Security Directory

C

CP/COMPARTNER

cp-compartner.de

54

CP/COMPARTNER is a well-established German communication agency specializing in sustainable and meaningful communication solutions for clients in politics, society, and the economy. With over 30 years of experience, the agency emphasizes strategic and creative communication that builds trust and simplifies complex topics. Their service portfolio is broad, including campaign management, design, content creation, digital tools, and public relations. The website is professionally designed, mobile-optimized, and uses TYPO3 CMS with integrated consent management and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting strong business credibility.

S

SEVEN SPORT s.r.o.

insportline.eu

55

inSPORTline, operated by SEVEN SPORT s.r.o., is a large European e-commerce business specializing in the manufacturing and retail of fitness equipment and related sporting goods. The website presents a professional and comprehensive product catalog including fitness machines, e-bikes, moto gear, outdoor equipment, and health and beauty products. The company targets fitness enthusiasts and general retail customers across multiple European countries, positioning itself as a leading brand in its sector. The digital infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and marketing tools like Targito and SmartSupp Chat, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance, supporting trust and regulatory adherence. Overall, the website is well-designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

S

SEVEN SPORT s.r.o.

e-insportline.pl

59

The website www.e-insportline.pl represents a large-scale e-commerce platform specializing in fitness and sports equipment retail and wholesale in Poland. The company behind the site is SEVEN SPORT s.r.o., positioning itself as the largest producer and seller of fitness equipment in Poland. The site offers a broad catalog of products, promotions, and customer support, targeting consumers interested in fitness and sports gear. The business model is primarily online retail with wholesale capabilities, serving a Polish-speaking audience with consistent branding and professional presentation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Google Analytics, Microsoft Clarity, and several marketing and retargeting tools such as Persoo and Targito. The site is mobile-optimized, accessible, and SEO-friendly with structured data markup enhancing search engine visibility. Performance is moderate, with lazy loading and deferred script loading implemented to improve user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. Forms use POST methods and no sensitive data is exposed in the HTML. However, the site lacks a publicly visible security policy or incident response information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is basic, with a privacy policy and cookie consent mechanism in place, but could be enhanced with explicit GDPR statements. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data reduces transparency but is common for commercial sites using privacy protection. No adult or questionable content is present. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to improve trust and compliance.

S

SEVEN SPORT s.r.o.

insportline.si

51

The website www.insportline.si is an established e-commerce platform specializing in fitness and sports equipment retail, targeting primarily the Slovenian market. Operated by SEVEN SPORT s.r.o., the domain has been active since 2010, reflecting a mature business presence. The site offers a broad range of products including fitness machines, sports gear, outdoor equipment, and health and beauty items, supported by promotional campaigns and a structured product catalog. The business model is retail-focused with a clear online sales channel and regional sister sites across Europe. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility.

S

SEVEN SPORT s.r.o.

insportline.bg

48

SEVEN SPORT s.r.o. operates the Bulgarian e-commerce website insportline.bg, specializing in retailing fitness and sports equipment. The website targets Bulgarian consumers with a broad product range including fitness machines, sports accessories, and outdoor equipment. The company maintains a consistent brand presence across multiple regional domains, indicating a strong market position in Central and Eastern Europe. The site features a modern technical infrastructure leveraging jQuery, Bootstrap, and Swiper.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and standard security headers, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, suitable for its retail business model.

S

SEVEN SPORT s.r.o.

insportline.hu

53

inSPORTline.hu is a well-established e-commerce and retail platform specializing in premium sports equipment and fitness products. Operated by SEVEN SPORT s.r.o., the website targets general consumers interested in sports, fitness, and outdoor activities primarily in Hungary and surrounding Central European markets. The company maintains a strong regional presence with sister sites in multiple countries, offering a broad product range and customer support services. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience.

S

SEVEN SPORT s.r.o.

insportline.de

58

SEVEN SPORT s.r.o. operates the inSPORTline.de website, positioning itself as the largest manufacturer and seller of fitness equipment in Germany. The company offers a broad range of fitness, sports, moto, outdoor, health, beauty, and children's products through an e-commerce platform targeting German-speaking customers. The website features extensive product listings, promotional banners, and news articles relevant to fitness and sports enthusiasts. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and Google Tag Manager, with performance optimizations such as lazy loading and deferred script loading. Hosting is provided by forpsi.cz, consistent with the company's Czech origins, while the site targets the German market. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-structured, serving a large retail audience in the fitness sector.

