Security Directory

I

Impel AI

impel.io

65

Impel AI is a leading enterprise-grade AI Operating System designed specifically for the automotive industry, enabling dealerships and OEMs to unify and automate the entire customer lifecycle. The platform offers modular AI services including Sales AI, Chat AI, Service AI, Marketing AI, and Merchandising AI, aimed at improving operational efficiency, customer experience, and sales conversions. With a strong market position supported by OEM partnerships and a global customer base, Impel AI targets automotive retailers seeking to leverage AI for competitive advantage. Technically, the website is built on WordPress and integrates a modern tech stack including Google Tag Manager, Google Analytics, Hotjar, Facebook Pixel, and Auth0 for authentication. Hosting is inferred to be on AWS, with DNS managed via AWS Route 53. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses enterprise-grade authentication services. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. Overall, the website presents a professional, trustworthy, and technically mature digital presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further enhance security posture and trust.

B

Bike-Arena

bikearena.cz

44

Bike-Arena is a specialized retail business based in Příbram, Czech Republic, focusing on the sale and servicing of bicycles, electric bikes, and cycling accessories. The company operates both an e-commerce platform and a physical store, offering additional services such as bike rental, maintenance, and test rides. Their market position is that of a regional expert catering to recreational, sport, and competitive cyclists. The website is well-structured, professionally designed, and provides comprehensive product and service information targeted at cycling enthusiasts. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Select2, alongside Google Tag Manager and analytics tools. It is mobile-optimized with responsive design and includes cookie consent mechanisms aligned with GDPR requirements. The site uses HTTPS, ensuring encrypted communications, but lacks some recommended HTTP security headers which could enhance protection. From a security perspective, the site demonstrates good practices such as secure login forms and consent management but does not publish explicit security policies or incident response contacts. The absence of WHOIS data reduces transparency slightly but is mitigated by clear business contact information and a physical address. No critical vulnerabilities or exposed sensitive data were detected. Overall, Bike-Arena presents a trustworthy and professional online presence with moderate technical maturity and a solid security posture. Strategic improvements in security headers and transparency around security policies would further strengthen their risk profile.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

S

Smartim, s.r.o.

smartim.cz

46

Smartim, s.r.o. is a Czech Republic-based small business specializing in comprehensive online marketing services including SEO, PPC, web design, social media marketing, and analytics. With over 14 years of experience, they serve businesses seeking to improve their online presence and marketing effectiveness. The website is professionally designed, content-rich, and well-structured, targeting primarily Czech businesses. Technically, the site uses modern JavaScript libraries such as jQuery and AOS for animations, and integrates Google Tag Manager and LinkedIn Insight for marketing analytics. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and explicit incident response policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and detailed contact information support legitimacy. Overall, the site is a credible and effective marketing platform with room for security enhancements.

Price-check.eu is a professional European B2B SaaS platform specializing in real-time online price monitoring and comparison for e-commerce businesses and suppliers. The company, operated by E-solutions, s.r.o., offers advanced tools for tracking product prices, stock availability, and market trends to support efficient pricing strategies. The website is well-designed, mobile-optimized, and provides comprehensive business information targeting German-speaking markets. Technically, the site uses modern frameworks such as Vue.js and Bootstrap, integrates Google Tag Manager and Analytics, and enforces HTTPS for secure communications. However, it lacks visible security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. No WHOIS registrant data is available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the business claims. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and security best practices.

Price-check.sk is a professional online price monitoring and comparison tool operated by E-solutions, s.r.o., targeting e-shops and product distributors primarily in Slovakia and surrounding European markets. The platform offers real-time data monitoring, price alerts, reporting, and analytics to support efficient pricing strategies in B2C and B2B environments. The website demonstrates a solid market position with references from reputable brands and a consistent, professional digital presence. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and is hosted on Websupport with DNSSEC and HTTPS properly configured, ensuring a secure and performant user experience. However, the site lacks explicit privacy and terms of service pages and does not provide direct contact information, which slightly impacts privacy compliance and user trust. Security posture is strong with no visible vulnerabilities, but could be improved by adding security headers and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its business purpose effectively.

