Security Directory

8horses GmbH is a small, Switzerland-based arthouse film production company composed of a group of artists, filmmakers, writers, and cinematographers. Their website showcases a portfolio of artistic film projects and emphasizes their collaborative creative approach. The company targets a niche audience interested in arthouse and artistic films, positioning itself as a specialized media production entity within the Swiss market. Technically, the website is built on the Indexhibit CMS platform and uses jQuery for scripting. It employs HTTPS for secure communication but lacks advanced security headers and modern tracking or analytics tools. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design quality. From a security perspective, the site has a basic posture with HTTPS enabled but missing critical security headers and no visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security hardening. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and provide vulnerability disclosure information to enhance trust and compliance.

CESK, s.r.o., operating under the brand Frigomat, is a Czech-based company specializing in the sale, rental, and servicing of Italian ice cream and confectionery machines. With a history spanning over 40 years, the company positions itself as a trusted provider for professional confectioners and ice cream makers, offering high-quality machinery and comprehensive support services. Their website reflects a professional and well-structured digital presence, targeting B2B customers in the manufacturing and food service sectors. Technically, the website employs modern web technologies including jQuery, Bootstrap, and integrates marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks some security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain reduces trust from a domain registration perspective, though the website content and business information appear legitimate and professional. Overall, the site scores well in content quality, privacy compliance, and business credibility, with moderate technical and security posture scores.

V

VHS Herten

vhs-herten.de

51

VHS Herten is a regional adult education provider in Germany offering a wide range of courses in politics, culture, health, languages, and integration. The website is professionally designed using WordPress with modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration data aligns well with the website's claims, indicating legitimacy. Overall, the site is trustworthy and serves its educational mission effectively.

F

Förderverein für regionale Entwicklung e.V.

azubi-projekte.de

62

The Azubi-Projekte website represents a well-established non-profit initiative by the Förderverein für regionale Entwicklung e.V., focused on providing free website creation services to various community and educational organizations while supporting practical training for apprentices. The organization has a clear regional focus in Germany and targets a broad audience including municipalities, schools, social institutions, and small businesses. The website content is professionally presented, with clear navigation and relevant information about participation and program benefits. Technically, the site employs a proprietary CMS platform with common JavaScript libraries such as jQuery, Material Design Lite, and Slick Carousel, ensuring a modern and responsive user experience. The site includes a comprehensive cookie consent mechanism aligned with GDPR requirements, and contact information is prominently displayed. However, no explicit security policies or incident response contacts are published. From a security perspective, the site uses session management and captcha mechanisms to mitigate abuse, but lacks visible HTTP security headers and published security frameworks. No critical vulnerabilities or suspicious patterns were detected. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers and publish formal security policies to further strengthen trust and compliance.

G

Gemeinde Holzwickede

holzwickede-kultur.de

61

The website www.holzwickede-kultur.de serves as the official cultural and volunteerism portal for the municipality of Holzwickede, Germany. It provides comprehensive information about local cultural events, volunteer opportunities, and community engagement initiatives. The site targets local residents and community members interested in cultural activities and civic participation. The business model is that of a government entity promoting local culture and volunteerism, with no commercial intent. The site is well-positioned as a trusted local resource with clear contact information and official branding. Technically, the website employs a municipal CMS platform with common web technologies such as jQuery, slick carousel, and Material Design Lite. The site is mobile-optimized, accessible, and includes SEO best practices. Cookie consent is implemented with detailed user controls, reflecting good privacy compliance. However, no advanced analytics or tracking services are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns are detected. The WHOIS data aligns with a legitimate municipal domain, though detailed registrant info is limited. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk is low given the nature of the site and its public sector context. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining privacy compliance. The site demonstrates good professionalism, trustworthiness, and community focus.

G

Global Dialogue

global-dialogue.org

67

Global Dialogue is a non-profit organization focused on enabling independent funders to collaborate towards ambitious philanthropic goals and lasting social change. The website presents a professional and consistent brand image with good content quality tailored to its target audience of funders and philanthropic entities. Technically, the site is built on WordPress using the Divi theme, hosted by GoDaddy, and employs standard web technologies such as jQuery and Google Fonts. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is basic with HTTPS enabled but lacks security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is limited, with no visible privacy or terms of service policies, though a cookie consent mechanism is present. Overall, the domain registration is privacy protected but consistent with a legitimate non-profit entity, and no suspicious patterns were detected. The site is safe for general audiences with no adult or explicit content.

