Security Directory

П

Проект МОЛЬФАР ГО "МОЛЬФАР"

molfar.org

59

Проект МОЛЬФАР ГО "МОЛЬФАР" є неприбутковою волонтерською організацією, що підтримує Збройні Сили України та їх сім'ї через збір коштів, надання матеріальної та моральної допомоги, а також розвиток освітніх і культурних ініціатив. Організація має стабільну позицію на ринку волонтерської підтримки, з довірою серед військових та меценатів, що підтверджується 11-річним досвідом та активною діяльністю. Технічно сайт побудований на WordPress з використанням сучасних технологій, таких як jQuery та Google Fonts, а також інтеграцією платіжної системи LiqPay для збору пожертв. Сайт має добру мобільну оптимізацію та SEO, хоча є можливості для покращення доступності та впровадження додаткових безпекових заходів. З точки зору безпеки, сайт використовує HTTPS, має домен з захистом від трансферу, але не використовує DNSSEC і не має публічних політик безпеки чи контактів для інцидентів. Відсутність cookie consent та політики конфіденційності з GDPR-комплаєнсом є недоліками. Загальний ризик сайту є помірним, з високою довірою до бізнесу, але з потенціалом для покращення у сфері безпеки та приватності. Рекомендується впровадити додаткові заходи безпеки, публікувати політики безпеки та інцидентів, а також забезпечити відповідність GDPR.

M

Medical battalion "Hospitallers"

hospitallers.life

51

The Medical Battalion "Hospitallers" is a Ukrainian volunteer paramedic organization founded in 2014 by Yana Zinkevich. It operates on the front lines providing first aid, evacuation, and rehabilitation support to wounded individuals during the ongoing conflict in Ukraine. The organization relies heavily on charitable donations and volunteer efforts, with a strong presence across multiple donation platforms including bank transfers, PayPal, and cryptocurrencies. Their mission is encapsulated in the slogan "For the sake of every life." The website serves as a hub for information, fundraising, and volunteer recruitment, targeting donors and supporters globally. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Google Tag Manager, and Weglot for multilingual support. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features are basic, and SEO is adequately implemented. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several important security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data for the domain is malformed and unavailable, which slightly reduces trust in domain legitimacy. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and professional platform for a small non-profit healthcare organization, with room for improvement in privacy compliance and security best practices. The lack of WHOIS transparency is a concern but is mitigated by the organization's visible operational history and social media presence.

D

DeConf.com

deconf.com

58

DeConf.com is a niche technology website specializing in WordPress plugins and Joomla extensions, with a strong focus on analytics insights and SEO tutorials. The site targets website owners, developers, and digital marketers seeking tools and knowledge to improve website performance and analytics. The business operates on a content and software distribution model, supported by advertising and subscription updates. Technically, the site is built on WordPress using the Genesis Framework, integrates Google Analytics and Jetpack, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain registration consistent with the business age, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and provides valuable content to its audience.

S

SEIGI

seigi.eu

44

SEIGI is a specialized technology company focused on developing and selling modules and integrations for PrestaShop and thirty bees e-commerce platforms. Their website offers a variety of extensions aimed at enhancing online store functionality and marketing capabilities. The company targets e-commerce store owners seeking to improve their platform capabilities through specialized software modules. Technically, the website employs a mature but somewhat dated technology stack including Bootstrap 3 and jQuery 1.7, supplemented by modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Matomo. While the site is well-structured and mobile-optimized, it lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and use of outdated libraries present potential risks. Overall, SEIGI appears to be a legitimate small technology business with a focused market niche, but should improve privacy compliance and update technical components to enhance security and trust.

D

Deutscher Verband für Wohnungswesen, Städtebau und Raumordnung e.V.

netzwerk-quartier.de

57

The website 'Gemeinsam für das Quartier' is a German government-funded initiative focused on fostering partnerships and cooperative urban development in neighborhoods, city centers, rural areas, and small towns. It is managed by the Deutscher Verband für Wohnungswesen, Städtebau und Raumordnung e.V. and STADT ALS CAMPUS e.V., with funding from the Federal Ministry for Housing, Urban Development and Building. The site serves as a platform for networking, knowledge exchange, and organizing workshops to promote community-oriented city development. Technically, the site is built on the Webflow CMS platform, uses modern web technologies like Google Fonts and jQuery, and is hosted on a performant CDN. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with no signs of malicious activity or suspicious content.

