SEO practices are good, with appropriate meta tags and Open Graph data. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks several security headers that could enhance protection. No visible vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no cookie consent mechanism. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the website is professional, trustworthy, and well-maintained, but the absence of WHOIS data and some security best practices suggest areas for improvement. Strategic recommendations include implementing security headers, adding cookie consent, publishing an incident response policy, and verifying domain registration details to enhance trust and compliance.

S

Saarstahl AG

saarstahl.com

51

Saarstahl AG is a large German steel manufacturing company focused on sustainable steel production and serving diverse industrial sectors including automotive, machinery, energy, and construction. The company emphasizes quality, innovation, and environmental responsibility, supported by certifications such as EcoVadis Platinum and CDP A-List. Their digital presence is built on a modern WordPress platform with performance and SEO optimizations, providing a professional and accessible user experience. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies.

G

Goethe University Frankfurt

uni-frankfurt.de

58

Goethe University Frankfurt is a large, well-established public university in Germany offering a broad spectrum of academic faculties and research opportunities. The website serves students, researchers, and international scholars with detailed information about study programs, research projects, campus locations, and support services. The university maintains a strong digital presence with active social media channels and comprehensive contact information. Technically, the site is built on the Fiona 7 CMS by Infopark AG, uses modern JavaScript libraries, and implements a cookie consent mechanism via Klaro. Analytics are handled through Matomo, indicating a focus on privacy-conscious tracking. Security posture is adequate with HTTPS usage and cookie consent, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

Genethon

genethon.com

56

Genethon is a medium-sized non-profit organization specializing in the research and development of gene therapy treatments for rare diseases, including neuromuscular, liver, immune system, and eye disorders. The organization is positioned as a leading European entity in this specialized healthcare sector, supported by partnerships with recognized institutes such as AFM-Telethon and the Biotherapies Institute for Rare Diseases. Their website reflects a professional and content-rich platform aimed at patients, researchers, and healthcare professionals. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Matomo analytics, ensuring good SEO and privacy-respecting user tracking. The site is mobile-optimized and provides a clear navigation structure. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing user privacy and transparency. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the website demonstrates a solid digital presence with good privacy and security practices but would benefit from enhanced transparency in security policies and verification of domain registration details.

The website www.autoantenne24.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, contact information, or policies are available for analysis. The domain WHOIS data is not found, suggesting the domain may be unregistered, newly registered, or privacy protected. The technical infrastructure relies on Cloudflare for security and DDoS protection, but no further technology stack or CMS information is available. The security posture is minimal due to lack of accessible content and absence of security headers or policies. Overall, the site presents a high risk of low trustworthiness and limited transparency. Strategic recommendations include ensuring the domain registration is valid and visible, providing clear business and privacy information, and improving accessibility beyond WAF challenges.

The website webhostlist.de is currently inaccessible, returning a 503 Service Unavailable error page indicating temporary downtime or maintenance. The site is hosted by netclusive GmbH, a German hosting provider, as confirmed by DNS and footer references. Due to the lack of accessible content, no business-specific information, privacy policies, or contact details are available for analysis. The technical infrastructure appears minimal with no detected scripts, analytics, or security headers, and no HTTPS information was provided. This limits the ability to assess the site's security posture or compliance status. Overall, the site shows poor content quality and minimal technical implementation, resulting in a low trust and credibility score.

The website aspkunden.de currently presents only minimal content, consisting solely of a timestamp string with no additional metadata, business information, or user interface elements. This indicates the site is either inactive, a placeholder, or under construction. The lack of contact details, privacy policies, or terms of service further limits its utility and trustworthiness. Technically, no modern web technologies, scripts, or frameworks are detected, and no security headers or SSL configuration details are available, suggesting a low level of digital maturity. The WHOIS data is sparse, providing only domain status and name servers without registrant details, which reduces confidence in the domain's legitimacy. Overall, the security posture is weak due to absence of HTTPS and security best practices, and the site lacks compliance indicators such as GDPR policies or cookie consent mechanisms. Strategic recommendations include implementing HTTPS, adding comprehensive privacy and cookie policies, providing clear contact and business information, and improving website content and technical SEO to enhance user experience and trust.