F

Fünferfilm

fuenferfilm.de

37

Fünferfilm is a small independent film production company based in Hamburg, Germany, founded in 2016. The company focuses on producing artistic and narrative films by dedicated filmmakers, with a strong presence in film festivals and collaborations with various partners in the film industry. Their website showcases a portfolio of films, upcoming projects, and festival participations, targeting film enthusiasts and industry professionals. Technically, the website uses a straightforward tech stack including HTML5, CSS3, jQuery, and Swiper.js for interactive elements. It is hosted on a German hosting provider (kasserver.com) and uses HTTPS, ensuring secure communication. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the website enforces HTTPS but lacks important security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.

P

Port au Prince Film & Kultur Produktion GmbH

port-prince.de

40

Port au Prince is a specialized film production and distribution company based in Germany, operating through multiple GmbH entities focused on production, distribution, and media agency services. The company targets film professionals and enthusiasts, positioning itself as an award-winning niche player in the German film industry. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins and tracking tools, and hosted on RZone servers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Extrema S.r.l. is an Italian company specializing in manufacturing mobility and accessibility solutions such as servoscala, montascale, and piattaforme elevatrici. With over 25 years of experience and a presence in more than 50 countries, Extrema positions itself as a trusted provider focused on improving quality of life through innovative and customizable products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to individuals and organizations seeking barrier-free mobility solutions. Technically, the site leverages modern frameworks like Nuxt.js and Vue.js, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with privacy regulations, including GDPR, supported by clear privacy and cookie policies.

T

Teekanne

teekanne.cz

56

Teekanne.cz is the Czech Republic website for Teekanne, a well-established tea brand with a history dating back to 1882. The website primarily serves as a brand and product showcase, targeting general consumers interested in tea products. The site employs modern front-end technologies such as Swiper.js for interactive elements and presents a professional and consistent brand image. However, the technical infrastructure lacks visible advanced security headers and privacy compliance indicators, and no WHOIS data is publicly available, which limits trust assessment. The absence of explicit privacy and cookie policies suggests room for improvement in compliance and transparency. Overall, the website is functional and visually appealing but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

S

SEVEN SPORT s.r.o.

insportline.cz

58

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.

T

Transkript online s.r.o.

transkript.cz

42

Transkript online s.r.o. is a well-established social enterprise based in the Czech Republic, specializing in providing professional online transcription services primarily aimed at persons with hearing impairments. The company holds a leading position in its market segment, offering innovative technical solutions such as simultaneous speech transcription via its eScribeDroid mobile application and accessibility to numerous hotlines. The website reflects a mature digital presence built on WordPress, with good SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates a trustworthy and professional image aligned with its social mission.

S

S - STAV s.r.o.

s-stav.cz

48

S - STAV s.r.o. is a Czech Republic-based construction company specializing in building family and apartment houses, renovations, and machine-applied plasters and coatings. The company positions itself as a reliable partner with long-term experience and trusted suppliers, targeting individuals and businesses seeking quality construction and renovation services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technical infrastructure includes modern libraries such as Bootstrap, jQuery, and Swiper.js, with HTTPS enforced and cookie consent implemented, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and company registration details. Security posture is adequate with HTTPS but lacks advanced security headers and incident response information. Privacy compliance is supported by visible privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security practices and transparency in domain registration.

Bedope.cz is a Czech retail website specializing in the sale of nicotine pouches branded as Dope. The company, DanCzek a.s., positions itself as a local manufacturer offering competitively priced nicotine products with a focus on adult consumers. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates modern frontend technologies such as jQuery, Bootstrap, and Swiper.js, and uses the Nette framework on the backend. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data and security headers slightly reduces trustworthiness. No critical security vulnerabilities were detected, but improvements in security headers and incident response information are recommended.

