Security Directory

M

Mesto Nitra

nitra.sk

49

The website nitra.sk serves as the official digital presence of the city of Nitra, Slovakia. It provides comprehensive information about municipal governance, public services, cultural events, urban planning, and social programs. The site targets residents, visitors, and local businesses, offering a broad range of services and resources relevant to city life. The business model is that of a public sector municipal service provider, positioning itself as the authoritative source for city-related information and services. Technically, the website is built on WordPress 6.0.11 with modern plugins such as Yoast SEO and Kadence Blocks, ensuring good SEO and content management capabilities. The site uses HTTPS with strong security headers and integrates Google Analytics for minimal user tracking. Mobile optimization and accessibility are well addressed, providing a positive user experience across devices. From a security perspective, the site demonstrates a solid posture with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly available security policy and vulnerability disclosure program, which are recommended for transparency and incident readiness. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a designated Data Protection Officer contact. Overall, the website is trustworthy, professional, and well-maintained, reflecting the credibility expected from a government entity. Strategic recommendations include publishing a formal security policy, establishing a vulnerability disclosure channel, and enhancing incident response transparency to further strengthen security and trust.

T

Twigsee s.r.o

twigsee.com

70

Twigsee s.r.o operates a SaaS platform focused on kindergarten and childcare management, providing a comprehensive application that facilitates communication between kindergartens, teachers, and parents. The company has established a strong market presence in the Czech Republic with over 250,000 users and multiple partner organizations. Their platform offers key services such as attendance tracking, digital registries, meal and fee management, GDPR compliance tools, and multimedia sharing, targeting educational institutions and families. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and Slick Carousel, and it leverages Cloudflare for SSL and CDN services. The site is well-optimized for mobile devices and includes integrations for Google Tag Manager, indicating a mature digital infrastructure. The presence of app store links for Android, iOS, and Huawei platforms further demonstrates a multi-channel approach. From a security perspective, Twigsee employs HTTPS with strong Cloudflare SSL encryption and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not clearly visible in the HTML, the overall security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration details reduces transparency and slightly impacts trustworthiness. Overall, Twigsee presents a professional, secure, and user-friendly platform with strong business credibility in the education sector. Strategic improvements in domain transparency and security header implementation would further enhance their security and compliance standing.

A

aSc EduPage

edupage.org

72

EduPage is a globally recognized cloud-based school management system integrated with advanced scheduling software. It serves a large user base across 173 countries and 150,000 schools, offering a comprehensive suite of features including timetable creation, mobile applications, substitution management, attendance tracking, payments, and e-learning tools. The platform targets educational institutions, teachers, students, and parents, providing a SaaS model that enhances school administrative efficiency and communication. Technically, EduPage employs a modern web stack with jQuery libraries, Google Fonts, and Material Icons, hosted on cloud infrastructure. The website demonstrates good mobile optimization and user experience, with clear navigation and professional design. SEO and accessibility are adequately addressed, though some advanced security headers and policies are not explicitly visible. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism without advertising or tracking cookies, indicating a privacy-conscious approach. However, the absence of visible security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, EduPage presents a trustworthy and professional online presence with strong business credibility in the education sector. The lack of WHOIS data due to a malformed response limits domain registration insights, but the platform's global footprint and detailed service offerings support its legitimacy. Strategic enhancements in security documentation and contact transparency would further strengthen its posture.

I

Inveo.cz s.r.o.

inveo.cz

62

Inveo.cz s.r.o. is a Czech-based technology company specializing in e-commerce and advanced application development, offering services in .NET and PHP development alongside marketing solutions. The company positions itself as an expert in the Czech e-commerce market, serving businesses seeking to grow or start their digital presence. Their key services include software development, marketing strategy, and an e-commerce platform called Entilos. The website reflects a professional and consistent brand image with strong client references and case studies, indicating a solid market presence. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and a consent management platform, demonstrating digital maturity and compliance with privacy regulations. The site is mobile-optimized and well-structured, though some security headers are missing, which could be improved. The use of Google reCAPTCHA v3 on forms enhances security against automated abuse. From a security perspective, the site uses HTTPS with good SSL configuration and employs privacy and cookie policies aligned with GDPR. However, the absence of WHOIS data limits domain trust assessment. No critical vulnerabilities or exposed sensitive data were detected. The company provides clear contact information and a named Data Protection Officer, supporting compliance and trust. Overall, Inveo.cz presents a trustworthy and professional online presence with a strong focus on e-commerce and software development services. Strategic improvements in security headers and publishing a security policy would further enhance their security posture and compliance standing.