E

Evangelisch-Lutherische Kirche in Norddeutschland

nordkirche.de

61

The Evangelisch-Lutherische Kirche in Norddeutschland (Nordkirche) operates as a large non-profit religious organization serving the regions of Hamburg, Schleswig-Holstein, and Mecklenburg-Vorpommern in Germany. The website provides comprehensive information about their religious services, community engagement, pastoral care, and digital initiatives. It targets Christians and residents in Northern Germany, positioning itself as a leading regional Protestant church organization. The content is well-structured, professionally designed, and consistent with the organization's mission and audience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with good mobile optimization and accessibility features. SEO practices are well implemented, including meta tags, Open Graph, and JSON-LD structured data. The site uses Piwik (Matomo) for analytics, indicating moderate user tracking with basic privacy compliance. No blocking or WAF challenges were detected, and the site is fully accessible. From a security perspective, HTTPS is implied though explicit security headers are not detected in the provided data. No exposed sensitive data or vulnerabilities were found in the HTML content. However, the site lacks explicit security policies and incident response information. Privacy compliance is good with a detailed privacy policy but lacks a cookie consent mechanism. Contact information is clearly provided, enhancing trust and credibility. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Security posture is adequate but could be improved with enhanced headers and documented policies. Privacy compliance is mostly met but would benefit from explicit cookie consent. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

S

Stand For Ukraine

standforukraine.com

57

Stand For Ukraine is a non-profit donation aggregator website founded in 2022 to support Ukraine amid Russian military aggression. It provides a curated list of verified military and humanitarian organizations, facilitating donations through direct links. The platform targets a global audience of supporters and donors, offering multilingual support and clear categorization of aid organizations. The website is built on modern technologies including React and Next.js, hosted with Cloudflare DNS, and optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to an email address and social media links. Overall, the site is trustworthy, professional, and serves a critical humanitarian function.

P

Polar Multimedia

polarmultimedia.cz

55

Polar Multimedia is a Czech Republic-based multimedia company specializing in a broad range of services including TV program and video production, multimedia projects, 3D virtual studios, live broadcasts, graphics and animations, virtual reality, web and application development, event organization, and broadcasting of TV stations including their own station POLAR. The company targets businesses and organizations seeking integrated multimedia solutions and broadcasting services. Their market position appears regional with a focus on comprehensive multimedia offerings. Technically, the website is built on WordPress CMS using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google services like Google Analytics and Tag Manager. The site is mobile optimized and uses HTTPS with good SSL configuration. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities in the visible content, but the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The lack of WHOIS data limits domain legitimacy verification, though the professional website and active social media presence support the company's credibility. Overall, the website is professional and functional with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

L

Lead Media s.r.o.

dognet.sk

45

Dognet.sk operates as a leading affiliate marketing network focused on the Central and Eastern European and Balkan markets. The company, legally known as Lead Media s.r.o., has been active for over 13 years, providing performance-based marketing services primarily to e-commerce businesses and publishers. Their business model is based on CPA, ensuring advertisers pay only for real business outcomes. The website is professionally designed, multilingual, and rich in content, showcasing strong client testimonials and trust signals such as high Google and Facebook ratings. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance with GDPR.

P

Projekt Podpora Turistického regionu Jizerské hory

jizerky.cz

65

The website www.jizerky.cz serves as a comprehensive regional tourism portal dedicated to the Jizerské hory mountain region in the Czech Republic. It provides visitors with rich content including travel tips, activities, accommodation, gastronomy, and up-to-date news, targeting families, tourists, and outdoor enthusiasts. The site is supported by regional and national government entities, enhancing its credibility and market position as a trusted source for regional tourism information. Technically, the site is built on the Webflow platform, leveraging modern web technologies such as GSAP for animations, Google Tag Manager for analytics, and Stripe for secure payment processing. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs a cookie consent mechanism compliant with GDPR, and integrates secure third-party services. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious elements were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in security documentation and contact transparency would further strengthen its trustworthiness and user confidence.

A

Agência MKP

agenciamkp.com.br

43

Agência MKP is a small Brazilian digital marketing agency specializing in website creation, paid traffic management, social media management, and graphic design services. With over 10 years of market presence, the company targets businesses and entrepreneurs primarily in Piracicaba, Brazil. Their website is professionally designed using WordPress and integrates modern marketing tools such as Google Ads and Google Analytics. The technical infrastructure is solid, hosted on a Brazilian hosting provider with responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies are lacking. Privacy compliance is basic, with no visible privacy policy or terms of service on the main site. Overall, the website is trustworthy and functional but could improve transparency and security documentation.

C

Chetty.ai

chetty.ai

59

Chetty.ai is a small technology startup founded in 2023 that offers an AI chatbot platform enabling businesses and website owners to automate communication. Their services include customizable AI web chatbots, design and script customization, knowledge base integration, Whatsapp live chat integration, and embedding ChatGPT into websites. The company positions itself as a niche provider in the AI chatbot automation market. Technically, the website is built on the Bubble.io platform, using modern JavaScript libraries and Google Fonts, with moderate performance and basic mobile optimization. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak with no visible privacy or cookie policies and no contact information. Overall, the website is functional but lacks comprehensive legal and security disclosures, which impacts trust and compliance scores.

