Security Directory

V

Visual Capitalist

voronoiapp.com

56

Voronoi by Visual Capitalist is a specialized media platform focused on delivering data-driven visual stories and visualizations sourced from top creators worldwide. The platform offers a curated feed of charts and maps, enabling users to explore data narratives with transparency and engagement features such as sign-in, saving favorites, commenting, and following creators. The presence of mobile applications for iOS and Android further extends its reach and usability. Technically, the website leverages modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Integration with analytics tools like Google Tag Manager and Hotjar indicates a mature approach to user behavior tracking and optimization. However, the site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site enforces HTTPS and uses asynchronous loading of third-party scripts, which is positive. Nonetheless, the absence of security headers and clear incident response contacts suggests room for improvement. The missing WHOIS registration data is a notable concern, as it raises questions about domain legitimacy despite the professional appearance and association with Visual Capitalist. Overall, the website presents a good user experience and technical foundation but requires enhancements in privacy compliance, security best practices, and domain registration transparency to strengthen trust and reduce risk.

L

Liga lidských práv

llp.cz

51

Liga lidských práv is a Czech non-profit organization dedicated to human rights advocacy and education. The website serves as an informational platform targeting the general public interested in human rights issues. The organization appears established with a domain age dating back to 2002, indicating longstanding presence in the sector. The site uses WordPress with the Divi theme and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Mailchimp, reflecting moderate digital maturity. However, explicit privacy and terms of service documents are not found, which may impact compliance and user trust. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website is professionally designed, mobile-optimized, and content relevant to its mission, but could improve transparency and security documentation.

K

Klia cz S.r.o.

klia.cz

45

Klia cz S.r.o. operates as a wholesale importer and distributor of flowers and related accessories across the Czech Republic, serving primarily flower shops and wholesale customers. The company maintains multiple branches in key Czech cities and offers an online catalog and e-shop services. Their business model focuses on regular imports from major flower markets such as Aalsmeer in the Netherlands, ensuring a broad and high-quality product range. The website is professionally designed, with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses a mix of jQuery plugins and Google Analytics for tracking, but some components like jQuery are outdated, posing potential security risks. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and outdated libraries are areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and contact transparency. Strategic recommendations include updating technical components, enhancing security headers, and improving domain registration transparency.

E

E-marchespublics : Appel d'offre public et dématérialisation des marchés publics

e-marchespublics.com

50

The website www.e-marchespublics.com is a French-language platform specializing in public tenders and the digital dematerialization of public procurement processes. It targets enterprises and public sector buyers in France, offering services such as access to over 600,000 public tenders annually, secure electronic submission of offers, alerts, and automatic form filling. The platform is positioned as a key player in the French public procurement market, providing comprehensive access to tender documents and related services. Technically, the site employs modern web technologies including Google Tag Manager, Didomi Consent Management Platform, Bootstrap, and jQuery UI, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and integrates consent management for GDPR compliance, although explicit privacy and security policy pages are not detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and service offerings appear professional and legitimate. Overall, the site demonstrates a moderate to good security posture with room for improvement in publishing security policies and enhancing security headers.

S

Střední odborná škola ochrany osob a majetku s.r.o.

sosoom-ostrava.cz

48

Střední odborná škola ochrany osob a majetku s.r.o. is a private secondary school in the Czech Republic specializing in security and legal education, preparing students for careers in police, military, customs, and firefighting. The institution offers four-year programs culminating in maturity exams and provides requalification courses for adults in security professions. The website reflects a niche educational provider with a clear focus on practical training and career readiness in security-related fields. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette Framework, Flatpickr, and Google reCAPTCHA v3, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though explicit security headers are missing. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, the absence of WHOIS data reduces domain trustworthiness, and no incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and well-suited for its educational purpose.

