Security Directory

K

Katronic Technologies Ltd.

katronic.com

54

Katronic Technologies Ltd. is a specialized company focused on the design, manufacture, and sale of clamp-on ultrasonic flow meters and non-invasive process measurement instrumentation. Established since 1996, the company serves a broad range of industrial sectors including energy, manufacturing, chemical, pharmaceutical, and water treatment. Their product portfolio includes portable and fixed ultrasonic flow meters for liquids and gases, thermal energy measurement devices, and related services such as flowmeter hire, training, and commissioning. The company maintains a professional online presence with detailed product information and customer testimonials, supporting its market position as a reliable and innovative provider in the flow measurement industry. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for enhanced user experience. The site is mobile-optimized and includes SEO best practices with proper meta tags and structured navigation. Google Analytics and Google Maps are integrated for analytics and location services. The website employs HTTPS with a strong SSL configuration, though explicit security headers are not detected in the provided data. Cookie consent mechanisms are implemented, indicating attention to privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent banners, but lacks publicly visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is unavailable or not found, which slightly reduces trustworthiness; however, the professional presentation and active social media presence support the legitimacy of the business. Overall, Katronic's website demonstrates a solid digital maturity with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and explicit policies. The business credibility is high given the detailed product offerings and customer engagement. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security and trustworthiness of the site.

P

Pam Building

pambuilding.com

67

Pam Building is a specialized manufacturer of cast iron drainage systems for buildings, offering a comprehensive range of products and services including pipes, fittings, couplings, and siphonic systems. The company positions itself as a leader in the cast iron pipe and fittings market, supported by its parent company Saint-Gobain. The website is professionally designed, mobile-optimized, and rich in relevant content targeting specifiers, installers, distributors, and customers in the construction sector. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS enabled and secure forms, but lacks some security headers and visible privacy or cookie policies. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall trustworthiness is bolstered by the professional branding and certifications such as the Ecovadis Silver Medal. The site does not contain any adult or questionable content and is fully accessible without WAF or blocking mechanisms.

The website www.pamline.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain WHOIS data is unavailable, indicating the domain may be unregistered, expired, or protected by privacy services. Due to these factors, no business information, contact details, or policies are discoverable. The technical infrastructure relies on Cloudflare's security services, but no further technology stack or CMS details are evident. The security posture is limited to the presence of Cloudflare's WAF challenge, with no additional security headers or configurations visible. Overall, the site lacks transparency and content, resulting in a low trust and credibility rating.

D

DGA | DiscGolf.com

discgolf.com

65

DGA | DiscGolf.com is a well-established company specializing in the manufacture and sale of disc golf baskets and course equipment. Founded in 1995, it holds a leading position in the disc golf retail market, offering both products and educational resources to disc golf enthusiasts and course designers. The website reflects a professional e-commerce platform with clear contact channels and social media integration. Technically, the site is built on WordPress with Elementor and optimized for performance using NitroPack, delivering a fast and mobile-friendly user experience. Security posture is solid with HTTPS and domain registration protections, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is trustworthy and credible, serving its target audience effectively.

MVP Disc Sports is a well-established company specializing in the design, manufacture, and retail of disc golf equipment and accessories. Founded in 2010, the company has positioned itself as a leading brand in the disc sports retail sector, offering a wide range of products including discs, baskets, bags, and accessories. Their website serves as both an e-commerce platform and an information hub with active news updates and product releases, targeting disc golf enthusiasts and players. The company maintains a consistent brand presence with multiple affiliated partner brands under the MVP Network. Technically, the website is built on WordPress using the Divi theme and builder, incorporating modern web technologies such as jQuery, Flickity for carousels, and Google reCAPTCHA for form security. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring encrypted communications. SEO and mobile optimization are well implemented, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical enhancements. From a security perspective, the site employs HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy and cookie policies indicates a compliance gap with GDPR and other privacy regulations. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. Overall, MVP Disc Sports presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security hardening would further strengthen their posture and customer trust.