A

ARR - Agentura regionálního rozvoje, spol. s r.o.

crystalvalley.cz

48

Crystal Valley is a regional tourism and cultural heritage platform operated by ARR - Agentura regionálního rozvoje, spol. s r.o., focusing on promoting the glass and jewelry manufacturing traditions of northern Czech Republic. The website serves tourists and cultural enthusiasts by providing rich historical content, event calendars, and visitor information about glass production, museums, and artisan workshops. It holds a strong market position as a regional cultural tourism leader in the Liberec region. Technically, the site employs modern web technologies including jQuery, Bootstrap, Vue.js, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious WHOIS patterns were found, and the domain registration aligns well with the business purpose and history. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

V

Via Czechia

viaczechia.cz

59

Via Czechia operates as a specialized outdoor tourism platform offering a comprehensive network of long-distance hiking, cycling, and skiing trails across the Czech Republic. The website serves as an information hub providing detailed trail descriptions, itineraries, maps, guidebooks, and related merchandise. It targets outdoor enthusiasts and tourists interested in exploring Czech landscapes through various activities. The business model revolves around content provision, publishing, and community engagement via social media and mobile applications. Technically, the website is built on WordPress using the Twenty Seventeen theme, leveraging common web technologies such as jQuery, Google Fonts, and Google Analytics. It integrates contact forms secured with Google reCAPTCHA and supports multilingual access via GTranslate. Hosting is provided by Active24, a Czech registrar, aligning with the website's regional focus. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. However, it lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are absent. No critical vulnerabilities or exposed sensitive data were detected. Overall, Via Czechia presents a trustworthy, professionally maintained platform with rich content and a clear business focus. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance its security posture and compliance. The domain registration data supports the legitimacy and consistency of the business operations.

E

Best places to Visit in Europe - Europe's Best Destinations

europeanbestdestinations.com

61

The website europeanbestdestinations.com serves as a travel inspiration platform focused on showcasing the best places to visit in Europe. It provides thematic rankings based on traveler votes, targeting tourists and travel enthusiasts interested in European destinations. The site is built using the Jimdo Creator CMS and incorporates common web technologies such as jQuery, Google Fonts, FontAwesome, and integrates advertising and tracking tools like Google Adsense and Facebook Pixel. The technical infrastructure is moderate in performance with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS registrant data raises concerns about domain legitimacy and ownership transparency. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer business and privacy disclosures.

F

Feelmountains

feelmountains.pl

51

Feelmountains is a small Polish company specializing in organizing mountain biking and trekking trips with full technical support. Their offerings target individuals, groups, and corporate clients seeking active outdoor experiences primarily in Poland and nearby European regions such as the Czech Republic and Morocco. The website is professionally designed using the Webflow platform, featuring modern technologies like Google Tag Manager and jQuery. It provides clear navigation, relevant content, and multiple contact channels, including a contact form, phone numbers, and email addresses. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness but the overall business credibility remains high based on website content and contact transparency.

_

__STROY

stroystudio.com

46

The website stroystudio.com represents __STROY, a small visual design studio based in Liberec, Czech Republic, founded in 2016. The company offers a range of creative services including corporate identity, logos, posters, websites, projections, videos, and motion graphics. The site targets a general audience interested in visual design services and positions itself as a local/regional creative agency. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, Vue.js, and Google Fonts, hosted on Active24 infrastructure. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

K

Koloo

koloo.cz

44

Koloo is a Czech-based marketing technology company offering a widget/plugin designed to increase conversions and sales for e-commerce and local business websites. The company targets small to medium-sized businesses such as online shops, cafes, restaurants, and service providers. Their business model is subscription-based SaaS with tiered pricing plans and a free demo option. The website is professionally designed, content-rich, and provides clear information about services, pricing, and customer testimonials, establishing a credible market presence since 2014. Technically, the website employs a modern tech stack including jQuery, Google Fonts, Google Analytics, Facebook Pixel, Smartlook, and Google reCAPTCHA for security. The site is HTTPS secured with a valid SSL certificate and demonstrates good mobile responsiveness and SEO practices. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and form validation but could enhance its posture by implementing additional HTTP security headers and a security.txt file. The absence of WHOIS data limits domain trust verification, though the website content and business information are consistent and professional. Overall, Koloo presents a trustworthy and functional marketing tool website with moderate technical sophistication and a solid business foundation. Strategic improvements in security headers and privacy compliance would further strengthen its security posture and regulatory adherence.

