Security Directory

A

Apolo pro firmy

apoloprofirmy.cz

42

Apolo pro firmy is a Czech-based company specializing in the sale and installation of doors, door frames, and sanitary partitions primarily for commercial clients such as fast food chains, fuel stations, offices, and cafes. The company operates a dedicated website that presents its services professionally, targeting B2B customers in the construction and commercial interior sectors. The business has a history dating back to 1999, with the current website domain registered in 2020, reflecting a focused digital presence for this segment. Technically, the website is built on WordPress using modern plugins and frameworks, offering a responsive and user-friendly experience with good SEO and accessibility basics. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though some security headers and policies could be improved. Contact information is clearly provided, including phone, email, physical address, and social media links, enhancing trust and credibility.

A

Apolo s.r.o.

zabradliapolo.cz

40

Apolo s.r.o. is a Czech-based small manufacturing and retail company specializing in interior and exterior railings and staircase cladding solutions. Their website presents a professional and well-structured digital presence built on WordPress, featuring modern plugins such as Slider Revolution and WPBakery Page Builder. The company targets customers seeking quality railing products and installation services, emphasizing Czech production quality. Technically, the website is moderately performant and mobile-optimized, though it lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

U

Ubytování Na Pohodu a Vinařský Dvorek

ubytovaninapohodu.cz

42

Ubytování Na Pohodu a Vinařský Dvorek is a small hospitality business offering accommodation in Milovice, southern Moravia, Czech Republic. The website presents two accommodation options with capacity for up to 32 guests, targeting tourists interested in relaxation, cycling, and local sightseeing. The business appears locally focused with clear contact details and customer testimonials enhancing trust. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Maps API, hosted by WEDOS. The site is mobile optimized and well structured, providing a good user experience. Security posture is moderate; HTTPS is implied but no security headers or privacy policies are present, indicating room for improvement in compliance and security best practices. Overall, the website is functional and professional but lacks formal privacy and cookie policies, which impacts GDPR compliance. The domain WHOIS data is consistent and transparent, supporting legitimacy.

Z

Základní a mateřská škola Louka

zsmslouka.cz

54

Základní a mateřská škola Louka is a small educational institution based in the Czech Republic, providing primary and nursery education services. The website presents a well-structured and content-rich platform aimed at parents, students, and the local community. It highlights the school's modern facilities, individualized approach, and various educational and extracurricular offerings. The domain has been registered since 2015, consistent with the school's operational history. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and FontAwesome, with a CMS likely based on Nette framework. The site is mobile-optimized and demonstrates good SEO practices. However, performance is moderate and accessibility features are basic. The site uses Google Analytics for user tracking but lacks a cookie consent mechanism, which is a GDPR compliance gap. From a security perspective, the site uses HTTPS (implied by external scripts), but no explicit security headers or published security policies are detected. There are no visible vulnerabilities or exposed sensitive data. The absence of incident response contact information and security certifications suggests room for improvement in security posture. Overall, the website is professional, trustworthy, and serves its educational purpose well. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

Základní škola a Mateřská škola Ladná is a small, family-type educational institution located in the Czech Republic, providing primary and preschool education services to the local community. The website serves as an information portal for parents and guardians, offering news updates, event calendars, and contact details. The institution is supported by various government and EU partners, indicating a stable and legitimate operation. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is hosted via a Czech registrar and hosting provider, consistent with the domain registration data. Security-wise, the site uses HTTPS and a cookie consent mechanism, but lacks published privacy policies, security headers, and incident response information, which are areas for improvement. Overall, the website is professional, trustworthy, and well-maintained, with moderate tracking via Google Analytics. Strategic recommendations include enhancing privacy compliance and security posture to align with best practices and regulatory requirements.

T

Templum Bonum s.r.o.

cafe-mikulov.cz

60

Café Dolce Vita Mikulov is a small hospitality business operating a café located in a historic building in the center of Mikulov, Czech Republic. The business offers quality coffee, local wines, desserts, ice cream treats, and light snacks, targeting local visitors and tourists. The website reflects a well-branded and consistent digital presence with clear contact information and social media integration. Technically, the site is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response information. Privacy compliance is basic, with no dedicated privacy policy or terms of service pages found. WHOIS data is unavailable due to CZ NIC privacy policies, but the website provides legitimate company registration details supporting trustworthiness.