A

Avax-Models

avax-models.cz

49

Avax-Models is a Czech Republic based e-commerce retailer specializing in plastic model kits and related hobby supplies. Established since 2009, the company targets model hobbyists and enthusiasts with a broad catalog of products including aircraft, vehicles, figures, and accessories. The website is professionally designed with clear navigation and a focus on user experience, supporting multiple languages and providing comprehensive product information. Technically, the site uses modern JavaScript libraries such as jQuery and is hosted on a regional provider consistent with its market. Security posture is adequate with HTTPS and cookie consent mechanisms implemented, though it lacks advanced security headers and explicit security policies. The domain is currently expired, which poses a risk to business continuity and trust. Contact information including phone and email is clearly presented, and social media presence is established on Facebook and Instagram. Overall, the site demonstrates good privacy compliance and business credibility for a small retail operation.

L

LATAM Cargo

latamcargo.com

69

LATAM Cargo operates as a major air cargo service provider primarily serving Latin America with international and domestic freight transportation solutions. The website offers comprehensive information about shipment preparation, product portfolios, e-services such as tracking and booking, and customer support, targeting businesses and individuals requiring air freight logistics. The digital infrastructure employs modern web technologies including Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some security headers implemented, though improvements in Content Security Policy and incident response transparency are recommended. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration legitimacy but does not detract from the professional presentation and branding consistent with LATAM Airlines Group. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

B

Bidfood

mujbidfood.cz

51

The website www.mujbidfood.cz is a professional wholesale online market operated under the Bidfood brand, targeting gastronomy and retail sectors primarily in the Czech Republic. It offers a broad assortment of frozen, chilled, dry foods, and non-food products. The platform supports multiple languages and provides registered users access to pricing and detailed product and recipe information. The business model is B2B e-commerce with a focus on wholesale distribution. The site demonstrates consistent branding and a good level of content quality and user experience. Technically, the website uses modern web technologies including jQuery, Bootstrap, and slick carousel for UI components. It is mobile optimized and provides a cookie consent mechanism compliant with GDPR. However, no explicit CMS or hosting provider information is available. Performance is moderate with good SEO and basic accessibility features. From a security perspective, HTTPS is enforced, and login forms use standard security attributes. However, no security headers were detected in the provided data, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and external links suggest a legitimate business. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a trustworthy and professional wholesale e-commerce platform with room for improvement in security transparency and contact information visibility. The lack of WHOIS data reduces the trust score and should be addressed to enhance domain legitimacy assurance.

Bid Corporation Limited (Bidcorp) is a large international foodservice group listed on the Johannesburg Stock Exchange (JSE). The company operates across five continents, providing frozen and chilled food products and related services to the catering and hospitality sectors. Their business model emphasizes autonomous regional operations with local branding, supported by value-add processing, efficient warehousing, and a market-leading ecommerce platform. The website reflects a professional corporate presence with comprehensive investor relations and ESG reporting. Technically, the site uses modern JavaScript libraries, Google Analytics, and Cookiebot for consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

K

K&T s.r.o.

benatki.com

46

Benatki.com is an e-commerce fashion retailer based in Slovakia, operated by K&T s.r.o. The company offers classic and timeless fashion apparel made from natural materials, targeting a general audience primarily in Slovakia. The website is professionally designed with clear navigation, mobile optimization, and integrated marketing tools such as Google Analytics, Facebook Pixel, and Mailchimp. The business maintains a transparent online presence with comprehensive privacy and cookie policies compliant with GDPR. The domain is registered since 2020, consistent with the company's founding and market presence. Technically, the site uses modern JavaScript libraries, Webflow CSS, and OctoberCMS as the content management system, hosted likely by Websupport.sk. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, but could be improved by enabling DNSSEC and adding security headers. No critical vulnerabilities or malicious content were detected, and the site maintains good trust indicators including social media presence and clear contact information.

G

GASTRO-TIPY.SK

gastro-tipy.sk

62

Gastro-tipy.sk is a Slovak culinary content website offering a wide range of recipes, cooking tips, and gastronomic articles targeted at Slovak-speaking home cooks and food enthusiasts. The website is built on a modern Laravel 10 framework with integration of Google Analytics and a custom analytics service. It features a cookie consent mechanism and uses HTTPS for secure communication. The site provides rich content with good design quality and clear navigation, optimized for mobile devices. However, it lacks explicit contact information and detailed security or incident response policies. The WHOIS data is privacy protected, which is common and justified for this type of small content publishing website. Overall, the website is safe, professional, and trustworthy for its audience.

D

DPD

dpd.com

72

DPD is a leading international parcel delivery company operating as part of the Geopost group, with a strong presence in over 50 countries and a workforce of 57,000 delivery experts. The company offers parcel delivery services through multiple brands including DPD, Chronopost, SEUR, BRT, Speedy, and Jadlog, serving both business and consumer markets. Their website reflects a mature digital presence with comprehensive service information, interactive tools such as depot finders and shipping cost calculators, and multi-country support.