E

EDU LK

edulk.cz

56

EDULK.cz is an established regional educational and informational portal serving the Liberecký kraj region in the Czech Republic. Founded in 2010, it provides comprehensive resources for schools, educators, students, and parents including news, school directories, event calendars, job listings, and educational projects. The portal is co-financed by the European Social Fund and the Czech state budget, indicating a strong governmental affiliation and trustworthiness. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery and Google Tag Manager for analytics. The site is mobile optimized, accessible, and SEO friendly with good content quality and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site demonstrates a mature digital presence with a focus on regional educational support.

Hejkal is a small local business based in Havlíčkův Brod, Czech Republic, operating a café, grocery store, publishing house, and organizing an annual autumn book fair. The website serves as an informational portal for these services, targeting local customers and visitors interested in cultural events and retail offerings. The business model combines hospitality, retail, and media/publishing sectors, positioning itself as a community hub for food, books, and events. Technically, the website is built on WordPress 4.9.28 using the Twenty Seventeen theme, with jQuery 1.12.4 and Google Fonts integration. The site is accessible over HTTPS, but lacks modern security headers and uses outdated libraries, indicating moderate digital maturity. Mobile optimization and accessibility are basic, with room for improvement in SEO and user experience. Security posture is moderate with HTTPS enabled but missing key security headers and no visible vulnerability disclosures or incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies, which is a compliance risk under GDPR. Contact information is clearly presented, enhancing business credibility despite the lack of WHOIS transparency. Overall, the website is functional and serves its purpose for a small local business but requires updates in security, privacy compliance, and technical modernization to improve trust and resilience.

Podzvičinsko, z. s. operates the website www.podkrkonosi.eu as a regional tourism portal for the Podkrkonoší area in the Czech Republic. The site provides visitors with information on local events, attractions, and cultural highlights, targeting tourists and regional visitors. The business model focuses on promoting tourism and supporting local cultural and recreational activities. The website is well-branded and consistent, with clear contact information and partnerships with regional and governmental organizations, indicating a credible and established presence. Technically, the website employs a moderate technology stack including jQuery 1.10.2, Bootstrap 4.4.1, Google Maps API, and Font Awesome. It is mobile-optimized and uses HTTPS, but lacks some modern security headers and uses an outdated jQuery version, which could pose security risks. Performance is moderate, and SEO and accessibility are basic but functional. Security posture is generally good with HTTPS enforced, but the absence of security headers and outdated libraries suggest room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable compliance gap. No incident response or vulnerability disclosure information is present. Overall, the website is safe, professional, and trustworthy for general audiences, with no adult or questionable content. The domain WHOIS data is unavailable or privacy protected, but the website content and partner affiliations support legitimacy. Strategic recommendations include adding privacy and cookie policies, updating libraries, and implementing security headers to enhance security and compliance.

D

Dativery

dativery.com

55

Dativery is a technology company specializing in business application integrations and automation solutions, primarily serving e-commerce and accounting sectors. Their platform connects various applications such as e-shops, payment gateways, and accounting software to streamline business processes and reduce operational costs. The website presents a professional and modern interface, indicating a mature digital presence with a focus on usability and clear service offerings. Technically, the site is built on WordPress using the Bricks Builder theme and employs Matomo for analytics, reflecting a commitment to privacy-conscious tracking. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registration data is a concern for domain legitimacy, but the overall business presentation and service portfolio indicate a credible operation. Strategic recommendations include enhancing transparency with privacy and cookie policies, adding security headers, and verifying domain registration details to bolster trust.

W

wisecode srl unipersonale

histats.com

66

Histats.com is a web analytics and hit counter service provider offering free and professional visitor tracking tools primarily targeted at website owners and webmasters. The company, identified as wisecode srl unipersonale, has been operating since 2005 and provides a variety of services including real-time stats, log analysis, and geolocation tracking. The website is monetized through advertising networks and integrates multiple third-party ad and tracking services. Technically, the site uses modern JavaScript libraries such as jQuery and Lodash, Google Fonts, and Google Analytics, with a basic but functional mobile experience. Security posture is good with HTTPS enforced and a GDPR-compliant consent management platform in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy.

The website dopravniinfo.gov.cz serves as the official traffic information portal for the Czech Republic, operated by the Ředitelství silnic a dálnic ČR (Road and Motorway Directorate). It provides real-time updates on traffic conditions, accidents, road closures, and other relevant transportation data, targeting the general public and road users within the country. The platform integrates advanced mapping technologies and fleet vehicle data to offer accurate and timely traffic insights. Technically, the site employs modern web technologies including React and Material-UI, ensuring a responsive and user-friendly experience across devices. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and explicit security policies, which are areas for improvement. The absence of WHOIS data is notable but likely due to registry policies for government domains. Overall, the site is trustworthy, professional, and serves a critical public function with moderate technical maturity and a good security posture.