G

GPartners

canaletico.es

53

The website canaletico.es/en serves primarily as a login portal for GPartners' backoffice administration. It lacks public-facing business content, marketing descriptions, or customer engagement features. The site targets internal users or administrators rather than external customers. Technically, the site uses a legacy technology stack including jQuery 1.12.2, Bootstrap, and the Metronic theme framework. While the design is functional, it is basic with limited mobile optimization and accessibility features. Security posture is moderate but could be improved significantly by updating libraries, adding security headers, and implementing stronger authentication controls. No privacy or cookie policies are present, indicating low privacy compliance. The domain WHOIS is privacy protected, which is common for administrative portals but reduces transparency. Overall, the site is functional for its purpose but lacks comprehensive security and compliance measures.

C

Communauté de communes de la Vallée de Chamonix Mont-Blanc

cc-valleedechamonixmontblanc.fr

57

The Communauté de communes de la Vallée de Chamonix Mont-Blanc operates as a local government community entity serving the Vallée de Chamonix Mont-Blanc region in France. The website provides official information, services, news, and resources for residents and visitors, positioning itself as an authoritative source for regional administrative and community matters. It maintains active social media channels and offers multilingual support via GTranslate, enhancing accessibility for a broader audience. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, supported by Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility compliance is basic and could be improved. Security measures include HTTPS and cookie consent mechanisms, but lack explicit security headers and dedicated security policy pages. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is common for public entities but limits transparency. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and readiness. Overall, the website is professional, trustworthy, and well-suited for its public sector role. Strategic recommendations include implementing security headers, publishing security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to strengthen security and compliance further.

K

Kalisport

kalisport.com

59

Kalisport is a French software company providing an all-in-one sports management solution tailored for clubs, committees, and associations. Their platform offers a comprehensive suite of services including member management, accounting, sponsor management, online payments, event management, communication tools, and mobile applications. Positioned as a specialized SaaS provider in the sports technology sector, Kalisport targets small to medium-sized sports organizations primarily in France. The website is professionally designed with a clear focus on usability and accessibility, supporting both web and mobile platforms. Technically, the site leverages modern front-end technologies such as Bootstrap, jQuery, and FontAwesome, and implements cookie consent mechanisms with GDPR compliance in mind. Security posture is moderate; while HTTPS and cookie consent are implemented, the absence of visible security headers and incident response information suggests room for improvement. The lack of WHOIS data raises some concerns about domain registration legitimacy, though the active and professional website presence partially mitigates this risk. Overall, Kalisport presents a credible business with a solid digital presence but would benefit from enhanced transparency and security disclosures.

F

FOAL

foal.es

63

FOAL (Fundación ONCE Latinoamérica) is a well-established non-profit organization focused on social inclusion of blind and visually impaired people in Latin America. The website reflects a mature digital presence with clear information about their mission, services, and transparency. The technical infrastructure is based on Drupal CMS with modern web technologies including jQuery, Bootstrap, and Font Awesome, complemented by Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and reCAPTCHA v3 implemented. Privacy compliance is robust with clear cookie and privacy policies and GDPR adherence. However, the site lacks explicit terms of service and incident response policies. Overall, the website is professional, trustworthy, and well-structured, supporting FOAL's mission effectively.

Miele For Life is a dedicated membership loyalty website targeting existing Miele appliance owners in New Zealand, offering exclusive benefits such as discounts, events, and customer care. The website is built on WordPress with modern technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, hosted behind Akamai CDN infrastructure. The site demonstrates good digital maturity with mobile optimization, SEO best practices, and a clear content structure focused on recipes, offers, and member engagement. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though minor issues such as missing DNSSEC and a broken GTM script fetch exist. Privacy compliance is well addressed with a cookie consent mechanism and clear links to privacy and terms pages. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and professional brand presence.

Miele For Life is a membership loyalty website targeting existing Miele appliance customers in Australia, offering exclusive benefits such as discounts, events, and customer care services. The site is well-branded and professionally designed, reflecting the premium nature of the Miele brand. Technically, the site is built on WordPress with Bootstrap and uses modern tools like Google Tag Manager and reCAPTCHA for analytics and security. Cookie consent is implemented with a granular mechanism, supporting GDPR compliance. Security posture is generally good with HTTPS enforced and bot protection, though minor issues like missing DNSSEC and a broken GTM script reference exist. No direct contact emails or phone numbers are exposed, but a contact form is available. The domain registration is consistent with the brand and managed by a reputable registrar, enhancing trustworthiness.