U

UDisc

udisc.com

63

UDisc is a well-established digital platform and mobile application dedicated to the disc golf community, offering comprehensive course maps, reviews, scorekeeping, and progress tracking. With over 2 million users and more than 16,000 courses worldwide, UDisc holds a leading market position in the disc golf sports niche. The business model is freemium, providing free basic features and a paid subscription for advanced tools. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a high-quality user experience. Technically, the site leverages modern web technologies including React, Font Awesome, and Cloudflare for hosting and DNS services. It integrates third-party services such as Survicate for surveys, Intercom for user engagement, and Fathom Analytics for privacy-focused analytics. The site demonstrates good performance and SEO practices, with structured data enhancing search visibility. From a security perspective, the website enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, UDisc presents a trustworthy and professional online presence with strong business credibility and technical maturity. However, improvements in privacy compliance and explicit security disclosures are recommended to enhance user trust and regulatory adherence.

I

Innova Disc Golf

innovadiscs.com

53

Innova Disc Golf operates a professional and content-rich website focused on disc golf products and community engagement. The company positions itself as a market leader in the disc golf retail sector, offering a wide range of discs, bags, targets, and custom branding services. The website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and advertising integrations, reflecting a mature digital presence. Security posture is generally good with HTTPS and no exposed sensitive data, but lacks some security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts trustworthiness. Overall, the site is functional, well-branded, and targets disc golf enthusiasts and retailers, but would benefit from enhanced transparency and compliance documentation.

D

Discraft Inc

discraft.com

53

Discraft Inc is a recognized leader in the disc sports industry, specializing in manufacturing and retailing high-quality disc golf, ultimate, and freestyle discs along with related accessories. The company targets disc sports enthusiasts and players, offering a broad product range including discs, baskets, bags, and custom printing services. Their market position is strong as a world leader in disc sports manufacturing, supported by partnerships with major disc sports organizations. Technically, the website is built on the Sana Commerce platform with integrations of modern marketing and analytics tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and clear navigation, providing a positive user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing, which raises some trust concerns, but the overall business credibility and external references support legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.

V

VC Ultimate

vcultimate.com

63

VC Ultimate is a specialized e-commerce retailer focused on custom athletic uniforms and apparel for performance athletes and teams across multiple sports disciplines. The company leverages Shopify as its platform and integrates various marketing and analytics tools to support its online presence. The website is professionally designed with good content quality and clear navigation, targeting a niche market of sports teams and athletes. Technically, the site is well-implemented with modern technologies and fast performance, hosted on Liquid Web. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance documentation is lacking. Overall, the domain registration is consistent and supports the legitimacy of the business.

Insys Video Technologies operates the InsysGO platform, a streaming service offering live TV channels and video on demand primarily targeting general consumers interested in internet TV. The demo site showcases features such as catchup TV, timeshift, and personalized user profiles, positioning the company as a niche technology and media provider in Poland. The platform supports multiple devices and integrates modern web technologies including React.js and push notifications. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and technically mature, suitable for its demo purpose.

I

Insys

insysvideotechnologies.com

46

Insys Video Technologies is a technology company specializing in scalable OTT and video streaming solutions, including live and VOD streaming, multi-DRM content protection, and AWS-certified professional services. Their market position is that of a specialized provider targeting businesses requiring secure and scalable video delivery. The website demonstrates a moderate level of digital maturity, leveraging WordPress CMS, modern JavaScript libraries, and integrated analytics and consent management tools. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and formal security policies. Privacy compliance is partially addressed through cookie consent but lacks a dedicated privacy policy or terms of service pages. Overall, the website is professional and trustworthy, with room for improvements in security and compliance documentation.

D

Disc Golf Pro Tour

dgpt.com

49

Disc Golf Pro Tour operates as the premier professional disc golf circuit, delivering event schedules, live scores, media content, and news to disc golf enthusiasts worldwide. The website is well-branded and professionally designed, targeting fans and participants of the sport. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published policies. The absence of WHOIS data raises some concerns about domain registration transparency, though the site itself appears legitimate and active. Privacy compliance is limited, with no clear cookie consent or privacy policy pages detected. Overall, the site is a reliable source for disc golf professional tour information but could improve in privacy and security transparency.

