Security Directory

G

Galerie Bijoux Nemesis

bijoux-nemesis.cz

48

Galerie Bijoux Nemesis is a small Czech artisan jewelry business specializing in handmade and original jewelry pieces, including tin jewelry, Swarovski elements, and polymer clay creations. The company also offers jewelry making courses and gift vouchers. Their physical store in Prague is permanently closed, with an emphasis on online sales through their e-shop and social media channels. The website is built on a WebCzech e-shop platform using common JavaScript libraries and Bootstrap for responsive design. While the site is content-rich and user-friendly, it lacks advanced security headers and comprehensive privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the business presence and contact information suggest a legitimate small enterprise.

K

Kwantic

kwantic.fr

49

Kwantic is a French web development agency founded in 2020, specializing in custom web solutions including ERP, CRM, application development, and e-commerce platforms. The company operates multiple offices across major French cities, indicating a regional presence and a focus on serving businesses seeking digital transformation. The website is professionally designed using WordPress with modern technologies such as jQuery, Bootstrap, and various analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks published privacy policies and security headers, which are important for compliance and protection. Overall, the website presents a credible business with room for improvement in privacy and security transparency.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

한

한국과학기술원 (KAIST)

kaist.ac.kr

56

KAIST is a prestigious national science and technology university in South Korea, established to foster scientific talent and conduct advanced research aligned with national policies. The website reflects its institutional stature, providing comprehensive academic, research, and campus life information targeted at students, researchers, and stakeholders. The domain is longstanding and registered transparently under the institution's name, reinforcing its legitimacy. Technically, the website employs common web technologies such as jQuery and Bootstrap, with moderate performance and good mobile responsiveness. However, it lacks modern security headers and DNSSEC, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with modern privacy standards. Security-wise, the site uses HTTPS and does not expose sensitive data, but could benefit from publishing incident response contacts and vulnerability disclosure policies. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to strengthen its digital maturity. The risk assessment is low given the institutional nature and absence of suspicious elements, but strategic improvements in privacy and security policies are recommended to maintain trust and compliance.

U

Università degli Studi di Palermo

unipa.it

62

The Università degli Studi di Palermo is a large, well-established public university in Italy, founded in 1806, serving over 40,000 students. It offers a broad range of academic programs including undergraduate, graduate, and single-cycle degrees. The website reflects its educational mission with content focused on academic offerings and institutional information. Technically, the site uses standard web technologies such as Bootstrap and FontAwesome, providing a good user experience with responsive design and clear navigation. However, there is a lack of visible privacy and cookie policies, as well as security and incident response information, which are critical for compliance and trust in today's digital environment. The security posture is moderate but could be improved by implementing security headers and disclosing vulnerability handling procedures. Overall, the domain registration data aligns well with the university's identity, indicating high legitimacy and trustworthiness.

F

Failiem.lv

failiem.lv

60

Failiem.lv is a Latvian-based technology company specializing in secure file hosting, cloud storage, and file sharing services. The platform offers a range of solutions including file synchronization, public content publishing, file selling with integrated payments, AI-powered content search, and server rental services. It targets both general internet users and businesses requiring reliable and fast file transfer and storage solutions. The website demonstrates a solid market position in the Baltic region with a medium-sized operational scale and consistent branding.

P

PERSKIMEDIA Szymon Perski

epochtimes.pl

59

Epoch Times Polska is a Polish-language independent news media outlet, part of the international Epoch Times network published in 23 languages across 35 countries. The website provides news, analyses, opinions, and cultural content with a focus on China, human rights, and Polish affairs. The business operates on a digital publishing model with advertising revenue and targets Polish-speaking audiences interested in independent journalism. Technically, the site is built on WordPress, using common libraries such as jQuery, Bootstrap, and FontAwesome, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No direct contact emails or phone numbers are publicly listed, which may limit direct user engagement. Overall, the site is professional, trustworthy, and content-rich, serving a medium-sized media business in Poland.