B

BayWa r.e.

baywa-re.cz

62

BayWa r.e. operates a professional B2B wholesale distribution platform specializing in photovoltaic components and solar energy products, targeting businesses and professionals in the renewable energy sector primarily in the Czech Republic. The website presents a comprehensive catalog of solar panels, inverters, battery storage solutions, mounting systems, and related accessories, supported by technical support and training services. The site is well-structured and professionally designed, reflecting a mature digital presence aligned with industry standards. Technically, the website leverages modern JavaScript libraries including jQuery, Findologic for search, Microsoft Clarity and Google Tag Manager for analytics, and is built on the OXID eShop Enterprise Edition platform. The presence of a service worker indicates progressive web app capabilities. The site is mobile optimized and demonstrates good SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating GDPR awareness. However, the absence of explicit security headers such as CSP and HSTS and the lack of a visible privacy policy or terms of service page represent areas for improvement. No WHOIS data was retrievable from the CZ NIC registry, which reduces domain trustworthiness and warrants further verification. Overall, the website is a credible and professional platform for solar energy component distribution with moderate technical maturity and a generally good security posture. Strategic enhancements in privacy disclosures, security headers, and domain registration transparency would strengthen trust and compliance.

V

Vitální senior

vitalnisenior.cz

59

Vitální senior is a Czech-language online media platform focused on providing lifestyle content tailored for seniors, covering health, finance, housing, travel, and legal advice. The website operates on WordPress CMS and leverages common plugins for SEO, forms, and cookie consent. It monetizes primarily through advertising networks such as Google AdSense and Seznam SSP, and engages users via newsletter subscriptions. The content is well-structured, relevant, and updated regularly, targeting older adults in the Czech Republic. Technically, the site uses modern web technologies including HTTPS, Google Analytics, Facebook Pixel, and reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and some best practices, but lacks explicit security headers and incident response contacts. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data is consistent and supports legitimacy. No WAF or blocking mechanisms interfere with access, and content is safe for general audiences.

Z

ZOO Dvůr Králové a. s.

safaripark.cz

48

Safari Park Dvůr Králové is a well-established zoological park in the Czech Republic specializing in African wildlife conservation and visitor engagement. The website provides comprehensive information about animal exhibits, visitor planning, educational programs, and conservation projects. It also offers accommodation services and an online shop, indicating a diversified business model focused on tourism and conservation funding. The site targets families, tourists, and educational groups, positioning itself as a key regional attraction with reputable partnerships. Technically, the website uses a modern tech stack including jQuery, Google Analytics, Facebook SDK, and a custom CMS (Toolkit). The site is mobile-optimized with good navigation and content quality. However, some technical improvements are possible, especially in security headers and performance optimization. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating GDPR awareness. However, it lacks explicit privacy policies, security headers, and incident response contacts, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent and trustworthy. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security policies and transparency would enhance its risk profile and user trust.

S

Safari Park Resort

safariparkresort.cz

44

Safari Park Resort is a hospitality business located in Dvůr Králové nad Labem, Czech Republic, offering hotel accommodation, safari camping, dining, and experiential programs. The website presents a professional and consistent brand image targeting tourists interested in safari and zoo experiences. The business is small-sized, founded in 2015, and maintains a good market position regionally with partnerships for booking and certification. Technically, the website uses modern JavaScript libraries, analytics tools, and a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Contact information is clearly provided with multiple phone numbers and emails, enhancing business credibility.

V

vybrat-eshop.cz

vybrat-eshop.cz

10

Vybrat-eshop.cz is a Czech e-commerce comparison platform providing users with tools to search, compare, and review various e-shop systems and templates. It positions itself as the largest overview of e-commerce solutions in the Czech market, targeting entrepreneurs and businesses seeking to establish or improve their online stores. The website offers user-generated reviews, ratings, and news articles relevant to e-commerce trends and technologies. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and integrates advertising through reputable networks such as Seznam SSP and Sklik. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust, but the active and professional nature of the site supports its legitimacy. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

Z

ZOO Dvůr Králové a. s.

zoodvurkralove.cz

48

Safari Park Dvůr Králové is a well-established zoological park in the Czech Republic, specializing in African wildlife conservation and visitor engagement through educational and experiential offerings. The website reflects a medium-sized non-profit organization with a strong local and tourist audience focus. The digital infrastructure employs modern JavaScript libraries and analytics tools, with a CMS platform tailored for content management. While the site is accessible and professionally designed, it lacks explicit privacy and terms of service documentation, which are critical for compliance and trust. Security posture is adequate with HTTPS and cookie consent but could be improved with additional security headers and incident response information. Overall, the site demonstrates good business credibility and user experience but should enhance privacy and security transparency.