H

Havas CX Network

havascx.com

69

Havas CX is a global customer experience consulting network operating under the Havas Group umbrella. Founded in 2020, it brings together over 1,800 CX specialists across 19 countries to deliver meaningful customer experiences through strategy, design, and engagement services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients seeking CX transformation. Technically, the site is built on WordPress with modern frameworks and integrates analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security headers could enhance it further. Privacy compliance is well addressed with accessible policies and cookie consent mechanisms. Overall, the site projects high business credibility and trustworthiness with no critical security or content safety concerns.

The Academy of Neurologic Physical Therapy Education Center operates as a specialized educational platform providing neurologic physical therapy professionals with evidence-based courses, webinars, and podcasts. It is affiliated with the American Physical Therapy Association, reinforcing its credibility and market position as a leader in neurologic physical therapy education. The website targets healthcare professionals seeking continuing education and professional development in this niche field. Technically, the website employs standard web technologies such as jQuery and Bootstrap, with a custom or proprietary CMS. The site is moderately performant, mobile-optimized, and accessible at a basic level. SEO and accessibility could be improved further. Security practices include HTTPS enforcement and CSRF tokens on forms, but lack advanced security headers and DNSSEC, indicating room for enhancement. From a security perspective, the site is reasonably secure with no immediate critical vulnerabilities detected. However, the absence of DNSSEC and security headers, along with no visible incident response or security policy pages, suggests a moderate security maturity level. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is present. Overall, the website is professional, trustworthy, and serves its educational purpose well. Strategic improvements in security headers, DNSSEC, cookie consent, and enhanced accessibility would strengthen its posture and compliance. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Professional Testing Corporation

ptcny.com

50

Professional Testing Corporation (PTC) is a well-established service provider specializing in certification and licensure testing services with over 35 years of industry experience. The company offers a comprehensive suite of services including exam development, test administration, psychometric consulting, survey processing, and scoring/reporting. Their target audience includes organizations and individuals seeking credentialing solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their niche market. Technically, the site is built on WordPress with Bootstrap and jQuery, featuring good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present. Analytics usage includes Google Analytics and Tag Manager with moderate user tracking. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.

S

SKIAREÁL KLÍNOVEC s.r.o.

klinovec.cz

43

SKIAREÁL KLÍNOVEC s.r.o. operates the largest ski resort in the Krušné hory region of the Czech Republic, offering winter and summer recreational activities including skiing, biking, hiking, and equipment rentals. The website is professionally designed, multilingual, and provides comprehensive information about services, pricing, and live updates. The company maintains a strong market position with established partnerships and a clear focus on family-friendly tourism. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, although some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

Anglet Hormadi Pays Basque

hormadi.fr

45

Anglet Hormadi Pays Basque is a professional ice hockey club based in France, competing in the Synerglace Ligue Magnus. The website serves as the official digital presence of the club, providing comprehensive information about the team, season schedules, news updates, ticketing options, and partner relations. The site targets sports fans and the local community, offering a well-structured and branded experience consistent with a medium-sized sports organization. Technically, the website is built on WordPress with a modern tech stack including popular plugins and libraries such as WPBakery, Bootstrap, and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and user experience. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. From a security perspective, the site uses HTTPS and implements some best practices, though security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for such organizations, and does not raise immediate trust concerns. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic recommendations include improving security headers, maintaining plugin updates, and enhancing incident response visibility.

LiveWiseMS is a specialized healthcare resource website dedicated to providing trusted, evidence-based information and multimedia content for people living with multiple sclerosis, their caregivers, and healthcare providers. The platform offers a comprehensive resource library including podcasts, journal articles, videos, and clinical handbooks, supported by educational grants from major pharmaceutical companies. The website is professionally designed with consistent branding and clear navigation, targeting a niche healthcare audience with educational content. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Font Awesome, hosted with GoDaddy as registrar and Cloudflare for DNS services. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy, safe, and professionally maintained, serving as a valuable educational platform in the healthcare sector.

I

I love Jižní Morava

ilovejiznimorava.cz

51

I love Jižní Morava is a Czech regional media website dedicated to news, events, and tourism information focused on the South Moravia region. The site targets a general audience interested in local culture, sports, festivals, and travel tips. It operates on a WordPress platform using popular plugins and frameworks such as Elementor and Redux Framework, with integration of Google Analytics and Tag Manager for visitor tracking. The website demonstrates good content quality, consistent branding, and a professional design that is mobile optimized and SEO friendly. However, it lacks explicit privacy and cookie policies, which is a compliance gap under GDPR regulations. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the active social media presence and regular content updates support its credibility as a legitimate media outlet. Security posture is moderate with HTTPS enabled but missing important security headers and vulnerability disclosure mechanisms.

