Security Directory

Jiří Pytela operates a small-scale IT service business based in the Czech Republic, specializing in computer and network management, web design, and training services. The website presents clear service offerings and contact information, targeting individuals and small businesses seeking IT support and education. The digital presence is basic but functional, with moderate mobile optimization and use of Google Analytics for visitor tracking. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, indicates gaps in compliance and trustworthiness. Security posture is limited, with no detected security headers and unknown SSL status, suggesting room for improvement in protecting user data and enhancing site security. Overall, the website serves its purpose as a local IT service portal but would benefit from enhanced security and compliance measures.

Základní škola a Mateřská škola Vyškov, Letní pole, příspěvková organizace is a well-established educational institution in Vyškov, Czech Republic, providing primary and preschool education services. The website serves as an informational portal for parents and the local community, offering details about school activities, contact information, and organizational structure. The domain has been active since 1998, reflecting a stable and credible presence in the education sector. Technically, the website uses traditional web technologies including HTML5, CSS, and JavaScript libraries such as jQuery, Prototype.js, and Scriptaculous. While functional, the technology stack is somewhat dated, and the site shows basic mobile optimization and accessibility features. SEO is basic but sufficient for the target audience. The site is hosted securely with HTTPS enabled, but lacks modern security headers and cookie consent mechanisms. From a security perspective, the site demonstrates a moderate posture with HTTPS enforced but missing key security headers and no visible incident response or vulnerability disclosure policies. There is no cookie consent banner, which is a compliance gap under GDPR. No tracking or advertising scripts are present, minimizing privacy risks. Contact information is clearly provided, enhancing trust. Overall, the website is safe, professional, and trustworthy, serving its educational purpose well. Strategic improvements in security headers, privacy compliance, and modernization of the technology stack would enhance its security posture and user experience.

A

Agrostis Trávníky, s.r.o.

agrostis.cz

48

Agrostis Trávníky, s.r.o. is a well-established Czech company specializing in the production and distribution of grass seed mixtures, fertilizers, and related consulting services. Founded in 2002, it holds a leading position in the Czech and Slovak markets, serving both professional and consumer segments. The company emphasizes scientific research collaborations and offers a broad catalog of products tailored to various landscaping and agricultural needs. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, with a custom CMS platform. The site is well-structured, mobile-optimized, and provides multiple contact channels, including a secure contact form. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the website reflects a professional and trustworthy business presence with moderate tracking and good privacy compliance.

MoneyLion Technologies Inc. operates a leading fintech platform in the United States, providing a comprehensive suite of personal finance products including loans, credit cards, cash advances, banking, investing, and financial education. With over 18 million customers and partnerships with more than 1,200 entities, MoneyLion has established a strong market position as a trusted financial services provider. The website is professionally designed, mobile-optimized, and offers clear navigation and rich content tailored to consumers seeking financial empowerment. Technically, the website leverages modern web technologies such as React and Next.js, ensuring fast performance and good accessibility. The platform integrates video content and lazy loading for enhanced user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, contributing to a robust security posture. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of publicly available WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Despite this, the overall trustworthiness of the business and website remains high based on content quality, business information, and trust indicators. Strategically, MoneyLion should consider enhancing its incident response visibility and establishing a public vulnerability disclosure program to further strengthen security culture and compliance. Continuous monitoring of third-party scripts and maintaining updated certifications will help mitigate emerging risks. Overall, MoneyLion presents a mature fintech digital presence with solid security and privacy foundations.

D

Dwandy

gamesites.cz

51

Gamesites.cz is a Czech-based gaming community platform primarily focused on popular multiplayer games such as Counter-Strike 1.6, CS:GO, Minecraft, and Team Fortress 2. The site offers free game downloads, server listings, gaming articles, forums, and VIP activation services. It targets Czech-speaking gamers seeking community engagement and game resources. The business operates on a community-driven model supplemented by advertising and VIP services. Technically, the website uses AngularJS framework, integrates Google Analytics and Adsense for tracking and monetization, and includes Facebook SDK for social engagement. The site is served over HTTPS with basic security headers but lacks advanced security policies such as CSP and visible CSRF protections on forms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, which limits domain trust verification, but the active community and content suggest legitimate operation. Overall, the site is functional with moderate technical and security maturity but could improve privacy and security practices.

T

TRASKO Nemovitosti, s.r.o.

traskonemovitosti.cz

55

TRASKO Nemovitosti, s.r.o. is a Czech Republic-based real estate development company focused on projects in the Vyškov district. The website serves as a corporate presence showcasing their development activities. Technically, the site is built on WordPress using the Divi theme and incorporates modern web technologies including lazy loading scripts and integration with Google Tag Manager for analytics. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS data and registrant information limits the ability to fully verify domain legitimacy. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. Overall, the site is professionally designed and functional but would benefit from enhanced transparency and compliance documentation.