T

Tuli Cinema

tulicinema.com

57

Tuli Cinema operates as a local cinema service provider primarily targeting audiences in Slovakia and Hungary. The website offers comprehensive movie programming, online ticket sales, and event promotions, positioning itself as a key entertainment venue associated with the x-bionic® sphere. The business model focuses on direct ticket sales and event marketing, catering to families and cinema enthusiasts. The website content is professionally presented, with clear navigation and multilingual support, enhancing user experience for its target audience. Technically, the website employs a custom or proprietary CMS platform (mojekino_v2r) and utilizes common web technologies such as jQuery, Facebook SDK, and legacy Google Analytics for tracking. While the site is mobile optimized and provides interactive features like trailers and event calendars, some modernization opportunities exist, including upgrading analytics and enhancing accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy requirements. However, no advanced security headers were detected, and the use of legacy analytics scripts suggests room for improvement. The absence of a public WHOIS record for the domain reduces transparency and trustworthiness, although the website content and contact information appear legitimate. Overall, Tuli Cinema presents a solid digital presence with good content quality and business credibility but would benefit from enhanced privacy disclosures, updated security practices, and improved domain registration transparency.

K

Kino Lumière

kino-lumiere.sk

47

Kino Lumière is a Slovak cinema focused on providing a comprehensive film program, online ticket sales, and cultural events. The website serves as a portal for film enthusiasts, families, and seniors, offering specialized programs such as BABY kino and SENior kino. The business operates primarily in the media sector with a local market focus. Technically, the website uses a specialized cinema CMS platform with integrations for Google Analytics and Facebook SDK, supporting multimedia content and online ticketing. The site is secured with HTTPS and includes a cookie consent mechanism, though it lacks explicit privacy and terms of service pages, which are important for GDPR compliance. Security headers are not evident, indicating room for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, but could enhance compliance and security practices.

M

MLYNY CINEMAS spol. s r.o.

mlyny-cinemas.sk

47

MLYNY CINEMAS spol. s r.o. operates a professional cinema chain in Slovakia, offering comprehensive movie programs, online ticket sales, and event information. The website is well-branded and targets general cinema audiences with family-friendly content. The business holds a solid regional position with partnerships supporting Slovak film culture. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Facebook SDK, integrated with Ticketware's ticketing platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is mostly met with accessible privacy and terms pages, but cookie consent mechanisms could be enhanced. Overall, the site is trustworthy and professionally maintained, with room for security and privacy enhancements.

N

NAMM, the National Association of Music Merchants

namm.org

65

NAMM (National Association of Music Merchants) is a well-established non-profit organization dedicated to promoting music making and supporting the global music products industry. The website serves as a comprehensive platform for industry events such as The NAMM Show, educational resources, advocacy, and membership services. It targets music manufacturers, retailers, professionals, and enthusiasts worldwide. The site demonstrates a mature digital presence with modern technologies, strong branding, and extensive content tailored to its audience. Technically, the website is built on Drupal 9 with integrations of popular analytics and marketing tools like Google Tag Manager and Facebook Pixel. It employs responsive design and accessibility features, ensuring a good user experience across devices. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, reflecting a commitment to privacy compliance. From a security perspective, the site uses HTTPS and shows good security practices, though some security headers could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for organizations, and does not raise concerns given the website's legitimacy and professional presentation. Overall, NAMM.org is a credible, professional, and secure website that effectively supports its mission and audience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and maintaining up-to-date software to sustain security and compliance.

C

CarbonAct | Nous accompagnons votre organisation dans l'action face aux enjeux climatiques

carbonact.fr

49

CarbonAct is a French consulting organization focused on assisting other organizations in addressing climate change challenges. The website presents a professional appearance with a clear focus on climate action and sustainability consulting services. The technical infrastructure is based on WordPress with the Divi theme, utilizing common web technologies such as jQuery and Google Fonts. The site is accessible without any WAF or security challenge blocking content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website appears legitimate and professional but would benefit from enhanced privacy and security practices.

Q

QUADRIM Conseils

quadrim.com

53

QUADRIM Conseils is a French consulting firm specializing in technical management optimization for real estate assets, with a focus on energy, maintenance, and engineering services. The company has been operating since 1998 and serves a diverse clientele including major institutions and corporations. The website is built on WordPress using common plugins and frameworks, providing a professional and responsive user experience. However, the absence of WHOIS registration data for the domain raises questions about domain legitimacy or recent registration status, which should be further investigated. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Overall, the website presents a credible business front but would benefit from enhanced security and compliance measures.