W

Wittusen & Jensen

wj.no

75

Wittusen & Jensen is a Norwegian business partner specializing in the administration and delivery of workplace consumables, alongside marketing services and products to enhance market visibility. The company targets business customers requiring consumables and marketing support, positioning itself as an established player in the retail sector within Norway. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern web technologies including Next.js, React, and integrates analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Tawk.to chat. Hosting and CDN services appear to be provided by Cloudflare, contributing to moderate performance and good mobile optimization. Accessibility is basic but functional, and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses security best practices like CSRF tokens and a comprehensive cookie consent mechanism. However, explicit security headers and incident response policies are not clearly published, and no vulnerability disclosure or security.txt file is present. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial sites. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, though improvements in transparency and contact availability would enhance trust. The risk level is moderate with no critical vulnerabilities detected.

T

The Pope Video

thepopevideo.org

65

The Pope Video website represents a global non-profit initiative developed by the Pope's Worldwide Prayer Network, focusing on disseminating monthly prayer intentions through videos and engaging a worldwide audience. The site is professionally designed with consistent branding and clear navigation, targeting a general audience interested in religious and spiritual content. Technically, the website is built on a modern WordPress platform using popular plugins and frameworks, hosted behind Cloudflare for performance and security. The site implements GDPR-compliant privacy and cookie policies with a consent mechanism, and integrates reputable third-party services such as Donorbox for donations and Google Analytics for tracking. Security posture is good with HTTPS enforced and standard best practices, though DNSSEC is not enabled and some security headers could be improved. Overall, the domain registration and WHOIS data indicate a legitimate and established organization with justified privacy protection. The website is safe, free from adult or questionable content, and maintains a high level of trustworthiness.

T

Tonersyp

tonersyp.cz

63

Tonersyp is a Czech Republic-based e-commerce retailer specializing in printer supplies such as toners, cartridges, and related consumables. The website targets both consumers and businesses seeking affordable and reliable printer products, offering benefits like next-day delivery and lifetime warranty. The company positions itself as a trusted supplier with a focus on customer service and product availability. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and third-party widgets for enhanced user experience and marketing. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, HTTPS is enforced, but explicit security headers are not detected, and no public security policies or incident response contacts are available. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a moderate to good security posture and compliance with privacy regulations such as GDPR.

D

DNS.cz

dns.cz

71

DNS.cz operates as a significant IT distribution intermediary in the Czech Republic, bridging manufacturers and IT solution providers to end customers. The website presents a professional and modern digital presence with a focus on technology distribution services. The company targets IT providers and customers, positioning itself as a key player in the IT solutions market. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and bot protection via Google reCAPTCHA; however, the absence of explicit security headers and security policies suggests room for improvement. Privacy compliance is supported by a detailed cookie consent mechanism, though no explicit privacy policy or terms of service pages were detected in the provided content. The lack of WHOIS data limits domain legitimacy verification, but the website content and technology usage support a legitimate business operation. Overall, DNS.cz demonstrates a solid business and technical foundation with moderate security and privacy compliance maturity.

AutoMax is an exclusive distributor specializing in automotive and industrial brands such as Shell oils, lubricants, Coyote, WD 40, and MA-FRA. The company targets automotive and industrial businesses seeking quality lubricants and car chemistry products. The website presents a professional and consistent brand image with good content quality and clear business focus. Technically, the site employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and visible contact or legal information. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

S

Star Madrid

starmadrid.es

63

Star Madrid is a prominent authorized Mercedes-Benz dealership located in Madrid, Spain, offering new vehicle sales, rental services, mobile maintenance, and specialized AMG performance services. The website reflects a professional and consistent brand presence targeting consumers interested in premium automotive products and services in the Madrid region. Technically, the site employs modern web technologies including Bootstrap and jQuery, with responsive design and good SEO practices, though some accessibility features are basic. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is limited due to absence of explicit privacy and cookie policies. WHOIS data is not accessible due to Red.es restrictions, which is typical for .es domains but slightly impacts trust. Overall, the site is functional and trustworthy but could improve in security and compliance transparency.