P

Pro-idea s.r.o.

koloshop.cz

64

Koloshop.cz is a professional e-commerce retailer specializing in bicycles, bicycle components, and related services such as servicing and rentals. The website targets cycling enthusiasts and general consumers primarily in the Czech Republic and neighboring countries, offering a wide range of products including mountain, road, trekking, and children's bikes. The company behind the site is Pro-idea s.r.o., a medium-sized retail entity with a consistent brand presence and a well-structured online platform. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and uses several third-party services for recommendations, chat support, and user verification. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

5

5 senses for kids Foundation

5senses4kids.org

56

5 senses for kids Foundation is a small non-profit organization dedicated to supporting educational, cultural, social, and scientific actions aimed at the harmonious development of children through multisensoriality. The foundation provides educational resources, supports scientific research, and engages parents and researchers with relevant content and activities. The website is professionally designed, bilingual (French and English), and features partnerships with recognized scientific and cultural organizations, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress with Bootstrap 4 and jQuery, leveraging modern libraries such as Swiper.js and Tippy.js for UI components. It uses Google Analytics and Google Tag Manager for analytics and tracking, and employs Google reCAPTCHA v3 for form security. Hosting is provided by o2switch, a reputable French hosting provider. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled, and some recommended security headers are missing. There is no visible security policy or incident response contact information, and no cookie consent mechanism is implemented, which could be a compliance gap under GDPR. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, implementing a cookie consent banner, and publishing a security.txt file to improve security posture and compliance.

S

SHIMADZU CORPORATION

shimadzu.com

64

Shimadzu Corporation is a long-established enterprise specializing in analytical and measuring instruments, medical systems, and industrial equipment. The company has a strong global presence and a history dating back to 1875, positioning itself as a leader in technology and healthcare sectors. The website reflects a mature digital presence with comprehensive business information, investor relations, and sustainability initiatives. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes multilingual support and cookie consent mechanisms, indicating a good level of digital maturity. Security posture is solid with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable anomaly but does not detract from the professional presentation and trustworthiness of the site. Overall, the site is well-designed, content-rich, and suitable for its target audience of researchers, medical professionals, and industrial clients.

P

Pro-idea s.r.o.

pro-idea.cz

43

Proidea.digital is a Czech Republic based digital agency operating since 2007, specializing in web development, online marketing, production, and design services for ambitious projects. The company targets businesses seeking to grow their digital presence with a professional and experienced partner. The website reflects a well-structured and professionally designed digital presence, supporting multiple languages and showcasing client references and testimonials. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and Masonry.js, with a custom Bootstrap CSS framework, indicating a moderate level of digital maturity. However, some SEO and accessibility features could be improved. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and policies. The absence of privacy and cookie policies and incomplete WHOIS data reduce compliance and trust scores. Overall, the site is safe, professional, and business-focused but would benefit from enhanced security and privacy transparency.

N

Národní institut pro kulturu

culturenet.cz

45

Culturenet is an information portal and network platform dedicated to cultural professionals across various disciplines in the Czech Republic. It operates as a project of the Institut umění − Divadelní ústav (IDU), a government cultural institute, providing news, grant information, professional networks, publications, and event listings. The website targets cultural professionals and organizations, offering a comprehensive resource for cultural sector updates and opportunities. The platform is well-established with a consistent brand and high-quality content, serving as a trusted source within the Czech cultural ecosystem. Technically, the website is built on WordPress 6.7.2 with modern JavaScript libraries such as jQuery, Swiper.js, and Select2, ensuring a responsive and user-friendly experience. It integrates Google Tag Manager for analytics and MailPoet for newsletter management. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with lazy loading of images and asynchronous script loading. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide visible security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain registration trustworthiness, but the affiliation with a government cultural institute and the professional presentation mitigate concerns. Overall, Culturenet presents a low-risk profile with strong content quality and privacy compliance. Strategic improvements include enhancing security headers, publishing explicit security policies, and providing clearer direct contact information to improve business credibility and security posture.

S

Sdružení české filmové kritiky, z.s.

filmovakritika.cz

44

The website filmovakritika.cz represents the Sdružení české filmové kritiky, a Czech non-profit organization dedicated to film criticism, awards, and cultural promotion within the Czech film industry. It serves a niche audience of film critics, cinephiles, and industry professionals by providing reviews, award information, premieres, and critic profiles. The site is well-structured, primarily in Czech, and demonstrates consistent branding and good content quality. The domain is well-established since 2010, supporting the organization's credibility. Technically, the site is built on WordPress using the Elementor page builder, with modern JavaScript libraries such as Swiper.js and jQuery. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms collect sensitive user data except a basic search form. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. External links include many gambling-related domains embedded in hidden elements, which may be unrelated or potentially spammy, warranting further review. Overall, the website is a legitimate cultural media platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance trust and regulatory adherence.