F

Fundación Parentes

fundacionparentes.org

47

Fundación Parentes is a Spanish non-profit organization founded in 2019 focused on promoting equal opportunities through education, social cooperation, and cultural initiatives. The organization operates internationally with a network of educational entities and partners, offering consulting, training, and development projects aimed at vulnerable populations and educational institutions. The website is professionally designed using WordPress with modern SEO and performance optimizations, reflecting a mature digital presence. Security posture is good with HTTPS and some security headers, though improvements are recommended such as enabling DNSSEC and adding CSP and HSTS headers. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the website is trustworthy and well-positioned in its sector but would benefit from enhanced transparency and security practices.

O

Oleje a maziva Total - Autorizovaný distributor | Oleje-Total.cz

oleje-total.cz

49

The website oleje-total.cz operates as an authorized distributor of Total brand lubricants and oils, targeting automotive and industrial customers primarily in the Czech Republic. It offers a broad range of products including motor oils, industrial oils, and lubricants for various vehicle types and machinery. The business model is e-commerce focused, providing direct sales through an online platform with clear categorization and product offerings. The site positions itself as a trusted distributor with consistent branding and a professional online presence. Technically, the website utilizes a BohemiaSoft CMS platform with a technology stack including jQuery, Google Tag Manager, Google Analytics, and other common JavaScript libraries. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility features are basic but present. Security measures include HTTPS, cookie consent with granular preferences, and CSRF protection, though some security headers are missing and the jQuery version is outdated, which could pose risks. From a security standpoint, the site demonstrates a reasonable posture with encrypted connections and user consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, limiting direct communication channels. There is no evidence of formal security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is functional, professional, and compliant with privacy regulations, but the lack of domain registration transparency and some technical security gaps suggest moderate risk. Strategic improvements in domain registration visibility, security header implementation, and updated libraries are recommended to strengthen the security posture and business credibility.

P

Práce Mubea

pracemubea.cz

45

Práce Mubea is a Czech-language website focused on employment and job opportunities, likely affiliated with the Mubea company or brand. The site targets local job seekers and provides career-related content. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site implements a comprehensive cookie consent mechanism via Cookiebot, reflecting a good level of privacy compliance. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and technology stack appear legitimate and professional. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, with room for improvement in privacy and security transparency.

G

Gatema Holding s.r.o.

gatema.cz

64

Gatema Holding s.r.o. is a Czech Republic-based company with over 30 years of experience specializing in manufacturing printed circuit board prototypes and providing IT services including ERP Helios implementation and custom ERP integration solutions. The company targets European businesses requiring high-quality PCB manufacturing and enterprise IT solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the site employs modern web technologies such as Google Analytics, Facebook Pixel, and Cookie-Script for privacy compliance, alongside Typekit fonts for branding consistency. Security posture is strong with HTTPS enforced and reCAPTCHA implemented, though security headers and explicit security policies are absent. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear legitimate and well-maintained. Overall, Gatema demonstrates a mature digital presence suitable for its business scope.

S

Síť brněnských otevřených škol

otevreneskoly.cz

54

The website 'Síť brněnských otevřených škol' represents a public educational project managed by the Magistrát města Brna, aiming to create open schools as centers of education and community engagement. The site provides information about the project, news updates, and contact details, targeting parents, children, and the general public interested in educational activities in Brno. The business model is a government-funded initiative focusing on local community education and lifelong learning opportunities. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and the Nette PHP framework. The site is mobile-optimized with responsive design and good accessibility features. Performance is moderate, with proper meta tags and SEO considerations. However, some security best practices such as security headers are missing. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data. The absence of security headers and a vulnerability disclosure policy are areas for improvement. Privacy compliance is basic, with privacy and cookie policies present but lacking an explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but could benefit from enhanced security measures and improved privacy compliance. The missing WHOIS data reduces domain trustworthiness, though the official city affiliation supports legitimacy. Strategic recommendations include implementing security headers, adding incident response contacts, and improving cookie consent mechanisms.

W

Witzenmann USA LLC

witzenmann-usa.com

67

Witzenmann USA LLC is a specialized manufacturer and engineering partner providing flexible metal elements such as hoses, expansion joints, and bellows primarily for automotive, aerospace, and technical building equipment sectors. The company operates as part of the global Witzenmann Group with a strong international presence. The website demonstrates a mature digital infrastructure with modern technologies, good mobile optimization, and comprehensive content tailored to industrial clients. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which is unusual but the website's professionalism and contact transparency support legitimacy. Overall, the site is trustworthy and well-positioned in its market niche.