C

Consortium of Multiple Sclerosis Centers

cmscscholar.org

63

The Consortium of Multiple Sclerosis Centers (CMSC) operates a professional healthcare education website focused on Multiple Sclerosis research, clinical practice, and patient education. The organization is positioned as a leading non-profit entity providing accredited continuing education to a multidisciplinary audience including physicians, nurses, pharmacists, occupational therapists, and psychologists. Their offerings include annual meetings, online activities, and an international journal, targeting healthcare professionals and people affected by MS. The website reflects a mature digital presence with consistent branding and quality content.

T

Tripletex

tripletex.no

11

Tripletex is a leading Norwegian cloud-based accounting software provider offering a modular platform that integrates accounting, invoicing, payroll, project management, and logistics. The company targets a broad range of customers from small businesses to large enterprises and accounting firms, providing scalable solutions tailored to evolving business needs. Their market position is strong with over 147,000 companies using their platform, supported by a professional and user-friendly website that offers free trials and extensive customer support. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates advanced analytics tools like Piwik PRO and Google Analytics. The platform supports mobile apps and uses Salesforce Embedded Messaging for customer engagement. The site is well optimized for performance, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Tripletex enforces HTTPS, employs cookie consent mechanisms, and provides detailed privacy and security policies, demonstrating a strong commitment to data protection and compliance. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure mechanisms could be enhanced. Overall, Tripletex presents a low-risk profile with a professional online presence, strong privacy compliance, and robust technical implementation. Strategic recommendations include publishing explicit incident response contacts, adding a security.txt file, and enhancing visible security headers to further strengthen trust and security posture.

C

Company Culture Market s.r.o.

cocuma.sk

57

Cocuma is a Slovakian platform dedicated to showcasing and verifying companies with strong corporate cultures. It provides job seekers and professionals with authentic company profiles, job listings, and a culture-focused magazine. The platform emphasizes transparency and trust by conducting thorough interviews and creating original content rather than relying on PR materials. Technically, the website employs modern web technologies including Google Tag Manager, Matomo analytics, and responsive design frameworks, hosted partly on Amazon S3 for media assets. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and formal policies are absent. Overall, Cocuma presents a professional, trustworthy, and user-friendly experience with moderate tracking for analytics and marketing purposes.

M

Multitude

ferratum.com

63

Multitude is a Nordic-born fintech growth platform operating internationally with a focus on digital financial services. It supports three internal business units specializing in consumer, SME, and wholesale banking. The company aims to be a leading financial ecosystem leveraging two decades of fintech experience. The website is professionally designed, mobile-optimized, and rich in investor relations and ESG content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, indicating good digital maturity. Security posture is strong with HTTPS and tracking opt-in controls, though explicit security policies and incident response contacts are absent. WHOIS data is incomplete, which slightly impacts trust but the overall business credibility remains high. Strategic recommendations include enhancing security transparency and verifying domain registration details.

G

GasParts-Europe Kft.

hisense-vrf.hu

42

The website represents GasParts-Europe Kft., the official Hungarian representative of the Hisense VRF systems, offering high-quality residential and commercial climate control solutions. The company leverages the global reputation of the Hisense group, a well-established technology manufacturer founded in 1969. The website targets the Hungarian HVAC market with a focus on VRF technology, providing product information, references, and downloadable catalogs. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

The website sotcls.cz represents the Společnost pro orgánové transplantace České lékařské společnosti J.E.Purkyně, a professional society focused on organ transplantation in the Czech Republic. It serves medical professionals and members by providing information, news, events, and membership services. The site is well-branded and consistent with its professional healthcare focus. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form submission, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate, professional, and trustworthy but could improve in privacy and security transparency.

A

APOLO s.r.o.

apolopraha.cz

40

APOLO s.r.o. is a Czech company specializing in the sale and installation of interior and entrance doors, primarily of the Sapeli brand, along with complementary products such as door frames, fittings, glass doors, flooring, and railings. The company operates physical showrooms in Prague Štěrboholy and Štrampouch near Čáslav, serving customers mainly in the Central Bohemian Region and Prague. Their market position is that of a regional authorized reseller with a focus on quality and customer service. Technically, the website is built on WordPress with modern plugins and technologies, including Google Tag Manager and reCAPTCHA, ensuring a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response documentation are recommended. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting the company's business credibility.