R

Regierung des Fürstentums Liechtenstein

regierung.li

54

The website 'regierung.li' is the official online presence of the Government of the Principality of Liechtenstein. It serves as a comprehensive portal providing information about government members, ministries, media releases, services, and contact details. The site targets citizens, media, and international partners seeking authoritative information on Liechtenstein's government activities. The business model is informational and communicative, positioning itself as the primary government information source in the country. Technically, the site employs modern web technologies including Blazor for frontend interactivity, jQuery, and Swiper.js for UI components, alongside Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and disables cookies in analytics to enhance privacy. However, it lacks several security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy, though a cookie consent mechanism is absent. Overall, the site is trustworthy, professional, and well-aligned with its government function. Recommendations include implementing security headers, adding cookie consent, publishing security policies, and considering a vulnerability disclosure program to further strengthen security posture and user trust.

S

Storyous

storyous.com

43

Storyous is a well-established company founded in 2012, specializing in modern POS systems tailored for the hospitality industry including restaurants, cafés, and food trucks. The company offers integrated hardware and software solutions such as POS systems with payment terminals, stock management, and real-time business reporting. Positioned as a leading provider in its market, Storyous emphasizes ease of use, rapid staff training, and 24/7 customer support. The parent company is Teya, indicating a broader corporate structure. Technically, the website is built on WordPress and hosted on Amazon AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Intercom for customer engagement. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, Storyous presents a professional, trustworthy, and secure online presence with strong business credibility. Recommendations include enhancing DNS security, adding security headers, and publishing security policies to further strengthen trust and compliance.

H

Hakuv parni pivovar s.r.o.

hpp.beer

54

Hákův parní pivovar is a small Czech craft brewery established in 2018, specializing in authentic Czech craft beer with a strong local presence. The company operates multiple pubs and hostinec locations, offers gift packages, and actively participates in charitable projects, enhancing its community engagement and trustworthiness. The website reflects a professional and consistent brand image targeting craft beer enthusiasts and local customers. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

L

Leaders Group

sportsbusinessjournal.com

68

Sports Business Journal, operated by Leaders Group, is a leading media publication focused on the sports business industry. It provides comprehensive news, analysis, newsletters, podcasts, video content, and hosts industry events. The website targets sports industry professionals, marketers, and executives, offering subscription-based services combined with advertising and sponsorship revenue streams. The site demonstrates a mature digital presence with modern technologies such as React, Bootstrap, and extensive use of analytics and advertising platforms. Privacy and cookie consent mechanisms are robust, reflecting compliance with GDPR and related regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is not publicly available, indicating privacy protection which is common for media companies. Overall, the site is professional, trustworthy, and well-positioned in its niche.

S

Spolek Most

boziden.cz

33

The website www.boziden.cz represents a small non-profit organization named Spolek Most, focused on organizing spiritual and cultural events such as the multi-genre festival 'Boží den', creative weekends, and spiritual retreats primarily in the České Budějovice region of the Czech Republic. The organization aims to foster community engagement and spiritual experiences through family-friendly activities, music, and prayer. The website is built on WordPress using the Bricks theme and Jet Engine plugin, featuring modern web technologies and responsive design. It is well-structured with clear navigation and event information, supported by social media channels on Facebook, Instagram, and YouTube. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable, limiting domain trust assessment, but the website content and structure indicate a legitimate community organization. Overall, the site provides a positive user experience with good content quality and technical implementation but would benefit from enhanced privacy compliance and security best practices.

Mechanics' Institute is a well-established non-profit cultural and educational organization based in San Francisco, offering a wide range of services including library access, cultural programming, chess education, and community events. The website reflects the organization's mission to serve as a vibrant arts and cultural hub, providing resources and programs for community engagement. The business model focuses on membership, events, and educational services, targeting community members interested in culture, education, and chess. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript libraries including Swiper.js and FontAwesome, and is hosted behind Cloudflare DNS services. The site is mobile-optimized and includes accessibility features, though no explicit CMS or framework is detected. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and security headers, and does not publish privacy, cookie, or security policies, indicating gaps in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and explicit security and incident response policies to improve its security posture and regulatory adherence.