C

CorCo Systems a.s.

corrency.cz

59

Corrency.cz is a Czech Republic-based platform operated by CorCo Systems a.s. that focuses on revitalizing local economies through municipal projects supporting residents, children, seniors, and cultural activities. The platform collaborates with government bodies and financial institutions, positioning itself as a niche solution for regional economic development. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics, Microsoft Clarity, and Bootstrap frameworks, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and nonce usage, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust verification, but the presence of credible partnerships and testimonials supports legitimacy. Overall, the site is professional, user-friendly, and trustworthy with moderate technical performance and good privacy compliance.

S

Sencito

chytrejsiobec.cz

49

Sencito is a technology company specializing in smart IoT solutions for municipalities, offering a range of sensors, modules, and a mobile application to enable smarter community management. Their market position is focused on small to medium municipalities primarily in the Czech Republic and surrounding regions, providing affordable and easy-to-deploy IoT infrastructure. The website is professionally designed, multilingual, and provides detailed information about their products and services, targeting both municipal authorities and citizens. Technically, the website uses modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, no CMS or hosting provider details were identified. From a security perspective, the site enforces HTTPS and uses encrypted connections. Cookie consent and spam protection on forms are implemented. However, no explicit security headers were detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data reduces transparency but does not indicate malicious intent. Overall, the website presents a trustworthy and professional front for a niche IoT technology provider, with moderate security posture and good privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance trust and compliance.

4

4Shop.cz - Zbyněk Velecký

4shop.cz

51

4Shop.cz is a well-established Czech e-commerce platform provider offering customizable and scalable online store solutions since 2004. The company targets small to medium-sized businesses seeking professional e-shop creation, rental, and marketing services. Their platform includes AI-powered features, extensive modules, and integrations with popular payment gateways and marketplaces. Technically, the website uses modern JavaScript libraries like jQuery and integrates third-party marketing and analytics tools with proper cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent, though explicit security policies and incident response contacts are not published. Overall, the platform demonstrates high business credibility and technical maturity with room for improvement in formal security disclosures.

M

Ministerstvo průmyslu a obchodu ČR

mpo-efekt.cz

47

The website efekt.gov.cz represents the official state program EFEKT managed by the Ministry of Industry and Trade of the Czech Republic. It focuses on promoting energy savings, increasing energy efficiency, and supporting the use of renewable energy sources through subsidy programs, consultancy, and information dissemination. The site targets government entities, energy specialists, and the general public interested in energy efficiency initiatives. The business model is that of a government program providing authoritative resources and support in the energy sector within the Czech Republic. Technically, the website uses a modern but simple technology stack including jQuery, Normalize.css, and Lytebox for UI components, and Matomo for privacy-conscious analytics. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. The website performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS as expected for a government domain, but no explicit security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with clear privacy and cookie policies available, although no active cookie consent mechanism is present. Contact information is limited to an official email address. WHOIS data is unavailable due to CZ NIC policies for gov.cz domains, but the domain's legitimacy is supported by consistent branding and official links. Overall, the website is trustworthy, professional, and serves its purpose well. Recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing terms of service and vulnerability disclosure information to improve transparency and compliance.

P

Palomino Inc.

palominosys.com

59

Palomino Inc. is a Canadian technology company founded in 2001, specializing in cloud solutions, business intelligence, data automation, and compliant cloud services tailored for growing businesses. The company positions itself as a trusted partner for medium to large enterprises seeking scalable and secure cloud infrastructure and data management platforms. Their proprietary WebPal platform underpins a suite of services including cloud hosting, digital marketing analytics, project management, content management, and custom application development. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive service descriptions supported by client case studies. Technically, the site employs modern web technologies such as jQuery, Google reCAPTCHA v3, and Swiper.js, hosted on their own Palomino hosting infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though improvements are recommended in security headers and explicit security policies. Privacy compliance is evidenced by a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website reflects a credible and professional business with a strong market position in the technology sector.

AXIOM TECH s.r.o. is a well-established Czech company specializing in digital transformation solutions for the engineering and manufacturing sectors. With 30 years of experience, they provide a comprehensive portfolio of Siemens and CGTech software products, including PLM Teamcenter, NX CAD/CAM, Solid Edge, Tecnomatix, and Vericut. Their services include training, consulting, technical audits, and custom application development, targeting engineering firms and manufacturing companies seeking to optimize production and design processes. The company maintains a strong market position as a Siemens Solution Partner Gold Expert and demonstrates a professional online presence with detailed content and customer testimonials. Technically, the website employs modern web technologies such as jQuery, Tiny Slider, Google Fonts, and Google Analytics, with good mobile optimization and accessibility. The site uses HTTPS with a valid SSL certificate, though it lacks some recommended security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Contact information is transparent and easily accessible, enhancing business credibility. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and a vulnerability disclosure policy are areas for improvement. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the company's evident legitimacy and partnerships. Overall, the website is professional, secure, and compliant, serving its target audience effectively.