Bazeny Kopecký is a Czech-based small business specializing in the construction and manufacturing of high-quality swimming pools, including outdoor garden pools and indoor pools. The company emphasizes the use of original, durable materials such as heavy DLW-DW foil and offers a comprehensive range of services including pool filtration, water treatment, heating solutions, coverings, and repair services. With over 30 years of experience and multiple certifications, the company positions itself as a trusted local expert in the pool construction market. Technically, the website is built on classic HTML and CSS with minimal modern frameworks, and it uses Google Analytics for visitor tracking. However, the site lacks modern mobile optimization and accessibility features. Security-wise, the site does not implement key security headers or privacy policies, and no cookie consent mechanism is present despite the use of analytics. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website provides good business information but requires improvements in security, privacy compliance, and technical modernization.

Z

Zdeněk Lukeš

zdeneklukes.eu

44

The website zdeneklukes.eu serves as a personal professional platform for Zdeněk Lukeš, an architectural historian primarily focused on Czech architectural history. It provides visitors with access to his biography, publications, exhibitions, media appearances, and lectures. The site targets individuals interested in architectural history and Czech cultural heritage, operating as an informational and branding tool rather than a commercial business. Technically, the site uses basic web technologies including HTML, CSS, JavaScript with jQuery 1.7.2, and Lightbox.js for image display. Google Analytics and Google Tag Manager are implemented for visitor tracking, though privacy compliance is minimal with no visible cookie or privacy policies. The site appears to be hosted under a Czech registrar, INTERNET CZ, a.s., consistent with the domain and content focus. Security posture is moderate; no forms or user input are present reducing attack surface, but the use of an outdated jQuery version and lack of security headers are notable weaknesses. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

The website www.mfantasy.cz operates as an online magazine primarily targeting Slovak-speaking audiences interested in home improvement, energy solutions, finance, and lifestyle topics. It offers a variety of articles categorized under relevant themes such as 'Domácnosť', 'Energetika', and 'Financie'. The site uses WordPress CMS with standard SEO optimizations and is accessible over HTTPS, ensuring basic security for visitors. However, the absence of privacy, cookie, and terms of service pages indicates a gap in compliance and transparency. No explicit contact information or social media presence was found, which may limit user trust and engagement. The WHOIS data for the domain is unavailable, raising concerns about domain legitimacy and registration transparency.

G

Gediman.cz - homepage RPG Void

gediman.cz

45

Gediman.cz is a niche Czech website dedicated to RPG projects, game mods, and media reviews, serving a community of RPG enthusiasts. The site offers content such as game mod downloads, film and game reviews, and community features including user login, registration, and guestbook comments. The website has been active since 2009, indicating a stable presence in its niche market. Technically, the site uses a custom CMS named FoxAxe, with a technology stack including HTML, CSS, JavaScript, and jQuery. Performance is good with fast page load times, though mobile optimization and accessibility are basic. Security posture is limited, with no detected security headers or published policies, and no HTTPS status confirmed from the provided data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is safe for general audiences and maintains consistent branding and content quality appropriate for its niche.

Z

Zaklínači - Mistři meče

zaklinaci-mistrimece.cz

52

Zaklínači - Mistři meče is a Czech-language online text-based role-playing game inspired by the works of Andrzej Sapkowski, focusing on players becoming witchers and fighting monsters. The site targets fans of fantasy RPGs within the Czech community and operates as a niche, community-driven platform with a long history dating back to 2006. The business model centers on user registration and gameplay features without commercial e-commerce elements. Technically, the site uses basic HTML and CSS with PHP backend implied, hosted behind Cloudflare DNS and CDN services. The design is simple and not optimized for mobile devices, with limited SEO and accessibility features. Security posture is moderate but lacks HTTPS enforcement visible in the HTML, security headers, and advanced form protections. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact information is limited to multiple email addresses of site administrators without phone or physical address details. Overall, the site is safe for general audiences but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

U

UNESCO World Heritage Centre

visitworldheritage.com

55

The website 'World Heritage Journeys' is an informational and promotional platform presented by UNESCO in collaboration with National Geographic. It focuses on guiding travelers to World Heritage sites with an emphasis on sustainable tourism and heritage conservation. The platform offers curated travel guides, educational content, and insider tips to help visitors experience these sites responsibly. The business model is non-commercial, supporting cultural preservation and awareness, targeting travelers and heritage enthusiasts globally. Technically, the website employs modern web technologies including Vue.js and uses Cloudflare for DNS services. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features appear basic, and no CMS is explicitly detected, suggesting a custom-built solution. From a security perspective, the site uses HTTPS and has domain transfer protections in place but lacks DNSSEC and visible security headers in the HTML content. There is no cookie consent mechanism or explicit privacy compliance features visible, which could be improved to meet GDPR standards. No contact information or incident response policies are provided, limiting direct communication channels. Overall, the website is professional, trustworthy, and well-branded with authoritative backing. The risk profile is low, but improvements in privacy compliance and security headers would enhance its posture. The absence of contact details and cookie consent are notable gaps. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing clear contact and incident response information.