D

Droptop GmbH

linevast.de

41

Linevast Hosting, operated by Droptop GmbH since 2013, is a German-based web hosting provider offering a range of services including web hosting, managed servers, domain registration, and various add-ons such as Redis and Elasticsearch. The company emphasizes quality, reliability, and personalized customer service, supported by an ISO 27001 certified data center. Their market position is that of a trusted, small-sized technology provider focused on the German market. Technically, the website uses modern web technologies including Bootstrap, jQuery, and FontAwesome, with Cloudflare DNS services. The site is mobile-optimized and well-structured, though it lacks a CMS and advanced analytics tools. Security posture is strong with ISO certification and HTTPS, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is good, with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

M

Městská knihovna v Praze

mlp.cz

55

Městská knihovna v Praze operates as a major public library serving the city of Prague, offering a wide range of cultural and educational services including lending books, music, films, and artworks, as well as hosting cultural events and providing free e-book downloads. The website is professionally designed, multilingual, and provides user account functionality. Technically, the site uses established JavaScript libraries and APIs, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks some advanced security headers and uses an outdated jQuery version. WHOIS data is unavailable, which slightly impacts trust but the official city affiliation and professional presentation support legitimacy. Overall, the site is a reliable public service portal with room for security and technical improvements.

C

CzechTourism

czechtourism.cz

63

CzechTourism is the official national tourism organization of the Czech Republic, focused on promoting the country as a travel destination through various marketing activities and projects. The website serves as a digital platform to communicate these efforts to tourists and industry stakeholders. Technically, the site employs modern frontend technologies such as Vue.js and integrates Google services like Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and reCAPTCHA usage, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site appears trustworthy and professional, but the absence of WHOIS data and privacy documentation slightly reduces confidence.

N

Next analytica

nextanalytica.io

62

Next analytica is a Czech-based technology company specializing in server-side tracking solutions designed to enhance marketing campaign performance by increasing data accuracy and speed. Their offerings include proprietary server-side analytics products, Looker Studio reporting, margin import tools, and web analytics consulting. The company targets marketing professionals, e-commerce platforms, and agencies, positioning itself as a trusted provider with a strong regional presence and a medium-sized team of experts. Technically, the website is built on Webflow CMS, leveraging modern cloud infrastructure primarily hosted on Microsoft Azure and AWS, with integrations to Google Tag Manager, Facebook Pixel, and other marketing tools. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, provides cookie consent mechanisms compliant with GDPR, and uses server-side tracking to improve data control. However, it lacks explicit security headers and published incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in security transparency and accessibility.

Q

QCM

qcm.cz

66

QCM is a Czech Republic-based IT company specializing in digital solutions for public procurement management and electronic communication. Established in 2001, it has developed a suite of software products and services used by major public institutions and private entities involved in public procurement. The company offers products such as E-ZAK, PVU, Qlex, and Portál dodavatele, alongside training, administration, and legal advisory services. Their market position is strong within the Czech public sector, supported by a medium-sized team and a large client base exceeding 15,700 users. Technically, the website is built on modern web technologies including JavaScript frameworks, Google Fonts, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, fast-loading, and uses HTTPS with reCAPTCHA for form security. The CMS appears to be Puxdesign, indicating a custom or specialized platform. SEO and accessibility are well implemented, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS and uses standard security measures such as CAPTCHA and cookie consent banners. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear GDPR policy and cookie management. Overall, QCM presents a trustworthy and professional online presence with a mature business model focused on government digitalization. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

M

MJM agro, a. s.

mjm.cz

68

MJM agro, a. s. is a Czech agricultural company established in 1997, specializing in precision agriculture systems such as Prefarm, along with a broad portfolio of agricultural products including crop protection agents, fertilizers, seeds, animal feed, and energy products. The company serves agricultural enterprises, farms, and small growers, positioning itself as a reliable partner in the agricultural sector. It is part of the Reticulum Holding group, indicating a stable corporate structure. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, and Cookiebot for cookie consent management. It uses Google Analytics and Seznam.cz retargeting for marketing and analytics purposes. The site is mobile responsive and has good SEO practices, although some accessibility features could be enhanced. Security-wise, HTTPS is enforced and reCAPTCHA is used for bot protection, but the absence of security headers and outdated JavaScript libraries suggest room for improvement. The security posture is solid but not exemplary, with no critical vulnerabilities detected in the visible content. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policy documentation. However, the lack of WHOIS data for the domain reduces trust slightly, although the website content and business information appear legitimate and professional. Overall, MJM agro's website is a well-structured, professional platform that effectively supports its business objectives. Strategic improvements in security headers, updated libraries, and enhanced accessibility would further strengthen its digital maturity and trustworthiness.