L

La culture avec la copie privee

aidescreation.org

57

The website aidescreation.org serves as a centralized database for cultural aid actions funded by collective management organizations in France, fulfilling a legal requirement established by the law of July 7, 2016. It aggregates and publishes data about cultural funding, supporting transparency and public access to information. The platform targets cultural stakeholders, beneficiaries, and the general public interested in cultural aid. The business operates as a non-profit entity, with a clear mission aligned with French cultural policy and copyright management frameworks. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, DataTables, Owl Carousel, and Matomo analytics with privacy by design. It uses HTTPS and is hosted by OVH sas, a reputable provider. The site includes a cookie consent mechanism compliant with GDPR requirements. While the site lacks some advanced security headers and DNSSEC, it maintains a good security posture overall with no visible vulnerabilities or exposed sensitive data. Security-wise, the site benefits from HTTPS encryption and cookie consent but could improve by enabling DNSSEC and adding security headers such as Content-Security-Policy. There is no published security or incident response policy, which is a gap for transparency and readiness. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and its alignment with the stated business purpose. Overall, aidescreation.org is a trustworthy, well-maintained platform providing valuable cultural aid data with good privacy compliance and moderate technical sophistication. Strategic improvements in security policies and technical hardening would enhance its posture further.

S

SPEDIDAM

myspedidam.fr

36

My SPEDIDAM is a French media rights management platform focused on providing artists with tools to manage their accounts and royalty declarations. The website serves as a secure login portal for artists and associated members, reflecting a specialized business model in the media sector. The company appears established with a domain age of over six years and consistent WHOIS data, indicating legitimacy and operational stability. Technically, the website employs a modern technology stack including jQuery, Kendo UI, Bootstrap, and ASP.NET MVC framework. While the site is mobile optimized and uses Google Analytics for tracking, there is room for improvement in accessibility and SEO optimization. The performance is moderate, and the design quality is good, providing a professional user experience. From a security perspective, the site enforces password complexity and includes CSRF tokens in forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No cookie consent mechanism is present, which is a GDPR compliance gap. The absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and trust. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and clearer terms of service documentation to strengthen its security posture and regulatory adherence.

H

Henrich Kubík

hk-photo.cz

41

HK-PHOTO is a small professional photography business based in Brno, Czech Republic, specializing in newborn, children, maternity, wedding, portrait, and reportage photography. The website presents a well-structured portfolio and client testimonials, positioning the business as a trusted local service provider. The domain age and WHOIS data align with the business history, indicating legitimacy and consistency. Technically, the website is built on WordPress using the Divi theme, with common plugins and Facebook integration. While the site is mobile optimized and visually appealing, some video playback issues and lack of security headers slightly detract from the user experience. Security posture is moderate with HTTPS enabled and copy protection scripts in place, but missing standard security headers and privacy compliance elements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

P

Prefa Brno a.s.

prefa.cz

48

Prefa Brno a.s. is a leading Czech manufacturer specializing in concrete, reinforced concrete, and prestressed concrete building components. Established in 1992, the company serves a broad construction market with a comprehensive product portfolio including prefabricated elements for sewage, decorative concrete products, building structures, tanks, and related services such as project design, assembly, and transportation. The company maintains a strong market position in the Czech Republic with a medium-sized workforce and several subsidiaries supporting its operations. Technically, the website is built on a modern WordPress platform with a well-integrated technology stack including jQuery, Google Analytics, NextGEN Gallery, and GDPR-compliant cookie consent tools. The site demonstrates good SEO practices, mobile optimization, and accessibility features, providing a professional user experience. The presence of structured data and Open Graph tags enhances search engine visibility and social media integration. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. While no explicit security headers were detected in the provided data, the site avoids exposing sensitive information and uses reputable plugins to manage privacy and analytics. The absence of WHOIS data limits domain registration trust verification, but the website content and business information appear legitimate and consistent with a professional manufacturing entity. Overall, Prefa Brno a.s. presents a credible and professional online presence with solid technical infrastructure and compliance posture. Strategic improvements in security headers and incident response visibility could further enhance trust and resilience.

Z

Zahradnictví s tradicí

zahradnictvi-u-masku.cz

38

The website 'Zahradnictví s tradicí' represents a small gardening business based in the Czech Republic, offering gardening services and products. The site is built on WordPress and uses common plugins such as Slider Revolution and Booked for appointments, indicating a moderate level of digital maturity. The technical infrastructure is standard for small business websites, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness and transparency. Overall, the site is functional and safe but would benefit from improved privacy compliance and security practices.