C

Coredem

coredem.info

53

Coredem is a collective project aggregating documentary resources from over 30 organizations focused on democracy and social transformation. It offers a specialized search engine, Scrutari, and hosts thematic collections and debates in multiple languages. The website is built on the SPIP CMS platform with a modern responsive design and uses analytics tools such as Google Analytics and Matomo. However, it lacks visible privacy and cookie policies and does not expose contact information prominently. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure appear professional and legitimate for a non-profit collective. Security headers are not detected, and privacy compliance is minimal, indicating areas for improvement.

C

Cysnews

cysnews-new.cz

59

Cysnews.cz is a Czech news media website providing regional, sports, cultural, transportation, and lifestyle news primarily targeting the Czech-speaking general public. The site operates on a WordPress platform with modern plugins for SEO and analytics, indicating a moderate level of digital maturity. The website is well-structured, mobile-optimized, and includes privacy and cookie policies compliant with GDPR standards. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The absence of public WHOIS data suggests domain privacy protection, which is common for media outlets. Overall, the site presents a professional and trustworthy news source with moderate risk and good compliance.

C

Cysnews

cysnews.cz

58

Cysnews is a Czech news website providing a broad range of content including regional news, sports, culture, lifestyle, and transportation topics. The site targets a general audience interested in current events and local news within the Czech Republic. It operates on a WordPress platform with common plugins for SEO and analytics, indicating a moderate level of digital maturity. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed contact information for incident response or security policies. The absence of WHOIS registration data reduces trust signals, though the website's active social media presence and privacy policy contribute positively to its credibility. No critical vulnerabilities or adult content were detected, and advertising is managed primarily through Google Adsense and Google Analytics. Overall, Cysnews presents as a legitimate regional news portal with moderate technical and security maturity. Strategic improvements in security headers, transparency of contact information, and domain registration data would enhance trust and compliance.

P

Provide Support, LLC

providesupport.com

52

Provide Support, LLC is a technology company specializing in live chat and customer support software solutions for websites. Established in 2004 and based in New York, USA, the company offers a SaaS model with a comprehensive live chat widget, cross-platform agent applications, and integrations with popular platforms such as WordPress, Shopify, and Joomla. Their market position is solid with over 10,000 sites using their service and a reputation for reliable, easy-to-integrate customer service tools. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager, ensuring good performance and mobile optimization. The presence of multi-language support and detailed integration options indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS, encrypts chat data, and implements cookie consent mechanisms, although it lacks a dedicated security policy or incident response page. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The business credibility is reinforced by clear contact information, customer testimonials, and a transparent pricing and refund policy. Strategic recommendations include publishing explicit security and incident response policies and enhancing security headers to further strengthen the security posture.

V

Václav Krejčík

vaclavkrejcik.cz

46

Václav Krejčík is a small-scale personal brand focused on yoga, breathwork, and holistic wellness services primarily targeting Czech-speaking audiences. The website offers a variety of services including in-person and online yoga classes, retreats, podcasts, and educational content such as books. The business model revolves around direct service provision and content monetization through courses and product sales. The site is well-branded and professionally presented with consistent messaging and clear navigation. Technically, the website employs a moderately modern tech stack including jQuery, Bootstrap, Font Awesome, and Google Analytics, with a CMS likely Joomla. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms aligned with GDPR requirements. However, some technical improvements are possible, such as updating JavaScript libraries and adding advanced security headers. From a security perspective, the site demonstrates good baseline practices including HTTPS and cookie consent but lacks published security policies or incident response information. The absence of WHOIS data for the domain is a notable concern that impacts domain trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a credible and professional platform for yoga and wellness services with good privacy compliance and user experience. The main risk lies in the lack of domain registration transparency and minor technical security enhancements. Strategic recommendations include verifying domain registration, enhancing security headers, and publishing security policies to improve trust and compliance.