Imki is a French technology company specializing in augmented creative AI solutions tailored for the luxury and fashion industries. The company offers bespoke AI tools that integrate brand DNA and product attributes to accelerate and enhance the creative process, reducing time to market and minimizing waste. Imki has established partnerships with notable brands such as The Kooples, Jonak, and Turkish industrial leaders in denim manufacturing, positioning itself as an innovator in its niche market. The website reflects a professional and modern digital presence built on WordPress, with strong SEO and accessibility features, and multimedia content showcasing use cases and collaborations. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies are absent. Overall, Imki demonstrates a mature digital infrastructure and credible business model with good compliance to privacy regulations.

K

Kipaş Textiles

kipastextiles.com

62

Kipaş Textiles is a large-scale textile manufacturing company based in Turkey, operating as a subsidiary of Kipaş Holding. The company boasts the largest fully integrated textile production facility in Europe, offering a wide range of products including yarns, fashion textiles, deco, technical textiles, and fiber production. The website reflects a professional corporate presence with clear segmentation of business areas and a focus on B2B clients in the textile industry. Technically, the website is built on WordPress using the Enfold theme, with standard modern web technologies and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of cookie and KVKK policies but no active consent mechanism. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

O

Operátor ICT, a.s.

pidlitacka.cz

60

Operátor ICT, a.s. operates the Lítačka e-shop and smart card system for public transportation in Prague and the Central-Bohemian Region. The website serves as a comprehensive platform for purchasing tickets, ordering smart cards, and accessing travel information. It is well integrated with official city and regional transport authorities, reflecting a strong market position in the regional transportation sector. The target audience includes residents, students, seniors, and tourists who use public transport services. Technically, the website is built on modern frameworks such as Next.js and React, with a backend CMS powered by Strapi, and assets served via Azure CDN. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and a public security policy is absent. Privacy compliance is generally good with a clear privacy policy and terms of service, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and operational needs.

The website 'Gib Antikommunismus keine Chance' is a German-language political initiative advocating for a factual discussion about socialism and communism, opposing modern anti-communism. It operates as a non-profit campaign platform providing informational content, public calls to action, and a signature collection mechanism. The site targets politically engaged individuals interested in leftist political discourse. Technically, the site is built on WordPress 5.5.17 with standard plugins and libraries such as jQuery and Font Awesome, hosted on German nameservers consistent with the domain's origin. The website is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit privacy compliance mechanisms. No advertising or tracking technologies are present, indicating a privacy-conscious approach. WHOIS data is transparent and consistent with the website's claims, enhancing legitimacy. Overall, the site is functional and trustworthy but would benefit from improved privacy compliance and security hardening.

W

white label eCommerce

the-white-label.com

61

white label eCommerce is a small German-based company specializing in providing white label ticketing and e-commerce software solutions. Their platform targets businesses and organizations seeking independent and modern ticketing and e-commerce capabilities under their own brand. The website is built on WordPress using modern technologies such as Bootstrap, Font Awesome, and Visual Composer, indicating a moderate level of digital maturity. SEO and marketing tools like Yoast SEO and Google Tag Manager are implemented to enhance visibility and user engagement. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

T

Tinycc

tinycc.com

69

Tinycc is a well-established URL shortening and link management service founded in 2004, offering branded short URLs, retargeting pixels, analytics, and custom domain management to marketing professionals and businesses. The company positions itself as a reliable and feature-rich platform with a strong client base including notable brands. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Bing Ads tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, Tinycc demonstrates a mature digital presence with high trustworthiness and professional content.

Imki is a French technology company specializing in augmented creative AI solutions tailored for the luxury and fashion industries. Their bespoke AI tools integrate brand DNA to accelerate creative processes and product development, helping brands reduce time to market and minimize waste. The company is positioned as an innovative leader with recognized partnerships and awards, including the CES Innovation Award. Technically, the website is built on WordPress with modern plugins and scripts, hosted on AWS infrastructure, and demonstrates good SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS, secure hosting, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, Imki presents a professional, trustworthy, and compliant digital presence aligned with its business goals.

AlwaysInDemand.com is a specialized educational and career awareness platform focused on promoting HVAC industry careers and providing scholarship opportunities through the HVAC HERO Scholarship program. The website is operated by the EGIA Foundation, a non-profit entity, and targets students and individuals interested in entering the HVAC trade. The platform offers resources, a trade school directory, and scholarship application information, positioning itself as a niche resource in the energy and education sectors. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Google Analytics, and Facebook Pixel for tracking and analytics. Hosting appears to be on Amazon AWS infrastructure, indicated by the DNS servers. The site is mobile optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, it lacks DNSSEC and security headers like CSP or HSTS, which are recommended for enhanced security. No privacy or cookie policies are explicitly presented, and no consent mechanisms are detected, which may pose compliance risks. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is professionally designed and trustworthy with moderate security posture and some compliance gaps. Strategic improvements in privacy policy publication, cookie consent, and security header implementation would enhance the site's security and compliance standing.

