Security Directory

A

Atelier Jérôme Knebusch

jeromeknebusch.net

48

Atelier Jérôme Knebusch is a Franco-German graphic, editorial, and type design practice based in Frankfurt am Main, Germany. The website showcases a professional portfolio of custom typefaces, visual identities, and editorial projects primarily serving educational and cultural institutions. The business operates as a small specialized design studio with a focus on bespoke creative services and type design. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2006. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Slick Carousel for galleries. It is hosted by Scaleway SAS and uses HTTPS, ensuring secure communication. However, the site lacks DNSSEC and important security headers, which are recommended to enhance security posture. The website is mobile-optimized with good navigation and professional design quality, though SEO and accessibility features are basic. From a security perspective, the site has a good baseline with HTTPS and domain transfer protection but lacks explicit security policies, incident response contacts, and privacy/cookie policies, which are critical for GDPR compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. The absence of privacy and cookie policies is a compliance gap that should be addressed. Overall, the website is a trustworthy and professional representation of a niche design practice with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

A

AOP Health

aop-health.com

64

AOP Health is a European healthcare company specializing in integrated therapies for rare diseases and critical care. The website positions the company as a pioneer in this niche, targeting healthcare professionals and patients requiring specialized treatments. The digital presence is built on TYPO3 CMS, featuring a professional design with good SEO and mobile optimization. However, the absence of WHOIS domain registration data raises questions about the domain's legitimacy or recent registration status. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance documentation. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

L

LivaNova PLC

livanova.com

65

LivaNova PLC is a global medical device company specializing in neuromodulation and cardiopulmonary products aimed at improving patient lives worldwide. The company focuses on therapeutic areas related to the head and heart, offering innovative medical devices and therapies for conditions such as epilepsy, depression, and advanced circulatory support. The website reflects a mature enterprise with a strong market position in healthcare, supported by comprehensive corporate governance and sustainability commitments. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and OneTrust for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Analytics and tracking are implemented with privacy compliance in mind. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, privacy policies, and terms of use. However, explicit security headers are not evident in the HTML content, and no vulnerability disclosure or incident response contacts are published. The absence of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or registration issues that warrant further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in transparency around domain registration and security practices are recommended to enhance trust and security posture.

G

Getinge AB

getinge.com

72

Getinge AB is a leading global provider of medical technology and healthcare solutions, serving hospitals and life science institutions worldwide. The company offers a broad portfolio including intensive care, cardiovascular procedures, operating room equipment, sterile reprocessing, digital health, pharmaceutical production, and research laboratory solutions. With a history spanning over a century, Getinge positions itself as a trusted partner to healthcare professionals and researchers. The website reflects a mature enterprise with consistent branding, multilingual support, and comprehensive product and service information tailored to healthcare providers. Technically, the website employs modern web technologies such as Google Tag Manager for analytics, OneTrust for cookie consent management, and video embedding via Video Indexer. The site appears to be built on a CMS platform likely Episerver, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no publicly visible security policy or incident response contact information. The absence of WHOIS data for the domain www.getinge.com is a notable anomaly, reducing trust in domain registration transparency, though the website content and external references strongly support legitimacy. Overall, the website is professional, content-rich, and compliant with privacy regulations, but could enhance its security posture and transparency regarding domain registration and incident response. Strategic recommendations include adding security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

C

CPI Hotels, a.s.

cpihotels.com

60

CPI Hotels, a.s. operates a large hospitality business offering tailored accommodation services across six countries with nearly 40 hotels and over 4000 rooms. Their services include hotel bookings, conference and event hosting, special offers, and a corporate loyalty program targeting both leisure and business travelers. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and cookie consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. Privacy compliance is well addressed with GDPR and cookie policies present. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be verified for full trust. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on domain registration and security policies.

B

Barum

barum.com.br

66

Barum is a well-established tire brand with over 70 years of history, operating as a second line brand under the Continental group. The website targets the Brazilian market, offering a portfolio of affordable and durable tires for passenger cars and commercial vehicles. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and Google Tag Manager for analytics and marketing. The site is professionally designed, mobile-optimized, and includes comprehensive legal and privacy documentation, reflecting good compliance with GDPR and cookie consent requirements. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are absent. Overall, the website presents a trustworthy and professional image consistent with a large enterprise in the transportation sector.