V

Václav Krejčík

energyclinic.cz

46

The website www.vaclavkrejcik.cz represents the personal brand of Václav Krejčík, a yoga instructor and wellness expert based in the Czech Republic. The site offers a variety of yoga-related services including in-person and online classes, retreats, workshops, books, and podcasts. The content is well-structured and professionally presented, targeting yoga practitioners and wellness seekers. The business model is service and content-driven, focusing on holistic health and breathing techniques. The site integrates modern web technologies such as jQuery, Bootstrap, Google Analytics, and Tag Manager, and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. WHOIS data is unavailable due to privacy protection, which is typical for personal brand websites. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

E

Energy Studio

energystudio.cz

45

Energy Studio is a well-established yoga studio based in Prague, offering a broad spectrum of yoga classes for beginners to advanced practitioners, including online Zoom sessions and a dedicated e-shop for yoga-related products. The website reflects a professional and user-friendly platform with clear navigation, comprehensive content, and active social media engagement. The business targets yoga enthusiasts in Prague and beyond, emphasizing wellness, relaxation, and physical fitness. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of public WHOIS data suggests privacy protection, which is reasonable for this business type. Overall, the site demonstrates good digital maturity and business credibility.

I

iovox

iovox.com

65

iovox is a technology company specializing in call tracking, analytics, and communication solutions designed to optimize marketing ROI and improve customer journey insights. Established in 2007, the company offers a flexible platform with global coverage and multilingual 24/7 support, targeting businesses seeking to enhance lead generation and operational efficiency. Their services include advanced call tracking, conversational AI, developer APIs, and white label options, positioning them as a competitive player in the telecommunications technology sector. The website demonstrates a professional digital presence with good content quality and user experience. Technically, the site employs modern JavaScript libraries, Bootstrap framework, and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforcement and standard security headers, though lacks explicit published security or incident response policies. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and privacy policies. Overall, the domain WHOIS data is missing or privacy protected, which slightly impacts trust but does not outweigh the professional business presentation and operational indicators.

P

Pivovar Hostivar

pivovar-hostivar.cz

59

Pivovar Hostivar is a well-established Czech brewery and hospitality business operating since 2011. The company runs multiple restaurant locations, a bakery, and hosts cultural events such as concerts and cinema screenings. Their business model combines onsite hospitality services with an e-commerce platform for beer sales, targeting local residents and visitors interested in craft beer and cultural experiences. The website is built on Drupal 10 with modern frontend libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized hospitality enterprise in the Czech Republic.

G

Grand Automotive East Kft.

omodajaecoo-skladem.cz

63

The website omodajaecoo-skladem.cz serves as an online platform showcasing the inventory of Omoda and Jaecoo vehicles available through authorized dealers primarily in the Czech Republic. Operated by Grand Automotive East Kft., the site targets automotive customers seeking new and demo vehicles with immediate availability. The platform facilitates lead generation through inquiry and test drive request forms, supported by a modern technical stack including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA for security. The site demonstrates good content quality, professional design, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and anti-bot measures, though explicit security policies and incident response contacts are absent. WHOIS data presents inconsistencies, notably a future domain creation date, which warrants verification but does not detract from the overall legitimacy of the business presence. Strategic recommendations include enhancing security transparency, adding incident response information, and correcting WHOIS records to improve trust.

S

SK RN Hradec Králové, z. s.

pivnibehy.cz

40

Pivní běhy is a Czech event organizer specializing in a unique series of running races combined with beer tasting and brewery tours. The business targets running enthusiasts, nature lovers, and beer aficionados, offering both adult and children's events with a strong community and cultural focus. The website is professionally designed using WordPress with a modern tech stack including jQuery, Bootstrap, and various tracking tools. While the site is functional and visually appealing, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

H

Hortim-International, spol. s r.o.

vegeland.cz

60

Vegeland is a Czech-based agricultural business specializing in the production and distribution of fresh vegetables sourced from local Czech farms. Operated by Hortim-International, spol. s r.o., a subsidiary of the Hortim Group, the company emphasizes quality, sustainability, and timely delivery. Their operations include modern farming facilities such as Farma Kožichovice and Farma Božice, focusing on high-quality produce with minimal agrochemical use. The website targets both consumers and wholesale/retail businesses, providing contact support and detailed product information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies would enhance trust. The WHOIS data for the domain is unavailable, which limits transparency regarding domain registration details. However, the website content and business information appear consistent and legitimate. Privacy compliance is well addressed with a comprehensive privacy policy linked to the parent company’s site and a clear cookie consent banner. Overall, Vegeland presents a professional and trustworthy online presence for a medium-sized agricultural business with room for improvement in security policy transparency and WHOIS data availability.

