Security Directory

M

Möbelix

moebelix.com

56

Möbelix is a large retail furniture discounter operating primarily in Austria and several Central European countries including Czechia, Slovakia, and Hungary. The website serves as an international portal linking to regional sites and presents the company as part of the XXXLutz Group, a well-known furniture retail conglomerate. The business model focuses on offering discounted furniture and home accessories to a broad consumer base. The site is professionally designed with consistent branding and good content relevance, targeting general consumers interested in affordable home furnishings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for UI enhancements. SEO is well implemented with proper meta tags, Open Graph data, and JSON-LD structured data. Mobile optimization is good, and the site loads with moderate performance. However, accessibility features appear basic and could be improved. From a security perspective, the site uses HTTPS and includes Google Analytics and Tag Manager for user tracking. There is no evidence of security headers or explicit privacy and cookie policies, which indicates gaps in compliance and security best practices. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trust from a domain registration standpoint. No critical vulnerabilities or malicious content were detected in the accessible content. Overall, Möbelix.com presents a professional and trustworthy retail website with room for improvement in privacy compliance, security hardening, and domain registration transparency. Strategic enhancements in these areas would strengthen the company's digital trust and regulatory posture.

M

Mömax

moemax.com

53

Mömax is a large retail furniture and home decor company operating internationally with localized websites for multiple European countries. The company is part of the XXXLutz Group and offers modern furniture solutions both online and in physical stores. The website is built on WordPress and uses modern web technologies such as jQuery, Bootstrap, and Slick Carousel, with SEO optimization via Yoast SEO plugin. Google Analytics and Google Tag Manager are employed for user tracking and marketing analytics. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and visible privacy or cookie policies. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the strong branding and business presence. Overall, the website is professional, well-branded, and user-friendly but could improve privacy compliance and security transparency.

X

XXXLutz

xxxlutz.com

55

XXXLutz is a large European retail company specializing in furniture and home furnishings, operating multiple country-specific websites under the same brand. The website presents a professional and consistent brand image with good content quality and SEO optimization. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and frameworks, providing a moderate performance and good mobile optimization. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are missing. The absence of WHOIS data is unusual but does not strongly detract from the overall legitimacy given the professional website and brand presence. Strategic improvements include adding privacy and cookie policies, security headers, and contact information for security incidents to enhance compliance and trust.

Letiště Praha, a. s. operates the Václav Havel Airport Prague and is actively engaged in a modernization project to transform the airport into a sustainable, modern 21st-century facility. The website serves as an informational platform detailing development plans, sustainability efforts, and benefits to the Czech economy and travelers. The company holds a strong market position as the national airport operator and targets Czech travelers, tourists, and business partners. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized and professionally designed, offering a good user experience and clear navigation. Security posture is moderate with HTTPS in use and consent management implemented, but lacks explicit security headers and published security policies. WHOIS data is consistent with the business and domain age aligns with the project timeline. Overall, the website is trustworthy and professional, though improvements in security transparency and contact information are recommended.

X

XXXLutz Group

xxxlgroup.com

56

XXXLutz Group is a leading global retail enterprise specializing in kitchens, furniture, and home accessories. The company operates multiple subsidiary brands across various countries, positioning itself as a dominant player in the retail furniture sector. The website reflects a professional and consistent brand image with clear navigation and multilingual support, targeting a general audience interested in home furnishing products. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site demonstrates strong business credibility and technical maturity with room for security and privacy enhancements.

F

Freiwillige Feuerwehr Albstadt

feuerwehralbstadt.de

49

Freiwillige Feuerwehr Albstadt is a local non-profit government fire department serving the community of Albstadt, Germany. The website provides information about their emergency response services, fire prevention education, training programs, and community engagement. The site targets local residents and stakeholders interested in fire safety and volunteer firefighting activities. Technically, the website uses a combination of jQuery, Bootstrap 3.3.7, and various UI libraries to deliver a responsive and user-friendly experience. Hosting is managed via DomainControl nameservers, and HTTPS is enforced, ensuring secure communication. Security posture is moderate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. No direct contact emails or phone numbers are clearly presented, though a contact form is available. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Stadtbücherei Albstadt

stadtbuecherei-albstadt.de

48

Stadtbücherei Albstadt operates as a public library serving the Albstadt community in Germany, offering a broad range of services including book lending, digital media access, e-learning, and community events. The website is well-structured with clear navigation and content relevant to its target audience of local residents, students, and educational institutions. Technically, the site employs a mix of established JavaScript libraries and CSS frameworks, notably jQuery and Bootstrap 3.3.7, hosted on DomainControl nameservers. While the site uses HTTPS and implements a cookie consent mechanism, it lacks explicit privacy and terms of service pages, and no security headers were detected in the provided data. The absence of contact emails and phone numbers in the visible content suggests contact is primarily via forms or dedicated contact pages. Overall, the site presents a professional and trustworthy digital presence for a local government entity.