The Ayuntamiento de Madrid website serves as the official digital portal for the Madrid City Council, providing a comprehensive range of municipal services, news, and citizen engagement tools. It targets residents, businesses, and visitors, offering e-government services and up-to-date information on local governance and community activities. The site maintains a strong market position as the authoritative source for Madrid municipal information. Technically, the website employs a modern tech stack including Bootstrap for responsive design, JavaScript libraries such as jQuery, and integrates third-party services like ReadSpeaker for accessibility and Siteimprove Analytics for performance monitoring. Hosting appears to leverage Akamai's infrastructure, ensuring reliable delivery and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR and privacy regulations. While explicit security headers are not evident in the HTML content, the site uses monitoring tools and avoids exposing sensitive data. No vulnerabilities or suspicious patterns were detected. The WHOIS data is restricted due to Red.es policies for .es domains, which is standard and does not detract from the domain's legitimacy. Overall, the website presents a low-risk profile with strong business credibility, excellent content quality, and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding a vulnerability disclosure program to further strengthen trust and security posture.

A

aanmelder.nl

aanmelder.nl

81

aanmelder.nl is a Netherlands-based event management software provider offering comprehensive solutions for event registration, check-in, streaming, and online platforms. The company targets event professionals seeking seamless event organization from start to finish. Their market position is strong, supported by over 80,000 successful events and notable client partnerships. Technically, the website is built on HubSpot CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing and analytics. Security posture is robust, with HTTPS enforced, ISO 27001 certification, and cookie consent mechanisms in place. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

N

Neurocritical Care Foundation

neurocriticalcarefoundation.org

66

The Neurocritical Care Foundation is a specialized 501(c)3 non-profit organization dedicated to fostering collaboration and funding in neurocritical care research. It operates in association with the Neurocritical Care Society and targets researchers, donors, and healthcare professionals globally. The foundation provides research and education grants and aims to build long-term partnerships to advance treatments for life-threatening neurological disorders. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website is built on the DNN CMS platform using ASP.NET WebForms, enhanced with modern JavaScript libraries such as jQuery, Slick Carousel, and FancyBox. It employs Google Analytics for user tracking and Constant Contact for email signups. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses secure form tokens and Google reCAPTCHA, indicating a good baseline security posture. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and some recommended HTTP security headers. The absence of WHOIS data limits domain trust verification, but the website's professional content and trust signals mitigate concerns. Overall, the Neurocritical Care Foundation website is a credible and professionally maintained platform supporting a niche healthcare non-profit. Strategic improvements in security policies, accessibility, and technical modernization would enhance its digital maturity and trustworthiness.

Jak psát web is a Czech language educational website dedicated to teaching web development, including HTML, CSS, JavaScript, SEO, and related topics. The site targets both beginners and professionals interested in creating and maintaining websites. It offers tutorials, articles, and a discussion forum to support its audience. The website is authored by Dušan Janovský and includes an ISSN number, indicating a formal publication status. Technically, the site uses standard web technologies such as HTML5, CSS, JavaScript, and integrates Google services for search and analytics. The design is basic but functional, with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness. Overall, the site is safe, content-rich, and serves a niche educational purpose but would benefit from enhanced security and privacy compliance measures.

JAHHO.cz is a Czech internet portal providing a categorized web directory, entertainment content such as wallpapers and GIFs, and additional services like TV program listings and search functionality. The site targets a general Czech-speaking audience seeking online entertainment and curated web resources. The business model revolves around advertising revenue, primarily through Google Adsense, and providing a free portal service. The website appears to be a small-scale operation managed by the JAHHO team since 2003, with a basic but functional online presence. Technically, the site uses standard web technologies including HTML, CSS, and JavaScript, with integrations of Google Adsense for advertising and Piwik (Matomo) for analytics. The site is served over HTTPS, ensuring basic transport security, but lacks advanced security headers and modern CMS or frameworks. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO best practices. From a security perspective, the site has a basic posture with HTTPS enabled but no evident security policies, privacy or cookie notices, or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. No critical vulnerabilities or adult content were detected, but the site would benefit from enhanced security headers, privacy compliance measures, and clearer contact information. Overall, JAHHO.cz is a modest, general-audience web portal with basic technical and security implementations. Strategic improvements in privacy compliance, security hardening, and domain registration transparency are recommended to enhance trust and compliance.