H

Hortim-International, spol. s r.o.

frutido.cz

61

Frutido.cz is a Czech Republic based fresh fruit distributor operating under the Hortim group umbrella. The company offers a wide assortment of fruit sourced globally, emphasizing freshness, reliable logistics, and environmentally friendly packaging. Their target audience includes both end consumers and wholesale/retail businesses. The website is built on WordPress and employs modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Google Tag Manager, reflecting a moderate to good level of digital maturity. Security measures include HTTPS enforcement and CAPTCHA protection on contact forms, alongside a GDPR-compliant cookie consent mechanism. However, the absence of explicit security headers and published security policies indicates room for improvement in security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS transparency slightly reduces domain trustworthiness.

A

Abasto s.r.o.

abasto.cz

65

Abasto s.r.o. is a Czech Republic-based medium-sized wholesale distributor specializing in fruits, vegetables, herbs, mushrooms, and other food products. The company targets HoReCa businesses, retail chains, catering services, manufacturing companies, and corporate canteens, positioning itself as a reliable supplier with a broad product range and certified quality standards. The website reflects a professional business presence with clear service offerings, customer references, and contact channels. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data and meta tags. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are missing. The absence of WHOIS data is a notable concern for domain legitimacy, but the overall business credibility remains high based on content and certifications. Strategic recommendations include improving security headers, adding incident response and vulnerability disclosure information, and verifying domain registration details.

H

Hortim-International, spol. s.r.o.

hortim.es

62

Hortim-International, spol. s.r.o. is a medium-sized company specializing in the wholesale and logistics of fresh fruits and vegetables. With over 25 years of market presence, the company offers a comprehensive range of services including importation, cultivation, packaging, storage, ripening, and timely delivery. The business operates internationally with multiple subsidiaries and brands, targeting B2B clients in the fresh produce sector. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery, Bootstrap, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for general audiences.

H

Hortim

hortim.de

68

Hortim is a well-established wholesale company specializing in fresh fruits and vegetables, offering a full range of services from import and cultivation to packing, storage, ripening, and logistics. With over 30 years of market presence and multiple subsidiaries, Hortim holds a strong position in the retail and transportation sectors within Germany and neighboring countries. The website reflects a professional and consistent brand image, supported by certifications and sustainability initiatives. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

H

Hortim-International, spol. s.r.o.

hortim.com

68

Hortim-International, spol. s.r.o. is a medium-sized Czech company specializing in the wholesale distribution and comprehensive services related to fresh fruits and vegetables. With over 30 years of market presence, Hortim operates multiple subsidiaries and premium brands, offering services ranging from import and cultivation to packing, storage, ripening, and logistics. The company targets wholesale buyers, retailers, and logistics partners, positioning itself as a reliable regional player in the fresh produce supply chain. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. The site uses HTTPS and includes cookie consent mechanisms, Google Tag Manager, and Facebook SDK for marketing and tracking purposes. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the presence of certifications and consistent branding supports legitimacy. Overall, Hortim's website is professional and trustworthy with good content quality and privacy compliance. The main risk lies in the lack of publicly available WHOIS data and some missing security headers. Strategic improvements in security policies, contact transparency, and technical hardening are recommended to enhance trust and compliance.