K

Kytice-Expres

kytice-expres.cz

51

Kytice-Expres is an established online flower delivery service operating primarily in the Czech Republic and Slovakia, offering a wide range of bouquets and gift sets with express delivery options up to 90 minutes. The website demonstrates a mature e-commerce platform with multiple payment methods including modern options like Apple Pay and Google Pay, supported by marketing and analytics tools such as Klaviyo and Smartlook. Despite the lack of WHOIS data, the site presents professional content, clear contact information, and GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and security headers in place, though the absence of a public security policy and incident response details suggests room for improvement.

M

mediamid digital services GmbH

mediamid.com

79

mediamid digital services GmbH is a specialized provider of Digital Asset Management solutions based in Vienna, Austria, with over 20 years of experience. Their offerings include Enterprise Digital Asset Management, Media Asset Management, Video Asset Management, and Order Management, targeting enterprises, marketing departments, archives, and NGOs. The company has a solid market position supported by industry awards and a professional online presence. Technically, the website leverages modern frameworks such as PrimeFaces and Bootstrap, integrates Google Analytics with privacy considerations, and employs CAPTCHA for form security. The security posture is strong with HTTPS enforcement and secure cookie settings, though some security headers are missing. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy, which should be further investigated. Privacy compliance is limited due to missing explicit privacy and terms of service pages. Overall, the website is professional, secure, and business-focused, but domain registration transparency and privacy policy publication need improvement.

B

Bookio

bookio.com

45

Bookio is a mature SaaS company specializing in online booking and reservation management solutions, serving a broad range of industries with over 18,000 clients and 19 million customers served. The website reflects a professional and well-established business with a comprehensive feature set including online payments, SMS/email reminders, and extensive analytics. Technically, the site employs modern frameworks such as Bootstrap, integrates Google Tag Manager, Analytics, Hotjar, and uses Cloudflare for DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS, CSRF tokens, reCAPTCHA, and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

SIEGENIA is a well-established manufacturing company specializing in hardware and smart systems for windows, doors, sliding doors, ventilation, and smart home integration. The website presents a professional and comprehensive digital presence with detailed product information, service offerings, and compliance disclosures. The company targets end users, business partners, and architects, positioning itself as a leader in room comfort solutions with a focus on security, energy efficiency, and smart technology. Technically, the website is built on the IMPERIA CMS platform and uses modern frontend technologies such as Bootstrap and Swiper.js. It integrates multiple analytics and marketing tools including Google Analytics, LinkedIn Insight, and Bing Ads, managed through Google Tag Manager and Usercentrics for consent compliance. The site is mobile-optimized and exhibits good SEO and accessibility practices, though some improvements in accessibility and security headers are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. It maintains a PSIRT page for vulnerability disclosures, indicating a mature security posture. However, the absence of explicit security headers and direct security contact information suggests room for enhancement. The WHOIS data is unavailable or protected, which slightly impacts trust but is not uncommon for corporate domains. Overall, the website demonstrates a strong business credibility and technical maturity with minor gaps in security and transparency. Strategic improvements in security headers, contact information, and WHOIS transparency would further enhance trust and compliance.

C

Cetris

cetris.cz

62

Cetris is a large European manufacturer specializing in cement-bonded particle boards for the construction industry. Their website presents a comprehensive product catalog, usage guides, and contact information targeting construction professionals and hobbyists. The technical infrastructure uses modern JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content and certifications suggest a legitimate business. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing incident response information.

O

OKNOTHERM spol. s r.o.

oknotherm.cz

47

OKNOTHERM spol. s r.o. is a well-established Czech manufacturer specializing in plastic windows, euro windows, doors, shading solutions, and related accessories. With over 33 years in the market and a large customer base, the company positions itself as a trusted provider of high-quality, customized products. The website reflects a professional and consistent brand image, targeting residential and commercial customers seeking durable and tailored window and door solutions. Technically, the website employs modern frameworks such as Bootstrap and integrates Google services for analytics and marketing, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks some advanced security headers and explicit incident response information. Overall, the site is secure, compliant with GDPR, and demonstrates good privacy practices through cookie consent mechanisms and a comprehensive privacy policy. The absence of public WHOIS data indicates privacy protection, which is justified for this business type. The website is trustworthy and professionally maintained, with room for improvement in security transparency and contact email availability.