W

Witzenmann Sverige AB

witzenmann.se

62

Witzenmann Sverige AB is a specialized manufacturer and supplier of flexible metal elements including metal hoses, compensators, metal bellows, pipe supports, and automotive components. The company serves a broad range of industrial sectors such as automotive technology, energy, aerospace, and technical building equipment, positioning itself as a trusted engineering partner with a global footprint. The website reflects a mature digital presence with multi-language support, comprehensive product and solution information, and clear contact channels. Technically, the site employs modern web technologies and integrates a consent management platform to ensure privacy compliance. Security posture is adequate but could be improved by implementing additional HTTP security headers and publishing explicit security policies. The absence of WHOIS data for the exact www-prefixed domain is likely a technical artifact rather than a legitimacy concern. Overall, the website is professional, trustworthy, and business-focused, supporting Witzenmann's market position as a reputable industrial supplier.

W

Witzenmann Korea Co., Ltd.

witzenmann.co.kr

66

Witzenmann Korea Co., Ltd. operates a professional website offering a broad range of flexible metal products including hoses, expansion joints, bellows, and automotive parts, targeting industrial sectors such as automotive, aerospace, construction, and energy. The company is part of the global Witzenmann Group with a strong international presence. The website demonstrates good content quality, clear navigation, and multi-language support, reflecting a mature digital presence. Technically, the site uses modern web technologies and integrates a consent management platform and Google Tag Manager for analytics and privacy compliance. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced security measures and verification of domain registration status.

B

BTFLEX S.r.l.

bt-flex.com

58

BTFLEX S.r.l., part of the Witzenmann Group, is a medium-sized manufacturing company specializing in flexible metallic elements for various industrial sectors including automotive, aerospace, HVAC, and energy. The company offers both custom and series production solutions and maintains a strong international presence with subsidiaries and partner sites worldwide. The website is professionally designed, multilingual, and provides comprehensive product and solution information targeting industrial clients and OEMs. Technically, the site uses modern web technologies, including Usercentrics for consent management and Google Tag Manager for analytics, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response details are not published. Overall, the website reflects a credible and established business with good digital maturity.

W

Witzenmann

witzenmann.co.uk

67

Witzenmann is a global manufacturing and engineering company specializing in flexible metal elements such as hoses, expansion joints, metal bellows, and automotive components. The company serves diverse industrial sectors including automotive, aerospace, technical building equipment, and hydrogen applications. Their website demonstrates a strong global presence with multiple localized domains and a comprehensive product and solutions portfolio. Technically, the website uses modern web technologies, including Usercentrics for consent management and Google Tag Manager for analytics, and is well optimized for mobile devices. Security posture is moderate with HTTPS enforced and consent mechanisms in place, but lacks visible security headers and detailed incident response information. The WHOIS data for the UK domain is unavailable due to registration issues, which slightly impacts trustworthiness. Overall, the website is professional, content-rich, and trustworthy, serving industrial clients and OEMs effectively.

W

Witzenmann Española S.A.

witzenmann.es

64

Witzenmann Española S.A. is a large manufacturing company specializing in flexible metal elements, including flexible metal hoses, expansion joints, bellows, pipe supports, and automotive and aerospace components. The company operates globally with a strong presence in multiple countries and offers tailored engineering solutions for various industrial sectors such as automotive, aerospace, energy, and building technology. Their website reflects a professional and comprehensive digital presence with multilingual support and detailed product and solution offerings. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates a consent management platform (Usercentrics) and Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some security headers are not explicitly detected, and there is no visible security.txt or vulnerability disclosure page. Security posture is moderate to good, with HTTPS enforced and cookie consent mechanisms in place. The absence of explicit security policies or incident response contacts is a minor gap. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to registry restrictions, but the website's professionalism and global footprint strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further improve trust and security posture.