Price-check.com is a professional SaaS platform operated by E-solutions, s.r.o., specializing in real-time price monitoring and comparison for products across European online markets. The service targets online retailers and distributors, providing comprehensive data analytics, alerts, and reporting to support pricing strategies in B2C, B2B, and contractor environments. The website is well-structured, multilingual, and showcases a solid client base through references and logos. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and responsive design elements, ensuring good user experience and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well on content quality and business credibility but should address compliance and transparency gaps to enhance trust.

Č

Česká bowlingová asociace

czechbowling.cz

54

Česká bowlingová asociace (ČBA) is the national amateur bowling association in the Czech Republic, representing bowling players of all skill levels and ages. It serves as the official representative of the Czech Republic in European and international bowling federations and organizes national competitions, leagues, and player registrations. The website provides comprehensive information about bowling events, rankings, news, and media content targeted at the Czech bowling community. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the professional content and official partnerships support legitimacy. Overall, the site is a well-maintained digital presence for the Czech bowling community with room for improvement in privacy compliance and security headers.

Z

Zako Slovakia, s. r. o.

zakobowling.com

45

Zako Slovakia, s. r. o. operates the website zakobowling.com, providing services and products related to the realization, reconstruction, and maintenance of skittles and bowling lanes. The company also offers an e-commerce platform selling spare parts and accessories for these sports. The business targets sports centers and enthusiasts primarily in Slovakia, positioning itself as a niche regional provider with a small business scale. The website is multilingual, supporting Slovak and several other European languages, enhancing accessibility for a broader audience. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO for search optimization, TranslatePress for multilingual support, and Moove GDPR Cookie Compliance for privacy management. Hosting is provided by Websupport, indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with a functional but basic design and navigation structure. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks DNSSEC, security headers, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or malicious content were detected. The domain registration is consistent and legitimate, though the domain is relatively new compared to the website's content history, suggesting a possible domain migration or re-registration. Overall, the website presents a functional and moderately secure platform for its business operations but would benefit from enhanced privacy disclosures, security hardening, and more comprehensive contact information to improve trust and compliance.

S

Seychellesvillas.org

seychellesvillas.org

69

Seychellesvillas.org operates as a specialized online platform offering luxury beachfront villa rentals primarily located in Beau Vallon Beach, Seychelles. The website targets tourists seeking premium holiday accommodations, providing a streamlined booking experience with a 10% discount incentive and best price guarantee. The business model centers on direct villa rental bookings, supported by customer service contact points and social media engagement. Technically, the website employs a modern JavaScript stack including Google Analytics, Facebook Pixel, Hotjar, and lazy loading techniques to optimize user experience and performance. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made in security headers and explicit policy disclosures. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security policies or vulnerability disclosure mechanisms. WHOIS data is unavailable due to query failure or privacy protection, but the domain appears legitimate based on website content and technical setup. Overall, the site presents a professional, trustworthy front for a small hospitality business with room for enhanced security and compliance documentation.

V

VallonEnd Beachfront Villa

vallonend.com

64

VallonEnd Beachfront Villa is a small hospitality business offering three private self-catered apartments in Seychelles, targeting travelers seeking beachfront accommodation with ocean views and snorkeling opportunities. The website is professionally designed with clear navigation, good content quality, and consistent branding. It leverages modern web technologies including lazy loading, carousels, and tracking tools such as Google Analytics and Facebook Pixel. Privacy and cookie policies are implemented with GDPR compliance and consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website presents a trustworthy and professional online presence suitable for its business model.

C

Chateau Elysium

chateau-elysium.com

67

Chateau Elysium is a boutique hospitality business offering luxury guesthouse rooms and private villas directly on Beau Vallon Beach in Seychelles. The website presents a professional and visually appealing digital presence with detailed descriptions of accommodations, amenities, and services. The business targets tourists seeking upscale beachfront lodging with private pools and Creole cuisine. Technically, the site employs modern JavaScript libraries and tracking tools, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to enhance trust. Overall, the site is well-designed, GDPR compliant, and provides clear contact channels, supporting a positive user and business credibility profile.