FOLDINA.cz is a professional freelance web development service operated by Lukáš Foldina, a developer with two decades of experience. The website showcases a portfolio of custom web and online system projects, targeting businesses needing tailored digital solutions. The business model is focused on freelance development with a strong emphasis on e-commerce and enterprise system integrations. The market position is niche, serving clients requiring bespoke software and web presence. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, with additional libraries for UI effects and galleries. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and SEO optimization. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data limits domain legitimacy verification, though the website content and business information appear professional and credible. Overall, the site presents a solid business offering but requires improvements in security posture, privacy compliance, and domain transparency to enhance trust and reduce risk.

S

Sage

sagepub.com

54

Sage is a global academic publisher specializing in books, journals, and digital educational resources aimed at supporting teaching, learning, and research worldwide. The website reflects a mature digital presence with comprehensive content offerings targeting academics, researchers, students, and educators. The business model centers on publishing and distributing scholarly content with a strong emphasis on accessibility and user engagement. Technically, the website employs modern web technologies including Sitefinity CMS, Bootstrap framework, and integrates Microsoft Application Insights for analytics and OneTrust for privacy and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Secure login forms and cookie consent mechanisms are implemented, although explicit security policies and incident response information are not publicly available. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data is a minor anomaly but does not detract significantly from the trustworthiness given the professional site content and security posture. Strategic recommendations include publishing explicit security and incident response policies and providing vulnerability disclosure channels to enhance transparency and trust.

K

K.I.T. Group

wfnr-congress.org

59

The website wfnr-congress.org serves as the official platform for the 14th World Congress for Neurorehabilitation (WCNR 2026), organized by K.I.T. Group. It targets professionals in neurorehabilitation, providing comprehensive information about the event, including program details, registration, social events, and sponsorship opportunities. The site is well-structured and professionally designed, reflecting a medium-sized organization with a focus on healthcare events in South Korea. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Swiper.js, hosted behind Cloudflare DNS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism, but no terms of service or security policies are published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

S

SCR Technologies

dealdone.online

49

Dealdone is a technology company offering a secure digital platform for creating and managing verbal agreements online. Their service targets individuals and small to medium businesses who need a simple, encrypted way to document deals such as loans, rentals, sales, and work agreements. The business operates on a subscription SaaS model with free, premium, and enterprise plans. Technically, the website is built on WordPress with Bootstrap and jQuery, providing a modern but moderately optimized user experience. The site is mobile-friendly and SEO-optimized but shows some backend PHP warnings that could affect security and professionalism. Security posture is moderate with HTTPS and encryption claims, but lacks visible security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages but no cookie consent mechanism. Overall, the site is trustworthy but could improve in backend stability and security transparency.

R

Radio Haná s.r.o.

radiohana.cz

55

Radio Haná s.r.o. operates a regional radio station broadcasting on 92.3 FM, serving the Olomouc region and surrounding areas in the Czech Republic. The website offers live streaming, podcasts, local news, event information, and advertising services, positioning itself as a key local media outlet. The company targets local listeners interested in music and community events, leveraging digital platforms to extend reach. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Facebook SDK, ensuring a responsive and engaging user experience. Security posture is solid with HTTPS enforcement and standard security headers, though no explicit security or incident response policies are published. Privacy compliance is evident with GDPR and cookie consent mechanisms in place. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-structured, content-rich, and trustworthy for its audience.

B

BOHEMIA DIGITAL

bohemiadigital.eu

44

BOHEMIA DIGITAL is a small Czech technology services company specializing in comprehensive IT solutions for small businesses and individual entrepreneurs. Their offerings include PC servicing and maintenance, professional web design and management, and continuous PC support. The website is professionally designed using modern frameworks such as Bootstrap and includes clear contact information and partner references, indicating a stable local market presence. Technically, the site uses standard libraries and is mobile optimized but lacks advanced security headers and privacy policies, which are areas for improvement. Security posture is moderate with no detected vulnerabilities but missing key compliance documents and security best practices. Overall, the website is safe, trustworthy, and functional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

L

LiveFX

livefx.fr

40

LiveFX is a French company specializing since 2016 in the rental, provision, and sale of special effects for various types of events including festivals, concerts, corporate events, sports, and private occasions. The website serves as a basic informational and contact portal while a new site is under development. The company targets event organizers and professionals seeking specialized stage effects services. The business operates in a niche market with a small company size and a localized French presence. Technically, the website uses a modest technology stack including jQuery, Bootstrap, and Font Awesome, hosted on OVH infrastructure. The site is accessible via HTTPS and shows basic mobile optimization and SEO practices. However, it lacks advanced security headers, privacy policies, and analytics tools, indicating a low to moderate level of digital maturity. From a security perspective, the site benefits from HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present, reducing immediate data protection risks. The WHOIS data aligns well with the website content and business claims, supporting legitimacy. No signs of malware, phishing, or adult content were detected. Overall, the website is functional but basic, with room for improvement in privacy compliance, security hardening, and content richness. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