V

Vinařství Jiří Šilinek

silinek.eu

51

Vinařství Jiří Šilinek is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in producing and selling quality wines, offering wine tastings, and providing accommodation services. The website reflects a professional and regionally focused business with a clear emphasis on tradition and quality. The digital infrastructure is built on the Rocketoo e-commerce platform, utilizing Bootstrap and jQuery, with integration of Google Analytics and Google Ads for marketing and analytics purposes. Privacy and cookie policies are well implemented, including GDPR compliance and user consent mechanisms. Security posture is generally good with HTTPS enforced and age verification for alcohol sales, though some security headers are missing. WHOIS data is unavailable due to privacy protection, which is typical for small businesses. Overall, the site is trustworthy, well-branded, and suitable for its target mature audience.

V

Vinařství pod Hradem s.r.o.

vinarstvipodhradem.cz

45

Vinařství pod Hradem s.r.o. is a small family-owned winery located in the Pálava region of the Czech Republic, specializing in wine production, hospitality services including unique accommodation in wooden barrels and cottages, and online sales of wine and gift vouchers. The company positions itself as a premium local winery offering experiential tourism and wine tasting in the highest wine-growing village in Pálava. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at wine enthusiasts and tourists. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as WPBakery Page Builder and Revolution Slider. It integrates modern analytics and tracking tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital marketing approach. The site is mobile optimized and uses HTTPS, but lacks explicit security headers and documented security policies. Security posture is moderate with no visible critical vulnerabilities or exposed sensitive data, but the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and well-maintained online presence for a small winery business, with recommendations to enhance security headers, maintain plugin updates, and improve transparency around security and privacy practices.

R

Restaurace Aquarium Relax

aquariumrelax.cz

45

Restaurace Aquarium Relax is a small hospitality business operating a restaurant in the Czech Republic. The website presents basic information about the restaurant with a focus on local clientele. The technical infrastructure is based on WordPress using the Divi theme, with integration of Google Tag Manager and Google reCAPTCHA for analytics and bot protection. The site is secured with HTTPS and implements a cookie consent mechanism, though it lacks a visible privacy policy and detailed contact information. Security posture is moderate with room for improvement in security headers and compliance documentation. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy and contact details.

A

AFS Intercultural Programs

afs.org

68

AFS Intercultural Programs is a well-established international non-profit organization focused on intercultural learning and global citizenship development through exchange programs, education, volunteerism, and advocacy. The organization has a strong market position with a large global community and a comprehensive digital presence. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging modern technologies such as WordPress, Google Analytics, Hotjar, and Cloudflare CDN. Security posture is solid with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although some security headers could be explicitly implemented and DNSSEC enabled for enhanced protection. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the domain registration and WHOIS data confirm the legitimacy and trustworthiness of the organization.

M

Marketing Hub s.r.o.

marketinghub.cz

51

Marketing Hub s.r.o. is a Czech-based digital marketing agency specializing in comprehensive online marketing services including PPC advertising, SEO, web analytics, graphic design, copywriting, social media management, emailing, and web development. Founded in 2024, the company positions itself as a performance-driven marketing partner for businesses seeking tailored digital solutions. The website reflects a professional and modern digital presence with strong SEO and user experience design. Technically, the site is built on WordPress with integration of modern JavaScript libraries and Google marketing tools, hosted on Websupport infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and business information.

W

Witzenmann GmbH

witzenmann.de

63

Witzenmann GmbH is a German-based manufacturer specializing in flexible metallic elements including metal hoses, compensators, metal bellows, pipe supports, and vehicle parts. The company serves diverse industrial sectors such as automotive, aerospace, energy, and building technology, with a strong global presence supported by multiple subsidiaries and localized websites. Their business model focuses on both custom and series production, targeting industrial clients requiring high-quality flexible metal components. The website reflects a mature digital infrastructure with multilingual support and structured product and solution offerings.