H

Hortim

hortim.sk

64

Hortim is a well-established company specializing in wholesale and farming of fresh fruit and vegetables, with over 30 years of market presence. The company operates a group of five companies and two premium brands, providing end-to-end services including importing, farming, packaging, storage, ripening, and logistics. Their target audience primarily consists of business customers in the fresh produce supply chain. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, and multilingual support via WPML. The site is mobile optimized and SEO friendly, with integration of Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

K

KONTEXT:Wochenzeitung

kontextwochenzeitung.de

47

KONTEXT:Wochenzeitung is an independent, donation-funded weekly newspaper based in Stuttgart, Germany, providing critical and in-depth journalism without advertising. It publishes online every Wednesday and as a print supplement in the national taz weekend edition. The website is built on TYPO3 CMS with a modern, responsive design and integrates privacy-conscious Matomo analytics. The site demonstrates good security hygiene with HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the site is professional, trustworthy, and well-positioned in its niche media market.

T

TELEKO digital, a.s.

teleko.cz

60

TELEKO digital, a.s. is a Czech company specializing in digital and analog radio broadcasting services, operating a network of FM and DAB+ transmitters across the Czech Republic. The company is positioned as a regional leader in digital radio transmission, offering clean sound and a broad program selection to listeners in multiple regions. They also operate an e-commerce platform, PUREradio.cz, selling DAB+ receivers. The website reflects a mature digital presence with modern technologies and a clear focus on their core services. Technically, the site is built on Joomla CMS with Bootstrap and integrates Google Maps for coverage visualization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking published privacy and security policies. Overall, the site is professional and trustworthy, with room for improvement in compliance documentation and security transparency.

Asia Bistro Příbram operates a local restaurant business specializing in Asian cuisine with an online ordering platform. The website provides daily menu selections and ordering options for the upcoming week, targeting local customers in Příbram. The business model is straightforward, focusing on dine-in and takeaway food services with temporarily suspended delivery. The website is modest but functional, reflecting a small local business with limited digital sophistication. Technically, the website uses standard web technologies including Bootstrap for responsive design and jQuery for scripting. Hosting is provided by Websupport, a known Czech hosting provider. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced frameworks or CMS platforms. Performance is moderate with no evident technical debt but opportunities exist for modernization and enhanced user experience. From a security perspective, the site uses HTTPS and includes anti-CSRF tokens in forms, indicating some security awareness. However, no security headers were detected, and there is no visible privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is safe with no adult or questionable content. The domain registration is consistent and appropriate for the business age and location. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

A

Alliance Qualité Photovoltaïque (AQPV)

aqpv.fr

49

The AQPV website represents a professional certification body focused on photovoltaic solar energy companies in France. It provides detailed information about the AQPV certification, its requirements, and lists certified companies with verifiable certificates. The website is built on WordPress with standard technologies and is well-structured for its target audience of project owners and photovoltaic operators. The technical infrastructure is modern but could benefit from enhanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS and reCAPTCHA usage but lacks visible security policies or incident response information. Overall, the site is trustworthy and serves as a credible resource for photovoltaic certification in France.

Ferrero North America operates as a major confectionery company serving the US and Canadian markets with iconic brands such as Ferrero Rocher, Nutella, Tic Tac, and Kinder. The website reflects a mature digital presence with comprehensive brand information, news updates, and social responsibility initiatives. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Tag Manager, hosted likely on Akamai CDN, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved and outdated libraries updated. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and consistent content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

studierendenWERK BERLIN is a large, well-established public service organization dedicated to supporting students in Berlin's universities with a broad range of services including housing, cafeteria (Mensa), financial aid (BAföG), counseling, cultural programs, childcare, and international student support. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to its target audience of students. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates privacy-conscious analytics (Matomo), and employs a consent management platform (Usercentrics) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is privacy protected but consistent with a legitimate entity. Overall, the site demonstrates a mature digital infrastructure and trustworthy business model.