TERO MUSIC is a Thai music label specializing in artist creation, music rights management, and event promotion. The website showcases a variety of artists, music releases, videos, and upcoming events, targeting Thai music fans and industry participants. The company appears to be a medium-sized entity founded in 2021 with a consistent brand presence and active social media engagement. Technically, the site uses a modern tech stack including jQuery, Bulma CSS, Owl Carousel, and Google Analytics, hosted with Cloudflare DNS and registered via GoDaddy. The website is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with no DNSSEC, no visible security headers, and no HTTPS enforcement details provided. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

I

INTEWA GmbH

intewa.com

52

INTEWA GmbH is an established German company specializing in water treatment, rainwater management, and water reuse solutions for both commercial and residential sectors. With over 30 years of experience and more than 115,000 projects worldwide, the company offers innovative products such as the AQUALOOP water reuse systems, DRAINMAX tunnels, and system separation devices compliant with DIN standards. The website reflects a mature digital presence built on TYPO3 CMS and Bootstrap, providing comprehensive product information and references. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the business content and certifications support its authenticity. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Overall, the site is professional, well-structured, and safe for general audiences.

S

ShopMania

shopmania.ro

66

ShopMania is a well-established Romanian e-commerce price comparison platform founded in 2005. It aggregates millions of products from hundreds of online stores, providing users with price comparisons, product reviews, and shopping guides. The platform targets Romanian consumers seeking to make informed purchasing decisions by comparing offers and reading customer feedback. ShopMania holds a strong market position as a leading price comparison site in Romania, supported by a comprehensive product catalog and a partner ecosystem for online retailers. Technically, the website employs modern JavaScript libraries and tracking technologies such as Google Analytics, Google Tag Manager, and Facebook Pixel. It uses HTTPS and implements basic security headers, ensuring secure communication and user data protection. The site is mobile-optimized with good navigation and SEO practices, although there is room for improvement in accessibility and advanced security headers. From a security perspective, ShopMania demonstrates a solid posture with encrypted connections, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure channels, which could enhance trust and compliance. The WHOIS data is privacy protected as per ROTLD policies, which is common for Romanian domains, and does not raise immediate legitimacy concerns given the site's maturity and professional presence. Overall, ShopMania presents a trustworthy and professional platform with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen compliance and user trust.

D

DS.C. DELIVERY SOLUTIONS S.A.

sameday.ro

57

SAMEDAY is a well-established Romanian courier and logistics company founded in 2007, offering rapid parcel delivery services including innovative locker-based delivery (easybox) and next-day courier options. The company has a strong market position in Romania, recently expanding through acquisition and maintaining a large network of delivery points. Their digital maturity is evidenced by a modern WordPress-based website, mobile app integration, and use of advanced analytics and performance optimization tools. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies could be improved. Overall, the website is professional, user-friendly, and compliant with GDPR, reflecting a trustworthy and credible business.

Č

ČESKÁ HUTNICKÁ SPOLEČNOST, z.s.

steelsim2025.com

52

The website steelsim2025.com represents the 11th International Conference on Modelling and Simulation of Metallurgical Processes in Steelmaking, organized by the Czech Metallurgical Society. It serves as a professional platform for experts in numerical modelling and steelmaking industry professionals to share knowledge and advancements. The site is well-branded, with a consistent presentation of partners, sponsors, and organizational details, reflecting an established event with a history dating back to 2003. The conference targets a niche audience of metallurgical researchers and industry practitioners, positioning itself as a key event in this specialized manufacturing sector. From a technical perspective, the website employs modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and integrates Google services including reCAPTCHA and Tag Manager. Cookiebot is used for comprehensive cookie consent management, ensuring GDPR compliance. The site is mobile-optimized with good accessibility and SEO practices, though no CMS or hosting provider details were detected. Performance is moderate, with room for optimization. Security posture is generally strong with HTTPS enforced and use of reCAPTCHA for form protection. However, no explicit security headers were detected, and no published security or incident response policies were found. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the professional nature of the site and detailed contact information mitigate these risks. Overall, the website is a credible and professional representation of an international conference in the manufacturing sector. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

The website represents the Základní organizace Odborového svazu KOVO Třinecké železárny, a trade union organization serving employees of the Třinecké železárny steelworks in the Czech Republic. It provides information about the union's structure, leadership, member benefits, recreational facilities, and news updates. The site targets union members and employees, offering resources and contact channels to support their interests. The organization appears well-established with a consistent brand presence and active social media engagement. Technically, the site is built on WordPress 6.7.2, utilizing common plugins such as Contact Form 7 and GDPR Cookie Compliance. The technology stack includes jQuery, Google Fonts, and Font Awesome. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. GDPR compliance is addressed through a cookie consent mechanism, though no explicit privacy policy page was found. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the website's claimed identity, showing consistent registration details without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy for its purpose but could improve by publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen its security posture and compliance.