S

Schindler, spol. s r.o.

lapierre-bike.cz

10

Schindler, spol. s r.o. operates a professional e-commerce platform specializing in the distribution and retail of Lapierre bicycles and related cycling products in the Czech Republic. The website offers a comprehensive product catalog, including road bikes, mountain bikes, e-bikes, and accessories, targeting cycling enthusiasts and retailers. The company maintains a consistent brand presence with multi-language support and provides technical documentation and manuals to support customers. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern web technologies such as Google Analytics and Tag Manager for marketing and analytics purposes. The site is well-structured, mobile-optimized, and employs HTTPS with standard security headers, reflecting a good security posture. However, the absence of WHOIS data limits domain trust verification, and no explicit security or incident response policies are published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, though terms of service and vulnerability disclosure information are not evident. Overall, the website is professional, secure, and trustworthy, with room for improvement in transparency and security documentation.

G

GSS Mikulov

gymik.cz

51

Gymnázium a střední odborná škola Mikulov is a public secondary education institution in the Czech Republic offering both maturitní (graduation) and vocational programs including culinary, mechanical, and caregiving fields. The website serves students, parents, and staff with educational information, services, and contact details. It maintains a moderate market position as a regional educational provider with partnerships across local government and industry. The technical infrastructure is based on WordPress CMS, enhanced with Google Analytics and Tag Manager for tracking, and Typekit for fonts. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well maintained.

A

AFS

afs.cz

46

AFS Česká Republika is a well-established non-profit organization focused on intercultural education and exchange programs. The website presents a professional and comprehensive digital presence, offering detailed information about study abroad programs, hosting foreign students, volunteering, and scholarships. The organization targets students, parents, volunteers, and educational institutions, positioning itself as a key player in intercultural educational services within the Czech Republic and globally through the AFS network. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Analytics, Hotjar, and Facebook Pixel, supported by a CDN for performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers could be enhanced. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the organization's transparency and social proof. Overall, the site is safe, user-friendly, and compliant with GDPR, reflecting a mature digital strategy for a non-profit educational entity.

M

Mikulovská rozvojová s.r.o.

mikulovskarozvojova.cz

45

Mikulovská rozvojová s.r.o. is a municipally owned company founded in 2006, serving as a key organizer and promoter of cultural, wine, and social events in Mikulov, Czech Republic. The company also manages municipal assets such as the city cinema, pension, and amphitheater, providing venue rentals and advertising services. Their market position is primarily local and regional, focusing on cultural and hospitality sectors. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on Joomla CMS with UIkit and jQuery frameworks, and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well.

Vinařství Vajbar is a Czech winery specializing in premium wines from the South Moravia region. The company operates an e-commerce platform offering a variety of wines, related products, and wine tasting experiences. Their website demonstrates a professional digital presence with clear branding, product showcases, and event calendars. Technically, the site uses established JavaScript libraries and Google Tag Manager for analytics, with a cookie consent mechanism and age verification overlay to comply with legal requirements for alcohol sales. However, the absence of WHOIS data and explicit contact information on the main pages slightly reduces trustworthiness. Security practices include cookie consent and age verification, but lack visible security headers or incident response contacts. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but could improve transparency and security posture.

S

Srdce v domě, p. o.

srdcevdome.cz

58

Srdce v domě, p. o. is a non-profit social service organization established by the Jihomoravský kraj (South Moravian Region) in the Czech Republic. The organization provides protected housing and support services primarily for persons with disabilities, operating facilities in Klentnice, Mikulov, and Lednice. Their website reflects a regional government-affiliated entity focused on social welfare, with clear contact information and service descriptions. The business model is non-profit, supported by regional government funding, targeting individuals seeking social housing and care services. Technically, the website is built on an ASP.NET WebForms framework with modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel. It employs Google Tag Manager for analytics and tracking, and includes cookie consent mechanisms and a privacy policy, indicating a reasonable level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency and trust slightly, but the website's content and affiliations strongly support its legitimacy. Overall, the website presents a trustworthy and professional front for a regional non-profit social service provider. Strategic improvements in security headers and public disclosure of incident response policies would enhance its security posture and compliance standing.