J

Joker Kazino

joker.lv

55

Joker Kazino is an established online casino platform operating primarily in Latvia, offering a variety of popular slot games, jackpots, and bonuses targeted at adult gamblers. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries such as jQuery and Moment.js, Bootstrap for styling, and Google Tag Manager for analytics and marketing integration. Cookie consent is managed through Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages suggests gaps in full regulatory compliance. Security posture is adequate with HTTPS enforced and no WAF blocking detected, but could be improved by adding security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

J

JoomlArt

joomlart.com

57

JoomlArt is a well-established provider of Joomla templates, extensions, and related services with over 19 years of experience and a large customer base exceeding 300,000 members. The company operates multiple top Joomla clubs, offering a comprehensive suite of products including the T4 Page Builder and T4 Framework, targeting Joomla developers and businesses seeking professional website solutions. Technically, the website is built on Joomla CMS with modern frameworks and libraries, optimized for mobile and SEO, and integrates multiple analytics and marketing tools. Security posture is good with HTTPS enforced and secure payment indicators, though explicit security policies and incident response details are lacking. The absence of WHOIS domain registration data is a concern but the website's content quality, branding, and community presence support its legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the Joomla ecosystem.

P

Pivovar Kytín, s.r.o.

pivovarkytin.cz

9

Pivovar Kytín, s.r.o. operates a brewery and restaurant in Kytín, Czech Republic, specializing in traditional Czech beers and cuisine. The business targets beer enthusiasts and local visitors, offering a combination of beer production, dining, events, and accommodation partnerships. The website reflects a small hospitality business with a focus on authentic Czech culinary experiences and craft beer. Technically, the site uses modern web technologies including Next.js, Bootstrap, Google Analytics, and Facebook Pixel, providing a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, which may impact GDPR compliance. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of clear contact information and social media integration supports business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance measures.

I

International Fiscal Association, Česká republika

ifa-cr.cz

55

International Fiscal Association, Česká republika is a non-profit organization serving as the Czech branch of the international IFA. It focuses on tax law education, research, and networking among tax professionals, academics, and government officials. The website provides information about membership, statutes, upcoming events, and contact details. Technically, the site is built on JavaServer Faces with PrimeFaces and uses Matomo for privacy-respecting analytics. Security posture is adequate with HTTPS and session management, but lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy, serving a niche audience in the tax and fiscal law domain.

R

R' La Radiostation

laradiostation.fr

39

R' La Radiostation is a regional French radio station focused on serving mountain vacationers in the Tarentaise area. The website provides radio broadcasting content, news updates in French and English, and weather information relevant to its audience. The business appears to be a small, local media entity with a domain registered since 2004, consistent with its described history. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Elementor, hosted by OVH, and uses HTTPS for secure connections. However, it lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and security best practices. Overall, the site is functional and professionally designed but could improve in privacy compliance and security hardening.

P

PP Soft

elementstore.cz

54

ElementStore.cz is a specialized retailer focused on TREK bicycles and related cycling products including shoes, clothing, accessories, and components. The company operates both an e-commerce platform and physical stores located in Brno and Frýdek-Místek, Czech Republic. They provide professional bike servicing, a test center, and customer support, positioning themselves as a leading TREK dealer in the region. The website is well-structured with rich product listings and blog content targeting cycling enthusiasts. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Smartsupp Live Chat, ensuring a mature digital presence. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy page detected. WHOIS data is unavailable, which slightly impacts trust but does not negate the professional appearance and operational legitimacy of the business. Overall, the website is a reliable and professional platform for cycling products and services in the Czech market.

N

NameCheap, Inc.

onlinehdtube.com

56

OnlineHDTube.com is an adult entertainment video streaming website offering free pornographic videos with an option to upgrade to premium membership. The site targets adults seeking explicit content and features a wide range of videos including categories, pornstars, and channels. Technically, the site is built on the DataLife Engine CMS, uses common web technologies such as jQuery, Bootstrap, and FontAwesome, and is supported by Cloudflare DNS services. While the site is functional and mobile-optimized, it lacks visible privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate with no DNSSEC and missing security headers, though HTTPS usage is implied but not explicitly confirmed in the provided data. The domain is registered with NameCheap since 2021, consistent with the business age and model.