HVAC Distributor University is a specialized educational platform launched in late 2024, focused on providing training and development resources for HVAC distributors and their sales teams. The platform offers a variety of services including online courses, live training sessions, resource libraries, and membership packages. It is affiliated with EGIA, a recognized industry association, which enhances its credibility and market positioning. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. Technically, the site is built on WordPress, hosted by Nexcess, and uses modern web technologies such as jQuery and FontAwesome. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced, but the absence of DNSSEC and security headers slightly reduces the overall security score. Privacy compliance is partial; a comprehensive privacy policy is linked but no cookie consent mechanism is present. Contact information is clearly provided, including phone, email, and physical address, supporting business credibility. Overall, the website presents a trustworthy and professional front for its business model, with minor technical and compliance enhancements recommended.

S

SWISS ELEMENTIC

swisselementic.com

56

SWISS ELEMENTIC operates an innovative Drive-in Boatwash service in Switzerland, offering boat hull cleaning up to 16 meters in length directly in the water. The company positions itself as a pioneer in the Swiss market with a focus on ecological and efficient boat maintenance, reducing the need for harmful antifouling paints and improving fuel efficiency. Their business model includes direct service offerings with booking and subscription options, targeting boat owners seeking convenient and environmentally friendly cleaning solutions. The website is professionally designed using WordPress with modern page builders and includes multilingual support, social media integration, and a cookie consent mechanism, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. No privacy policy or terms of service documents were found, which is a compliance gap. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy.

EGIA is a well-established organization founded in 2003, specializing in contractor training, financing solutions, utility services, and nonprofit workforce development within the HVAC and energy sectors. The company operates multiple subsidiary platforms including Contractor University, HVAC Distributor University, OPTIMUS Financing, and the EGIA Foundation, positioning itself as a comprehensive service provider in its industry. The website reflects a mature digital presence with consistent branding and clear navigation aimed at contractors, distributors, manufacturers, and utility partners. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies and providing a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences, with a strong business credibility score.

G

Gorgias

gorgias.help

67

Gorgias is a technology company specializing in conversational AI platforms tailored for ecommerce businesses. Their platform integrates AI agents, helpdesk solutions, chat, and FAQ automation to enhance customer support and drive sales. Positioned as a leading solution trusted by over 15,000 brands, Gorgias targets ecommerce merchants seeking to automate and improve customer interactions. The website reflects a mature digital presence with professional design, clear messaging, and extensive use of modern marketing and analytics technologies. The technical infrastructure leverages Webflow CMS, Google Analytics, Amplitude, Facebook Pixel, and advanced A/B testing tools like VWO, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and technology use. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance transparency and trust.

DIGITALECUADOR CIA LTDA is a small Ecuadorian technology company specializing in domain registration, web hosting, DNS server management, and web design services. The website targets individuals and businesses within Ecuador, offering localized services primarily through a WHMCS-powered platform. The business model focuses on providing essential internet infrastructure and web presence solutions to its regional market. The website content is primarily in Spanish with options for English and Portuguese, indicating a regional multilingual approach. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, FontAwesome icons, and Google Fonts. The use of WHMCS indicates a mature client management and e-commerce platform. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include CSRF tokens and Google reCAPTCHA integration, but no advanced security headers or explicit SSL/TLS configuration details were found in the provided content. From a security perspective, the site demonstrates basic protections but lacks published privacy, cookie, or terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is available. WHOIS data aligns well with the website's business identity, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the security posture is moderate but could be improved with enhanced policies, security headers, and transparency. The overall risk assessment suggests a functional and legitimate business website with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing contact transparency, and establishing vulnerability disclosure mechanisms to strengthen trust and compliance.

CARAVAN-NEWS.de is a German online media portal specializing in news, tests, guides, and travel information related to caravans, motorhomes, and automotive topics. The site targets caravan enthusiasts and travelers primarily in Germany, offering regularly updated content and advertising space. The business operates as a small media entity under WITTMANN-MEDIA.de, with a consistent brand presence and a focused niche market. Technically, the website uses a modern tech stack including jQuery, Foundation CSS, Google Fonts, and Google Analytics, with responsive design and basic SEO optimizations. Security posture is moderate; HTTPS is used, but no explicit security headers were detected, and no dedicated security or incident response pages are present. Privacy compliance is adequate with a GDPR-compliant privacy policy and cookie consent banner. Overall, the site is professional and trustworthy but could improve security and transparency aspects.