W

Waves More

waves.tours

50

Waves More operates the website waves.tours, offering private and shared boat tours from Split, Croatia. The business targets tourists seeking customized maritime experiences along the Croatian coast. The website is professionally designed using WordPress and Elementor, with integrated booking and GDPR compliance features. The technical infrastructure includes modern plugins for SEO and analytics, such as Rank Math and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for small tourism businesses, and no suspicious indicators were found. Overall, the site presents a trustworthy and professional front for a small hospitality business.

M

MYD Sailing

myd-sailing.com

48

MYD Sailing is a small yacht charter business operating primarily in Croatia, offering a fleet of sailing yachts for vacationers and sailing enthusiasts. The website is professionally designed using WordPress and Elementor, providing clear navigation, multilingual support, and integrated booking functionality. The technical infrastructure is modern with standard plugins and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional image suitable for its niche market.

F

Flying Revue

flying-revue.cz

55

Flying Revue is a Czech aviation-focused media company providing news, articles, and multimedia content for aviation enthusiasts and professionals. The website serves as a digital platform for their magazine, educational courses, e-commerce, and community engagement. The company has an established presence since 2008 and targets a niche audience interested in aviation history, sport, and industry news. Technically, the site uses Fonio CMS with a mix of legacy and modern JavaScript libraries, Google Analytics, and advertising via Google Adsense. The site is well-structured, mobile-optimized, and uses HTTPS, but relies on an outdated jQuery version which poses security risks. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. The WHOIS data is missing, which reduces domain trust from a registration perspective, though the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but should address technical and compliance gaps to enhance security and privacy posture.

T

Textron Aviation

txtav.com

68

Textron Aviation is a leading manufacturer of general aviation aircraft, operating iconic brands such as Beechcraft and Cessna. The company holds a significant market position, delivering over half of all general aviation aircraft worldwide. The website reflects a professional corporate presence with a focus on aviation manufacturing and sales. The technical infrastructure includes modern web technologies such as Foundation CSS, VideoJS for media, and OneTrust for cookie consent management, hosted likely on AT&T infrastructure. Google Tag Manager is used for analytics and marketing purposes. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices.

C

Czech Airlines Technics, a.s.

csatechnics.com

55

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

M

MONTPLAST-ITPV s.r.o

montplast-itpv.cz

54

MONTPLAST-ITPV s.r.o. is a Czech family-owned company specializing in plumbing, heating, water, and gas installation services. The company serves residential and commercial clients, offering comprehensive installation, repair, and maintenance solutions. Their website reflects a professional local business with a clear focus on quality and customer satisfaction. The company presents itself as experienced and reliable with a solid customer base and a range of key services in the energy sector. Technically, the website is built on WordPress using Elementor and several plugins including MonsterInsights for analytics and Caldera Forms for contact forms. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, but lacks some security headers and cookie consent mechanisms. Analytics tracking is moderate, using Google Analytics and Tag Manager. The website content is well-structured and relevant, though SEO and accessibility could be improved. From a security perspective, the site shows good basic practices such as HTTPS and secure forms with GDPR consent. However, the absence of security headers and cookie banners indicates room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for small businesses. No critical vulnerabilities or suspicious indicators were found. Overall, the website is trustworthy and professionally maintained, with moderate technical maturity and a solid business presence. Strategic recommendations include enhancing security headers, implementing cookie consent banners, and improving accessibility and SEO to strengthen compliance and user experience.

D

Dům barev (PPG)

dumbarev.cz

63

Dům barev is an established e-commerce retailer specializing in paints and painting accessories in the Czech Republic. The website offers a broad range of products including paints for walls, wood, metal, and related accessories, targeting both B2B and B2C customers. The business is associated with PPG Industries, a global leader in coatings, which enhances its market credibility. Technically, the website is built on the Kentico CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Didomi for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy linked to the parent company and an active cookie consent banner. The absence of WHOIS data suggests privacy protection or domain registration issues, but the website content and corporate affiliation support legitimacy. Overall, the site is professional, secure, and compliant, suitable for its retail business model.