K

Kinder- und Jugendbüro Albstadt

kjbalbstadt.de

46

Kinder- und Jugendbüro Albstadt is a municipal youth office serving the Albstadt community in Germany, focusing on empowering children and youth through various programs and services. The website provides information about youth houses, school social work, participation opportunities, and event calendars, positioning itself as a local government service entity. The digital infrastructure employs common web technologies such as jQuery, Bootstrap, and various UI libraries, hosted under a domain controlled by DomainControl.com, indicating a standard hosting environment. The site is accessible, mobile-optimized, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and safe for its target audience.

L

Letiště Praha, a. s.

pragueairportcity.cz

58

Prague Airport City is a professional investment platform focused on offering lucrative real estate and development opportunities within the Václav Havel Airport Prague area. The website targets investors and developers interested in multifaceted projects including hotels, administrative buildings, logistics, and multifunctional facilities. The business is positioned as a key player in transportation and real estate sectors in the Czech Republic, leveraging the strategic location of the airport as a gateway to Europe and the world. The site is well-branded, consistent, and provides clear contact channels including a contact form, phone, and email. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries, and integrates compliance tools such as Cookiebot for GDPR adherence. The site is mobile-optimized and accessible, with good SEO practices.

S

Stadt Albstadt

albstadt.de

49

The website www.albstadt.de serves as the official online presence of the city of Albstadt, Germany, providing comprehensive information about municipal services, local politics, events, and citizen engagement. The site targets residents and visitors, offering key services such as citizen service portals, event calendars, issue reporting, and public announcements. The business model is that of a government entity focused on public service delivery and community information dissemination. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Slick Carousel, GSAP, and accessibility tools like eyeAble and easy speech. The site is mobile-optimized and demonstrates good accessibility and SEO practices. Hosting appears to be local to Germany, consistent with the domain and audience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found. Contact information and incident response details are not clearly presented. Overall, the website is professional, trustworthy, and well-structured for its purpose, but could improve in privacy transparency, security header implementation, and contact information visibility to enhance user trust and compliance.

F

FAMILY OF POWER

familyofpower-mobility.com

64

FAMILY OF POWER operates a cooperative e-Carsharing service in Austria, focusing on sustainable and affordable electric vehicle sharing for municipalities, companies, housing communities, and private individuals. The business model integrates renewable energy communities and advertising partnerships to subsidize operational costs, positioning itself as a regional leader in eco-friendly mobility solutions. The website provides comprehensive information about services, pricing, partner networks, and community involvement, targeting environmentally conscious users and local stakeholders. Technically, the website employs modern frontend technologies including jQuery, Foundation framework, lazy loading, and Google Maps API with explicit user consent for privacy compliance. The site is well-structured, mobile-optimized, and offers a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, HTTPS is used, and privacy-conscious features like explicit consent for Google Maps are implemented. Nonetheless, the absence of visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms indicate room for improvement. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the website is functional and informative but should address privacy compliance and domain registration transparency to enhance trust and security posture. Strategic improvements in security headers, policy disclosures, and WHOIS registration would strengthen the site's credibility and compliance.

INVT Network Power (Shenzhen) Co., Ltd. is a subsidiary of Shenzhen INVT Electric Co., Ltd., specializing in integrated data center solutions including micro-modules, environmental refrigeration, intelligent monitoring, power supply, and distribution systems. The company targets data center operators and enterprises requiring modular and rapid deployment solutions. Their market position is supported by a large parent company and a broad portfolio of subsidiaries focused on energy and technology sectors. Technically, the website uses a custom CMS with modern JavaScript libraries and is hosted on Alibaba Cloud, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent banner and privacy policy present but no explicit GDPR compliance. Overall, the website is professional and trustworthy with clear contact information and social media presence.

F

FAMILY OF POWER

familyofpower.com

65

FAMILY OF POWER operates a regional e-Carsharing service in Austria, focusing on sustainable mobility solutions powered by 100% renewable energy. The company targets municipalities, businesses, residential communities, and private individuals, offering flexible and affordable electric car sharing with transparent pricing and cooperative business model elements. Their services include e-Carsharing vehicle rental, renewable energy communities, and investment opportunities through POWER participation. The website is professionally designed with good content quality and clear navigation, supporting user engagement and service promotion. Technically, the website employs modern frontend technologies such as jQuery, Foundation framework, lazy loading, and Google Maps API with privacy-conscious consent mechanisms. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the active and professional website presence. Privacy and cookie policies are not found, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no social media presence or incident response details are published. Overall, the website presents a credible and professional business front for a small regional cooperative in the energy and transportation sectors, but improvements in privacy compliance, security transparency, and domain registration clarity are recommended to enhance trust and reduce risk.