N

Nadační fond Veolia

nfveolia.cz

50

Nadační fond Veolia is a corporate foundation affiliated with the Veolia group in the Czech Republic, established in 2003. It supports social and environmental projects nationwide and regionally, promoting volunteerism and community engagement. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a custom CMS platform with Matomo analytics and includes a cookie consent mechanism, reflecting good privacy compliance. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in security posture. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security practices and domain registration transparency.

F

Fastmail Pty Ltd

messagingengine.com

68

Fastmail Pty Ltd operates a professional, privacy-focused email and calendar hosting service targeting both individuals and businesses. The company positions itself as a secure, ad-free alternative to major providers like Gmail and iCloud, emphasizing privacy, productivity, and ease of use. Their service includes native apps across platforms and a strong commitment to open standards and open source contributions. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content supporting their business model. Technically, the website employs modern web technologies including JavaScript, SVG icons, and web fonts, delivering a fast and mobile-optimized experience. The presence of security headers and HTTPS indicates a strong security posture. The company also maintains a bug bounty program and provides clear channels for reporting security issues, demonstrating a proactive approach to security management. Despite the strong website and business presence, the absence of WHOIS registration data is a notable gap, reducing transparency and slightly impacting trustworthiness. However, the overall security and privacy focus, combined with positive customer testimonials and no detected vulnerabilities, suggest a low risk profile. Strategically, Fastmail should consider publishing a security.txt file to facilitate vulnerability disclosures and enhance incident response visibility. Continued emphasis on privacy compliance and transparent business information will further strengthen their market position.

E

ELEKTROWIN a.s.

zaostrenonaelektro.cz

54

Zaostřeno na elektro is an educational and environmental project supported by ELEKTROWIN a.s., focused on promoting proper sorting and recycling of electrical waste in the Czech Republic. The website provides comprehensive information about recycling processes, types of electrical devices, and the importance of recycling for environmental protection. It targets the general public, especially consumers of electrical appliances, aiming to raise awareness and encourage responsible behavior. Technically, the website is built on the Webnode CMS platform, hosted on AWS Cloudfront CDN, and uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes multimedia content such as embedded YouTube videos to enhance user engagement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or security policies. No WHOIS data is available for the domain, which limits transparency and trust assessment. The site shows no signs of malicious content or vulnerabilities in the visible source. Overall, the website is a well-structured, informative platform with good business credibility and moderate technical maturity. However, improvements in security headers, privacy policy publication, and domain registration transparency are recommended to enhance trust and compliance.

C

Czech Pedal Car

czechpedalcar.com

56

Czech Pedal Car is a small manufacturing business based in the Czech Republic specializing in the production and sale of retro pedal car models and kits. Established since 2017, the company targets enthusiasts and collectors interested in nostalgic pedal cars. The website showcases media coverage and videos highlighting their products, indicating a niche but engaged market presence. Technically, the site is built on the Webnode platform, hosted via AWS Cloudfront, and uses modern web technologies including HTTPS and Google Tag Manager for analytics. While the site is accessible and mobile-optimized with good design and navigation, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and external media references support legitimacy. Overall, the security posture is moderate with room for enhancements in security best practices and privacy compliance.

Z

ZONER software, a.s.

zoner.cz

61

ZONER software, a.s. operates the website www.zoner.cz, offering a comprehensive photo and video editing software suite primarily targeting Czech consumers, businesses, and educational institutions. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model centers on software sales and subscription services, supported by extensive educational content and user testimonials. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site is well-optimized for SEO and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie management aligned with GDPR requirements. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, with no signs of malicious activity or content blocking.

Natalieba.net is a professional personal website representing Dr. Natalie Banet, a pathologist affiliated with the Cleveland Clinic. The site focuses on her expertise in gynecologic and cytopathology, offering educational resources such as an online journal club and a mailing list for updates. The website targets medical professionals and students interested in pathology. Technically, the site is built with modern web standards, uses Google Fonts, and integrates lightweight analytics via Fathom, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though it lacks DNSSEC and security headers. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

Temu operates as a large-scale e-commerce platform offering a wide variety of consumer products. The website analyzed is a security verification page designed to protect user accounts and transactions through multiple verification methods. The platform targets a general audience with a focus on secure online shopping experiences. Technically, the site employs modern web technologies such as React and Webpack, served via a CDN infrastructure, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and integrity checks on resources, although some security headers could be improved. Privacy and cookie policies are comprehensive and indicate GDPR compliance. However, the absence of WHOIS data and contact information on this page limits full trust assessment. Overall, the site demonstrates a mature digital presence with room for enhanced transparency and security documentation.