S

Střední odborná škola Třineckých železáren

sostrinec.cz

40

Střední odborná škola Třineckých železáren is a vocational secondary school located in Třinec, Czech Republic, affiliated with the steel company TŘINECKÉ ŽELEZÁRNY, a. s. The institution offers a variety of technical and vocational study programs, lifelong learning courses, and extracurricular activities aimed at students and prospective students interested in technical education. The website reflects a medium-sized educational institution with a consistent brand presence and a strong connection to local industry. Technically, the website is built using Nicepage CMS with standard web technologies such as HTML5, CSS3, and jQuery. It is hosted by Active24 and shows moderate performance and good mobile optimization. Security posture is moderate with HTTPS assumed but lacking explicit security headers and privacy compliance documentation. No forms collecting sensitive data are present on the homepage, reducing immediate risk. The domain registration data is consistent with the business and shows a long-standing presence since 2005, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences, but it lacks important privacy and security policy disclosures.

M

Muzeum Nový Jičín

muzeumnj.cz

55

Muzeum Nový Jičín is a regional museum in the Czech Republic focused on preserving and presenting the history and culture of the Novojičín region. The museum operates multiple branches including castles and specialized museums, offering exhibitions, guided tours, and educational programs. The website is built on Joomla CMS with modern web technologies and includes multimedia content and event listings. Security posture is generally good with HTTPS and anti-spam measures, but lacks explicit privacy and security policies. The absence of WHOIS data limits domain legitimacy verification. Overall, the website is professional and trustworthy, serving a general audience interested in regional culture and history.

A

Archeopark Chotěbuz-Podobora

archeoparkchotebuz.cz

54

Archeopark Chotěbuz-Podobora is a cultural and archaeological site in the Czech Republic, offering educational and family-oriented experiences centered on prehistoric and early medieval history. The website serves as an official portal providing information about the park, events, exhibitions, and visitor information. Technically, the site is built on WordPress with modern front-end technologies like Bootstrap and jQuery, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, though lacking some security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust verification but the site’s content and partner affiliations support its legitimacy. Overall, the site is well-positioned as a regional cultural attraction with good digital maturity but could improve security and privacy compliance.

T

The❤️SEX.cz erotická inzerce

thesex.cz

59

The website thesex.cz operates as an adult services classifieds platform primarily targeting the Czech Republic market. It offers listings for erotic massages, escort services, BDSM, and other adult-oriented private advertisements. The site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Select2, and Owl Carousel, with Google Analytics and Google Tag Manager integrated for user tracking. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. However, the domain WHOIS data is incomplete and suspicious, with a creation date set in the future, which raises questions about domain legitimacy. The site lacks visible privacy, cookie, and terms of service policies, which impacts compliance and user trust.

D

D.I.SEVEN, a.s.

pult-centralizovane-ochrany.cz

42

D.I.SEVEN, a.s. operates a centralized security monitoring service (PCO) in the Czech Republic, providing professional security solutions for businesses and residential clients. The company boasts over 25 years of experience and monitors more than 1000 objects nationwide. Their services include integration of various security systems such as electronic security systems (EZS), video verification (Videofied), CCTV, and fire alarm systems (EPS), supported by a trained intervention team and modern monitoring infrastructure. Technically, the website is built on WordPress with common plugins like Yoast SEO and Slider Revolution, leveraging Google Fonts and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside a comprehensive cookie consent mechanism supporting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration transparency and legitimacy verification. The site lacks a dedicated privacy policy page and explicit security or incident response policies, which are important for compliance and trust. Security headers are not detected, indicating room for improvement in hardening the web server configuration. Overall, the website presents a professional and trustworthy front for a security services provider but should address transparency and security best practices to enhance trust and compliance. Strategic recommendations include publishing privacy and security policies, improving HTTP security headers, and clarifying domain registration details.

The website www.technisches-sicherheitsmanagement.de represents the Technisches Sicherheitsmanagement (TSM) program operated by DVGW e.V., a prominent organization in the German energy sector. The site offers comprehensive information and services related to voluntary self-assessment and verification of technical safety management for gas and water supply companies. It positions itself as a trusted partner providing independent expert reviews, guidelines, and service coordination through its subsidiary DVGW Service & Consult GmbH. The business model focuses on compliance, efficiency, and transparency in technical process management, targeting medium to large energy sector enterprises in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and frameworks such as jQuery and Bootstrap. It integrates Matomo analytics for user tracking and employs a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage privacy. However, explicit security headers are not detected, and no public incident response or vulnerability disclosure policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and compliant digital presence for a specialized service in the energy sector. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture.