T

Thermik Gerätebau

thermik.de

44

Thermik Gerätebau is a German manufacturing company specializing in temperature limiters and PTC thermistors, positioning itself as a world market leader in this niche. The website reflects a professional B2B focus with a broad product portfolio and international reach, supported by multiple language options. Technically, the site uses modern JavaScript libraries and a reputable consent management platform (Usercentrics) to ensure GDPR compliance. Security posture is solid with HTTPS and secure form handling, though explicit security headers and incident response information are absent. Overall, the site is well-designed, mobile-optimized, and trustworthy, with clear contact channels and certifications that reinforce its credibility.

N

NoTube non-profit LLC

notube.com

63

NoTube is a specialized non-profit healthcare organization focused on pediatric feeding therapy and tube weaning. The website presents a professional and comprehensive digital presence, offering online and on-site therapy programs, educational resources, and support for children and adolescents with eating difficulties. The organization targets parents and healthcare professionals, positioning itself as a niche leader in this specialized healthcare segment. Technically, the website is built on HubSpot CMS, leveraging modern marketing and analytics tools such as Google Tag Manager and Hotjar, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, though explicit security and incident response policies are not publicly disclosed. The absence of WHOIS data for the domain is a notable gap, suggesting privacy protection or registration issues, which slightly impacts trust but does not detract from the professional presentation and trust signals on the site. Overall, NoTube demonstrates a mature digital infrastructure suitable for its healthcare mission, with room for improvement in transparency around security policies and domain registration.

E

ELKO EP SLOVAKIA, s.r.o.

elkoep.sk

66

ELKO EP SLOVAKIA, s.r.o. operates a professional e-commerce platform specializing in electrical components, relay modules, and smart home devices under brands such as ELKO and iNELS. The company targets both wholesale and retail customers primarily in Slovakia, positioning itself as a leading supplier in the energy and smart home sector. The website offers a comprehensive product catalog, customer support, and educational resources, reflecting a mature business model with a medium-sized market presence. Technically, the website is built on the SiteJay 2.0 CMS platform, utilizing modern JavaScript libraries like jQuery, Fancybox, and Slick Carousel. It integrates Google Analytics and Smartsupp Live Chat for analytics and customer engagement. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with asynchronous loading of external scripts enhancing user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response information is provided. No vulnerabilities or malicious content were detected, but improvements in security headers and vulnerability disclosure are recommended. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its target audience effectively. Strategic enhancements in security posture and accessibility would further strengthen its digital maturity and risk management.

P

plachty.as - TAOX

plachty.as

44

PLACHTY.as is a Czech Republic based specialized e-commerce retailer focused on selling various types of tarpaulins, protective covers, shading nets, and custom-made tarpaulins. The website targets general consumers and businesses requiring durable and UV-stabilized tarpaulin products. The business operates a niche online retail model with a clear product catalog and pricing. Technically, the website uses modern JavaScript libraries including jQuery, Bootstrap, Google Tag Manager, and Google Analytics, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced and CSRF tokens implemented, but lacks some advanced security headers and explicit privacy or terms of service pages. Overall, the website is legitimate and trustworthy with room for improvement in privacy compliance and security best practices.

BRE Group is a well-established organization specializing in delivering innovative products, services, standards, and qualifications aimed at improving buildings for people and the environment. Their market position is strong within the built environment and sustainability sectors, offering strategic advisory, testing, certification, training, and research services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting built environment professionals and stakeholders. Technically, the site leverages modern frameworks such as React and Liferay Portal, ensuring a robust and scalable platform. The use of standard web technologies and CMS indicates a mature infrastructure, with good mobile optimization and accessibility features. Performance is moderate, with room for optimization. From a security perspective, the website enforces HTTPS, employs Content Security Policy with nonce, and follows best practices in form validation and data handling. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure program is evident. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website presents a low risk profile with high trustworthiness, professional content, and solid technical implementation. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing security header configurations to further strengthen the security posture.

E

Eurogreen

eurogreen.cz

58

Eurogreen is a Czech-based company specializing in professional care for lawns and greenery, offering seeds, fertilizers, and garden, municipal, and agricultural machinery. The company targets both business and consumer markets within the Czech Republic, positioning itself as a reputable regional supplier with recognized brands such as ISEKI and OREC. The website is built on WordPress using the Divi theme, incorporating modern web technologies and SEO best practices, including structured data and Google Tag Manager for analytics. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data reduces domain transparency, which slightly impacts trustworthiness. Overall, the website is professional, accessible, and compliant with GDPR, making it a credible digital presence for Eurogreen.