K

Domů • IDZK

koved.cz

44

The website www.idzk.cz represents Integrovaná doprava Zlínského kraje (IDZK), a regional integrated public transportation service provider in the Zlín region of the Czech Republic. The platform offers comprehensive services including bus and train schedule searches, fare and tariff information, a transport card system (Zetka), and an e-shop for related products. The site targets local citizens and travelers, aiming to simplify and improve regional mobility. The business model is focused on public transport integration and customer service facilitation, positioning IDZK as a key regional transportation entity. Technically, the website employs modern web technologies such as Google Web Fonts and JavaScript, with responsive design and good accessibility features. The site is served over HTTPS, ensuring secure communication. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature approach to privacy and data protection. However, no advanced security headers were detected, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with HTTPS and privacy compliance but lacks some best practices such as security headers and vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and structure appear professional and legitimate. No critical vulnerabilities or exposed sensitive data were found. Overall, the site is secure for general users but could improve transparency and security posture. The overall risk assessment is moderate with recommendations to enhance security headers, publish incident response contacts, and improve business contact transparency. The site is well-positioned in its market niche but should address WHOIS data gaps and security best practices to strengthen trust and compliance.

E

Elektrowin

elektrowin.cz

50

Elektrowin operates as a collective system focused on the responsible collection, recycling, and disposal of electronic waste in the Czech Republic. The company targets both individual consumers and businesses, providing comprehensive services to ensure sustainable management of end-of-life electrical equipment. Their market position is reinforced by partnerships with major manufacturers and membership in international organizations such as the WEEE Forum. The website reflects a professional and consistent brand image, emphasizing environmental responsibility and community engagement through educational projects. From a technical perspective, the website employs modern web technologies including jQuery, Google Tag Manager, and a robust cookie consent mechanism via CookieYes. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of a published security policy or incident response contacts suggests room for improvement. The WHOIS data is notably absent, which impacts the domain trustworthiness assessment. Despite this, the website's content quality, clear contact information, and visible certifications such as ISO 27001 contribute positively to the overall credibility. No signs of adult or questionable content were detected, confirming the site is safe for general audiences. Overall, Elektrowin presents as a credible and professionally managed organization with a clear environmental mission. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and establishing formal vulnerability disclosure channels to further strengthen trust and compliance.

H

Hokejový klub Tigers Zlín a.s.

tigerszlin.cz

45

Hokejový klub Tigers Zlín a.s. operates a professional and regionally focused hockey club website serving fans, players, and the local community in the Czech Republic. The site provides comprehensive information about the club's activities, youth teams, match reports, and merchandise offerings, positioning itself as a central hub for Tigers Zlín supporters and participants. The business model centers on sports club operations, youth training, and fan engagement through merchandise sales and event promotion. Technically, the website employs a modern but straightforward technology stack including jQuery, Slick Carousel, and LightGallery for interactive content presentation. Hosting is provided by a Czech hosting provider, and the site is mobile-optimized with good SEO practices. However, accessibility features are basic, and no major CMS or frameworks are detected. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and does not provide a dedicated privacy policy or incident response contact information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professionally designed and functional with moderate security and privacy compliance. Strategic enhancements in security headers, privacy documentation, and incident response readiness would strengthen its posture and trustworthiness.

Moravia Events s.r.o. is a small regional sports and event agency based in the Czech Republic, specializing in organizing running and cycling events primarily in the Moravia region. The company offers event management services including chip timing and operates several sports projects and races. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at sports enthusiasts and families interested in regional sports events. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, Moment.js, and Swiper.js, with a focus on mobile responsiveness and user experience. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and policies are not evident. The domain registration data aligns well with the business information, supporting legitimacy. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and partner information.