PeknaStranka.sk is a Slovak language online magazine focusing on lifestyle, housing, business, finance, health, leisure, and practical guides. The website serves a general audience interested in these topics and operates as a small media content publisher. The site uses WordPress CMS with common plugins such as Yoast SEO and MashSharer for social sharing. The technical infrastructure is modern and includes responsive design and SEO optimizations, though some performance and accessibility improvements are possible. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and user trust. The site does not expose sensitive data and does not show signs of adult or explicit content, making it safe for general audiences. Contact information is limited to a contact page without direct emails or phone numbers. Advertising is present via an external banner. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

PeakDigital

asklayer.io

56

Asklayer.io is a Japanese SaaS platform specializing in web-based surveys, NPS calculations, market research, and lead generation solutions. The company, PeakDigital, founded in 2023, targets marketers and enterprises seeking easy-to-use, mobile-first survey tools with advanced features like auto segmentation and customer profiling. The website is professionally designed using WordPress and Elementor, with a focus on Japanese business users and a presence of notable client logos indicating market acceptance. Technically, the site employs modern web technologies, integrates Google Tag Manager for analytics, and uses Cloudflare for domain registration and likely hosting. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security hardening.

S

EOS ZUŠ | Soutěže základních uměleckých škol

soutezezus.cz

48

The website www.soutezezus.cz serves as an informational portal dedicated to competitions for basic art schools in the Czech Republic, specifically for the 2024/2025 school year. It provides detailed competition categories, age groups, schedules, and locations, targeting students, educators, and administrators involved in these art schools. The platform supports user login functionality and integrates social media via Facebook SDK. Technically, the site employs XHTML, CSS, JavaScript with libraries such as jQuery, i18next for localization, and Photoswipe for image handling, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Security-wise, the site enforces HTTPS and includes a Content-Security-Policy header, with secure login form features like password visibility toggle and Caps Lock warnings. However, the absence of additional security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. The WHOIS data is unavailable, which reduces domain trustworthiness, but the site content and technical setup suggest legitimate and professional use. Overall, the site is a niche educational resource with moderate technical and security maturity, requiring enhancements in privacy compliance and domain transparency.

S

SIA Dators x Dizains

mitinatajs.lv

44

The website www.mitinatajs.lv represents a small Latvian company, SIA Dators x Dizains, offering web hosting and domain registration services primarily targeting Latvian and international customers. The business model focuses on direct service provision with individual client support, offering a range of hosting features including cPanel, email hosting, backups, and domain management. The site content is clear and informative, with transparent pricing and partner references, positioning the company as a local niche hosting provider. Technically, the website uses Bootstrap for responsive design, integrates Google Analytics and Facebook SDK for tracking, and supports legacy PHP versions on the hosting side. The site is moderately optimized for performance and mobile, though accessibility and SEO are basic. There is no detected CMS platform, and hosting provider details are not explicit. The site lacks HTTPS enforcement and security headers, which are critical for secure operations. From a security perspective, the site shows basic best practices such as antivirus and antispam support and SSL/TLS availability, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. WHOIS data is unavailable due to query limits, limiting domain trust analysis, but the business appears legitimate with consistent branding and contact information. Overall, the website is functional and business-focused but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and protect customer data. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing incident response protocols.

H

Hotel Arcadie Český Krumlov

hotelarcadie.cz

41

Hotel Arcadie Český Krumlov is a hospitality business located in the historic center of Český Krumlov, Czech Republic, a UNESCO World Heritage site. The hotel offers accommodation along with dining options including the Gotika restaurant and Cosa Vostra pizzeria. It targets tourists visiting this popular cultural and historical destination. The website presents a professional and consistent brand image with good content quality and clear navigation. Social media presence on Facebook and Instagram supports customer engagement. Technically, the website uses a modern but somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.1, along with Google Analytics and Google Maps API. The site is mobile responsive and SEO optimized to a good degree. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which impacts its compliance posture. WHOIS data is unavailable, which reduces domain trustworthiness. No blocking or WAF mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the security posture is moderate but could be enhanced by implementing best practices and compliance documentation. The overall risk is moderate with recommendations to improve security headers, privacy compliance, and domain transparency. Enhancing these areas will strengthen trust and reduce potential compliance risks.