G

Grillfreaks.cz

grillfreaks.cz

47

Grillfreaks.cz is a small hospitality business operating a unique bistro and bar located in the training ground area of Viktorka. Founded in 2023, the company focuses on delivering quality food with a creative and humorous approach, targeting local customers who appreciate good cuisine, music, and social events. Their business model includes direct food and beverage services, catering, and event hosting, positioning them as a community-centric hospitality provider in the Czech Republic. Technically, the website is built on WordPress using the Blocksy theme and Elementor page builder, supported by jQuery and Swiper.js for interactive elements. Hosting is provided by vas-hosting.com, and the site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional and trustworthy but could improve in security and technical SEO aspects.

D

Dorohlíku - rohlík jak ho neznáte

dorohliku.cz

56

Dorohliku.cz is a Czech-based food service website specializing in traditional Czech dishes served in crispy rohlík bread. Founded in 2020, the business targets general consumers seeking quick, quality Czech comfort food, delivered via modern automated vending machines. The website employs modern web technologies including React and Next.js, with integrations such as Google Tag Manager and Google Maps API to enhance user experience and analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the domain registration details are consistent with the business claims, indicating legitimacy. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance.

P

PROSTĚ NA KOLECH - pojízdný bar

prostenakolech.cz

39

Prostě na kolech is a small hospitality business based in the Czech Republic offering a unique mobile bar rental service. They have transformed a horse trailer into a portable bar suitable for events such as weddings, celebrations, and corporate parties. Their service includes bar rental, optional bar staff, decorations, and delivery within a specified radius. The website is professionally designed with clear navigation and good content quality, targeting event organizers and individuals seeking a stylish bar solution for their events. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI effects and analytics. The site is mobile optimized and includes Google Analytics for visitor tracking. However, it lacks privacy and cookie policies and does not implement a cookie consent mechanism, which is a compliance gap. No forms are present, reducing data collection risks. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy assessments. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a professional and functional online presence for a niche hospitality service but requires improvements in privacy compliance, security headers, and domain transparency to enhance trust and regulatory adherence.

K

KODAP

kodap.de

38

KODAP is a professional services firm specializing in tax consulting, auditing, accounting, payroll, and legal advisory services primarily targeting companies and entrepreneurs in the Czech Republic and the broader EU region. The company is recognized for its comprehensive and tailored approach, leveraging modern technologies to deliver efficient and user-friendly services. It holds memberships in several professional chambers and has received the prestigious Steuerberatungskanzlei des Jahres 2024 award, underscoring its market credibility and expertise. Technically, the website is built on WordPress 6.7.2 with a modern tech stack including jQuery, Google Tag Manager, reCAPTCHA, and cookie consent mechanisms. SEO is well implemented with Yoast SEO plugin and structured data. The site is mobile-optimized and performs moderately well, though some accessibility improvements could be made. Security practices include HTTPS enforcement and form protection, but lack explicit security policy disclosures and advanced security headers. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of published incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. Privacy compliance is basic, with cookie consent implemented but no visible privacy policy or terms of service pages in the provided content. Overall, KODAP presents a trustworthy and professional online presence aligned with its business focus. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure mechanisms to strengthen compliance and trust.

A

Audience

audience.io

69

Audience is a professional audience management platform focused on helping brands and media companies grow, engage, and monetize their audiences through interactive campaigns and data-driven tools. The platform boasts a large number of campaigns and data points collected, supported by extensive integrations with advertising and marketing services. The website demonstrates a mature digital presence with modern technologies and strong marketing infrastructure. Technically, the site is built on Webflow CMS and uses a variety of modern analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the website enforces HTTPS and uses secure third-party services. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and comprehensive, indicating good compliance with data protection regulations. Overall, the website and business appear legitimate and professional, with no signs of suspicious activity. The lack of WHOIS data is due to privacy protection, which is common and justified for this type of business. Strategic recommendations include enhancing security headers and publishing a formal security policy or vulnerability disclosure to further improve trust and security posture.