S

Share your green design

shareyourgreendesign.com

52

Share Your Green Design is a niche digital platform dedicated to showcasing sustainable architectural design through a variety of content types including case studies, podcasts, masterclasses, and events. The website targets architects, designers, students, and sustainability advocates, positioning itself as a community hub for green design knowledge sharing. Technically, the site is built on WordPress with a modern tech stack including jQuery, Slick Carousel, and Revolution Slider, and it demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and CAPTCHA usage, but lacks some security headers and explicit incident response policies. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy page found. The absence of WHOIS data raises concerns about domain registration transparency, although the active and professional website partially mitigates this risk. Overall, the site scores well in content quality and technical implementation but should improve privacy and security transparency to enhance trust.

M

MYPLAST s.r.o.

myplast.cz

50

MYPLAST s.r.o. is a Czech manufacturing company specializing in the design, development, and production of injection molded and shaped plastic products primarily for cooling systems, construction, and other industrial sectors. Established in 1998, the company has grown steadily, modernizing its facilities and expanding its product portfolio. The website reflects a professional and consistent brand image with detailed business and contact information, including certifications such as ISO 9001. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, and Google Analytics for tracking and performance. It is mobile optimized and includes cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though additional security headers could enhance protection. The absence of WHOIS data for the domain is a notable concern, as it reduces trust in domain legitimacy despite the professional presentation and detailed company information on the site. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is well-constructed and suitable for its industrial B2B audience, but the missing WHOIS data and lack of some security headers suggest areas for improvement in trust and security transparency.

2

2050 Materials

2050-materials.com

54

2050 Materials is a specialized platform focused on providing sustainability data for building materials, enabling architects, specifiers, and manufacturers to make informed, data-driven decisions to promote sustainable construction. The company operates a SaaS model offering product data, APIs, and reporting tools, positioning itself as a niche leader in the green building sector with strong industry partnerships. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence for a company founded in 2021 and based in Cyprus. Technically, the site runs on WordPress with modern JavaScript libraries and integrates Google Analytics and hCaptcha for analytics and security respectively. Security posture is good with HTTPS and domain locking, though improvements can be made by adding security headers and formal security policies. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

V

Valmia Solutions s.r.o.

valmia.cz

50

Valmia Solutions s.r.o. is a Czech Republic-based technology company specializing in custom software development, digitalization, and automation services. The company targets businesses seeking tailored software solutions and has established a solid market presence with over 11 years of experience and more than 150 clients. Their offerings include e-shops, web and mobile applications, portal solutions, and enterprise systems. The website reflects a professional and consistent brand image with clear service descriptions and client trust indicators such as testimonials and client logos. Technically, the website is built on WordPress 6.6.1, hosted on DigitalOcean, and employs modern web technologies including Google Analytics, jQuery, Bootstrap grid, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with a fast loading performance. Privacy compliance is well addressed through a cookie consent mechanism and links to a privacy policy, although no terms of service or explicit security policies are published. From a security perspective, the site uses HTTPS with excellent SSL configuration and enforces cookie consent. However, it lacks visible security headers and does not provide incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is consistent with the business claims, registered since 2017, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence for a small technology company focused on B2B custom software development. Strategic improvements include adding security headers, publishing a security policy and terms of service, and enhancing incident response transparency to further strengthen security posture and compliance.

I

Interhotel Zlín a.s.

hotelmoskva.cz

42

Interhotel Zlín a.s. is a medium-sized hospitality business operating a newly renovated four-star hotel located in the center of Zlín, Czech Republic. The hotel positions itself as the largest congress hotel in the region, offering modern accommodation, conference facilities, multiple restaurants, wellness, and sports amenities. The website reflects a professional and consistent brand image with clear business focus on hospitality and conference services. Technically, the website is built on WordPress CMS using common libraries such as jQuery, Slick Carousel, and FontAwesome, with integration of a third-party booking engine (Bookolo). The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no active consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Partnership in International Management

pimnetwork.org

59

PIM Network is a well-established international consortium of business schools dedicated to fostering student mobility, faculty collaboration, and sharing best practices in international management education. With over 50 years of history, it serves as a global alliance facilitating conferences and networking among member institutions. The website reflects a professional and consistent brand presence targeting educational institutions and professionals worldwide. Technically, the site is built on WordPress with BuddyBoss platform and uses modern JavaScript libraries, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain protections, though it lacks advanced security headers and DNSSEC. Privacy compliance is evident through cookie consent mechanisms and a privacy policy, though no terms of service or explicit security policies are found. Overall, the site is trustworthy, safe, and professionally maintained, supporting the consortium's mission effectively.

W

WOODCOTE SK

woodcote.sk

56

WOODCOTE SK is a well-established Slovakian company specializing in the retail and wholesale distribution of high-quality building materials. With over 31 years of market presence and more than 45 branches across Slovakia, the company serves construction professionals and retail customers through both physical stores and an online e-commerce platform. Their website reflects a professional and consistent brand image, supported by active social media channels and comprehensive product offerings.