L

Luxembourg City Tourist Office

lcto.lu

53

Luxembourg City Tourist Office operates a professional and content-rich website aimed at promoting tourism in Luxembourg City. The site offers extensive information on guided tours, events, accommodations, and local attractions, targeting tourists and visitors. The website demonstrates a mature digital presence with multilingual support and structured navigation, enhancing user experience and accessibility. Technically, the site employs modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, alongside a cookie consent mechanism, indicating awareness of privacy compliance requirements. However, the absence of explicit privacy and terms of service pages, as well as missing WHOIS registration data, introduces trust and compliance concerns. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and vulnerability disclosure information. Overall, the website is professional and trustworthy from a content and design perspective but would benefit from improved transparency and security documentation.

F

Freedom BMX Magazin | Startseite

freedombmx.de

56

Freedom BMX Magazin is Germany's largest BMX-focused media outlet, providing daily news, videos, and photos related to BMX sports. The website targets BMX enthusiasts primarily in the German-speaking community and operates on a WordPress platform with extensive integration of advertising and affiliate marketing tools. The technical infrastructure includes modern analytics and advertising services such as Google Analytics, Google Adsense, Ezoic, and Outbrain, hosted via Ezoic's infrastructure. Security posture is adequate with HTTPS enforced and consent management implemented, though explicit security headers and formal security policies are absent. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professionally designed and functional, with moderate risk due to missing formal policies and contact information.

W

we make it

we-make.it

48

We make it is a Berlin-based small studio specializing in risography printing, book works, and graphics services, catering primarily to independent publishers and DIY enthusiasts. The company emphasizes collaborative processes and democratization of art and information through self-publishing. The website is built on WordPress with a moderate technical infrastructure including jQuery and Swiper.js, and uses Yoast SEO for optimization. Marketing scripts from sender.net are present for email campaigns. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and formal privacy or cookie policies. Contact information is available via email and physical address, with active social media presence. The domain is well-established since 2012, consistent with the business history. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

S

Staatsbibliothek zu Berlin

staatsbibliothek-berlin.de

52

The Staatsbibliothek zu Berlin is a prominent public research library serving the humanities and social sciences community in Berlin. It operates two main locations and offers extensive collections, digital resources, and cultural programming. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on TYPO3 CMS with modern frontend frameworks and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies are recommended. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

S

Stiftung Zentral- und Landesbibliothek Berlin

zlb.de

67

The Zentral- und Landesbibliothek Berlin (ZLB) is a major public and state library institution in Berlin, Germany, offering extensive media collections, educational programs, and cultural events. The website clearly targets a broad audience including students, researchers, families, and the general public, providing access to physical and digital resources. The institution holds a strong market position as a leading library with specialized collections and services such as provenance research and digital archives. Technically, the website is built on the TYPO3 CMS platform, employing modern web technologies including responsive design, deferred JavaScript loading, and privacy-conscious analytics via Matomo. The site demonstrates good performance and accessibility standards, with comprehensive SEO and structured data implementations enhancing discoverability. From a security perspective, the site enforces HTTPS and employs some security best practices, though it lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the ZLB website presents a professional, trustworthy, and user-friendly digital presence for a public cultural institution. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

O

openbiblio.eu

openbiblio.eu

43

Openbiblio.eu is a niche community platform dedicated to promoting openness and collaboration within the library and bibliothekswissenschaft sectors. It hosts various projects including an incentive system for open libraries, webcasts, and a Mastodon social instance, primarily serving library professionals and academics. The platform is operated by Stabi Berlin and leverages WordPress technology hosted by netcup GmbH. Technically, the website is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, trustworthy, and serves its community purpose effectively but would benefit from enhanced security and compliance measures.

I

IVAR CS

ivarcs.cz

59

IVAR CS is a Czech-based company specializing in manufacturing and distributing components for water, heating, and gas systems. The company targets professional installers and businesses in the plumbing and heating sectors, offering a comprehensive product catalog and technical support. The website reflects a medium-sized enterprise with recognized ISO certifications, indicating a commitment to quality and environmental standards. The digital presence is professional, with clear navigation and relevant content tailored to its industry audience. Technically, the site employs modern web technologies including jQuery, FontAwesome, and Google Analytics, and is built on a custom or framework-based CMS likely using the Nette Framework. Security measures such as HTTPS and standard security headers are implemented, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for business entities. Overall, the website is secure, compliant with GDPR, and suitable for its business purpose.