P

Pekárna Racek, s.r.o

pekarnaracek.cz

49

Pekárna Racek, s.r.o is a well-established bakery company based in Přerov, Czech Republic, with a history dating back to 1965. The company operates a network of retail stores offering a variety of bakery products including bread, pastries, and delicacies, complemented by an e-commerce platform accessible via a linked e-shop domain. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at general consumers interested in fresh bakery goods. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, providing a moderate performance and good mobile optimization. However, there is room for improvement in SEO and accessibility features. Security-wise, the site uses HTTPS and has a cookie consent banner but lacks visible security headers and published privacy or security policies, indicating moderate security maturity. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security practices.

H

HOTEL GLOBUS

hotel-globus.cz

46

Aureli hotel Globus is a mid-sized hospitality business located near the center of Prague, offering accommodation, dining, conference facilities, and family-friendly services. The hotel targets travelers seeking a quiet environment with easy access to city amenities and nature. The website is professionally designed, multilingual, and integrates a secure external booking platform. Technically, it uses modern web technologies including Bootstrap, Google Analytics, and Google Maps API. Security posture is adequate with HTTPS enabled and consent mechanisms for cookies, but lacks visible security headers and privacy policy documentation. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site presents a credible and professional business presence with room for security and privacy improvements.

B

Bulkhead Inspector, s.r.o.

sluzbyprozvirata.cz

56

The website www.sluzbyprozvirata.cz represents a small Czech company, Bulkhead Inspector, s.r.o., specializing in holistic physiotherapy and rehabilitation services for animals including horses, dogs, and cats. The business also offers educational workshops and courses targeting animal owners and professionals in veterinary physiotherapy. The site is well-structured with clear service descriptions and contact information, supported by social media channels on Facebook and YouTube, enhancing its market presence in a niche sector. Technically, the website is built on Ruby on Rails with custom CMS features and uses Google Fonts for typography. It is mobile-optimized and provides a good user experience with clear navigation. However, performance is moderate and accessibility features are basic. Security measures include CSRF token implementation, but lack visible HTTP security headers and explicit SSL/TLS configuration details. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a significant compliance gap under GDPR. WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy and trustworthiness. No signs of tracking or analytics scripts were found, indicating minimal user data collection. Overall, the security posture is moderate but could be improved with better header implementation and policy disclosures. Strategically, the business should prioritize establishing clear privacy and cookie policies, enhance security headers, and clarify domain registration details to improve trust. The website content and business model are solid, but technical and compliance improvements will strengthen its digital maturity and customer confidence.

P

PRESCO GROUP, a.s.

presco.cz

49

PRESCO GROUP, a.s. is a Czech-based company specializing in the design, manufacture, and distribution of calendars, diaries, school supplies, children's books, board games, and gifts. The company operates a professional e-commerce website targeting general consumers and businesses primarily in the Czech Republic and Slovakia. Their market position is that of an established Czech brand with a broad distribution network including major retail chains. The website demonstrates a good level of digital maturity with modern marketing and analytics integrations, including Google Analytics, Facebook Pixel, and retargeting services, alongside a consent management mechanism for GDPR compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and formal security policies are absent. Overall, the site is well designed, mobile optimized, and trustworthy, though the lack of WHOIS data limits full domain trust verification. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving transparency around domain registration.

A

Akvamex.cz

akvamex.cz

51

Akvamex.cz is an e-commerce retailer specializing in aquarium, terrarium, and pet supplies, with a physical store located in Chrudim, Czech Republic. The website offers a wide range of products including aquaristics equipment, terraristics accessories, cages, and pet food. It targets hobbyists and pet owners seeking specialized products and expert advice. The business model combines online sales with in-person retail and consultancy services. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA to enhance user experience and security. The site is mobile-optimized and features a clear navigation structure, although it lacks a publicly accessible privacy policy and detailed security policies. Security posture is solid with HTTPS and form protections, but could be improved with additional security headers and transparency about incident response. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not contradict the business's legitimacy. Overall, the site is professional and functional with moderate risk and room for compliance improvements.