Motor-Max.cz is a Czech-language motorsport news and media website targeting enthusiasts of various racing disciplines including rally, circuits, moto, and trucks. The site provides news articles, photo galleries, and video content, positioning itself as a niche regional media outlet. Founded in 2021, it operates on WordPress CMS and is hosted with WEDOS, a Czech hosting provider. The website demonstrates a moderate level of digital maturity with a modern tech stack including Google Analytics, Adsense, and reCAPTCHA for security and analytics. While HTTPS is enabled and cookie consent is implemented, explicit privacy policies and terms of service pages are not detected, indicating room for improvement in compliance. Security headers are not fully implemented, though no critical vulnerabilities are evident from the data provided. Overall, the site offers a good user experience with clear navigation and relevant content for its target audience.

K

Kultura města Mladá Boleslav, a.s.

kulturamb.cz

53

The website www.kulturamb.cz serves as the official cultural portal for the city of Mladá Boleslav, Czech Republic. It provides a calendar of cultural events, manages cultural venues, and offers an e-shop for tickets and related products. The site targets residents and visitors interested in local cultural activities, positioning itself as a key public service for the community. The business model revolves around cultural event management and ticket sales, operating under a government or municipal entity structure. Technically, the site employs common web technologies such as jQuery, Google Fonts, and Font Awesome icons, with moderate performance and good mobile optimization. However, there is no detected CMS or hosting provider information from the provided data. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common for such entities. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

I

ITS Group

its-group.cz

57

ITS Group is a medium-sized manufacturing group based in the Czech Republic, specializing in machine production, supply of technological units, and industrial fibers. The group operates multiple subsidiaries across Central Europe and the US, positioning itself as a leader in its industry both domestically and internationally. The website reflects a professional business presence with clear descriptions of services and subsidiaries. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is good with HTTPS enforced and spam protection in place, though explicit security headers and incident response information are lacking. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and business-focused, though domain registration data is unavailable, which slightly reduces trust assessment.

Z

Základní škola Slovan Kroměříž

zsslovan.cz

49

Základní škola Slovan Kroměříž is a primary educational institution serving the local community in the Czech Republic. The website provides information about the school, its services including cafeteria and after-school programs, and links to official partners and projects. The site targets students, parents, and local stakeholders with relevant educational content and announcements. Technically, the website uses modern web technologies such as Bootstrap, Google Analytics, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, some security best practices like security headers and privacy compliance mechanisms are missing. The security posture is moderate with HTTPS enabled but lacking advanced protections. The absence of WHOIS data limits domain trust assessment, but the website content and external references support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

I

IDEAL – Trade Service, spol. s r.o.

hivision.cz

39

The website hivision.cz represents a Czech-based company IDEAL – Trade Service, spol. s r.o., offering industrial control systems under the HiVision brand. Their core business focuses on providing modular, remote-controllable technology solutions primarily for manufacturing sectors such as coating and painting lines. The company positions itself as an experienced and regionally recognized player with a registered trademark in the European Union and a parent company ITS Brno. The website content is professionally presented, targeting manufacturing companies seeking efficiency and energy savings through advanced control systems. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various UI enhancement plugins. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized and SEO-friendly, with good navigation and content quality. However, no hosting provider or server details were identified, and performance is moderate. From a security perspective, the site uses HTTPS with no visible exposed sensitive data. Security headers are not explicitly detected, and no vulnerability disclosures or incident response policies are published. Privacy and cookie policies are present and GDPR compliant, but contact information such as emails or phone numbers is not explicitly provided on the site. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and branding indicate a legitimate business. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and contact accessibility. The lack of WHOIS data is a concern that should be addressed to enhance trust and legitimacy.

N

News and Media Holding

newsandmedia.sk

58

News and Media Holding is the largest media company in Slovakia, offering a broad portfolio of print and online publications including lifestyle, social, economic, and hobby titles. The company operates a professional website that serves as a portal to its products, advertising, and subscription services. The website is well-structured, mobile-optimized, and integrates modern technologies such as Google Tag Manager and OneTrust for cookie consent management. Hosting and DNS are managed via Cloudflare, indicating a reliable infrastructure. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. The domain registration data aligns well with the company's business history and market presence, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence suitable for its media business model.

V

VIPS gas s.r.o.

vipsgas.cz

50

VIPS gas s.r.o. is a Czech-based company specializing in the distribution and servicing of heating and climate technology products, including gas boilers, heat pumps, measuring instruments, and air conditioning systems. The company targets both professional installers and end customers, offering a comprehensive product portfolio and technical support services. Their market position is that of a reputable regional player with a medium-sized operation and a strong focus on Immergas brand products. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Slick Carousel, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization. Google Analytics and Tag Manager are used for analytics and marketing purposes, with a cookie consent mechanism in place to comply with privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a published security policy or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, VIPS gas s.r.o. presents a professional and trustworthy online presence with room for improvement in security transparency and domain registration visibility. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response communication.