J

Jánošíkov golf

janosikovgolf.sk

62

Jánošíkov golf is a small hospitality business located in Slovakia offering adventure golf experiences targeted at families, corporate groups, and couples. The website presents a professional and consistent brand image with clear navigation and relevant content describing their services. Technically, the site uses modern JavaScript libraries and Google services for analytics and user interaction, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA integration, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

J

Jánošíkov wellness Zázrivá

janosikovwellness.sk

64

Jánošíkov wellness is a small hospitality business operating a wellness center located in the Malá Fatra region of Slovakia. The company offers a variety of relaxation and wellness services including saunas, private baths, and wellness packages, targeting both local and international tourists seeking quality wellness experiences in a family-friendly environment. The website is professionally designed with multilingual support and clear navigation, reflecting a good level of digital maturity. Technically, the site uses modern JavaScript libraries and Google services for analytics and security, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be added to enhance protection. Privacy compliance is addressed with a GDPR-compliant privacy and cookie policy and a consent mechanism. Overall, the business information is transparent and consistent with domain registration data, supporting a high legitimacy score. No critical security or compliance issues were detected.

S

SOHO1 Wellness

soho1wellness.sk

63

SOHO1 Wellness is a small hospitality business located in Žilina, Slovakia, specializing in modern wellness and spa services including sauna access, massages, cryotherapy, and private whirlpool baths. The website presents a professional and user-friendly interface with clear navigation and comprehensive service descriptions, targeting general wellness customers seeking relaxation and rejuvenation. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and could be improved. Privacy compliance is strong with a dedicated GDPR policy and cookie management. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

W

Wellness Holešky

wellnessholesky.cz

65

Wellness Holešky is a small hospitality business located in Prague, Czech Republic, specializing in wellness and relaxation services including a rustic Finnish sauna, massages, private baths, and wellness stay packages. The website presents a professional and well-structured digital presence with clear navigation, rich content, and compliance with GDPR and cookie consent regulations. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a good user experience and moderate performance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap that impacts domain trustworthiness, but the overall website and business information appear legitimate and trustworthy.

A

Absolutum Wellness Hotel

absolutumhotel.cz

56

Absolutum Wellness Hotel is a boutique wellness hotel located in Prague 7, offering modern accommodation, a wellness center, a stylish restaurant, and conference facilities. The hotel targets tourists and business travelers seeking comfort and wellness services in a convenient location near public transport. The website reflects a medium-sized hospitality business with a professional online presence and clear service offerings. Technically, the site employs modern web technologies including Google reCAPTCHA, analytics, and marketing pixels, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and form protection, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with comprehensive GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

K

Kodak Alaris

kodakalaris.com

71

Kodak Alaris is a well-established enterprise technology company specializing in intelligent document processing and information capture solutions. The company targets large organizations and enterprises across sectors such as government, healthcare, education, and financial services. Their market position is strong, supported by professional branding, comprehensive service offerings, and global reach. The website reflects a mature digital presence with a focus on business-to-business solutions and compliance. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and OneTrust for privacy compliance. The infrastructure shows good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain suggests domain aliasing or privacy protection, but the overall trust indicators and business information support legitimacy. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen trust and compliance.

L

Linka bezpečí, z.s.

linkabezpeci.cz

62

Linka bezpečí is a well-established Czech non-profit organization providing free and anonymous counseling services primarily for children and students up to 26 years old. The website serves as a comprehensive platform offering telephone helpline, online chat, email support, educational resources, and multimedia content focused on mental health and social issues. The organization has a strong market position as a trusted helpline with a long history since 1994 and a domain registered since 1998. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies and third-party analytics and marketing tools, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media presence.

L

LDStudio

ringoffury.cz

52

Ring of Fury is a Czech-based combat sports event organizer specializing in celebrity fights across boxing, K1, Muay Thai, and MMA with small gloves. The organization targets combat sports fans and entertainment seekers, offering live events, PPV streaming, and merchandise. The website is professionally designed with good content quality and clear navigation, supported by active social media channels. Technically, it uses modern JavaScript libraries and Google Tag Manager for analytics, but lacks some security headers and formal privacy documentation. The absence of WHOIS data raises some trust concerns, though the visible business presence and partner sponsorships support legitimacy. Overall, the site is functional and engaging but would benefit from enhanced security and compliance documentation.

Mon Alba s.r.o. is a small Czech company specializing in IT services and construction consulting. Their offerings include website and e-shop development, Google Workspace implementation, domain management, and expert consulting on building moisture and structural issues. The company targets local businesses and property owners in Prague and surrounding areas. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for user tracking. However, the absence of WHOIS data limits domain trust verification, and no cookie consent mechanism was found, which may impact privacy compliance. Security headers are not explicitly detected, suggesting room for improvement in security posture. Overall, the website is functional and professional but could benefit from enhanced security and privacy features.