P

Pražská paroplavební společnost a.s.

praguesteamboats.com

59

The Prague Steamboat Company, operating under the domain www.praguesteamboats.com, is a historic transportation service provider specializing in river cruises on the Vltava River in Prague. Founded in 1865, the company offers sightseeing cruises, restaurant cruises, private event hosting, and boat rentals using culturally significant paddle steamers. The website presents a professional and consistent brand image targeting tourists and locals interested in unique river experiences. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics for tracking, with good mobile optimization and SEO practices. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data for the domain introduce some concerns. Security posture is moderate with cookie consent implemented but lacking visible security headers. Overall, the site is functional, trustworthy, and content-rich but would benefit from enhanced compliance and security measures.

Asociace českých cestovních kanceláří a agentur (AČCKA) is a well-established professional association representing Czech travel agencies and tour operators since 1991. The organization provides advocacy, information, networking opportunities, and educational resources to its members, positioning itself as a key player in the Czech travel and tourism industry. The website reflects this professional focus with clear content, membership benefits, and public information for travelers. Technically, the site is built on modern web technologies including Next.js and React, with integration of Matomo analytics and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though it lacks some advanced security headers and formal security policies. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy policy transparency and security disclosures.

E

ETOA - European Tourism Association

etoa.org

59

ETOA is a well-established European tourism trade association focused on enhancing tourism business opportunities across Europe. It serves a diverse membership base including tourism suppliers, destinations, buyers, and tour guides. The organization offers a range of services such as membership benefits, industry events, advocacy, and sustainability resources, positioning itself as a key player in the European tourism sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its B2B audience. Technically, the site is built on WordPress with modern plugins and tracking technologies, ensuring good SEO and user experience across devices. Security posture is strong with HTTPS, security headers, and secure login mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible and trustworthy profile with no critical security or content safety concerns.

K

Keap

infusionsoft.app

65

Keap is a technology company specializing in CRM and marketing automation software targeted primarily at small businesses and entrepreneurs. The website analyzed is a secure login portal for Keap's SaaS platform, offering multiple authentication methods including email/password, Google, and Okta. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. The parent company is Thryv, Inc., which is referenced in the terms and privacy policy links. Technically, the site uses modern JavaScript libraries such as jQuery, Lodash, and Bootstrap, ensuring a responsive and functional user experience. Security practices include HTTPS enforcement, input validation, and multi-factor authentication support, although explicit security headers and cookie consent mechanisms are not evident in the provided data. The WHOIS lookup for the signin.infusionsoft.com subdomain failed as expected since subdomains are not separately registered; the main domain infusionsoft.com is established and legitimate. Overall, the site demonstrates a strong security posture and business credibility with minor areas for improvement in privacy compliance and security header implementation.

T

The Conference Forum

patientsaspartnersconference.com

56

Patients as Partners in Clinical Research is a specialized conference platform dedicated to elevating the patient voice in pharmaceutical R&D and clinical trials. The conference is organized by The Conference Forum and features leadership from Pharma, FDA, and patient advocacy groups. The website presents a professional and consistent brand image with a focus on patient-centric drug development and clinical trial innovation. The target audience includes industry professionals, patient advocates, and government representatives. Technically, the site uses modern JavaScript libraries, Bootstrap framework, and integrates tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight Tag. Hosting is via Amazon AWS Cloudfront CDN, ensuring good performance and availability. Security posture is solid with HTTPS and reCAPTCHA integration, though lacks some security headers and formal privacy/cookie policies. The domain WHOIS data is consistent with the business profile, showing a domain created in 2019 with registrar locks and no privacy protection, indicating transparency and legitimacy.