A

APEX303

etl-worldwide.com

56

APEX303 operates as an Indonesian online gambling platform specializing in slot88 games, offering RTP live slot data to enhance player experience. The website targets Indonesian adult gamblers seeking slot games with reputed high win rates. The business is newly established in 2024, with a domain registered recently and consistent with the platform's launch timeline. Technically, the site uses modern web technologies including AMP HTML and Swiper.js, hosted behind Cloudflare DNS with HTTPS enabled, providing a moderate level of performance and mobile optimization. However, the site lacks comprehensive privacy and cookie policies, contact information, and advanced security headers, which limits its compliance and trustworthiness. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the platform presents a functional gambling service but requires improvements in security, privacy, and transparency to enhance user trust and regulatory compliance.

R

Ryan Barrett

snarfed.org

53

snarfed.org is a personal blog operated by Ryan Barrett, focusing on technology, open source software, personal essays, and photography. The site is a niche platform targeting general internet users interested in these topics. It operates on WordPress.com hosting using the Jetpack plugin and related WordPress technologies. The blog has a consistent branding and provides clear author identity, including a public PGP key for trust. Technically, the site uses modern web technologies but lacks advanced security headers and explicit privacy or cookie policies. Security posture is adequate with HTTPS enforced and domain registration consistent with the website's identity. Overall, the site is trustworthy and safe for general audiences but could improve privacy compliance and security best practices.

A

Adevinta

adevinta.com

77

Adevinta is a prominent online classifieds group operating digital marketplaces primarily across Europe. The company focuses on sustainable commerce, promoting reuse and circular economy principles through its various brands and platforms. Their market position is strong, with a large footprint in e-commerce sectors including real estate, mobility, and job listings. The website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and tracking integrations such as Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site is trustworthy and well-structured, targeting a general audience interested in digital marketplaces and sustainable commerce.

M

Muzeum a galerie severního Plzeňska

marianskatynice.cz

52

Muzeum a galerie severního Plzeňska is a regional government-owned cultural institution located in Mariánská Týnice, Czech Republic. It operates a museum and gallery focused on baroque architecture, regional history, and cultural heritage, serving visitors, schools, researchers, and the general public. The institution holds national cultural monument status and the surrounding landscape has been awarded the European Heritage Label, underscoring its cultural significance. The website provides comprehensive information about exhibitions, events, educational programs, and visitor services, including a virtual tour and an e-shop. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, Swiper.js, and jQuery Mmenu, delivering a responsive and user-friendly experience. The site is well-structured with clear navigation and accessibility features, though some improvements in security headers and incident response information could enhance its security posture. The presence of a cookie consent banner and a privacy policy page indicates compliance with GDPR requirements. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or malicious content were detected. The absence of WHOIS data for the domain is a concern for domain trust but does not detract from the legitimacy of the institution, which is supported by government ownership and official cultural designations. Overall, the website is professional, informative, and trustworthy, serving as an effective digital presence for the museum. Strategic recommendations include improving security headers, publishing incident response and security policies, and addressing the missing WHOIS information to enhance domain trustworthiness.

T

TECHNICOAT Bakeware s.r.o.

technicoat-bakeware.com

51

TECHNICOAT Bakeware s.r.o. is a Czech Republic based small manufacturing company specializing in high-quality coated and uncoated bakeware products and related coating services for industrial bakeries. The company emphasizes improving baking efficiency, hygiene, and safety through its non-stick coating technology. The website reflects a professional and consistent brand presence with clear product and service offerings, targeting industrial baking businesses. Technically, the website uses modern JavaScript libraries and Google services with GDPR-compliant cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and consent mode implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. The site is free from adult or questionable content and provides clear contact information and business credentials. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from improved transparency on domain registration and enhanced security disclosures.

C

Czech Online System s.r.o.

digitalniurednideska.cz

51

Czech Online System s.r.o. operates the website digitalniurednideska.cz, offering specialized digital official notice boards primarily targeting municipalities and local government offices in the Czech Republic. Their business model focuses on providing outdoor digital signage hardware combined with proprietary content management software, enabling remote and automated display of official documents and local information. The company is small-sized, founded in 2011, and presents a professional and consistent brand image with clear contact and reference information. Technically, the website employs common web technologies including jQuery, Swiper.js, and Google Analytics, with a moderate performance profile and good mobile optimization. The digital signage hardware supports Windows and Android platforms, emphasizing all-in-one outdoor solutions with touch capabilities. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, while HTTPS is implied, explicit security headers are not detected, and no dedicated security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, though the website content and company information appear legitimate and professional. No vulnerabilities or malicious content were identified. Overall, the website scores well in content quality, privacy compliance, and business credibility, but could improve in security posture and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS data visibility to strengthen trust and compliance.