The website verifHy.de is a professional platform operated by DVGW Service & Consult GmbH, focused on providing a smart database solution for verifying the hydrogen readiness of gas network components. It serves as a critical technical tool supporting the transition of gas networks to climate-friendly hydrogen, targeting gas network operators, manufacturers, and international partners. The site is well-branded, consistent, and provides clear navigation and relevant content aligned with its energy sector focus. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Bootstrap, hosted via INWX. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is adequate with linked comprehensive privacy and cookie policies on the parent DVGW site, though no active cookie consent mechanism is present. Contact information is clearly provided via phone and a login portal for database access. No social media or analytics tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website presents a trustworthy and professional digital presence with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

L

Limes Netwerk Notarissen

limesnotarissen.nl

47

Limes Netwerk Notarissen is a Dutch notary office providing comprehensive legal services with a focus on both private individuals and entrepreneurs. The company emphasizes a personalized, total legal vision covering business law, real estate, and family law. Their market position is strengthened by affiliation with a large network of over 150 notaries, enhancing their expertise and service quality. The website reflects a professional and trustworthy business with clear contact channels and up-to-date content. Technically, the site is built on WordPress with the Divi theme and uses modern tools like Gravity Forms and Google reCAPTCHA to secure user interactions. SEO and accessibility are well addressed, contributing to a positive user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is low risk and professionally managed, suitable for its target audience.

E

EDUSPORT

edusport.cz

55

EDUSPORT is a Czech-based company providing innovative digital solutions for physical education, targeting schools, teachers, and sports clubs. Their platform facilitates lesson planning, progress tracking, and motivation of students through digital tools and multimedia content. The website is built on WordPress with modern plugins like Elementor and WooCommerce, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policy documentation. The absence of WHOIS data limits domain trust verification, though the site content and design appear professional and trustworthy. Overall, the business shows promise in the edtech sector with a focus on digital transformation in physical education.

S

Sušánka & partneři

jansusanka.cz

56

Sušánka & partneři is a Czech-based financial advisory firm specializing in private banking, wealth management, and multi family office services targeted at very high net worth and ultra high net worth individuals. The company positions itself as a trusted partner offering comprehensive financial planning, asset management, tax optimization, philanthropy, and investment strategies aligned with Swiss private banking standards. Their business model is based on fee-for-service with remuneration primarily from client profits, ensuring aligned interests. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence.

T

Truhlart s.r.o.

truhlart.cz

58

TruhlArt s.r.o. is a Czech-based company specializing in the manufacture of high-quality custom furniture including kitchens, wardrobes, bedrooms, and entire interiors. The company emphasizes craftsmanship, precision, and customer engagement through 3D visualizations and online order tracking, positioning itself as a trusted local provider in the custom furniture manufacturing sector. The website is professionally designed using WordPress with Elementor and WP Rocket, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust analysis, but the professional presentation and clear contact information support the company's legitimacy.

G

Gentlemen Brothers Brno

rezerver.cz

48

Gentlemen Brothers Brno operates an online reservation system for a local barbershop in Brno, Czech Republic, offering a variety of grooming and haircut services. The website is designed to facilitate easy booking of services such as classic cuts, beard styling, and traditional shaving. The business targets male customers seeking professional barber services in the region. The platform is functional and integrates modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel for tracking and marketing purposes. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced but lacking important security headers and cookie consent mechanisms. Privacy policy is present and appears GDPR compliant, but no explicit cookie or terms of service policies were found. Overall, the website provides a good user experience with clear navigation and relevant content but could improve in security and privacy compliance areas.

A

ANIMAL EYE, z.s.

animaleye.cz

54

ANIMAL EYE, z.s. is a Czech nationwide non-profit organization dedicated to the enforcement and advocacy of animal rights, primarily focusing on domestic animals. The organization provides legal advisory services, monitors advertisements related to animal breeding, conducts public affairs, and runs awareness campaigns. It positions itself as a credible expert partner for governmental and non-governmental entities in the Czech Republic. The website reflects a professional and consistent brand image with clear messaging and active social media presence. Technically, the site is built on WordPress with modern frameworks and libraries, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website is trustworthy and well-maintained, supporting the organization's mission effectively.