H

HobyNaradi.cz

hobynaradi.cz

58

HobyNaradi.cz is a Czech Republic-based e-commerce retailer specializing in tools, machines, and consumable materials for workshops and gardens. The website targets both DIY enthusiasts and professional users, offering a wide range of products and services including tool rental. The site is built on the Shoptet e-commerce platform and integrates multiple modern technologies such as Google Analytics, Facebook SDK, and Google Pay API, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the use of an outdated jQuery version presents a potential vulnerability. The absence of WHOIS data reduces domain trustworthiness but the professional presentation and comprehensive policies suggest a legitimate business. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

B

BAAGL

baagl.cz

73

BAAGL.cz is a Czech e-commerce retailer specializing in school backpacks and bags, targeting parents and children. The company has been operating since 2017 and maintains a professional online presence using the Shopify platform. The website features comprehensive GDPR compliance mechanisms, including a cookie consent banner and detailed privacy policy. Marketing and analytics are robustly implemented through multiple third-party services such as Google Analytics, Facebook Pixel, TikTok Pixel, and Judge.me for customer reviews. The technical infrastructure is modern and leverages Shopify's hosting and security features, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-branded, and compliant with privacy regulations, making it a reliable platform for its target audience.

R

RELIGIS s.r.o.

alukola.cz

38

Alukola.cz is a Czech Republic-based e-commerce and service business specializing in the sale of alloy wheels, steel wheels, tires, and related automotive services including tire fitting, car servicing, and car rental. The company positions itself as the largest specialist in alloy wheels in the Czech market, offering both online sales and physical service centers such as Pneucentrum Motol. The website is professionally designed, primarily in Czech, targeting vehicle owners seeking quality wheels and tire services. Technically, the site uses a traditional jQuery-based stack with integrations for Google Tag Manager, Heureka, and Seznam retargeting, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. The absence of WHOIS data reduces domain trust assessment, but the website's professional content and contact information support legitimacy. Overall, the site is functional, compliant with GDPR, and well-positioned in its niche.

G

Goldcast

goldcast.io

67

Goldcast is a technology company specializing in an AI-first video content platform tailored for B2B marketers. Their platform enables marketing teams to create, repurpose, and distribute video content such as webinars, virtual events, and podcasts to enhance engagement, brand authority, and revenue generation. The company positions itself as a leader in AI-powered video marketing solutions within the B2B sector. Technically, the website leverages modern frameworks like SvelteKit and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Crazy Egg, HubSpot, and Drift. Hosting appears to be managed via Vercel, ensuring fast performance and excellent mobile optimization. The site is well-structured with comprehensive metadata, Open Graph tags, and JSON-LD structured data supporting SEO and social sharing. From a security perspective, the site enforces HTTPS and uses reputable third-party services but lacks explicit security headers and a published security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, supporting responsible data handling. Overall, Goldcast presents a professional and trustworthy online presence with strong business credibility and technical maturity. The absence of WHOIS data is mitigated by privacy protection common in tech companies. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

Z

Zone Media OÜ

webmail.ee

55

Zone Webmail is a secure and reliable email service operated by Zone Media OÜ, an established Estonian technology company specializing in web hosting and email services. The website targets Zone.ee customers and general users seeking fast and secure webmail access. The platform uses modern web technologies including Vue.js and Vuetify, providing a responsive and user-friendly interface. The technical infrastructure appears solid with HTTPS enforced and no visible security vulnerabilities in the provided content. However, the site lacks visible cookie consent mechanisms and explicit security or incident response policies on the login page. Overall, the website demonstrates a good balance of professionalism, security, and usability, suitable for its target audience.

The website 'Ukraina heaks!' serves as a simple informational landing page aimed at supporting humanitarian aid for Ukraine. It primarily provides direct links to two Estonian non-profit organizations focused on refugee and crisis support: Eesti Pagulasabi (Estonian Refugee Council) and Mondo. The site does not host any transactional or interactive features but acts as a conduit to trusted aid organizations. The domain is registered through a reputable Estonian registrar and has been active since 2014, lending credibility to its legitimacy. From a technical perspective, the website is minimalistic, built with basic HTML and CSS, and optimized for mobile devices. There is no evidence of advanced frameworks, CMS platforms, or analytics tools. The site loads quickly and is accessible without restrictions or security challenges. However, it lacks modern security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. Security posture is basic with no detected vulnerabilities or malicious content, but the absence of security headers and privacy compliance documentation represents areas for improvement. No contact information or incident response details are provided, limiting transparency and user support options. Overall, the website is low risk, safe for general audiences, and fulfills a narrow but clear purpose. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing contact or incident response information to enhance trust and compliance.