P

On-line dražby nemovitostí v exekuci ::

portal-elektronickych-drazeb.cz

42

The website www.portal-elektronickych-drazeb.cz operates as a specialized portal aggregating electronic auctions of seized real estate and movable assets in the Czech Republic. It serves as a centralized platform providing users with transparent access to voluntary and involuntary auctions conducted by various executor offices. The portal offers key services such as auction listings, valuation tools, and email notifications, targeting Czech residents interested in property auctions. The business model is that of an information aggregator without conducting auctions directly. Technically, the site uses standard web technologies including JavaScript and integrates Google Analytics and Google Tag Manager for tracking. The site is served over HTTPS, ensuring secure communication. However, it lacks modern security headers and cookie consent mechanisms, which are important for compliance with EU privacy regulations. The site’s design and mobile optimization are basic but functional, with good SEO practices evident through meta tags and structured navigation. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible vulnerabilities or sensitive data exposure. The absence of privacy and cookie policies, as well as lack of a vulnerability disclosure policy, represent compliance and transparency gaps. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, although the website content appears legitimate and focused on a niche market. Overall, the site is a functional and relevant resource for its target audience but would benefit from enhanced privacy compliance, improved security headers, and clearer business identity disclosures to strengthen trust and regulatory adherence.

T

TwoDo

two.do

62

TwoDo is a small technology company specializing in website, e-commerce, system, and application development with a focus on UX/UI design and custom CMS solutions. Established in 2017, it serves notable clients such as Ensana Hotels, Netflix, and HBO, positioning itself as a professional digital agency with a proprietary CMS platform. The website is built on modern Angular technology, hosted with Cloudflare DNS, and uses Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and terms of service documentation. Security posture is moderate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Overall, the business credibility is high, but privacy compliance and security policies need enhancement.

E

Ecocert Deutschland GmbH

ecocert.com

67

Ecocert Deutschland GmbH operates as a leading certification body specializing in ecological and social sustainability certifications across multiple sectors including agriculture, cosmetics, textiles, and forestry. The company offers certification services, professional training, and consulting to support sustainable practices globally. The website reflects a mature digital presence with multilingual support and a clear focus on sustainability and compliance. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable, which slightly impacts transparency but the overall business credibility remains high based on content and external trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust further.

A

All Traffic Solutions

alltrafficsolutions.com

68

All Traffic Solutions is a specialized provider of traffic management solutions, focusing on portable radar speed signs, variable message signs, and cloud-based traffic data management software. The company positions itself as a leading provider in the transportation sector, serving a diverse audience including public institutions, municipalities, law enforcement, and private entities. Their products emphasize durability, remote management, and data collection capabilities, supported by a strong warranty and made in the USA branding. Technically, the website is built on WordPress with a modern tech stack including LayerSlider, Yoast SEO, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but would benefit from improved transparency and security documentation.

T

Traffic Logix

trafficlogix.com

51

Traffic Logix is an established company specializing in traffic calming and intelligent transportation system solutions, including radar speed signs, speed camera systems, and rubber traffic calming products. Founded in 2002 and based in the United States, the company targets municipalities, military bases, private communities, and industrial sectors, positioning itself as a comprehensive provider of smart traffic solutions. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and domain locks in place, though improvements such as enabling DNSSEC and adding security headers like Content-Security-Policy are recommended. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR indicators. Overall, the site demonstrates high business credibility and professionalism.

P

Pivo Equestrian

pivoequestrian.com

73

Pivo Equestrian is a niche e-commerce business specializing in intelligent equestrian training technology, offering products like Pivo Pods and Pivo Max for riders and coaches. The website is built on the Shopify platform using the Shrine PRO theme, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Judge.me for customer reviews. The site demonstrates good content quality, professional design, and consistent branding tailored to its target audience of equestrian enthusiasts. Security posture is solid with HTTPS enforced and domain transfer protection, though there is room for improvement in DNS security and published security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professionally managed, suitable for a small business launched recently in 2023.