C

Concert Systemes

concert-systemes.com

46

Concert Systemes is a French audiovisual technical service provider specializing in sound, lighting, structures, video, and event engineering for spectacles and events. The company offers services including technical assistance, rental, sales, and installation, targeting event organizers and audiovisual professionals primarily in France. The website is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is accessible, mobile-optimized, and includes a cookie consent mechanism, but lacks privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and no visible incident response or data protection policies. WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the website and business. Overall, the site demonstrates a good level of content quality and business credibility but requires improvements in security and compliance documentation.

P

Prestatech-Artifices

prestatech-artifices.com

34

Prestatech-Artifices is a French company specializing in the design and production of fireworks and pyrotechnic displays, established in 1990. The company targets event organizers and clients seeking artistic and prestigious pyrotechnic shows. Their website is professionally designed using WordPress and includes a portfolio of projects, team information, and social media links. Technically, the site uses common web technologies and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. The absence of WHOIS registration data is a notable concern that impacts trustworthiness. Overall, the site presents a professional image but would benefit from improved compliance and security practices.

V

Vinařství Procházka Valtice

valtickavina.cz

65

Vinařství Procházka Valtice is a well-established family-owned winery based in the Czech Republic, specializing in the production and sale of quality Moravian wines. Founded in 1999, the company operates on 73 hectares of vineyards and produces up to 350,000 bottles annually. Their business model combines traditional wine production with modern technology, selling directly to consumers via an e-shop and a physical wine shop in Valtice. The website reflects a professional and consistent brand image, targeting wine consumers primarily within the Czech Republic. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and implements appropriate mechanisms such as cookie consent and age verification for alcohol sales. Security posture is solid with HTTPS and reCAPTCHA, though some improvements in security headers and published policies are recommended. Overall, the website is trustworthy and well-positioned in its market niche.

R

Regina Schneiderová

uzmrzlinare.cz

46

U Zmrzlináře is a small local ice cream business based in Valtice, Czech Republic, operating since 2019. The website serves as an informational portal providing contact details, location, and social media links to customers. The business targets local residents and visitors seeking ice cream services. The site uses a simple technical stack including Bootstrap and Google Tag Manager for analytics, hosted by WEDOS, a Czech hosting provider. The website is basic in design and content but functional for its purpose. Security posture is minimal with no advanced headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and consistency.

The Instituto de Mayores y Servicios Sociales (Imserso) is a Spanish government agency dedicated to providing social services and support to elderly and disabled populations. The website serves as an official portal offering information on programs such as tourism, termalism, autonomy, dependency, pensions, and social benefits. It targets pensioners, elderly citizens, and persons with disabilities in Spain. The site is well-branded, consistent, and professionally maintained, reflecting its status as a public institution. Technically, the website is built on the Liferay platform, utilizing modern web technologies including jQuery, React, and Bootstrap. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with appropriate security headers, indicating a strong security posture. However, some areas such as explicit security policies and incident response contacts could be improved. Security-wise, the site shows no signs of vulnerabilities or malicious content. Privacy and cookie policies are present and appear GDPR compliant. No direct contact emails or phone numbers are visible, which is common for government portals but could be enhanced for user support. The WHOIS data is unavailable due to query restrictions, but the domain is a .es official domain consistent with Spanish government use. Overall, the website is trustworthy, secure, and serves its public service mission effectively. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing security policy visibility, and improving contact information accessibility to further strengthen trust and compliance.

E

PF 2026 novoročenky | vánoční přání

e-pf.cz

48

The website www.e-pf.cz is a Czech-based online platform specializing in electronic and printed Christmas and New Year greeting cards (PF 2026). It offers a variety of greeting card types including animated, video, and interactive games, targeting both corporate clients and private individuals. The business model revolves around providing customizable holiday greetings with options to add logos and signatures, facilitating easy digital distribution via email and social media. The site is well-structured with clear navigation and professional design, catering primarily to the Czech market. Technically, the website is built on Joomla CMS with Gantry5 and Bootstrap frameworks, leveraging modern web technologies such as jQuery and lazy loading for images. It integrates Google Analytics and SmartLook for user behavior tracking and analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features and good SEO practices. Cookie consent mechanisms are implemented in compliance with EU regulations, although a dedicated privacy policy page is not clearly found. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent banners. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no detailed security or incident response policies are publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a registration standpoint, but the website content and technical setup appear legitimate and professional. Overall, the website presents a safe and professional platform for holiday greeting cards with moderate digital maturity and security posture. Strategic improvements include publishing a comprehensive privacy policy, enhancing security headers, and providing clear contact information for security incidents to strengthen trust and compliance.