The website bkralik.cz is a personal portfolio and informational site belonging to an individual who identifies as a student, programmer, and photographer based in the Czech Republic. The site serves primarily as a hub for various subdomains and personal projects rather than a commercial business. The technical infrastructure is basic, relying on simple HTML and CSS with hosting provided by Active24. There is no evidence of modern CMS or advanced web technologies, and the site lacks HTTPS enforcement and security headers, which are critical for protecting visitor data and ensuring trust. From a security perspective, the site shows minimal maturity. There are no visible security policies, privacy or cookie notices, or incident response contacts. The absence of HTTPS and security headers exposes the site to potential risks, although the content itself is low risk and non-commercial. The WHOIS data is consistent and indicates a long-standing domain registration, which supports legitimacy but does not compensate for the lack of security best practices. Overall, the site is safe in terms of content but falls short in technical and security implementations. The lack of privacy and cookie policies also indicates non-compliance with GDPR requirements, which could be a concern if the site collects any user data in the future. Strategic improvements should focus on implementing HTTPS, adding security headers, and publishing privacy and cookie policies to enhance trust and compliance.

T

Tomáš Martínek

er.cz

52

ER.cz is a small Czech-based service providing free third-level domain redirection under the er.cz domain. The service targets Czech internet users who want to simplify or mask their website URLs by offering free domain aliases, email aliases, and visitor statistics. The business appears to be operated by Tomáš Martínek since at least 2004, positioning itself as a niche provider in the Czech internet domain redirection market. The website content is primarily in Czech and offers basic navigation and support features including a discussion forum and FAQ. Technically, the site uses standard HTML, CSS, and JavaScript with Matomo analytics for visitor tracking, but lacks modern security features such as HTTPS enforcement and security headers. The absence of WHOIS data is typical for .cz domains but limits independent verification of domain ownership and age. Contact information is limited to an email address and a contact page, with no phone numbers or social media presence. Overall, the site serves a specialized function with modest technical sophistication and limited security and privacy compliance.

Z

Zdenek Pletka

darkelf.sk

48

Dark Elf is a niche online fantasy strategy game operated by Zdenek Pletka since 2001, targeting Czech and Slovak gamers interested in multiplayer strategic gameplay. The website provides game information, community news, and links to related resources. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial with a GDPR policy present but no cookie consent mechanism. Contact information is limited to an email address, and no phone or physical address is provided. Overall, the site is functional and trustworthy but could improve in security and privacy transparency.

A

Účetní programy AdmWin

admwin.cz

47

The website www.admwin.cz represents a Czech-based software provider specializing in accounting and economic software solutions tailored for small to medium-sized businesses and non-profit organizations. Their product suite includes tax evidence accounting, double-entry accounting, autoservice management, hotel reservation systems, and e-commerce applications. The company claims a long operational history since 1990 with a user base exceeding 2,200 clients, primarily in the Czech Republic. The website content is comprehensive regarding product offerings, changelogs, and user support materials, but lacks explicit contact details and privacy-related policies. From a technical perspective, the site uses basic HTML/XHTML with CSS and older JavaScript libraries such as jQuery 1.7.2 and Lightbox. The platform targets Windows desktop applications, and the website itself shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and structured navigation. Security posture is limited based on available data; no security headers or advanced protections are evident, and the WHOIS data for the domain is missing, which raises concerns about domain registration transparency. No privacy or cookie policies are found, which impacts compliance with GDPR and general privacy best practices. Overall, the website is functional and informative but would benefit from improved security measures, transparency in domain registration, and explicit privacy and contact information to enhance trust and compliance.

C

CZIN.sk

czin.sk

49

CZIN.sk is a Slovak internet portal established in 2005, offering a comprehensive suite of services including internet search, web directory, email, news aggregation, TV program listings, and weather forecasts. The portal targets Slovak-speaking internet users seeking a centralized platform for various online services. It operates primarily on an advertising-supported business model, leveraging multiple ad networks and affiliate programs to generate revenue. The website maintains a consistent brand presence and provides a good user experience with clear navigation and relevant content.

Z

Zdeněk Pletka

darkelf.cz

49

Dark Elf is a niche Czech/Slovak online fantasy strategy game operated by an individual, Zdeněk Pletka, since 2001. The website serves as a portal for the game, providing news, community links, and game information. The technical infrastructure is basic but functional, relying on standard web technologies and Google Analytics for tracking. Security posture is moderate with no advanced protections or security headers detected, and privacy compliance is partial with a GDPR page but no cookie consent mechanism. The missing WHOIS data is a concern for domain legitimacy but does not directly impact the user experience. Overall, the site is safe and suitable for general audiences.

W

WEDOS Internet, a.s.

pridat.eu

58

Přidat.eu is a Czech and Slovak focused free online service that facilitates easy and fast social bookmarking and RSS feed sharing. It offers website owners and internet users tools such as sharing buttons and browser plugins to add bookmarks and RSS sources to various social and bookmarking platforms. The service emphasizes privacy by not collecting user data or using cookies in its sharing buttons, aligning with GDPR and ePrivacy regulations. The website is hosted by WEDOS Internet, a.s., a reputable Czech registrar and hosting provider, and has been operational since 2007. Technical infrastructure is straightforward, relying on standard web technologies and Matomo analytics configured to disable cookies, ensuring minimal user tracking.