A

AnyBigData

anybigdata.com

51

AnyBigData is a technology-focused business intelligence provider offering data-driven insights to help businesses gain a competitive edge and drive smarter strategies. The website is branded as powered by The Dutch Selection, indicating a parent company relationship. The site targets businesses seeking reliable data analytics solutions. Technically, the website uses a modern Ruby on Rails stack with contemporary frontend libraries and analytics tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF protections but lacks comprehensive security headers and visible privacy or cookie policies. The absence of WHOIS registration data is a significant concern, impacting trust and legitimacy. Overall, the website is professional and functional but requires improvements in transparency and security disclosures.

L

Living Hotels

living-hotels.com

59

Living Hotels operates a professional hospitality website offering serviced apartments and business hotels primarily in Germany with an additional location in South Africa. The site targets business travelers and long-stay guests, providing booking capabilities and detailed location information. The technical infrastructure is modern, leveraging TYPO3 CMS, Google Tag Manager, and consent management tools, ensuring a good user experience and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's professional presentation and trustworthiness. Overall, the website is well-designed, accessible, and compliant, supporting a medium-sized hospitality business.

Status.net is a small business resource website founded in 2000, providing useful business templates and educational articles focused on management and organizational topics. The site targets business professionals and organizations seeking practical resources to improve operations and decision-making. Technically, the website is built on WordPress with a moderate technology stack including jQuery and various analytics and advertising scripts. Hosting appears to be on Amazon AWS infrastructure. The site demonstrates good mobile optimization and SEO practices but has basic accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and does not provide a cookie consent mechanism. Privacy compliance is limited, with a basic privacy policy but no cookie or terms of service pages. No direct contact information or security policies are published, which limits transparency. Overall, the domain registration data is consistent and supports the legitimacy of the business. The website content is safe and appropriate for a general audience.

D

DiVan

divan.hr

56

DiVan is a Croatian media platform focused on providing comprehensive information about events, places, and cultural activities in Zagreb. It serves a local audience interested in concerts, festivals, gastronomy, and social happenings, positioning itself as a niche event guide with a strong community presence. The platform offers additional services such as newsletters and mobile applications to enhance user engagement. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and CAPTCHA protections, although some security headers could be improved. The website demonstrates good privacy compliance and transparent user consent mechanisms. Overall, DiVan presents a professional and trustworthy online presence with moderate technical performance and solid business credibility.

Z

ZnajomaMarka.pl

znajomamarka.pl

38

ZnajomaMarka.pl is a Polish creative agency specializing in comprehensive branding, website development, SEO, copywriting, and social media marketing services. The company targets businesses and individuals seeking to establish or enhance their online presence with professional design and marketing solutions. The website showcases a diverse portfolio of projects, indicating active engagement in the creative sector since its founding in 2024. Technically, the site is built on WordPress with Elementor, integrating modern web technologies and Google analytics tools, providing a solid digital infrastructure. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and visible security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

med update GmbH

radio-onko-update.com

53

The website radio-onko-update.com represents a professional platform operated by med update GmbH, focused on delivering specialized educational seminars and updates in the field of radiation oncology. It targets medical professionals, providing expert commentary on recent studies, seminar materials, and networking opportunities. The business is well established with a domain age since 2009 and strong accreditations from recognized oncology societies. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the site demonstrates high trustworthiness and professionalism suitable for its healthcare audience.

M

med update GmbH

pneumo-update.com

50

Pneumo Update 2025 is a well-established medical education platform specializing in pneumology updates, organized by med update GmbH. The website serves healthcare professionals by providing access to annual seminars held in Mainz and Berlin, with options for livestream participation and access to seminar materials. The platform is supported by reputable scientific leadership and pharmaceutical sponsors, reinforcing its credibility in the healthcare education sector. Technically, the site is built on WordPress with modern plugins and tools, offering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates a professional and trustworthy presence with a moderate to high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