S

Sony Corporation

sony.net

69

Sony Corporation is a globally recognized multinational conglomerate specializing in technology, entertainment, and media products and services. The official website serves as a comprehensive portal for showcasing Sony Group's diverse business segments including consumer electronics, entertainment content, and technology services. The site targets a broad audience including consumers, business partners, investors, and job seekers. Sony holds a strong market position as a leader in innovation and entertainment worldwide. Technically, the website employs a modern technology stack including jQuery, Swiper.js for UI components, Google Tag Manager for analytics, and OneTrust for privacy consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. The use of HTTPS and security headers indicates a strong security posture. From a security perspective, Sony's website shows adherence to best practices with enforced HTTPS, content security policies, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. The presence of ISO 27001 certification further underscores Sony's commitment to information security. Overall, the website is trustworthy, professionally maintained, and aligns well with Sony's corporate identity. The lack of WHOIS data is typical for Japanese domains and does not detract from the site's legitimacy. Strategic recommendations include ongoing security audits, monitoring third-party scripts, and ensuring all forms have adequate protections to maintain security and compliance.

B

Bundesministerium der Finanzen

bundesfinanzministerium.de

63

The Bundesfinanzministerium website serves as the official digital presence of the German Federal Ministry of Finance, providing comprehensive information on finance, taxation, public budget, and economic policy. It targets a broad audience including citizens, businesses, media, and policymakers. The site offers key services such as tax information, public finance data, customs details, and various online calculators and publications. The ministry holds a strong market position as the federal authority responsible for financial governance in Germany. Technically, the website is built on a government-specific CMS (Government Site Builder) and employs modern JavaScript libraries including jQuery and RequireJS. It integrates Matomo analytics with a strict consent mechanism ensuring GDPR compliance and user privacy. The site demonstrates good performance, mobile optimization, and excellent accessibility features including sign language and plain language options. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and respects user consent for tracking. While explicit security policies and incident response contacts are not published, the site follows best practices for privacy and data protection. No vulnerabilities or suspicious elements were detected in the content or WHOIS data, which aligns with the official government entity. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source of official financial information for Germany.

Sony Group Corporation is a globally recognized multinational conglomerate specializing in consumer electronics, entertainment, gaming, music, imaging, and financial services. The company maintains a strong market position with diversified business units including Sony Interactive Entertainment, Sony Music, and Sony Pictures. The website reflects a mature digital presence with comprehensive corporate information, product details, and investor relations content targeting consumers, business partners, and investors worldwide. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, Adobe Launch, and OneTrust for consent management, ensuring a robust and compliant user experience. Security posture is strong with HTTPS enforcement, multiple security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain and website demonstrate high legitimacy and trustworthiness consistent with Sony's corporate stature.

S

San Diego State University

sdsu.edu

65

San Diego State University (SDSU) is a large, well-established public research university founded in 1897, serving a diverse student body with over 202 degree programs and extensive student organizations. The website reflects a mature digital presence with consistent branding, comprehensive academic and campus life information, and active engagement through multiple official social media channels. Technically, the site employs modern JavaScript libraries, analytics tools, and a CMS platform (OmniUpdate), delivering a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not publicly documented. Privacy compliance is partial, with a comprehensive digital privacy statement but lacking a cookie consent mechanism. WHOIS data for the domain is unavailable, likely due to querying the subdomain 'www.sdsu.edu' or .edu WHOIS restrictions, but the website content and external references strongly support legitimacy. Overall, SDSU's website is professional, trustworthy, and well-maintained, serving its educational mission effectively.

N

nexum Magyarország Kft.

karrierportal.hu

62

Karrier Portál, operated by nexum Magyarország Kft., is a well-established Hungarian recruitment software provider with a history dating back to 2002. The company offers a comprehensive online recruitment platform targeting HR professionals and recruiters, emphasizing fast deployment and continuous development. The website reflects a professional B2B SaaS business model with a consistent brand presence and a clear focus on recruitment technology solutions. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a responsive design optimized for mobile devices. However, it lacks some advanced security headers and formal privacy documentation. Security posture is moderate with HTTPS implied but no explicit security policies or incident response information published. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

MVM NUKA Nukleáris Karbantartó Zrt. is a Hungarian company specializing in nuclear maintenance services as part of the larger MVM Group, a key player in the energy sector. The company provides high-quality electrical, control technology, and mechanical maintenance services primarily for the MVM Paksi Atomerőmű Zrt. and affiliated group companies. The website reflects a professional corporate presence with clear contact information and compliance with GDPR through comprehensive privacy and cookie policies. The site is primarily in Hungarian and targets industry stakeholders and partners within the energy sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Charts, built on the Sitecore CMS platform. The site is mobile optimized with moderate performance and basic accessibility features. Analytics are implemented via Google Analytics with a cookie consent mechanism ensuring user privacy compliance. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration details align well with the business profile, indicating a legitimate and trustworthy entity. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in security transparency and accessibility. The risk level is low, with recommendations to enhance security policy visibility and incident response readiness to further strengthen trust and compliance.