The website nastavsitlak.cz is a Czech-language application designed to assist professionals in correctly setting the pressure of driving gas (Biogon®) used in beverage dispensing systems. It is branded under Linde Gas a.s., a well-known industrial gases supplier, indicating a strong business presence in the energy sector. The site provides interactive sliders for input parameters and displays calculated pressure values, targeting business users involved in beverage dispensing operations. Technically, the site uses a modern but basic tech stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile optimized and has basic SEO and accessibility features. Privacy and cookie policies are present and implemented with OneTrust consent mechanisms, reflecting compliance with GDPR requirements. However, no contact information or terms of service pages are provided, limiting direct user engagement and transparency. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and branding strongly suggest legitimate business use. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional for its niche purpose but would benefit from enhanced security headers, clearer contact information, and domain registration transparency to improve trust and compliance posture.

T

TESTCAR s.r.o.

testcar.cz

46

TESTCAR s.r.o. operates a network of vehicle technical inspection stations across the Czech Republic, providing services such as regular technical inspections for road vehicles, ADR inspections, individual vehicle imports, and sales of ecological stickers. The company is well-established since 2007 and maintains multiple branch locations, indicating a solid market presence in the transportation sector. The website is built on WordPress using Elementor and JetEngine, with integration of Google Maps API for branch location display, although the map currently has an API key issue preventing proper loading. Security posture is moderate with HTTPS enabled but lacking security headers and formal security or privacy policies. Contact information is comprehensive and clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed.

S

STK RITZ s.r.o.

stk-novyjicin.cz

44

STK RITZ s.r.o. is a Czech Republic based company specializing in vehicle technical inspections, emission measurements, and related regulatory services. Established in 1996, the company operates a certified technical inspection station with ISO 9001:2009 certification and partnership with DEKRA, serving personal, commercial, and special vehicles. The website presents a professional and well-structured digital presence, targeting vehicle owners and operators requiring compliance with Czech vehicle regulations. The business model focuses on service provision for mandatory vehicle inspections and technical data issuance. Technically, the website is built on WordPress using Elementor and Slider Revolution plugins, with jQuery as a JavaScript library. The site is mobile optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate, with good SEO and accessibility basics, though security headers are not evident in the provided data. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of WHOIS transparency and missing security headers suggest areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy and cookie policy in Czech language. Contact information is clearly provided, including phone numbers, email, physical address, and a contact form. Overall, the website and business appear legitimate and professional, though the lack of WHOIS data transparency slightly reduces trust. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving WHOIS transparency to strengthen domain trustworthiness.

N

Nikey s.r.o.

nikey.cz

52

Nikey s.r.o. is a Czech company operating a network of 11 vehicle washing centers and 18 fuel stations specialized in serving truck and bus transportation across the Czech Republic. The company offers personalized fuel dispensing systems, flexible washing programs, parking solutions, and vehicle interior disinfection services. Their market position is that of a medium-sized regional player with over 200 corporate clients and a strong focus on quality and customer satisfaction. Technically, the website employs a modern but somewhat dated technology stack including Bootstrap 3, jQuery, and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though lacking explicit security policies and advanced HTTP headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

F

FESH FESH Group v.o.s.

feshfesh.group

56

FESH FESH Group v.o.s. operates a professional racing team based in the Czech Republic, focusing on motorsport events, team activities, and news dissemination. The website serves as a hub for fans and stakeholders to access updates, event information, and team details. The business targets motorsport enthusiasts and operates a niche but professional presence within the transportation sector. Technically, the website is built on WordPress with Elementor and JetEngine plugins, hosted likely by Websupport, and incorporates modern web technologies including Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not enabled. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in Czech language, aligning with GDPR requirements. No explicit security or incident response policies are published, and no terms of service page was found. Overall, the domain registration details are consistent with the business claims, supporting legitimacy and trustworthiness.

Č

ČSAD Ostrava a.s.

cova.cz

40

ČSAD Ostrava a.s. is a well-established transportation and logistics company in the Czech Republic with a history dating back to 1992 and roots from 1949. The company offers a broad range of services including international truck transport, spedition, logistics, vehicle servicing, and management of bus stations and real estate. The website reflects a professional and consistent brand presence targeting business clients and job seekers in the transport sector. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Maps API, and includes privacy and cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be improved. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, secure, and compliant with GDPR, providing a trustworthy digital presence for the company.