C

CPI Hotels, a.s.

clarioncongresshotelostrava.com

61

Clarion Congress Hotel Ostrava is a large, modern four-star hospitality business located in the Czech Republic, specializing in accommodation, congress and event hosting, wellness, and dining services. It is part of the CPI Hotels group and targets business travelers, conference delegates, and tourists. The website is professionally designed with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript frameworks, analytics, and consent management tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers are missing and no explicit security policy is published. The absence of WHOIS data raises some legitimacy concerns but is mitigated by the professional business presence and affiliations. Overall, the site is trustworthy and well-maintained.

E

Etat luxembourgeois

public.lu

64

The website etat.public.lu serves as the official directory and portal for public administration websites of the Grand Duchy of Luxembourg. It provides comprehensive listings of ministries, administrations, public services, and related government portals. The site targets government agents, citizens, and professionals seeking official information and services. It also promotes Luxchat4Gov, a secure instant messaging platform for government employees. Technically, the site is built on Adobe Experience Manager, uses modern web standards, and is optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration insights, but the site’s branding and content strongly indicate legitimacy as a government resource. Overall, the site is professional, trustworthy, and well maintained.

F

Fórum dárců

donorsforum.cz

44

Fórum dárců is a well-established Czech non-profit organization acting as a national forum for donors, foundations, and charitable activities. The website provides extensive information about its members, projects, events, and related portals, positioning itself as a key player in the Czech charitable sector. Technically, the site uses modern web technologies including HTTPS, jQuery, FontAwesome, and Google Analytics, ensuring a functional and responsive user experience. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy verification. Security posture is generally good with HTTPS and no visible vulnerabilities, but the lack of security headers and explicit privacy/cookie policies indicates room for improvement. Overall, the site is professional, content-rich, and trustworthy from a business perspective, but would benefit from enhanced privacy compliance and domain registration transparency.

S

Sciencesconf

sciencesconf.org

60

Sciencesconf is a French academic platform dedicated to the management of scientific conferences, workshops, and colloquia. It offers a free, comprehensive toolset for organizers to create event websites, manage communications, organize peer reviews, and track registrations. The platform is well integrated with the HAL open archive, enhancing its utility for the research community. The website is professionally designed, multilingual, and targets academic organizers and researchers primarily in France. Technically, Sciencesconf is built on WordPress with modern SEO and analytics tools like Matomo, ensuring good digital maturity and privacy respect. Security posture is solid with HTTPS and secure forms, though some security headers and incident response details could be improved. Overall, the platform demonstrates high trustworthiness and professionalism, supported by its affiliation with the reputable CCSD and HAL organizations.

C

Creative Boom

creativeboom.com

61

Creative Boom is a prominent UK-based art and design media platform delivering news, inspiration, and insights to millions of creative professionals annually. The website features a rich variety of content including articles, podcasts, and videos, targeting creative industry workers and artists. It maintains a strong market position as a leading creative industry publication with a professional and consistent brand presence. Technically, the site employs modern web technologies such as Tailwind CSS, Swiper.js, and Cloudflare Turnstile captcha, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and indicate GDPR compliance. The lack of WHOIS domain registration data introduces some uncertainty about domain registration transparency, but the active and professional website content supports legitimacy. Overall, the site is well-maintained, trustworthy, and serves its target audience effectively.

T

Type@Cooper

typographics.com

46

Typographics 2025 is an established annual design festival focused on typography, organized by Type@Cooper and hosted at The Cooper Union in New York City. The event includes conferences, workshops, book fairs, and informal talks, targeting design professionals, educators, and enthusiasts. The website presents a professional and well-structured digital presence with clear navigation and rich content. Technically, it uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though improvements are recommended in security headers and privacy compliance. Overall, the site is trustworthy, safe, and credible, supported by reputable sponsors and institutional partners.