MVM OVIT Zrt. is a well-established Hungarian energy sector company, operating as a wholly owned subsidiary of MVM Energetika Zrt. With over 70 years of experience, it specializes in manufacturing steel structures, power plant machinery, heavy transportation, and electricity supply system operations across Hungary. The company is positioned as a key player within the MVM Group, serving the national energy infrastructure market. The website reflects a professional corporate presence with clear branding and comprehensive information about its services and group affiliations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is likely powered by the Sitecore CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks a dedicated security policy page and explicit incident response contacts, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

MVM CEEnergy Zrt. is Hungary's largest natural gas trader, serving as a key partner to the national universal gas service provider to ensure reliable gas supply to residential consumers. The company operates as part of the MVM Group, a large energy conglomerate with numerous subsidiaries across production, storage, distribution, retail, and services sectors. The website reflects a professional corporate presence with comprehensive information about the company, its subsidiaries, and services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is built on a Sitecore CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is well-structured, compliant with GDPR, and trustworthy.

Magyar Földgáztároló Zrt. is Hungary's largest commercial underground natural gas storage company, operating four storage facilities with significant capacity. The company plays a critical role in ensuring the country's winter gas supply and aims to strengthen Hungary's position in the Central European energy market. The website reflects a professional corporate presence with clear navigation, regulatory information, and customer engagement features such as newsletter subscription. Technically, the site uses standard web technologies including Bootstrap and jQuery, with Google Analytics for visitor tracking. Security practices include HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

S

SupportBox.cz

supportbox.cz

56

SupportBox.cz is a Czech-based SaaS company specializing in customer support software that centralizes communication channels such as email, live chat, social media messaging, and telephony into a single platform. Established in 2012, it serves over 700 customers primarily in the Czech market, offering a 14-day free trial and a suite of features including AI chatbots, automation, and detailed reporting. The website demonstrates a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates advanced marketing and analytics tools like Mixpanel and Facebook Pixel, while being hosted behind Cloudflare for performance and security.

M

Počasí, aktuální předpověď počasí

meteobox.cz

45

Meteobox.cz is a Czech Republic focused weather forecast and news portal providing detailed weather information for cities and regions within the country. The site offers daily and long-term weather forecasts, weather news, and meteorological insights primarily targeting the general public interested in weather updates. The business model appears to be advertising-supported, with multiple ad networks and tracking technologies integrated. Technically, the site uses common web technologies including jQuery, Google Tag Manager, and Google DoubleClick for advertising, hosted likely on meteobox.info infrastructure. The website is moderately optimized for performance and mobile devices, with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No privacy or terms of service pages were found, which is a compliance gap. WHOIS data confirms the domain is legitimate and consistent with the business age and type. Overall, the site is professional and trustworthy for its niche but could improve privacy and security transparency.

K

Kurzy.cz

kurzy.cz

66

Kurzy.cz is a prominent Czech financial information portal providing real-time currency exchange rates, stock market data, commodity prices, and economic news. It serves a broad audience including investors, financial professionals, and the general public interested in economic developments. The site features regularly updated content and integrates multiple advertising and analytics services, supported by a cookie consent mechanism. Technically, the site uses modern web technologies such as jQuery, Google Fonts, and Google Tag Manager, ensuring a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks some important security headers, which should be addressed to enhance protection against common web threats. The absence of WHOIS data limits domain trust assessment, but the site's professional content and high traffic indicate legitimacy. Overall, Kurzy.cz is a reliable source for financial data and news in the Czech market.

M

MVM Zrt.

mvm.hu

66

MVM Zrt. is a leading Hungarian energy group with a long-established presence since 1996. The company operates across multiple sectors of the energy industry including production, storage, transmission, retail, and related services. The website reflects a mature corporate digital presence with detailed information about the group and its subsidiaries, targeting a broad audience including customers, investors, and partners. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and is well optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response contact channels. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

N

Národná sieť rozvoja vidieka SR

nsrv.sk

61

Národná sieť rozvoja vidieka SR is a Slovak government-affiliated agency focused on rural development, operating since 2009. It provides information, event organization, project databases, and advisory services to rural communities and stakeholders in Slovakia. The website is well-structured, professionally designed, and regularly updated with relevant news and events. Technically, it uses modern web technologies including Bootstrap, jQuery, Leaflet, and Google Analytics, hosted behind Cloudflare with DNSSEC enabled, indicating a secure and reliable infrastructure. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and serves as an authoritative resource for rural development in Slovakia.