I

Insolvenční kancelář Uherský Brod

insolvencni-kancelar.cz

52

The website insolvencni-kancelar.cz represents a small, regionally focused insolvency legal service provider based in Uherský Brod, Czech Republic. The business specializes in insolvency administration, debt relief, and bankruptcy services, with a strong emphasis on personal approach and experience since 2001. The website content is primarily in Czech and targets local clients including debtors and creditors in the Zlínský, Jihomoravský, and Vysočina regions. The business model revolves around providing expert insolvency management and legal advisory services. The site includes structured data confirming contact details and business scope, enhancing search engine understanding and trust.

Jak psát web is a Czech language educational website dedicated to teaching web development, including HTML, CSS, JavaScript, SEO, and related topics. The site targets both beginners and professionals interested in creating and maintaining websites. It offers tutorials, articles, and a discussion forum to support its audience. The website is authored by Dušan Janovský and includes an ISSN number, indicating a formal publication status. Technically, the site uses standard web technologies such as HTML5, CSS, JavaScript, and integrates Google services for search and analytics. The design is basic but functional, with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the site is safe, content-rich, and serves a niche educational purpose but would benefit from enhanced security and privacy compliance measures.

JAHHO.cz is a Czech internet portal providing a categorized web directory, entertainment content such as wallpapers and GIFs, and additional services like TV program listings and search functionality. The site targets a general Czech-speaking audience seeking online entertainment and curated web resources. The business model revolves around advertising revenue, primarily through Google Adsense, and providing a free portal service. The website appears to be a small-scale operation managed by the JAHHO team since 2003, with a basic but functional online presence. Technically, the site uses standard web technologies including HTML, CSS, and JavaScript, with integrations of Google Adsense for advertising and Piwik (Matomo) for analytics. The site is served over HTTPS, ensuring basic transport security, but lacks advanced security headers and modern CMS or frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO best practices. From a security perspective, the site has a basic posture with HTTPS enabled but no evident security policies, privacy or cookie notices, or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. No critical vulnerabilities or adult content were detected, but the site would benefit from enhanced security headers, privacy compliance measures, and clearer contact information. Overall, JAHHO.cz is a modest, general-audience web portal with basic technical and security implementations. Strategic improvements in privacy compliance, security hardening, and domain registration transparency are recommended to enhance trust and compliance.

S

EOS ZUŠ | Soutěže základních uměleckých škol

soutezezus.cz

48

The website www.soutezezus.cz serves as an informational portal dedicated to competitions for basic art schools in the Czech Republic, specifically for the 2024/2025 school year. It provides detailed competition categories, age groups, schedules, and locations, targeting students, educators, and administrators involved in these art schools. The platform supports user login functionality and integrates social media via Facebook SDK. Technically, the site employs XHTML, CSS, JavaScript with libraries such as jQuery, i18next for localization, and Photoswipe for image handling, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Security-wise, the site enforces HTTPS and includes a Content-Security-Policy header, with secure login form features like password visibility toggle and Caps Lock warnings. However, the absence of additional security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. The WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and technical setup suggest legitimate and professional use. Overall, the site is a niche educational resource with moderate technical and security maturity, requiring enhancements in privacy compliance and domain transparency.

S

Sentia

sentiagruppen.no

69

Sentia is a leading Nordic construction group formed by merging prominent companies HENT, SSEA, Vestia, and Målbygg, employing over 1,400 people. The company specializes in complex and sustainable building projects for public and commercial clients primarily in Norway and Sweden. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern web technologies and implements HTTPS with a cookie consent mechanism, indicating good privacy practices. However, the absence of visible security headers and incident response information suggests room for improvement in security posture. The lack of WHOIS data limits domain registration verification, but the professional content and business information support legitimacy. Overall, Sentia presents a credible and trustworthy corporate website with a strong focus on sustainability and large-scale construction projects.

Pelikanletenky.cz is an online travel service platform focused on providing affordable flight tickets, hotel bookings, car rentals, and travel insurance primarily targeting customers in the Czech Republic. The website acts mainly as an aggregator or affiliate portal linking to numerous related travel and transportation domains. The business appears to be relatively new, with domain registration dating back to mid-2022, and operates in the transportation sector with a small business scale. Technical infrastructure is basic, with minimal content and no advanced technologies or CMS detected. The site lacks critical compliance elements such as privacy and cookie policies, contact information, and security best practices, which limits its trustworthiness and user confidence. No security challenges or WAF blocks were detected, allowing full content access for analysis.