D

Design Regression

designregression.com

56

Design Regression is a specialized online journal focused on design for reading and related research, operated as a project by Rosetta Type Foundry. The website offers a collection of essays, articles, research studies, and reviews authored by experts in typography and design. It targets professionals and researchers interested in the intersection of design and reading, providing accessible yet serious content. The business model is primarily content publication supported by sponsorships from Rosetta and Google Fonts. Technically, the site uses modern web standards with JavaScript libraries like Plausible Analytics for privacy-conscious tracking and FontFaceObserver for font loading. The site is mobile optimized with a clean, consistent design and clear navigation. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with no DNSSEC and no visible security headers, though the domain registration is stable and legitimate. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

B

Belgian Society of Pathology VZW/ASBL

bwpcongress.be

52

The Belgian Week of Pathology website represents a well-established professional event organized by the Belgian Society of Pathology, targeting pathologists and healthcare professionals primarily in Belgium. The site provides comprehensive information about the congress, including program details, abstract submission guidelines, venue, and organizational contacts. The business operates as a non-profit entity focused on education and professional development within the healthcare sector. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, and FontAwesome, with backend indications of Laravel usage. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and includes CSRF protection and a GDPR-compliant cookie consent mechanism, though lacks explicit security headers and a published security policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature security posture for its size and scope. Overall, the website scores well on content quality, privacy compliance, and business credibility, with room for improvement in security headers and incident response transparency.

Lenovo's Czech Republic official website offers a comprehensive digital storefront for a wide range of technology products including notebooks, tablets, desktops, smart devices, smartphones, and data center solutions. The site targets both general consumers and business customers with a B2C and indirect sales model. The website is professionally designed with consistent branding and localized content in Czech, reflecting Lenovo's strong market position as a global technology leader. The technical infrastructure leverages modern web technologies, including Adobe Experience Platform and proprietary Lenovo frameworks, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforcement, password strength validation, and use of reCAPTCHA, although some advanced security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site demonstrates a mature digital presence suitable for an enterprise-level technology company.

A

anji s.r.o.

24safe.cz

44

24SAFE is a Czech Republic-based company specializing in the rental of secure safety deposit boxes located in Prague. Their services focus on providing anonymous, 24/7 access to safety deposit boxes for valuables such as jewelry, gold, documents, cash, and data storage. The company emphasizes security with insurance coverage through Lloyd’s Insurance Company and uses an automated system by Gunnebo for access control. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. However, the absence of WHOIS data and explicit privacy and cookie policies slightly reduce transparency and privacy compliance confidence. The site integrates modern tracking technologies including Google Analytics and TikTok Pixel, indicating a moderate level of user tracking.

Raj pre deti s.r.o. operates a Slovak e-commerce website specializing in educational and sensory toys, including magnetic building sets and safe modeling clays. The company targets parents and educators seeking quality developmental products for children. The website is built on the Flox e-commerce platform hosted by BiznisWeb.sk, featuring a modern design with good mobile optimization and clear navigation. Privacy and cookie policies are implemented with consent mechanisms, and contact information is clearly provided. Security posture is adequate with HTTPS and basic security headers, though additional headers and explicit security policies could enhance protection. The site uses Facebook Pixel for marketing and retargeting, indicating moderate user tracking. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, suitable for its business scope.

P

ProProfs Training Maker

proprofstraining.com

73

ProProfs Training Maker is a well-established online training software platform targeting businesses and organizations seeking to create and deliver employee training courses. The company operates under the parent brand ProProfs and offers multiple pricing plans, serving a large user base of 4 million learners. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. Technically, it employs modern web technologies and integrates marketing and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Security posture is moderate with HTTPS usage but lacks visible security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies in the analyzed content. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

P

PMR-RECUP

pmrrecup.be

50

PMR-RECUP is a small Belgian business specializing in the recycling, sales, and rental of equipment for persons with reduced mobility and handicapped individuals. The website is built on the Wix platform, featuring professional design and relevant content targeting a regional audience in Wallonie, Belgium. Contact information includes a phone number and postal address, but lacks email contacts and social media presence. The business model focuses on providing accessible mobility equipment through multiple channels including recycling and rentals. Technically, the site uses Wix's Thunderbolt framework and standard web technologies, with moderate performance and good mobile optimization. Security posture is basic, with no advanced security headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. WHOIS data is restricted, limiting transparency about domain ownership and age, which slightly reduces trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

The website fotbal365.cz is currently a parked domain page with no active business content or services. It primarily serves as a placeholder indicating the domain may be for sale, with a link to contact the domain owner. The site lacks any privacy, cookie, or terms of service policies and does not provide any contact information or business credentials. Technically, the site uses basic HTML, CSS, and JavaScript with multiple external scripts and iframes from advertising and tracking domains. There is no evidence of HTTPS enforcement or security headers, which poses security risks. The WHOIS data shows the domain was registered in 2019 via a Czech registrar with parkingcrew.net nameservers, consistent with domain parking practices. Overall, the site has poor content quality, minimal technical sophistication, and low trustworthiness.