T

The Conference Forum

partnershipswithsites.com

57

The Partnerships with Sites website represents a professional healthcare conference platform focused on improving clinical trial site partnerships to enhance patient enrollment and retention. The business operates under The Conference Forum brand, organizing summits, webinars, and editorial content targeting pharma, biotech, CROs, and clinical research sites. The site demonstrates moderate digital maturity with use of modern JavaScript libraries, tracking tools, and responsive design. Security posture is adequate with HTTPS and form protections but lacks advanced DNS and HTTP security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent with the business timeline and purpose, indicating legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

T

The Conference Forum

patientsaspartners.org

59

Patients as Partners in Clinical Research and Patient Access is a specialized platform operated by The Conference Forum, focusing on elevating the patient voice within clinical research and healthcare access. The website offers a range of services including conferences, editorial content, podcasts, and webinars aimed at healthcare professionals, patient advocates, and industry stakeholders. The platform positions itself as a niche leader in patient engagement communication within the healthcare sector, with a business model centered on content and event marketing. Founded in 2018, the organization maintains a consistent and professional brand presence with good content quality and user experience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Slick Carousel, Select2, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Hosting is provided by Bluehost Inc., and the site is secured with HTTPS and Google reCAPTCHA v3 for form protection. Mobile optimization and SEO practices are good, though accessibility features are basic. Performance is moderate, with opportunities for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks DNSSEC and important security headers like Content-Security-Policy. There is no published security policy or incident response contact, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business age and domain registration details, indicating a legitimate and stable online presence. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would enhance the site's security and compliance standing. The absence of direct contact emails or phone numbers limits immediate user contact options, relying instead on subscription forms. The site is safe for general audiences with no adult or explicit content detected.

T

The Conference Forum

clinicaltrialsoperations.org

61

The Conference Forum operates the clinicaltrialsoperations.org website, providing specialized content including articles, podcasts, webcasts, and events focused on modernizing clinical trial operations and accelerating therapeutic development. The business targets pharmaceutical, biotech, and clinical research professionals, positioning itself as a niche content and event provider within the healthcare sector. The website is relatively new, consistent with the domain registration date in late 2023, and reflects a small but professional operation with a clear focus on clinical trial innovation and partnerships. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, Select2, and integrates multiple third-party analytics and tracking services such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. Hosting is via Amazon AWS infrastructure with Cloudfront CDN, ensuring reasonable performance and availability. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No sensitive data exposure or vulnerabilities were detected in the HTML content. Privacy compliance is partial; a privacy policy is present on the parent domain, but no explicit cookie consent mechanism is implemented, which may pose GDPR compliance risks. Overall, the website presents a trustworthy and professional front for its niche audience, with moderate technical maturity and a solid business foundation. Strategic improvements in security hardening and privacy compliance would enhance its posture and trustworthiness.

T

The Conference Forum

immuno-oncology360.org

60

Immuno-Oncology360.org is a specialized digital platform operated by The Conference Forum, focusing on the Immuno-Oncology and Cell Therapy sector. It offers a comprehensive suite of services including conferences, editorial content, podcasts, webinars, and marketing services tailored to healthcare professionals and biotech industry stakeholders. The platform positions itself as a niche leader in this healthcare segment, supporting community engagement and knowledge sharing. Technically, the website employs a modern technology stack with popular JavaScript libraries and tracking tools, hosted on Amazon AWS infrastructure with Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and client domain protections enabled, but lacks DNSSEC and explicit security headers, and does not publish formal security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, suitable for its target audience but with room for security and privacy improvements.

T

The Conference Forum

clinicaltrialaccess.com

58

The website clinicaltrialaccess.com is a specialized platform operated by The Conference Forum, focusing on community-based clinical trials. It offers a range of services including events, editorial content, podcasts, webinars, and marketing services aimed at healthcare professionals, clinical trial sites, and pharmaceutical stakeholders. The platform positions itself as a niche content and event marketing provider within the healthcare and clinical research sector. Technically, the site employs a modern tech stack with popular JavaScript libraries and analytics tools, hosted on Amazon AWS infrastructure with CDN support. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration is consistent with the business launch timeline and shows no suspicious indicators. The site is safe for general audiences and does not contain adult or explicit content.

T

The Conference Forum

cmo360.org

59

The Conference Forum operates the cmo360.org website, a specialized platform supporting biotech Chief Medical Officers and R&D leadership throughout the drug development cycle. The site offers a variety of content including editorial articles, podcasts, webinars, and conferences, targeting biotech professionals and industry leaders. The business model centers on content marketing and event organization within the healthcare and biotech sectors, positioning itself as a niche leader with a focused audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. Hosting is via Amazon AWS infrastructure with Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is limited to a subscription/contact form without direct emails or phone numbers. Overall, the website is professional, trustworthy, and well-aligned with its business goals.