S

Sentia ASA

sentiagruppen.com

67

Sentia ASA is a leading Nordic construction group specializing in complex and sustainable building projects across Norway and Sweden. The company consolidates several contractors including HENT, SSEA, Vestia, and Målbygg, employing over 1,400 people. The website highlights their focus on public and commercial sector projects, with expertise in project management and sustainable construction methods such as cross-laminated timber. The company recently announced a listing on the Oslo Stock Exchange, indicating a significant market presence and growth trajectory. Technically, the website is well-structured with modern HTML5 and JavaScript usage, including a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, no explicit CMS or hosting provider information is detected, and security headers are not visibly present in the provided data. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible security policies or incident response contacts. The absence of WHOIS data and the domain's apparent newness raise questions about domain registration legitimacy, although the website content is professional and consistent with a legitimate business. Overall, Sentia ASA's website presents a credible and professional business front with good privacy compliance and user experience. The main risk lies in the lack of WHOIS transparency and security policy disclosures, which should be addressed to enhance trust and compliance.

The website cubu.info serves as an administrative center for various Czech martial arts federations, providing information about different martial arts organizations and upcoming events. It targets martial arts practitioners and organizations within the Czech Republic, offering event announcements and links to affiliated federations. The site is niche and focused on regional martial arts administration. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Hosting and domain registration are stable and consistent with the site's purpose. From a security perspective, the site lacks critical security headers, does not enable DNSSEC, and does not provide privacy or cookie policies, which impacts GDPR compliance. No HTTPS enforcement or advanced security mechanisms were detected in the provided data. No forms or data collection mechanisms were found, reducing immediate data protection concerns but also limiting user interaction. Overall, the site is functional for its purpose but requires improvements in security posture, privacy compliance, and user contact transparency to enhance trust and compliance. The risk level is moderate with no critical vulnerabilities detected but with room for significant security and compliance enhancements.

The website www.zusmeeting.cz represents an educational event organizer focused on the ZUŠ Meeting, a networking and training event for directors and staff of basic art schools in the Czech and Slovak Republics. The organizing companies, Sensio.cz s.r.o. and Sensio.cz Školení s.r.o., also develop and operate related information systems for these schools. The website provides detailed event information, past event archives, and registration links, targeting a niche educational audience. Technically, the site uses modern web technologies including Google Fonts, Google Analytics, and Smartlook for session recording, with a cookie consent mechanism implemented to comply with privacy regulations. However, no explicit privacy policy or terms of service pages are present, which is a compliance gap. Security posture is decent with HTTPS and consent mode for analytics, but lacks security headers and vulnerability disclosure information. WHOIS data is unavailable, which reduces domain trustworthiness and raises concerns about domain registration transparency. Overall, the site is professional and content-rich but would benefit from improved privacy and security disclosures to enhance trust and compliance.

S

SMA PowerUP

sma-powerup.com.au

62

SMA PowerUP is a trusted solar energy partner program operating in Australia, focused on providing qualified and trained partners for the installation and servicing of SMA solar inverters. The program targets home owners, business owners, and solar installers, offering training, marketing support, and warranty upgrades to enhance partner competitiveness. The website is built on TYPO3 CMS and integrates modern technologies such as Google Maps API for partner location services and consent management for privacy compliance. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks some security headers and explicit privacy and terms of service documentation. Overall, the domain appears legitimate and professionally maintained, though WHOIS data is limited due to Australian domain privacy policies.

S

STARGEN

stargen.cz

47

STARGEN is a Czech Republic-based small technology company specializing in web design, graphic design, web hosting, e-commerce solutions, and internet marketing services. The company targets small to medium businesses seeking affordable yet professional web presence and digital marketing solutions. Their website showcases a portfolio of projects and emphasizes quality service at reasonable prices. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and popular libraries like jQuery. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. While the site is accessible and professionally designed, it lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, the site uses HTTPS and client-side validation but lacks visible security headers and advanced protections. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, though the website content suggests a legitimate business. Overall, the site scores moderately on content quality, technical implementation, and business credibility but scores low on privacy compliance and security posture.

O

ODIGY

odigy.com

44

ODIGY is a small design studio specializing in identity, web, and print design services, with a professional portfolio showcasing various branding projects. The company has a long-standing domain registration dating back to 2003, indicating an established presence in the design industry. The website is built on WordPress using modern frameworks and technologies, with good mobile optimization and a professional design quality. However, the site lacks critical privacy and cookie policies, which impacts its compliance posture. Security-wise, HTTPS is enabled and domain transfer is restricted, but DNSSEC is not enabled and no security headers are detected, representing areas for improvement. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

C

Continental

conti.com.br

68

Continental Pneus do Brasil operates as a regional branch of the global Continental brand, specializing in the manufacturing and retail of automotive tires with a strong emphasis on German technology and safety. The website targets consumers and businesses in Brazil, offering a wide range of tire products for cars, trucks, agriculture, and industrial vehicles, supported by dealer locator and technical support services. The brand is positioned as a leading enterprise in the transportation sector with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager CMS and incorporates modern web technologies including Google Tag Manager for analytics and ConsentManager for cookie consent, ensuring compliance with basic privacy requirements. The site demonstrates good mobile optimization, accessibility compliance with ARIA standards, and moderate performance. However, explicit privacy and terms of service pages are not detected in the provided content. From a security perspective, the site uses HTTPS with excellent SSL configuration and includes consent management mechanisms. There is no evidence of exposed vulnerabilities or sensitive data leaks, but the absence of explicit security headers and incident response contact information suggests room for improvement. The WHOIS data indicates a legitimate domain with professional DNS management, consistent with corporate standards. Overall, the website presents a secure, professional, and user-friendly digital presence for Continental in Brazil, though it would benefit from enhanced privacy disclosures and security policy transparency to strengthen trust and compliance.