M

Music Story

music-story.com

57

Music Story is a well-established company founded in 2004, specializing in providing customized music metadata, licensing, and integration services to leading digital music brands worldwide. Their business model focuses on B2B services, offering high-quality metadata and rights clearance to enhance music experiences for their clients. The website reflects a professional and consistent brand image, targeting digital music platforms and content providers globally, with multilingual support and a strong emphasis on client trust and satisfaction. Technically, the site is built on WordPress with Elementor and Yoast SEO, integrating Google Analytics and a compliant cookie consent mechanism. The infrastructure is modern and moderately performant, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and demonstrates a mature digital presence suitable for its industry niche.

S

Slovenský Červený kríž

redcross.sk

45

Slovenský Červený kríž is a well-established non-profit humanitarian organization in Slovakia, providing a wide range of social services including first aid training, blood donation, crisis preparedness, and migration support. The organization is affiliated with the International Red Cross Movement and maintains a strong presence through partnerships and social media engagement. The website reflects a professional and consistent brand image targeted at the Slovak public and vulnerable groups. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading and asynchronous script loading. It uses Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site uses HTTPS and implements several best practices but lacks explicit security headers like a full Content-Security-Policy and does not publish security or incident response policies. No vulnerabilities or exposed sensitive data were detected. GDPR compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional with a strong business credibility score. Strategic improvements include enhancing privacy compliance, publishing security policies, and improving accessibility to further strengthen the security posture and user trust.

V

Vimec France Accessibilite sarl

vimecfrance.fr

50

Vimec France Accessibilite sarl is a well-established French company specializing in custom private home elevators and accessibility solutions. With over 40 years in the industry and more than 15,000 installations across France, Vimec holds a leading market position. Their product range includes private elevators, platform lifts, stairlifts, and mobility aids tailored for residential use. The website reflects a professional and consistent brand image targeting individuals and professionals seeking home mobility solutions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates analytics tools like Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is well addressed with clear cookie and privacy policies aligned with GDPR. Overall, the site is trustworthy, user-friendly, and provides comprehensive business information.

V

Vimec

vimec.de

43

Vimec is a medium-sized company specializing in home lifts and platform lifts, with a strong international presence evidenced by 150,000 lift installations worldwide. The website targets the German market but is part of a broader international ecosystem with localized partner sites in multiple countries. The business model focuses on manufacturing and distributing accessibility and mobility solutions for residential environments. Technically, the website is built on WordPress using Elementor and Astra theme, with modern SEO and tracking tools implemented. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism via Iubenda, but lack explicit security headers and published security policies. Overall, the site demonstrates good professionalism and moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

H

Handicare USA

handicareusa.com

56

Handicare USA is a healthcare-focused company specializing in stairlifts and safe patient handling products, operating as a subsidiary of Savaria Corporation. The website positions the brand clearly within the mobility and patient care market, targeting both individual consumers and institutional clients. The business model centers on manufacturing and distributing mobility solutions, supported by partner sites dedicated to specific product lines. The company has a medium-sized presence with a domain age consistent with its founding year of 2010. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is moderately optimized for performance and mobile use, with good SEO practices evident. Google Analytics is used for visitor tracking, though no explicit cookie consent mechanism or privacy policies are present, indicating compliance gaps. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers, which are recommended for enhanced security. No forms or sensitive data collection points were detected on the homepage, reducing immediate risk exposure. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security configurations. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing clear contact information to improve user trust and regulatory compliance.

H

Handicare Canada

handicare.ca

52

Handicare Canada operates as a specialized provider of stairlifts and safe patient handling products, positioned as a subsidiary of Savaria Corporation. The website clearly communicates its business focus on mobility solutions and institutional patient care, targeting both individual consumers and healthcare institutions. The brand leverages its parent company's reputation and maintains consistent branding and messaging. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Google Analytics is used for visitor tracking, but privacy and cookie policies are absent, which is a compliance gap. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No contact information or forms are present on the homepage, limiting direct user engagement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

S

Stadt Recklinghausen

recklinghausen.de

71

The website www.recklinghausen.de serves as the official online presence of the city of Recklinghausen, Germany. It provides comprehensive information and services related to city administration, politics, living, education, economy, culture, tourism, and public events. The site targets local residents, visitors, and businesses, positioning itself as a key municipal government resource. The business model is public service oriented, focusing on transparency and citizen engagement. Technically, the website employs a mix of JavaScript libraries including jQuery, EQCSS, Lightbox2, and Slick Slider, alongside Cookiebot for GDPR-compliant cookie management. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO optimization is basic but present. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking capabilities. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. The site uses multiple third-party advertising and tracking services, all managed under user consent. Overall, the website is professional, trustworthy, and well-aligned with its governmental purpose. Recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.