GreenFactory, operated by Velvetleaf s.r.o., is a small retail and hospitality business based in Prague, Czech Republic, specializing in fresh salads with an emphasis on healthy eating. The company offers online ordering and operates multiple physical branches, targeting local consumers seeking convenient and nutritious food options. The website is professionally designed with good content quality, clear navigation, and mobile responsiveness, supporting a positive user experience. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, Select2, and Slick Carousel, ensuring a functional and visually appealing interface. While performance is moderate and SEO is basic, the site lacks advanced accessibility features and some security best practices such as security headers and cookie consent mechanisms. From a security perspective, the website enforces HTTPS and does not expose sensitive data, but the absence of security headers and formal privacy and incident response policies indicates room for improvement. The WHOIS data is unavailable, which slightly reduces trustworthiness, though the presence of clear business contact information and customer reviews supports legitimacy. Overall, the site presents a low-risk profile but would benefit from enhanced security and privacy compliance measures.

ADDENT.cz is a family dental clinic located in Brno, Czech Republic, specializing in comprehensive dental care including preventive care, dental hygiene, prosthetics, oral surgery, implantology, and teeth whitening. The clinic targets local families and individuals seeking trusted dental services. The website reflects a professional and consistent brand image with clear service offerings and contact information, although it currently does not accept new patients for general dental care but offers hygiene and whitening services. Technically, the site uses a modern tech stack including jQuery, UIkit, Google Analytics, and Facebook Pixel, with moderate performance and good mobile optimization. Security posture is adequate with cookie consent and form validation but lacks visible HTTP security headers and detailed security policies. WHOIS data is unavailable, which limits domain legitimacy verification and reduces trust scores. Overall, the site is functional, professional, and compliant with GDPR, but could improve security transparency and domain registration clarity.

H

Hotelový resort SEN****

hotelsen.cz

49

Hotelový resort SEN**** is a medium-sized hospitality business located in Senohraby, Czech Republic, offering hotel accommodation, wellness services, restaurant dining, and event hosting. The website presents a professional and well-structured digital presence with multilingual support and integrated booking capabilities. The technical infrastructure is based on WordPress CMS with common plugins for e-commerce, forms, and analytics, indicating a mature digital setup. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is functional, user-friendly, and compliant with basic privacy standards, serving its target audience effectively.

D

DOBEŠ-STAVBY s.r.o.

dobes-stavby.cz

41

DOBEŠ-STAVBY s.r.o. is a medium-sized Czech construction company specializing in building materials sales, construction works, equipment rental, earthworks, and transportation services. The company targets both B2B and B2C customers primarily in the Vyškov region. Their website reflects a solid regional market position with a comprehensive portfolio of services and references. Technically, the site is built on Kentico CMS with modern web technologies and includes standard analytics and marketing tools such as Google Analytics and Facebook integration. Security posture is moderate with some best practices like CSRF tokens but lacks explicit security headers and detailed security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is professional, trustworthy, and content-rich, supporting the company's business credibility.

Futurama Business Park is a well-established commercial real estate property located in Prague, Czech Republic, managed by SAFICHEM INVEST, a.s. The website presents a professional image emphasizing office space leasing, sustainability, and clean energy generation. The property consists of multiple office buildings with landscaped gardens and modern amenities, targeting business tenants seeking quality office environments. Technically, the website uses modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The security posture is solid with HTTPS and spam protection on forms, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable source for prospective tenants and partners.

R

ROBERT DIAMONDS s.r.o.

diamond-textil.sk

44

ROBERT DIAMONDS s.r.o. operates diamond-textil.sk, an e-commerce website specializing in hotel textiles including towels, bathrobes, mattresses, bed linens, and hotel furniture. The company targets hospitality businesses and wholesale buyers primarily in Slovakia. The website presents a professional and consistent brand image with clear contact information and legal disclosures, supporting its credibility in the retail and hospitality sectors. Technically, the site uses a custom or proprietary CMS platform with common JavaScript libraries such as jQuery and Slick Carousel, hosted on Websupport infrastructure. While the site is mobile-optimized and offers a good user experience, some outdated libraries and lack of advanced security headers present moderate technical risks. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but could be improved by updating libraries and implementing security headers. Privacy compliance is basic but present, with GDPR and cookie policies accessible. Overall, the domain registration data aligns well with the business, indicating legitimacy and a trustworthy online presence.