P

PDGA Pro Shop

pdgaproshop.com

70

PDGA Pro Shop is a specialized e-commerce retailer focused on disc golf products, including discs, apparel, accessories, and tournament director player packs. The website is built on the Shopify platform using the Dawn theme, providing a modern and responsive shopping experience targeted at disc golf enthusiasts and tournament organizers primarily in the United States. The business positions itself as a niche market leader within the disc golf community, leveraging official PDGA branding and social media channels to enhance credibility and reach. Technically, the site employs a robust Shopify infrastructure with CDN hosting, modern JavaScript, and CSS frameworks. Performance is moderate with good mobile optimization and basic accessibility features. SEO is supported by structured data and proper meta tags. Security posture is strong with HTTPS enforced, standard security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response information, which could be improved. Privacy compliance is addressed through a visible cookie consent banner and a privacy policy page that indicates GDPR awareness. Contact information is limited to a contact form without explicit email or phone contacts. Overall, the site demonstrates a good balance of business credibility, technical implementation, and security hygiene, suitable for a small to medium-sized e-commerce operation. Strategic recommendations include publishing a formal security policy, adding incident response contacts, enhancing accessibility, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

C

CMC Group d.o.o.

cmc-group.eu

47

CMC Group d.o.o. is a well-established company founded in 1989, specializing in supplying pipes, fittings, valves, water meters, and equipment for water quality analysis primarily serving water supply and utility companies in Central and South Eastern Europe. The company positions itself as a regional supplier with a broad partnership network of international brands, offering solutions for water and wastewater treatment, AMR/AMI metering, and heating/cooling installations. Their business model is B2B focused, targeting infrastructure and utility sectors. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile optimized and uses HTTPS with service worker support, indicating a moderate level of digital maturity. However, the CMS is custom or unknown, and some security best practices like security headers are missing. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The security posture is moderate but could be improved by adding security headers and formal policies. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to the absence of explicit privacy and security policies and limited transparency on incident response. Strategic improvements in these areas would enhance compliance and trust.

A

Aquatel France

aquatel.fr

49

Aquatel France is a specialized small business operating in the energy sector, focusing on water meters, pulse water meters, and thermal energy meters. The company targets professional and industrial clients requiring metering solutions. The website is built on the Wix platform using the Wix Thunderbolt framework, indicating a moderate level of technical maturity with good mobile optimization and basic accessibility features. The site is secured with HTTPS and has a good SSL configuration but lacks advanced security headers and privacy compliance mechanisms. No WHOIS data is available from AFNIC, which limits the ability to fully verify domain legitimacy and registrant details. Overall, the website presents a professional image but would benefit from enhanced security practices and transparency.

A

Armatec AB

armatec.se

64

Armatec AB is a Swedish knowledge-based company specializing in flow technology solutions, serving primarily B2B clients in the energy sector. Their website presents a professional and comprehensive overview of their products, services, and technical expertise, including support and e-commerce capabilities. The company positions itself as a partner for future technical challenges with a strong focus on customer needs and sustainable solutions. The website content is well-structured, localized in Swedish, and includes customer testimonials and case studies that enhance trust and credibility. Technically, the website employs modern JavaScript and CSS technologies and integrates Azure Application Insights for monitoring, indicating a moderate level of digital maturity. The site is mobile-optimized with good accessibility and SEO practices. However, no CMS or hosting provider details were detected, and performance is moderate. Security headers and SSL configuration details were not provided, which suggests room for improvement in security hardening. From a security perspective, the site uses HTTPS and has monitoring scripts but lacks visible security headers and explicit security or incident response policies. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the professional website content. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and business-focused with good privacy compliance. The main risk lies in the incomplete WHOIS information and limited visible security policies. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trustworthiness.

G

GINEERS

gineers.com

42

GINEERS is a small manufacturing company specializing in embedded electronics and industrial automation products. Their offerings include remote reading devices, industrial measurement instruments, weigh scale indicators, automation systems, converters, and software solutions. The website targets industrial clients and professionals in embedded electronics and automation sectors. The business model focuses on product manufacturing and software support, positioning GINEERS as a niche player in their industry. Technically, the website uses legacy technologies such as Flash and an outdated jQuery version, which impacts security and performance. The site lacks modern CMS or frameworks and shows basic SEO and accessibility features. Mobile optimization is poor, and performance is moderate. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks HTTPS confirmation and security headers, uses deprecated technologies, and exposes no forms or sensitive data. The WHOIS data is missing, raising concerns about domain registration legitimacy. No privacy or cookie policies are present, which impacts compliance. Contact information is clearly provided, but no incident response or security policies are found. Overall, the website is functional and professional but requires significant improvements in security, privacy compliance, and technical modernization. The unclear domain registration status is a notable risk factor. Strategic recommendations include upgrading technology stack, implementing HTTPS and security headers, adding privacy and cookie policies, and verifying domain registration to enhance trust and security posture.