C

Carbon Brief

carbonbrief.org

61

Carbon Brief is a specialized media organization focused on delivering clear, data-driven articles and analysis on climate science, energy, and policy. The website serves a broad audience including the general public, policymakers, researchers, and climate professionals. It maintains a strong market position as an authoritative source for climate-related information, offering a variety of content types such as interviews, explainers, factchecks, and newsletters. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and MailerLite. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates a professional and trustworthy online presence with no indications of malicious activity or content safety concerns.

N

WebPortal

napec-portal.com

47

The website napec-portal.com serves as a login portal for NAPEC, presumably the Nigerian Association of Petroleum Explorationists or a related entity. The portal is designed for members or authorized users to access their profiles and services. The site is built using Angular 14 framework and incorporates Usercentrics for cookie consent management, indicating some attention to privacy compliance. However, the public-facing content is minimal, focusing solely on login functionality without detailed business or contact information. The domain is recently registered in April 2023, consistent with a new portal launch. From a technical perspective, the site uses modern web technologies including Angular and Bootstrap for styling. DNS is managed via Google Domains, and the domain registrar is Squarespace Domains II LLC. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or hosting provider details are explicitly found. Cookie consent is implemented via Usercentrics, but Google Analytics is present only in commented form, indicating limited active tracking. Security posture is moderate but could be improved. HTTPS is implied but no explicit security headers such as CSP, HSTS, or X-Frame-Options are detected in the HTML content. The login form lacks visible anti-CSRF tokens or advanced input security measures. No privacy policy, terms of service, or incident response contacts are published, which limits compliance and user trust. The domain registration is consistent and shows no suspicious patterns, but the lack of detailed business information and security policies reduces overall trustworthiness. Overall, the website is functional as a login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy documentation, and contact information publication are recommended to enhance trust and compliance.

F

Fastest Solution s.r.o.

diplomkyaseminarky.cz

64

The website www.diplomkyaseminarky.cz is operated by Fastest Solution s.r.o. and offers academic writing services including bachelor, diploma, seminar, year-end, MBA, and final theses. The service targets students seeking professional assistance with their academic papers, emphasizing speed, discretion, and quality. The site positions itself as a trusted local provider with over 2,500 satisfied clients and a team of experienced processors. Technically, the website uses modern web technologies including Bootstrap, AWS services, Google Analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and employs HTTPS with security headers, reflecting a good security posture. However, the absence of WHOIS data and explicit privacy policy pages slightly reduce trust and compliance scores. Overall, the site is professional, secure, and compliant with cookie consent regulations but could improve transparency and contact options.

I

ISSA CZECH s.r.o.

cloverleaf.cz

57

Jazyková škola Cloverleaf Ostrava is a well-established language school operating since 1993, offering a wide range of language courses including English, Cambridge exam preparation, e-learning, and specialized courses for children, youth, and corporate clients. The school positions itself as the largest language school in the Ostrava region with a strong focus on quality teaching, modern facilities, and professional staff. The website reflects a mature digital presence with clear navigation, responsive design, and comprehensive content tailored to its target audience of students and professionals seeking language education. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for analytics, and Facebook Pixel for marketing. Cookie consent is implemented with express consent and granular preference management, demonstrating good privacy compliance. Hosting is managed by REG-ZONER, a reputable Czech registrar and hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit HTTP security headers and does not provide a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain's WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen security posture and user trust.

E

Emerson Electric Co.

emersonexchange.org

72

Emerson Exchange is a professional conference and user community platform operated by Emerson Electric Co., a large enterprise in the energy and manufacturing sectors. The website serves as a hub for process manufacturers, end users, and automation experts to learn, share, and network through in-person and virtual events. The platform is well-branded and positioned as an industry-leading technical conference with a strong focus on industrial innovation and automation solutions. Technically, the website employs modern web technologies including Bootstrap, CoreMedia CMS, and integrates marketing and analytics tools such as Google Tag Manager, LinkedIn Insight, and Drift chat. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. Security posture is strong with HTTPS enforced and privacy compliance evident through comprehensive privacy and cookie policies with consent mechanisms. However, no explicit security policy or incident response contacts are published, and WHOIS data is unavailable, likely due to privacy or registry restrictions. Overall, the site is trustworthy and professionally maintained, supporting Emerson's market position as a leader in automation solutions.