C

Czech Online System s.r.o.

digitalnipanely.cz

52

Czech Online System s.r.o. operates the website digitalnipanely.cz, specializing in the sale and rental of digital LED touch panels primarily targeting businesses, hospitality, public institutions, and event organizers in the Czech Republic. The company positions itself as an innovative provider of modern digital signage solutions, offering remote content management software and a variety of panel products. The website reflects a professional and consistent brand image with comprehensive contact information and social media presence, supporting its market credibility. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for analytics and marketing, alongside Swiper.js for UI components. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are explicitly identified, and some security headers are missing, suggesting room for technical hardening. From a security perspective, the site enforces HTTPS and uses secure forms with required fields, but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, although the website content and business information appear legitimate and professional. No vulnerabilities or suspicious content were detected. Overall, the website presents a solid business front with good technical and privacy compliance but would benefit from enhanced security policies, WHOIS transparency, and additional trust signals to improve its security posture and domain legitimacy.

B

Budějovický Budvar, n. p.

budweiser-budvar.cz

58

Budějovický Budvar, n. p. is the national brewery of the Czech Republic, with a strong heritage and a significant export presence in over 70 countries. The company produces a variety of beer products, including limited edition collaborations with microbreweries, and offers brewery tours and educational content through its website. The brand is well recognized and maintains consistent, professional digital branding. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. Security posture is solid with HTTPS enforced and age verification implemented to comply with alcohol advertising regulations. However, explicit security headers are not detected, and no incident response contact is provided. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its content and external references. Overall, the site is professional, secure, and compliant, targeting adult consumers and partners in the beer industry.

T

TECHNICOAT s.r.o.

technicoat.cz

53

TECHNICOAT s.r.o. is a well-established, family-owned company specializing in high-performance functional coatings based on fluoropolymer technology. Founded in 1999 and headquartered in the Czech Republic, it serves a broad range of industrial sectors including automotive, energy, food, semiconductor, chemical, and general engineering. The company is part of the ADELHELM group and operates subsidiaries such as TECHNICOAT Bakeware s.r.o. Their business model focuses on B2B service provision with a strong emphasis on quality, innovation, and customer responsiveness. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integrated Google Analytics and Consent Mode for privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance protection. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the legitimacy of the business, which is supported by certifications such as ISO 9001:2015 and multiple trust indicators including customer testimonials and industry awards. Overall, the website and business present a credible, professional, and secure digital presence suitable for their industrial clientele. Recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen trust and compliance.

C

CleverCherry

clevercherry.com

52

CleverCherry is a well-established creative and digital agency based in Birmingham, United Kingdom, with a domain age dating back to 2000. The company positions itself as a leading agency in the Midlands, offering a range of marketing, digital, and creative services targeted primarily at businesses seeking professional digital solutions. The website reflects a professional and consistent brand image, supported by structured contact information and active social media presence. Technically, the website employs modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and Font Awesome for iconography, hosted on DigitalOcean infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security policies to align with best practices.

O

Obchodní a technologický holding a.s.

otholding.cz

40

Obchodní a technologický holding a.s. is a Czech investment holding company focused on technology and startups. The company provides a portfolio of services including lead management, mobile app development, web notifications, LED panel rentals, and digitalization solutions for municipalities. Their market position is that of an innovator and quality leader in their sectors, targeting businesses and startups primarily in the Czech Republic and Slovakia. The website content is professional and well-structured, supporting their business model and market positioning. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery, Swiper.js, and BaguetteBox.js. Google Analytics and Google Tag Manager are used for tracking, but no explicit privacy or cookie policies are present, indicating a gap in privacy compliance. The site shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or security policy information. The lack of WHOIS data reduces trust and transparency, which is a concern for legitimacy. Overall, the security posture is moderate but could be improved with better privacy compliance and security best practices. The overall risk assessment suggests a generally trustworthy and professional business website with some compliance and transparency gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and enhancing contact and incident response information to strengthen trust and security posture.