M

Maxdorf

maxdorf.cz

56

Maxdorf.cz is a well-established Czech medical publishing house specializing in professional healthcare literature and educational materials. The website serves as a portal for news, book releases, and access to an e-commerce platform for purchasing specialized medical books. The target audience primarily consists of healthcare professionals, medical students, and specialists within the Czech Republic. The business operates a niche publishing model with a strong reputation supported by expert authors and multiple awards. Technically, the website uses a combination of classic JavaScript libraries (MooTools, jQuery) and modern media players (Flowplayer), with Google Analytics and Tag Manager for user tracking. The site is hosted by REG-ZONER, a reputable Czech registrar and hosting provider. Security posture is moderate, with HTTPS usage implied but lacking visible security headers and modern security policies. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Overall, the website is professional, content-rich, and trustworthy but would benefit from enhanced security and privacy compliance measures.

Miger Advertising is a small Czech Republic-based advertising agency specializing in web design, web hosting, SEO optimization, and related digital services. The company has been operating since 2011 and targets local businesses and individuals seeking comprehensive internet presence solutions. Their website reflects a consistent brand image and provides clear contact information, supporting their credibility in the local market. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics integrated for visitor tracking. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for improvement in security posture. The absence of privacy and cookie policies, despite active tracking, suggests non-compliance with GDPR best practices. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

I

Integrovaná doprava Zlínského kraje

idzk.cz

44

Integrovaná doprava Zlínského kraje (IDZK) operates as a regional integrated public transportation system in the Zlín region of the Czech Republic. The website provides comprehensive information about bus and train schedules, tariffs, and service disruptions, targeting local residents and visitors. The business model is focused on public service transportation, supported by regional government funding and partnerships with multiple transport operators. The site also offers an e-shop and reservation services through affiliated domains, enhancing user convenience. Technically, the website employs modern web technologies including Google WebFont Loader and custom GDPR compliance scripts. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. However, no explicit CMS or hosting provider information is detected. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and no visible tracking by default. However, the absence of WHOIS data and lack of visible security headers suggest areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, but security posture could be enhanced by implementing standard HTTP security headers and publishing incident response information. Overall, the website is trustworthy and professional, serving an essential public transportation function. The lack of WHOIS transparency slightly reduces domain trustworthiness, but the content and branding strongly support legitimacy. Strategic recommendations include improving security headers, verifying HTTPS configuration, and publishing clearer security policies to strengthen user trust and compliance.

D

DEKO Med Tech

dekomedtech.fi

50

DEKO Med Tech is a Finnish healthcare technology company specializing in manufacturing and servicing washing and disinfection equipment for healthcare, dental, and laboratory sectors. Established in 1976, the company has a strong market presence with over 40,000 devices delivered globally. Their offerings include innovative recirculation washing technology and comprehensive maintenance and validation services for medical devices. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress using modern SEO and marketing tools, providing good mobile optimization and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

HPV Guide is a specialized educational portal operated by BZCompany Internacional s.r.o., targeting healthcare professionals with comprehensive information on HPV infections and related diseases. The website provides educational content, recommendations, patient materials, and a newsletter subscription service, positioning itself as a trusted resource in the Czech healthcare sector. The site is supported by recognized medical societies, enhancing its credibility and market position. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integration of Google Adsense for advertising and Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content structure, though some accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit privacy policies. No direct contact emails or phone numbers are provided, limiting transparency. WHOIS data is privacy protected, which is reasonable for this type of healthcare educational portal. Overall, the security posture is adequate but could be improved with better header implementation and clearer privacy disclosures. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include adding a comprehensive privacy policy, enhancing security headers, and providing clearer contact information to improve trust and compliance.

B

Belgian Society of Pathology

belgian-society-pathology.eu

59

The Belgian Society of Pathology is a small, independent non-profit medical society focused on uniting professionals involved in pathology, including pathologists, residents, and molecular biologists. The organization provides educational courses, events, and membership benefits to foster professional development and promote pathology practice in Belgium. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site uses modern web technologies such as Bootstrap and Swiper.js, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, though improvements in security and privacy transparency could enhance its maturity.