I

International Council of Museums

icom.museum

50

The International Council of Museums (ICOM) operates as a global non-profit organization dedicated to supporting museums and museum professionals worldwide. It provides a comprehensive network facilitating events, training, research, and heritage protection initiatives. The website reflects a mature digital presence with multilingual support and a broad range of resources aimed at museum professionals and cultural heritage stakeholders. Technically, the site is built on WordPress with modern plugins and analytics integrations, ensuring a functional and user-friendly experience. Security measures such as HTTPS and reCAPTCHA are in place, though enhancements like DNSSEC and additional security headers could further strengthen the posture. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

S

Střední škola polytechnická Vyškov

ssp-vyskov.cz

47

Střední škola polytechnická Vyškov is a Czech secondary polytechnic school providing technical and vocational education with a focus on technology and crafts. The institution offers both maturitní (graduation) and učební (apprenticeship) study programs, targeting students, parents, and the local community. The school maintains partnerships with various regional companies and organizations, enhancing practical training opportunities. The website reflects a well-structured and professionally designed digital presence, supporting the school's educational mission and community engagement. Technically, the website is built on the CronosWeb CMS platform, utilizing jQuery, Slick Carousel, and cryptographic libraries like SJCL. It implements modern web standards including HTTPS, cookie consent mechanisms, and social media integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and uses cookie consent tools, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the school's identity, indicating a legitimate and trustworthy domain registration. Overall, the website presents a secure, compliant, and professional online presence suitable for an educational institution. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to further strengthen trust and compliance.

I

Interlaw Ltd.

interlaw.com

71

Interlaw Ltd. operates as a nonprofit global legal network connecting over 8,000 lawyers worldwide through a vetted membership of full-service corporate law firms. The organization provides multinational clients with seamless cross-border legal services, emphasizing professional and ethical standards. The website reflects a mature, well-branded presence with multiple industry recognitions and client testimonials, positioning Interlaw as a trusted elite network in the legal sector. Technically, the website employs modern web technologies including Google Tag Manager and responsive design, hosted likely on AWS infrastructure. The site is performant with good mobile optimization and basic accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit security or incident response policies are published, and no direct company contact emails or phone numbers are provided, relying instead on contact forms. Overall, the website is professional and trustworthy in content and design but would benefit from improved transparency in domain registration, enhanced security headers, and more explicit security governance documentation to strengthen trust and compliance.

S

Střední škola polytechnická Vyškov

sos-vyskov.cz

48

Střední škola polytechnická Vyškov is a Czech secondary polytechnic school providing technical and vocational education with a focus on technology and crafts. The institution offers both maturitní (graduation) and učební (apprenticeship) study programs, targeting students, parents, and the local community. The website is professionally designed, well-structured, and provides comprehensive information about the school, its programs, partners, and news updates. It maintains active social media profiles and complies with GDPR and cookie regulations, enhancing user trust and transparency. Technically, the website uses a combination of legacy and modern web technologies including jQuery 1.10.2, Slick Carousel, and the CronosWeb CMS platform. It implements HTTPS with good SSL configuration and includes cookie consent mechanisms. Accessibility and mobile optimization are well addressed, though some technical debt is noted with the use of an older jQuery version. SEO and metadata are properly implemented, supporting good search engine visibility. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Recommendations include updating legacy libraries, adding security headers, and publishing formal security and incident response policies to strengthen the security posture. Overall, the website presents a low-risk profile with strong business credibility and compliance. It effectively serves its educational mission with clear communication and trustworthy digital presence. Strategic improvements in security documentation and technical modernization would further enhance its resilience and user confidence.

S

State of North Dakota

nd.gov

70

The website www.nd.gov serves as the official portal for the State of North Dakota, providing comprehensive information and resources related to living, working, industries, business, government services, news, and data. It targets residents, businesses, visitors, and government stakeholders, positioning itself as a trusted government resource. The site leverages a modern technical infrastructure based on Drupal 10 CMS, Bootstrap 5, and various JavaScript libraries to deliver a responsive, accessible, and user-friendly experience. Security is well implemented with HTTPS and secure linking practices, although explicit security headers could be enhanced. Privacy compliance is moderate, with a clear privacy policy but lacking a cookie consent mechanism. WHOIS data is limited but consistent with .gov domain privacy norms, supporting the site's legitimacy. Overall, the site demonstrates high professionalism, trustworthiness, and content quality.

A

ASKO - NÁBYTOK

asko-nabytok.sk

65

ASKO - NÁBYTOK operates a professional e-commerce platform specializing in furniture and home accessories targeted primarily at Slovak consumers. The website offers a broad range of products including beds, chairs, tables, wardrobes, and garden furniture, supported by physical store locations and free personal pickups. The company positions itself as a large retail player in Slovakia with a focus on quality and affordability. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Splide for enhanced user experience. It integrates Google Tag Manager and Consentmanager.net for analytics and cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized and structured with clear navigation, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like CSP or HSTS. No exposed sensitive data or vulnerable libraries were detected. However, the absence of a published privacy policy, terms of service, and security.txt file indicates gaps in compliance and incident response readiness. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security best practices to improve compliance and user trust.