A

APPKEE s.r.o.

appkee.pl

54

APPKEE s.r.o. is a technology company specializing in custom mobile application development for iOS and Android platforms, targeting businesses and municipalities primarily in Central Europe. The company offers a comprehensive app management platform and premium features such as push notifications, coupons, analytics, and iBeacon technology. Their market position is supported by a portfolio of over 750 apps and multiple regional offices. Technically, the website employs modern analytics and tracking tools, is mobile-optimized, and uses HTTPS with secure forms compliant with GDPR. However, the absence of WHOIS data and explicit security policies slightly impacts trust. Overall, APPKEE demonstrates a solid digital presence with good business credibility and technical maturity.

M

Město Blatná

mesto-blatna.cz

40

Město Blatná operates an official municipal website providing comprehensive information and services to its citizens, businesses, and visitors. The site covers city history, governance, public notices, COVID-19 updates, and contact information, positioning itself as a trusted local government resource. The website is well-structured with clear navigation and modern web technologies, including jQuery, Bootstrap, and Swiper.js, ensuring a good user experience and mobile optimization. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and external links strongly indicate a legitimate municipal entity. Strategic recommendations include publishing a privacy policy, enhancing security headers, and verifying domain registration details to improve trust and compliance.

M

METAL TRADE COMAX – DIVISION COMAX ROOFS

comaxroofs.co.uk

67

COMAX ROOFS is a leading Czech manufacturer specializing in coated aluminium and metal roofing products, operating under the parent company METAL TRADE COMAX. The company offers a range of premium roofing products and services including custom painting and packaging, targeting roofing professionals and merchants primarily in the UK and Europe. The website demonstrates a mature digital presence with a modern Drupal 10 CMS, responsive design, and integrated privacy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data due to domain registration errors introduces some risk in domain legitimacy assessment, but the professional content and trust indicators mitigate this concern. Overall, the website is well-structured, trustworthy, and business-focused, supporting COMAX ROOFS' market position as a reputable manufacturer.

Ú

Ústav práva a právní vědy®, o.p.s.

ustavprava.cz

50

Ústav práva a právní vědy®, o.p.s. is a professional education institution based in Prague, Czech Republic, specializing in advanced legal and business administration programs such as MBA, LL.M., DBA, and others. The institution offers a wide range of study programs with international certifications, targeting managers, legal professionals, entrepreneurs, and public administration employees. The website is well-designed, mobile-optimized, and provides comprehensive information about programs, benefits, and events. It integrates multiple modern analytics and marketing tools while maintaining GDPR compliance through consent mechanisms. However, the absence of publicly available WHOIS data slightly reduces trustworthiness, though the detailed contact information and certifications support legitimacy. Security posture is good with HTTPS and CAPTCHA protections, but could be improved by adding explicit security headers and publishing a security policy.

G

GRASPO CZ, a.s.

graspo.com

43

GRASPO CZ, a.s. is a well-established European printing company specializing in high-quality full-color printing and comprehensive bookbinding services. The company emphasizes its long tradition and expertise, serving clients from the Czech Republic to international markets. Their offerings include digital, offset, and rotary printing, along with custom diary and planner production and branding services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and GSAP, along with Google Tag Manager and Analytics for tracking. It integrates reCAPTCHA for bot protection and uses a cookie consent mechanism, indicating awareness of privacy regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, HTTPS is enabled, and reCAPTCHA is implemented, but there is a lack of security headers and no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the website content and business information appear legitimate and professional. Overall, the website presents a solid business presence with moderate technical maturity and a good security posture, though improvements in transparency and security best practices are recommended to enhance trust and compliance.

S

Studio3D

studio3d.se

47

Studio3D is a Sweden-based creative studio specializing in visualization and marketing services, targeting businesses seeking high-quality visual content and marketing solutions. Established in 2013, the company positions itself as more than a visualization agency, emphasizing creativity and adaptability to marketing challenges. The website is professionally designed, mobile-optimized, and built on WordPress, leveraging modern technologies such as Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements are recommended in security headers and formal security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website reflects a trustworthy and professional business presence with room for enhanced compliance and security documentation.