C

Central European Anti-Doping Organization (CEADO)

ceado.org

48

The Central European Anti-Doping Organization (CEADO) operates as a regional non-profit entity focused on promoting clean sport and supporting anti-doping agencies across Central and Southeastern Europe. Their key services include regional cooperation facilitation, mentoring national anti-doping organizations, and conducting prevention and education programs. The organization is headquartered in Vienna, Austria, and maintains a professional web presence with regular news updates and clear contact information. Technically, the website is built on the Internetkonzepte.at CMS and utilizes modern JavaScript libraries such as jQuery, Typeahead.js, and Fancybox. The site is mobile-optimized, accessible, and performs moderately well. However, there is room for improvement in security headers and incident response visibility. The site uses HTTPS, ensuring encrypted communication. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data. However, the absence of security headers and vulnerability disclosure policies indicates areas for enhancement. The WHOIS data is unavailable due to a malformed query, limiting the ability to fully verify domain legitimacy. Despite this, the website content and contact details appear trustworthy and professional. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 77. Strategic recommendations include implementing security headers, adding a terms of service page, publishing a vulnerability disclosure policy, and improving incident response contact visibility to strengthen trust and security posture.

P

PFP s.r.o.

srovnator.cz

64

Srovnátor.cz is a Czech Republic-based online insurance comparison platform operated by PFP s.r.o., a subsidiary of the major Czech brokerage company Renomia. The website offers comprehensive comparison services for mandatory vehicle insurance, comprehensive vehicle insurance, and property insurance, targeting Czech consumers seeking cost-effective insurance solutions. The platform is well-positioned in the Czech market with over 50,000 customers and strong trust signals including verified customer reviews and regulatory oversight by the Czech National Bank. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses advanced analytics tools such as PostHog and Microsoft Clarity. It demonstrates excellent SEO, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and secure form handling, though it lacks a publicly available security policy or incident response information. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies including consent mechanisms. The absence of WHOIS data limits domain registration transparency, but the overall business credibility and content quality support legitimacy. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

G

Gemius

gemius.com

64

Gemius is a well-established international research and technology company specializing in digital and cross-media audience measurement, serving marketers and publishers with advanced marketing solutions. With over 20 years of experience, Gemius holds a leading market position in online and cross-media measurement, including Internet, TV, radio, and outdoor media. Their product portfolio includes audience data, marketing intelligence, campaign analytics, traffic measurement, real-time monitoring, ad serving, and user engagement visualization tools. The company targets media professionals and marketing agencies, operating primarily from Poland with a broad international footprint.

C

Centrum pro regionální rozvoj České republiky

crr.cz

62

Centrum pro regionální rozvoj České republiky is a well-established government agency under the Ministry of Regional Development, focused on administering European Union and national funds to improve life in Czech regions. With nearly 30 years of experience, it plays a critical role in regional development, supporting projects ranging from infrastructure to community services. The website reflects a professional and comprehensive digital presence, offering detailed information, consultation services, and event calendars tailored to its public sector audience. Technically, the site is built on WordPress with modern plugins and technologies such as Google Analytics and Tag Manager, ensuring good SEO, accessibility, and mobile responsiveness. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is typical for Czech government domains and does not detract from the site's legitimacy. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear GDPR policies and cookie management. The site maintains high trustworthiness through official branding, verified contact information, and transparent communication channels. Strategically, the agency should continue to enhance security headers, publish incident response policies, and maintain up-to-date software to mitigate risks. The digital maturity and business credibility position the agency as a reliable and authoritative source for regional development information and services.

Národní síť Zdravých měst ČR operates as a non-profit association dedicated to improving quality of life, health, and sustainable development in Czech municipalities and regions. The organization offers membership services, educational programs, events, and a data platform to support strategic urban management and public participation. With over 147 members and more than 30 years of history, it holds a strong position in the Czech public sector and is certified by the UN-WHO Healthy Cities program. Technically, the website is built on a custom CMS (ActionApps TOOLKIT) and uses modern JavaScript libraries such as jQuery, Popper.js, and Tippy.js. The site is HTTPS secured and loads analytics scripts asynchronously, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are good, though accessibility features could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No WHOIS data is available, which reduces domain trustworthiness, though the website content and social media presence strongly suggest legitimacy. There are no detected vulnerabilities or exposed sensitive data. Overall, the website is professional and content-rich, serving a clear public interest mission. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and security posture.

N

Nadační fond Český výrobek

ceskyvyrobek.cz

67

Nadační fond Český výrobek is a Czech non-profit foundation dedicated to promoting Czech-made products and craftsmanship through a protective trademark. The website serves as a platform to inform businesses about the trademark, encourage registration, and showcase partners and catalog members. Technically, the site uses a modern frontend stack including jQuery, Bootstrap, and various tracking and analytics tools such as Google Analytics and Facebook Pixel. The site is served over HTTPS and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with no detected security headers and extensive use of third-party tracking scripts. WHOIS data is unavailable, which limits domain trust assessment. Overall, the site is professional and trustworthy in content but could improve transparency and security practices.