C

Cenový automat s.r.o.

cenovyautomat.cz

43

Cenový automat s.r.o. operates a specialized SaaS platform focused on automated price optimization and competitor monitoring for e-shops primarily in the Czech Republic and Slovakia. The company positions itself as a trusted specialist with a professional solution that helps e-commerce businesses increase sales, optimize pricing strategies, and save time through automation. The website reflects a mature digital presence with modern technologies such as Bootstrap, Yii Framework, and integration of multiple analytics and marketing tools. Security posture is solid with HTTPS and CSRF protections, though additional security headers could enhance defenses. Privacy compliance is limited due to missing explicit privacy and cookie policies, which should be addressed to meet GDPR standards. The absence of WHOIS data reduces domain trustworthiness, but the professional content, customer testimonials, and clear contact information support business credibility. Overall, the site is well-designed, user-friendly, and business-focused, with extensive use of tracking and advertising technologies.

ZONER software, a.s. is a well-established European technology company headquartered in Brno, Czech Republic, with over 30 years of experience in software development and internet services. The company operates multiple divisions including photographic software, internet services, online security, and publishing. It serves a broad international customer base with millions of users and maintains a strong market position in the Czech Republic and beyond. Their flagship product is Zoner Photo Studio X, a popular photo editing software, complemented by web hosting, SSL certificate issuance, and antivirus solutions. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, ensuring good mobile responsiveness and SEO optimization. The site includes structured data for enhanced search engine understanding and integrates Google Analytics for user behavior insights. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks publicly available security policies, incident response contacts, or vulnerability disclosure programs. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for companies of this size and sector, and does not raise immediate trust concerns given the consistency of the website content and business information. Overall, ZONER software, a.s. demonstrates a strong business and technical foundation with good security hygiene. Strategic improvements could include publishing a dedicated security policy, incident response information, and vulnerability disclosure details to enhance transparency and trust.

E

Ecoliquid

ecoliquid.eu

56

Ecoliquid operates an established e-commerce platform specializing in cleaning, disinfection, and pet care products primarily targeting consumers in the Czech Republic and surrounding regions. The company emphasizes product quality and safety, supported by certifications such as from the Czech Ministry of Health. Their website is built on the Shoptet platform, leveraging modern web technologies and multiple analytics and marketing tools to optimize user experience and business insights. The site is well-structured, multi-lingual, and includes comprehensive privacy and cookie policies compliant with GDPR standards. Security posture is solid with HTTPS enforced and CSRF protections in place, though some HTTP security headers could be improved. The WHOIS data is privacy protected, which is common for commercial entities, but limits transparency on domain ownership. Overall, the business presents a trustworthy and professional online presence with moderate technical maturity and good compliance practices.

H

Welcome | Hydrogen Technology World Expo 2025

hydrogen-worldexpo.com

64

Hydrogen Technology World Expo 2025 is a major industry event focused on hydrogen and fuel cell technologies, scheduled to take place in Hamburg, Germany. The website serves as a comprehensive platform for event information, including conference tracks, speakers, exhibitors, and registration details. The event targets companies and professionals involved in the hydrogen energy sector, aiming to facilitate networking, knowledge sharing, and showcasing of innovative technologies. Technically, the website is built on the SHOWOFF CMS platform by ASP.events, utilizing modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and uses HTTPS, ensuring secure access. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Additionally, the lack of explicit privacy policy and contact information pages limits transparency. Overall, the site is professionally designed and content-rich but would benefit from enhanced compliance and trust signals.

A

Amiad Water Systems Ltd.

amiad.com

69

Amiad Water Systems Ltd. is a well-established global leader specializing in advanced water treatment and filtration solutions for irrigation, industrial, and agricultural sectors. The company offers a broad portfolio of products including automatic, semi-automatic, and manual filters, sand separators, and control systems. Their market position is strong, supported by a long domain history dating back to 1999 and multiple ISO certifications, reflecting a commitment to quality and environmental standards. The website targets industrial clients and agricultural businesses, operating primarily in a B2B model with a large company size and global reach. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, and integrates marketing and analytics tools like HubSpot, Google Analytics, and Facebook Pixel. The site is mobile optimized with good SEO practices and a consistent branding approach. Hosting and DNS are managed via Cloudflare, providing performance and security benefits, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, explicit security policies and incident response contacts are not published, and DNSSEC is absent. The site uses multiple tracking and marketing scripts, indicating extensive user tracking but maintains GDPR compliance with clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence with good content quality and technical implementation. Security posture is solid but could be improved by enabling DNSSEC and publishing formal security policies. The risk level is low, with no critical vulnerabilities detected. Strategic recommendations include enhancing DNS security, formalizing security and incident response documentation, and continuous monitoring of third-party scripts.