S

Saif International Group

saifintl.com

54

Saif International Group is a medium-sized business operating in the Energy sector, specializing in supplying HVAC products across the MENA region with over 25 years of experience and multiple offices. The website is professionally designed using the Squarespace platform, offering a good user experience and clear navigation focused on their core services of air conditioning equipment and HVAC controls. However, the website lacks critical security and compliance elements such as privacy policies, cookie consent mechanisms, and contact information, which impacts its overall trustworthiness. The absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status, which should be addressed to improve credibility. Technically, the site uses modern web technologies but lacks advanced security headers and SSL configuration details. Overall, the site is safe for general audiences but requires improvements in security posture and privacy compliance to meet industry standards.

S

Stockholm School of Economics in Riga

sseriga.edu

55

The Stockholm School of Economics in Riga website presents a professional educational institution offering a range of academic programs including bachelor, master, and executive MBA degrees. The site is well-structured with clear navigation and comprehensive content about educational offerings, research centers, and student services. The technical infrastructure is based on Drupal 8 CMS, utilizing modern web technologies and third-party analytics and marketing tools such as Google Tag Manager and Facebook Pixel, implemented with user consent mechanisms. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and publicly available security policies. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness, though the website content and branding strongly support legitimacy. Overall, the site is suitable for its target audience of students and academic professionals, with good privacy compliance and user experience.

A

AlgoTrading

algotrading.exchange

57

AlgoTrading.exchange is a specialized website offering algorithmic and high-frequency trading solutions focused on the stock market. The company provides personalized trading bots and integrates with the Takion API to enable automated trading strategies. The website targets professional traders and algorithmic trading enthusiasts seeking advanced automation tools. The business appears to be a small technology-driven firm founded in 2021, with a niche market position leveraging the Takion platform. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS services. The site demonstrates good design quality, mobile responsiveness, and clear navigation, though it lacks advanced SEO and accessibility features. No CMS or complex frameworks are detected. The site does not employ tracking or advertising technologies, indicating a focus on content and direct user engagement. From a security perspective, the domain is registered with a reputable registrar and has a clientTransferProhibited status, which is positive. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, representing areas for improvement. The site lacks privacy, cookie, and terms of service policies, which are critical for compliance with GDPR and other regulations. Contact information is limited to a web form without explicit emails or phone numbers. Overall, the website is professionally presented and trustworthy for its niche but requires enhancements in privacy compliance and security best practices to improve its risk posture and regulatory adherence.

A

airBaltic Riga Open

airbalticrigaopen.lv

50

The airBaltic Riga Open website represents a well-organized sports event focused on disc golf, held annually in Riga, Latvia. The event targets disc golf players, sports enthusiasts, and the local community, offering a world-level competition alongside entertainment and activities. The site demonstrates a consistent brand presence with multiple reputable sponsors and social media engagement, positioning itself as a leading disc golf event in Latvia. Technically, the website is built using modern web technologies including React and Next.js, with Material UI for styling. It is hosted likely on Render.com and optimized for mobile devices, providing a fast and user-friendly experience. However, there is a lack of visible security headers and privacy-related policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS but lacks advanced security headers and does not provide a vulnerability disclosure or incident response information. The absence of WHOIS data due to query limits limits the ability to fully assess domain legitimacy, though the website content and external links suggest a legitimate operation. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, security best practices, and transparency in domain registration details to improve trust and security posture.

L

limango Travel

limango-travel.de

57

limango Travel is an online travel booking platform specializing in family-friendly and wellness vacation accommodations primarily in Germany and selected European destinations. The website offers a structured and detailed catalog of travel options including family hotels, wellness resorts, summer holidays, vacation apartments, all-inclusive packages, and discount deals. The target audience is families and couples seeking curated travel experiences. The platform is moderately mature technically, leveraging modern JavaScript frameworks such as Vue.js and PrimeVue, hosted on Amazon AWS infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent banner present but no visible privacy policy or terms of service in the provided content. Contact information is clearly provided with dedicated phone lines for Germany and Austria and a company email address. Overall, the site is professional and trustworthy but could improve transparency and security practices.

E

EXANTE LTD.

scottandrew.co.uk

59

The website scottandrew.co.uk serves as an aggregator platform providing detailed reviews and information about the EXANTE brokerage firm. EXANTE LTD., founded in 2011 and regulated by MFSA, CySEC, and MiFID, offers a multi-asset trading platform with access to over 400,000 financial instruments globally. The site presents comprehensive business descriptions, customer testimonials, and detailed fee structures, targeting investors and traders seeking professional brokerage services. Technically, the site is built with standard web technologies including HTML5, CSS, and JavaScript, hosted via GoDaddy, and uses HTTPS for secure communication. However, it lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate with no evident vulnerabilities but could be improved by adding security best practices and compliance documentation. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

P

Profesionālās tālākizglītības centrs "Mācību centrs SG"

sunstaracademy.lv

57

Sunstar Academy is a Latvian professional education center specializing in workplace safety training using modern technologies and interactive methods. It operates under the parent company Sunstar Group and collaborates with subsidiaries Meemo and Optiv to provide a comprehensive suite of services including e-learning platforms and onsite training. The website demonstrates a good level of digital maturity with multimedia content, responsive design, and clear navigation. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy in Latvian. Security posture is solid with HTTPS and CSRF protections, though explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, but the lack of WHOIS data limits domain legitimacy verification.