M

med update GmbH

gyn-onko-update.com

51

The website gyn-onko-update.com represents a specialized medical education platform focused on gynecological oncology updates, organized by med update GmbH. It targets healthcare professionals, providing annual seminar events with expert presentations and clinical research reviews. The business model centers on event organization and professional education, supported by pharmaceutical sponsors and cooperation partners. The website is well-branded, professionally designed, and content-rich, serving a niche but important audience in the healthcare sector in Germany. Technically, the site is built on WordPress with a modern plugin ecosystem including SEO, analytics (Matomo), and GDPR compliance tools. It uses common web technologies such as jQuery and Slider Revolution for interactive content. Performance and mobile optimization are adequate, though accessibility features are basic. Hosting details are not explicit but DNS and registrar data indicate a stable setup. Security posture is good with HTTPS enforced and cookie consent mechanisms in place. However, no advanced security headers were detected, and no explicit security or incident response policies are published. No vulnerabilities or suspicious content were found. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, professional, and well-maintained, with a low risk profile. Strategic improvements could include enhanced security headers, explicit security policies, and more direct contact information for incident response. These would further strengthen trust and compliance in a healthcare context.

M

med update GmbH

derma-update.com

53

Derma Update is a well-established German medical event organizer specializing in dermatology update seminars. The company hosts hybrid events attracting thousands of medical professionals, providing expert lectures and clinical study reviews. Their market position is strong within the dermatology education sector, supported by reputable scientific leadership and pharmaceutical sponsorships. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, delivering a professional and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the site reflects a legitimate, professional business with a solid digital presence.

M

med update GmbH

anaesthesie-update.com

54

Anästhesie Update 2025 is a specialized medical education platform operated by med update GmbH, focused on delivering annual seminars and updates in anesthesiology and related medical fields. The website serves healthcare professionals with event information, livestream access, and digital educational materials. The platform is well-established with a domain age consistent with its business history and is supported by reputable scientific leadership and partnerships. Technically, the site is built on WordPress with modern plugins for video, analytics, and GDPR compliance, offering a good user experience and mobile optimization. Security posture is solid with HTTPS, domain status locks, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its target audience.

K

Kroll

kroll.com

77

Kroll is a leading independent provider of financial and risk advisory solutions, offering services such as financial advisory, risk management, cyber risk, and compliance consulting. The company targets corporate clients, financial institutions, and legal professionals, positioning itself as a trusted advisor in complex financial and risk environments. The website reflects a mature enterprise with a professional digital presence, leveraging modern web technologies including React and Next.js, and integrating advanced consent management and analytics tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is not publicly available, which slightly impacts transparency but does not detract from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing detailed security and incident response policies and improving WHOIS transparency to enhance trust.

M

med update GmbH

med-update.com

60

med update GmbH is a German-based company specializing in medical education, offering update seminars and digital learning solutions primarily for healthcare professionals. Established in 2004, it holds a solid market position within the German-speaking medical education sector, providing a range of seminar programs and cooperating with medical societies and partners. The website reflects a professional and consistent brand image with a focus on delivering relevant medical content and services to its target audience. Technically, the site is built on WordPress with a mature technology stack including popular plugins for SEO, analytics, and GDPR compliance. The infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website is trustworthy and professionally maintained, with no critical security or content safety concerns detected.

T

Tourismus und Stadtmarketing Husum GmbH

nordsee-congress.de

49

Nordsee Congress is a regional event and tourism marketing organization focused on promoting Husum, Germany as a premier destination for conferences, trade fairs, and congresses. The website provides comprehensive information about venues, hotels, event planning services, and local attractions, targeting event organizers and business travelers. The organization appears established with over 25 years of experience in hosting large events, supported by professional content and a consistent brand presence. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, and Google Tag Manager, with a CMS likely based on LIS CMS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Cookie consent is implemented with an opt-in mechanism, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Contact information is clearly provided, including email, phone, and social media channels, supporting business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience, with room for improvement in security transparency and accessibility compliance.

D

danielvarberg.com

danielvarberg.com

56

DanielVarberg.com is a personal website and blog operated by an individual, providing content and insights primarily targeted at general internet users interested in the blog's topics. The website is built on WordPress with a child theme and hosted by Simply within the EU/EØS region, ensuring compliance with GDPR and data protection regulations. The site employs modern analytics and tracking tools such as Google Analytics, Amplitude, and Stape.io, alongside Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy policies are comprehensive and clearly presented in Danish, demonstrating a commitment to regulatory compliance.