C

CoreShop GmbH

coreshop.org

61

CoreShop GmbH operates a professional and comprehensive website offering an open source e-commerce platform tightly integrated with Pimcore. The company targets businesses requiring customizable B2B and B2C e-commerce solutions, supported by enterprise bundles, development, consulting, and training services. Their market position is strong within the Pimcore ecosystem, supported by a developer-friendly approach and active partner program. Technically, the website is modern, mobile-optimized, and uses trusted technologies such as Google Analytics and Tag Manager, with good SEO and accessibility practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and active community presence. Overall, the site is trustworthy, well-maintained, and business credible.

G

GRAWEB s.r.o.

tiskarnahustopece.cz

45

GRAWEB s.r.o. operates the Naša tiskárna HustoPeče website, providing advanced digital printing and graphic design services primarily in Hustopeče, Czech Republic. The company leverages modern printing technologies acquired in 2019 to offer high-quality, fast, and cost-effective printing solutions. Their business model focuses on serving local businesses and individuals with a comprehensive suite of printing services including copying, binding, and file upload capabilities. The website reflects a professional and consistent brand image with clear service descriptions and pricing transparency. Technically, the website is built using Mobirise CMS with Bootstrap and jQuery frameworks, integrating third-party analytics tools such as Google Analytics and Hotjar for user behavior tracking. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data limits domain trust verification, although the website content and contact information suggest a legitimate business. The use of multiple tracking tools without clear privacy disclosures indicates potential compliance gaps. Overall, the website presents a trustworthy and professional front for a small regional printing business but should enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

T

Telemedi

telemedi.com

66

Telemedi is a Poland-based B2B telemedicine and digital health platform provider specializing in services for insurance companies, travel assistance, healthcare providers, and financial and telecom sectors. The company offers multilingual telehealth services, white-labeled healthcare platforms, healthcare APIs, and digital healthcare transformation solutions. It has established partnerships with major global insurance and assistance companies, positioning itself as a significant player in the global telehealth market. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, hosted behind Cloudflare DNS. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are present and GDPR compliance is indicated. No direct company emails or phone numbers are published; contact is primarily via forms. Overall, the site is trustworthy, safe, and well-optimized for its target audience.

I

International Council of Nurses

icncongress.org

70

The ICN Congress 2025 website serves as the official platform for the 30th International Council of Nurses Congress, scheduled for June 2025 in Helsinki, Finland. It provides comprehensive information about the event, including scientific programs, speakers, photo galleries, and registration details. The site targets nursing professionals, students, and healthcare stakeholders globally, emphasizing nursing's role in shaping healthcare policy and delivery. The business model centers on event organization and professional development, supported by sponsorships and accreditation partnerships. Technically, the website is built on a Ruby on Rails framework with modern JavaScript libraries such as jQuery, Bootstrap, and Mapbox for interactive maps. It integrates third-party services like HelpScout for customer support and hCaptcha for bot mitigation. Hosting appears to be on AWS infrastructure, inferred from DNS records. The site is mobile-optimized with a responsive design and supports multiple languages, enhancing accessibility for an international audience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and no explicit HTTP security headers were detected in the HTML content, indicating room for improvement. The site employs CSRF tokens and bot protection mechanisms but lacks publicly visible security or incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website presents a professional and trustworthy front for a reputable international nursing organization. It effectively balances content richness, user experience, and basic security measures. Strategic enhancements in DNS security, HTTP headers, and documented security policies would further strengthen its posture and trustworthiness.

Y

YESCO

yesco.com

67

YESCO is a well-established company specializing in custom electric signs, lighting, and billboard services since 1920. The company offers a broad range of services including design, manufacturing, installation, maintenance, and repair of signage and lighting solutions, targeting businesses and organizations seeking quality signage. The website demonstrates a mature digital presence built on WordPress with modern plugins and technologies, providing a professional user experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and use of Google Tag Manager, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains high due to consistent branding, social media presence, and detailed service offerings. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.