Z

Zone Media LLC

zonecloud.ee

50

ZoneCloud is a cloud storage and file synchronization service operated by Zone Media LLC, an Estonian technology company founded in 2013. The platform offers web-based access alongside desktop and mobile clients for file syncing, targeting general users and businesses requiring cloud storage solutions. The website is functional and uses a variety of modern JavaScript libraries and frameworks, indicating a moderate level of technical maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain registration data aligns well with the business identity, supporting legitimacy. Overall, the security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing privacy-related policies.

S

Sentia

sentiagruppen.no

69

Sentia is a leading Nordic construction group formed by merging prominent companies HENT, SSEA, Vestia, and Målbygg, employing over 1,400 people. The company specializes in complex and sustainable building projects for public and commercial clients primarily in Norway and Sweden. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern web technologies and implements HTTPS with a cookie consent mechanism, indicating good privacy practices. However, the absence of visible security headers and incident response information suggests room for improvement in security posture. The lack of WHOIS data limits domain registration verification, but the professional content and business information support legitimacy. Overall, Sentia presents a credible and trustworthy corporate website with a strong focus on sustainability and large-scale construction projects.

G

Great Point Capital Events

greatpointcapitalevents.com

55

Great Point Capital Events is a newly established business focused on organizing and managing events within the capital and finance sectors. The website presents basic information about the company, its management, services, resources, and events, targeting business professionals in finance and event management. The technical infrastructure is modern, leveraging JavaScript frameworks such as Nuxt.js and Vue.js, with external resources from Google Fonts and LeadConnectorHQ. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks important security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is functional but requires enhancements in privacy, security, and contact transparency to improve trust and compliance.

V

Akční letenky - Nákup letenek - Vyhledávání letu

vyprodej-letenek.cz

47

The website vyprodej-letenek.cz operates as an affiliate marketing platform focused on providing discounted airline tickets and travel deals primarily for Czech-speaking travelers. It aggregates flight offers and promotes weekend trips and vacations, leveraging partnerships with known travel booking platforms. The site is newly registered in 2024 and uses modern web technologies including Bootstrap and Angular-based affiliate widgets. While the site offers good content quality and user experience, it lacks explicit privacy and terms of service pages and does not provide direct company contact information. The cookie consent mechanism is implemented with granular user controls, indicating some level of privacy awareness. Security posture is moderate with HTTPS usage implied but no detected security headers or incident response information. Overall, the site is functional and trustworthy as a new affiliate travel site but would benefit from enhanced compliance and security transparency.

A

Autodoprava Spedice

spediceautodoprava.cz

40

Autodoprava Spedice is a newly established Czech transportation and freight forwarding service provider specializing in international and domestic truck transport, including specialized services such as pallet shipping and transport with hydraulic arms. The website presents a professional and consistent brand image focused on logistics solutions for businesses and individuals requiring flexible and reliable freight transport. Technically, the site is built on WordPress using the Hestia Pro theme, leveraging common libraries like jQuery and Bootstrap, and is mobile optimized with moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No contact information or social media presence is visible on the homepage, limiting direct communication channels. Overall, the site is functional and relevant but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

S

Najdi slevu > Slevový promo kód kupón > Sleva

slevovypromokod.cz

47

SlevovyPromoKod.cz is a newly launched Czech online platform specializing in aggregating discount coupons and promo codes for a wide variety of e-commerce stores and services. The website targets Czech online shoppers seeking savings on fashion, electronics, travel, and household goods. It operates primarily as an affiliate marketing platform, linking users to partner sites offering discounts. Technically, the site uses Bootstrap 5 and JavaScript with embedded affiliate widgets, providing a moderately optimized and mobile-friendly user experience. However, the site lacks critical compliance pages such as privacy policy and terms of service, which are essential for GDPR compliance and user trust. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and published security policies, indicating room for improvement in security posture. The domain is very new but registered transparently with no privacy protection, consistent with a legitimate startup. Overall, the site is functional and relevant but requires enhancements in compliance, security, and transparency to improve trust and reduce risk.