S

SuperSparReisen.de

super-spar-reisen.de

52

SuperSparReisen.de is an online travel agency specializing in last minute travel deals, package holidays, hotel bookings, flights, and vacation homes primarily targeting German-speaking customers. The website offers a range of travel services with a focus on affordability and convenience, positioning itself as a niche player in the budget travel market. The business model revolves around providing users with easy access to travel packages and related services through a modern web platform. Technically, the site is built using Angular framework with Bootstrap and other popular front-end libraries, ensuring a responsive and user-friendly experience. However, some areas such as cookie consent and privacy compliance could be improved to meet GDPR standards more fully. Security-wise, the site uses HTTPS but lacks advanced security headers and published policies, indicating room for enhancement in security posture. Overall, the website is functional, professional, and trustworthy but would benefit from stronger privacy and security practices.

W

WITTMANN MEDIA

unternehmen-heute.de

56

UNTERNEHMEN-HEUTE.de is a German-language online news portal operated by WITTMANN MEDIA, focusing on business, finance, technology, politics, motor industry, and environmental news. The website provides regularly updated news articles, press releases, and multimedia content targeting German-speaking professionals and the general public interested in these sectors. The business model centers on news publishing and press release distribution, supplemented by advertising and partner promotions. The site holds a niche position within the German media landscape with a small operational size. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, Google Tag Manager, CookieConsent2, Google Fonts, and embedded YouTube videos. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The site uses multiple external resources and CDNs for fonts, scripts, and media. From a security perspective, the website uses HTTPS (assumed but not explicitly confirmed in HTML), implements a cookie consent mechanism, and includes Google site verification. However, it lacks explicit security headers such as CSP, HSTS, and X-Frame-Options, which are recommended for enhanced security. No incident response or vulnerability disclosure policies are found. The WHOIS data indicates a consistent domain registration with no privacy protection, aligning with the website operator's identity. Overall, the website is functional, professionally designed, and trustworthy for its intended audience. Security posture is moderate with room for improvement in headers and policies. Privacy compliance is basic but present. Strategic recommendations include enhancing security headers, publishing terms of service, and adding more comprehensive contact information to improve trust and compliance.

G

Grief and Hope Los Angeles

griefandhopela.com

59

Grief and Hope Los Angeles is a small non-profit volunteer organization focused on raising funds to support artists and art workers affected by the Los Angeles fires in January 2025. The website is hosted on Squarespace and uses a clean, professional design with clear calls to action directing visitors to donate via GoFundMe. The technical infrastructure is modern and secure, with HTTPS and HSTS enabled, but lacks advanced security headers and privacy compliance features. No contact information or privacy policies are present, which limits trust and compliance. The domain WHOIS data is unavailable, raising questions about domain registration status and legitimacy, though the website content and hosting suggest a genuine community effort.

M

MJM agro, a. s.

prefarm.cz

44

MJM agro, a. s. operates the Prefarm precision agriculture system, providing advanced agricultural services such as soil sampling, remote sensing, yield mapping, and variable application equipment primarily targeting agronomists and farmers in the Czech Republic. The company has a solid market presence since 1997 and is part of Reticulum Holding, a reputable parent company. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the site uses a modern but somewhat dated technology stack including Bootstrap and jQuery 1.11.3, with Google Analytics and reCAPTCHA integrated for analytics and security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and the use of an outdated jQuery version presents a potential risk. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page in Czech language. However, WHOIS data is missing, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the website is functional, professional, and trustworthy but could improve security and transparency aspects.

E

EKOFRUKT Slaný, spol. s r.o.

ekofrukt.cz

51

EKOFRUKT Slaný, spol. s r.o. is a Czech-based manufacturer specializing in the production and development of cereal bars, including protein, muesli, nut, fruit, flapjack, and cereal bars. The company emphasizes private label manufacturing with over 30 years of tradition and exports to more than 20 countries in Europe. Their product portfolio is supported by multiple certifications such as IFS Food, Kosher, BIO, HACCP, FSC, and Rain Forest Alliance, underscoring their commitment to quality and sustainability. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and certifications.

WITTMANN MEDIA LTD is a small media and digital marketing company specializing in SEO consulting, content marketing, responsive web design, and programming services. The company presents a professional portfolio of online magazine projects and targets businesses seeking to improve their online presence. The website is well-structured with good design quality and clear navigation, optimized for mobile devices. Technically, the site uses modern web technologies including HTML5, CSS3, PHP, Bootstrap, and Google Analytics, but lacks a CMS and advanced accessibility features. Security posture is moderate with no visible vulnerabilities but missing security headers and unclear SSL configuration. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance measures.