M

Mobil

mobil.it

70

Mobil Italy operates as a regional branch of ExxonMobil, focusing on the distribution and marketing of automotive lubricants and related products such as Mobil 1™ motor oils. The website serves both consumers and automotive professionals by providing product information, maintenance advice, and purchase location services. The site is well-branded, consistent with ExxonMobil's global identity, and targets the Italian automotive market. Technically, the website is built on modern frameworks including Bootstrap and Sitecore CMS, hosted on AWS infrastructure, and integrates advanced analytics and consent management tools. Security posture is strong with HTTPS enforcement, comprehensive Content Security Policy, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Mobil

mobil.eu

72

Mobil.eu is a professionally maintained website representing Mobil, a globally recognized brand under ExxonMobil specializing in industrial lubricants, oils, and greases. The site targets business and industrial clients, offering a comprehensive range of synthetic and mineral lubrication products tailored to various industrial applications. The website demonstrates strong branding consistency and high content quality, reflecting the enterprise-level stature of the company. Technically, the site leverages modern web technologies including Sitecore CMS, AWS hosting, and integrates advanced analytics and marketing tools such as Google Tag Manager and OneTrust for privacy compliance. Security posture is robust with strict Content Security Policies and HTTPS enforcement, although some improvements could be made to reduce reliance on unsafe inline scripts and to publish explicit security policies. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the domain and website present a trustworthy and professional digital presence consistent with a major energy sector enterprise.

E

Esso

esso.no

73

Esso Norway operates a network of energy stations offering fuel, electric vehicle charging, car wash, coffee subscriptions, and convenience food/snacks. The website is professionally designed, targeting general consumers in Norway, and is part of the ExxonMobil corporate family. The technical infrastructure leverages modern technologies including AWS hosting, Sitecore CMS, and integrates multiple third-party marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS enforced and comprehensive security headers implemented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or suspicious indicators were found. Overall, the website reflects a mature digital presence consistent with a large multinational energy retailer.

E

Esso

esso.nl

71

Esso Netherlands operates as a major fuel retail brand under the ExxonMobil umbrella, providing fuel stations, motor oils, payment cards, and loyalty programs targeted at consumers and businesses in the Netherlands. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. The technical infrastructure leverages Sitecore CMS, AWS hosting, and integrates multiple third-party services including OneTrust for cookie consent, Google Analytics, and various mapping and video platforms. Security posture is strong with HTTPS enforcement, comprehensive Content Security Policy, and cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in the energy retail market.

N

National Instruments

ni.com

74

National Instruments (NI) is a leading enterprise in the technology sector specializing in software-connected automated test and measurement systems. As part of Emerson, NI holds a strong market position providing hardware and software solutions primarily targeting engineers and industrial automation professionals. The website reflects a mature digital presence with comprehensive content, professional design, and clear branding consistent with a large enterprise. The business model focuses on B2B sales of test systems and measurement instruments, supporting sectors such as manufacturing and transportation. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, JavaScript frameworks, and advanced analytics and consent management tools like Dynatrace and OneTrust. The site is mobile optimized, accessible, and SEO friendly, indicating a high level of digital maturity. Performance is moderate with good security configurations including HTTPS and security headers. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly disclosed, which could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high credibility and trustworthiness. The lack of public WHOIS data is due to privacy protection, which is justified for an enterprise of this scale. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.

S

Softweb.cz

softweb.cz

10

Softweb.cz is a small Czech technology company specializing in custom web and software development, with over 10 years of experience. Their services include responsive website creation using WordPress, bespoke software development, website management, technical audits, and SEO optimization. The company emphasizes individual client attention and quality customer service, positioning itself as a trusted provider in the Czech market. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for privacy compliance. It uses Google Analytics for tracking and Google reCAPTCHA for form security. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS and consent mechanisms, though HTTP security headers are not detected and no explicit security or incident response policies are published. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy with room for improvement in security headers and domain registration transparency.