T

Tomáš Lach

tomaslach.cz

32

Tomáš Lach operates a freelance HTML coding service primarily targeting clients needing responsive and semantic HTML templates. The website is professionally designed with a clear focus on frontend development services, supported by a gallery of client references that enhance trust. The business is small-scale, based in the Czech Republic, and has been active since 2008, indicating stable market presence. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with Google Analytics integrated for visitor tracking. However, the analytics script is loaded over HTTP, and the site lacks HTTPS, which is a significant security concern. Security posture is weak due to missing HTTPS and security headers, and there are no privacy or cookie policies, which impacts GDPR compliance. Contact information is provided via a phone number and a contact form with validation, but no email addresses or social media links are present. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and protect user data.

R

Rosetta

rosettatype.com

52

Rosetta is a specialized typeface design studio and font distributor founded in 2010, focusing on global typography needs. The company offers original fonts, design, and consultancy services targeting large companies, broadcasters, academic institutions, other type foundries, and type enthusiasts worldwide. Their research-based approach has earned industry recognition and awards, positioning them as a reputable player in the typography technology sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates payment processing via Paddle and privacy-respecting analytics through Plausible. The site is well-structured, mobile-optimized, and provides a rich catalog of font collections and case studies. Security-wise, the domain uses HTTPS with good SSL configuration and security headers, though DNSSEC is not enabled. The WHOIS data shows a long-standing domain with clientTransferProhibited status, supporting legitimacy. However, privacy compliance could be improved with explicit GDPR statements and cookie consent mechanisms. Overall, the website demonstrates a solid digital presence with good security posture but could enhance privacy and incident response transparency.

The website avocode.com serves as a sunset notice for the Avocode product line, which was discontinued on October 1, 2023. The business has transitioned its offerings under the Ceros brand, focusing on new digital experience tools such as Studio and MarkUp. These products target designers, marketers, and digital content creators seeking interactive design and feedback solutions. The website content is minimal but professional, clearly communicating the product transition and directing users to the new Ceros platforms. From a technical perspective, the site uses modern HTML5 and CSS3 standards with Google Fonts integration and is hosted behind Cloudflare DNS services. The site is mobile responsive and has a moderate performance profile. However, there is no evidence of advanced frameworks or CMS usage, and accessibility features are basic. SEO optimization is minimal but present. Security posture is moderate but could be improved. The domain uses HTTPS (implied by the URL), but DNSSEC is not enabled, and no security headers were detected in the provided content. There are no privacy, cookie, or terms of service policies visible, which impacts compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and user trust. Overall, the website is legitimate and consistent with the business history and domain registration data. The lack of privacy and security disclosures, however, reduces the overall security and privacy compliance score. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response information to enhance trust and compliance.

The website poslipribeh.cz is a newly registered domain (April 2024) currently serving as a parked domain landing page indicating availability for sale. It does not represent an active business or service and lacks any substantive content, contact information, or privacy and security policies. The technical infrastructure is minimal, relying on basic HTML, CSS, JavaScript, and an iframe loading external content from third-party domains associated with advertising and tracking. No HTTPS or security headers are detected, and the site does not comply with privacy regulations such as GDPR. Overall, the site has a low trustworthiness and business credibility score, reflecting its status as a parked domain rather than an operational business website.

The website www.prostabil.cz presents a health supplement product aimed at middle-aged and mature men to support prostate health and urinary function. The business model relies on directing users to partner e-commerce sites for purchase, indicating a niche supplement marketing approach within the Czech healthcare sector. The site content is clear and relevant but lacks direct business contact information and legal policies, which limits transparency and trust. Technically, the site uses basic web technologies including jQuery and NetteForms but does not demonstrate advanced CMS or hosting details. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and registration transparency. Overall, the site is functional but requires significant improvements in security, compliance, and business credibility to enhance trust and user confidence.