I

Inspirion GmbH

inspirion.eu

57

Inspirion GmbH operates as an importer and supplier of promotional products and advertising gifts based in Sottrum near Bremen, Germany. The company offers a broad catalog of approximately 2,400 items, targeting business customers seeking promotional merchandise. The website supports multiple European languages, indicating a strategic focus on the European market. The business model centers on retail distribution of promotional items, positioning Inspirion as a medium-sized player in the retail sector for advertising materials. Technically, the website is built using modern web technologies including JavaScript, CSS, and HTML5, with the UKit framework for UI components and integration of SalesManago for marketing automation. The site appears to be built on a Shopware platform or similar e-commerce CMS, providing a structured and navigable product catalog. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF token generation endpoints, indicating some security best practices. However, no explicit security headers were detected, and there is a lack of published privacy, cookie, or incident response policies. The absence of contact information and privacy compliance mechanisms reduces the overall security posture and privacy compliance rating. Overall, the website is professional and functional with a moderate risk profile. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, publishing incident response and vulnerability disclosure information, and providing clear contact details to improve trust and compliance.

ART Data, s.r.o. operates the website levny-webhosting.cz, providing affordable webhosting services primarily targeting individuals and small to medium-sized businesses in the Czech Republic. The company offers tiered hosting plans ranging from basic personal hosting to professional and e-commerce solutions, emphasizing reliability and technical support. The website content is well-structured and professional, supporting the company's positioning as a quality yet low-cost hosting provider. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with integration of Google Analytics and Google Tag Manager for user tracking and analytics. While the site is accessible and functional, it lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. Mobile optimization and accessibility are basic but adequate. From a security perspective, the site uses HTTPS for its login form, but the overall security posture is moderate due to missing security headers and absence of explicit privacy and cookie policies. The WHOIS data is unavailable, which raises concerns about domain registration transparency and reduces trustworthiness, although the website content and business information appear legitimate. Overall, the website presents a moderate risk profile with room for improvement in security practices, privacy compliance, and transparency. Strategic enhancements in these areas would strengthen the company's credibility and user trust.

M

Mikulášska chata s.r.o.

mikulasskachata.sk

62

Hotel Mikulášska chata s.r.o. operates a mountain hotel located in the Demänovská dolina region of Slovakia, offering accommodation, wellness, dining, and event services primarily targeting tourists, families, and winter sports enthusiasts. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about the hotel and its offerings. The technical infrastructure leverages modern web technologies and integrates analytics and marketing tools with user consent mechanisms, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a clear cookie policy and GDPR adherence. Overall, the business demonstrates high credibility and trustworthiness with transparent contact information and active social media engagement.

T

Tredger Enterprises Inc.

stationmade.com

59

Stationmade.com is a professional website specializing in crafting exceptional Shopify apps, targeting Shopify store owners and e-commerce merchants. The business operates under Tredger Enterprises Inc., a Canadian entity, and positions itself as a trusted developer with thousands of Shopify stores relying on its apps to enhance customer experience and revenue. The website content is well-structured, mobile-optimized, and leverages modern technologies such as SvelteKit, indicating a mature technical infrastructure. From a security perspective, the website enforces HTTPS and demonstrates good SSL configuration. However, it lacks several security headers and does not provide a cookie consent mechanism, which are important for enhancing security posture and privacy compliance. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, the website presents a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and reduce potential risks.

P

Pochutnej Si! Bistro

pochutnejsibistro.cz

48

Pochutnej Si! Bistro is a modern hospitality business located in Třinec, Czech Republic, specializing in street food, daily lunch menus, catering services, and gift vouchers. The website reflects a small but professional local bistro with a young, enthusiastic team focused on quality and freshness. The business targets general audiences including locals and visitors seeking quality casual dining and takeaway options. Technically, the website is built using React.js with a modern front-end stack, hosted likely via the Czech registrar WEDOS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS in use but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is comprehensive and includes email, phone, physical address, and a contact form. Social media presence is active on Facebook and Instagram. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Armani

armani.com

63

Armani is a globally recognized luxury fashion brand specializing in high-end apparel, accessories, and lifestyle products. The official website serves as a premium e-commerce platform and brand showcase, targeting affluent consumers and fashion enthusiasts worldwide. The brand maintains a strong market position with multiple subsidiary lines such as Emporio Armani and Armani Exchange. Technically, the website employs modern web technologies including Tailwind CSS and Google Tag Manager, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and secure digital presence consistent with a leading luxury brand.