K

KODAP

kodap.cz

45

KODAP is a well-established Czech professional services firm specializing in tax consulting, legal, accounting, payroll, and audit services. With over 30 years of experience and a large team of professionals, including tax advisors, auditors, and lawyers, KODAP serves businesses and entrepreneurs primarily in the Czech Republic and the EU. The company operates multiple offices across the country and maintains a strong market presence supported by memberships in key professional chambers and partnerships such as ETL Global. Technically, the website is built on WordPress with modern technologies including jQuery, Google Tag Manager, Google Analytics, and reCAPTCHA for security. The site is mobile-optimized, SEO-friendly, and uses cookie consent mechanisms compliant with GDPR requirements. Hosting details are consistent with the domain registrar REG-ZONER, and the domain age aligns with the company's claimed history. From a security perspective, the site uses HTTPS and implements basic security best practices such as CAPTCHA and cookie consent. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms. HTTP security headers could be enhanced for better protection. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, KODAP's website reflects a professional and trustworthy business with good technical implementation and moderate security posture. To improve, the company should publish comprehensive privacy and security policies and enhance security headers. These steps will strengthen compliance and trust with clients and partners.

I

invelt - s.r.o.

invelt.com

58

invelt - s.r.o. operates as an authorized dealer and service provider for BMW, MINI, ALPINA, and BMW Motorrad in the Czech Republic, with a market presence spanning over 30 years. The company offers a comprehensive portfolio of new and used vehicles, servicing, financing, and lifestyle accessories, targeting premium automotive customers primarily in Prague and Plzeň. The website reflects a mature digital presence with extensive product catalogs, configurators, and e-commerce integration. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain verification mechanisms, though security headers and incident response information could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and clarifying domain registration details to improve business credibility and compliance.

Z

Zámek Mitrowicz

zamekmitrowicz.cz

60

Zámek Mitrowicz is a historic castle venue located in the Czech Republic, offering hospitality services including weddings, accommodation, corporate events, and cultural programs. The website presents a professional and consistent brand image with clear information about the castle's unique features and services. The technical infrastructure employs common web technologies such as jQuery, Bootstrap, and Font Awesome, providing a moderate performance and good mobile optimization. Security posture is moderate with cookie consent and privacy policy in place, but lacks visible security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner affiliations support legitimacy. Overall, the site is functional and suitable for its hospitality business purpose.

R

RENGL, s.r.o.

rengl.cz

43

RENGL, s.r.o. operates a large network of poster advertising sites across Czech Republic, Slovakia, and Poland, offering poster posting and printing services. The company targets businesses and organizations seeking outdoor advertising solutions, positioning itself as a leading regional provider with a network of 5,000 poster sites in 170 cities. The website is professionally designed, mobile optimized, and provides clear service descriptions and contact information. Technically, the site uses modern JavaScript libraries for UI enhancements but lacks some advanced security headers and cookie consent mechanisms. The WHOIS data is missing, which reduces domain trust, but the website content and contact details appear legitimate and consistent with the business claims. Overall, the site scores well on content quality and business credibility but could improve privacy compliance and security posture.

S

Stabsstelle Prävention - Fachstelle gegen sexualisierte Gewalt der Nordkirche

kirche-gegen-sexualisierte-gewalt.de

47

The website represents the Stabsstelle Prävention, a specialized non-profit church-affiliated organization focused on prevention, intervention, and support related to sexualized violence within the Evangelical Church in Northern Germany (Nordkirche). It provides resources, contact points, and educational materials for affected individuals and church staff. The site is positioned as a trusted regional authority with clear church ties and a focus on transparency and support. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries like jQuery and stickybits for UI enhancements. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its mission. The domain WHOIS data is limited but does not raise significant concerns. No blocking or WAF interference was detected, allowing full content access and analysis.

M

Městská část Brno-jih

brno-jih.cz

65

Městská část Brno-jih is the official municipal district government website serving the Brno-jih area in the Czech Republic. It provides comprehensive information about local government administration, public services, news, events, and contact details for residents and visitors. The website is well-structured, professionally designed, and offers multilingual support, targeting local citizens and stakeholders. The business model is governmental public service with a focus on transparency and community engagement. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and GLightbox, and features a responsive design optimized for mobile devices. Analytics are handled via Matomo with privacy-conscious configurations, including Do Not Track and cookie disabling. The site demonstrates good accessibility and SEO practices, although some improvements in security headers and explicit privacy policies are recommended. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and explicit privacy and cookie policies indicates room for enhancement. The WHOIS data is unavailable, which limits domain registration trust analysis, but the official branding and contact information strongly support legitimacy. Overall, the site maintains a good security posture with moderate risk. Strategically, the website should focus on publishing clear privacy and cookie policies, implementing security headers, and improving transparency around incident response and data protection officers. These steps will enhance user trust and compliance with GDPR and other regulations. The domain registration information should be clarified to improve trustworthiness from a domain perspective.