D

Sladidlo Di Chrom

diachrom.cz

45

The website www.dichrom.cz represents a small Czech retail business specializing in the production and sale of Di Chrom, a low-calorie table sweetener enriched with a biologically active glucose tolerance factor containing trivalent chromium. The product targets health-conscious consumers, including diabetics and those reducing sugar intake, positioning itself as a niche player in the Czech health sweetener market. The website is professionally designed with consistent branding and good content quality, providing product details, recipes, and educational articles. Technically, the site uses standard web technologies including HTML5, CSS3, jQuery, and Matomo analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security headers and detailed security policies. WHOIS data is unavailable, likely due to privacy protection, but this does not significantly detract from the site's legitimacy given the professional presentation and consistent business information. Overall, the site is safe, trustworthy, and compliant with GDPR requirements.

VitalChrom, operated by AGROBAC s.r.o., is a Czech-based small retail business specializing in dietary supplements aimed at weight management. Their product portfolio includes the VitalChrom Shake, a nutritionally complete meal replacement, and VitalChrom Drink, a supplement containing MOROSIL® and chromium. The company sells directly to consumers via an e-commerce platform integrated into their website. The site is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the website employs modern web standards, including HTTPS, Google Fonts, FontAwesome icons, and Matomo analytics for user tracking. However, the absence of WHOIS data limits domain trust verification. Security posture is generally good with HTTPS and secure form handling, but lacks advanced security headers and published security policies. Privacy compliance is partial, with no visible cookie consent mechanism or comprehensive privacy policy details. Overall, the website is functional and trustworthy but would benefit from enhanced transparency and security practices.

Webex, a Cisco brand, is a leading provider of collaboration and customer experience solutions, offering industry-leading video conferencing, cloud calling, and contact center services that support hybrid work environments for businesses of all sizes. The website demonstrates a mature digital presence with comprehensive product information, clear navigation, and professional branding consistent with Cisco's corporate identity. Technically, the site leverages modern technologies including Brightcove video players, Adobe Helix RUM for performance monitoring, and Adobe Experience Manager as its CMS, ensuring a fast, accessible, and SEO-optimized user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a high level of business credibility and technical maturity, suitable for an enterprise-grade SaaS provider.

N

Nemours Children's Health

nemours.org

68

Nemours Children's Health is a large, nationally recognized pediatric healthcare system serving multiple states including Delaware, New Jersey, Pennsylvania, and Florida. The organization offers a wide range of pediatric specialties and services, supported by a professional and well-structured website that targets families, children, and healthcare professionals. The website leverages modern technologies such as Adobe Experience Manager and PostHog analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and secure forms, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image consistent with a reputable healthcare provider.

C

CBL Asset Management

cblam.lv

10

CBL Asset Management is a Latvian-based financial services company specializing in asset management, including pension plans, investment funds, and portfolio management. It operates under the Citadele Group umbrella, targeting private banking clients and investors seeking sustainable financial growth. The website presents a professional and consistent brand image with clear service offerings and multilingual support, primarily in Latvian. The company maintains a solid market position within Latvia's finance sector, focusing on high-quality investment products and client consultations. Technically, the website employs modern web technologies such as JavaScript, SVG graphics, and Google Tag Manager for analytics. It uses Turbolinks for navigation optimization and implements HTTPS with CSRF protection on forms, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, reflecting a trustworthy and professional online presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and client confidence.

S

SIENNA

siennanursingsociety.org

63

SIENNA (Society of Internationally Educated Nurses in North America) is a non-profit organization dedicated to supporting internationally educated nurses migrating or planning to migrate to North America. The organization provides community support, networking opportunities, and resources to its target audience. The website is professionally designed using the Wix platform, featuring clear branding and relevant content aligned with its mission. Technical infrastructure is based on Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain registration insights, but the website content and structured data suggest legitimacy and a small organizational size. Overall, the site is safe, professional, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

NursesInCharge.org is a newly established website launched in 2023, focused on providing resources and educational content for nursing professionals and students. The site positions itself within the healthcare sector, targeting nursing career development and professional growth. The business model appears to be informational and resource-based, catering to a niche audience in healthcare education. Technically, the website employs standard web technologies such as HTML5, CSS3, Google Fonts, and Font Awesome icons, hosted via GoDaddy. The site is mobile optimized with a professional design and clear navigation, though some SEO and accessibility features are basic. Security posture is moderate; HTTPS is enabled but lacks advanced security headers and DNSSEC is not configured. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.