Longines is a well-established Swiss luxury watch manufacturer with a rich heritage dating back to 1832. The website serves as the official German-language portal for the brand, offering customers a guided selection process for purchasing watches. The site is professionally designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, ensuring a smooth user experience. Social media presence is strong with verified accounts across major platforms, reinforcing brand credibility. From a technical perspective, the website employs advanced monitoring and analytics tools including New Relic and Google Analytics, alongside a consent management platform for GDPR compliance. Security best practices are observed with HTTPS enforcement and appropriate security headers, contributing to a robust security posture. However, explicit links to privacy and cookie policies were not found in the provided content, indicating an area for improvement in transparency and compliance. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness from a domain registration perspective. Despite this, the overall professionalism, branding consistency, and technical maturity suggest the website is legitimate and trustworthy. No signs of content blocking or WAF challenges were detected, allowing full access to the site content. Overall, Longines' website demonstrates a high level of digital maturity and security readiness, with minor gaps in privacy policy visibility. Strategic recommendations include enhancing privacy disclosures, maintaining up-to-date security practices, and improving incident response visibility to further strengthen trust and compliance.

A

ATA GYM

atagym.cz

37

ATA GYM is a small fitness, wellness, and café business based in Černošice, Czech Republic, founded in 2022. The company offers a broad range of services including personal training, group classes, wellness amenities such as sauna and therapy, nutritional counseling, and educational seminars for trainers. The website is professionally designed using WordPress and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The business targets both general fitness enthusiasts and professional athletes, positioning itself as a comprehensive health and performance center with a local market focus. The domain registration is consistent with the business profile and shows no suspicious patterns.

O

Online Olympiad in Linguistics

onling.org

53

The Online Olympiad in Linguistics website is a specialized educational platform dedicated to organizing international online linguistics competitions primarily for secondary and high school students worldwide. The site provides detailed information about past and upcoming contests, including problem sets, results, solutions, and certificates. The business operates as a small, focused entity in the education sector, with a clear niche in linguistics competitions. The domain age and registration data align well with the business history, supporting legitimacy and trustworthiness. Technically, the website employs a custom or legacy platform with older JavaScript libraries such as jQuery 1.4.3, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. The site demonstrates moderate performance and basic mobile optimization but lacks modern security headers and DNSSEC, which are recommended for enhanced security. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. The use of an outdated jQuery version poses potential vulnerabilities. Privacy compliance is limited; while a privacy policy page exists, there is no cookie consent mechanism despite active tracking scripts. Contact information is limited to an email address and a Facebook page, with no phone or physical address provided. No formal security or incident response policies are published. Overall, the website is trustworthy and professional within its niche but would benefit from technical and privacy improvements to enhance security posture and compliance. Strategic recommendations include upgrading JavaScript libraries, enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms to align with GDPR and best practices.

M

moonseven edito

moonseven-editing.com

35

moonseven edito is a French content creation agency specializing in editorial strategy and content production for socially engaged organizations such as associations, foundations, NGOs, and socially responsible enterprises. Their services include content strategy consulting, motion design, web series, and video production, positioning them as a niche player in the media sector focused on social impact. The website is built on WordPress with a Bootstrap framework, integrating common marketing and analytics tools like Google Analytics and Tag Manager. While the site is professionally designed and mobile-optimized, it lacks critical privacy and cookie policies, and uses an outdated WordPress version, which may expose it to security risks. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and structure appear genuine and business-focused.

C

Centrale Nantes Alumni

centraliens-nantes.org

55

Centrale Nantes Alumni operates a comprehensive digital platform serving the alumni, students, faculty, and recruiters associated with Centrale Nantes engineering school. The website offers a rich set of services including an alumni directory, event calendars, job board, mentoring, and community engagement tools. It is well-positioned as a key network facilitator for its target audience in France and internationally. The platform leverages modern web technologies such as Vue.js, Google Analytics, and Google Maps API to deliver a responsive and interactive user experience. Security posture is solid with HTTPS enforced and secure login options, though some security headers could be improved. Privacy policies and cookie consent mechanisms are present and GDPR compliant, reflecting good privacy practices. The domain WHOIS data is unavailable likely due to privacy protection, which is common for such organizations. Overall, the website is professional, trustworthy, and well-maintained, supporting its role as a vital alumni network hub.

C

Centrale Lille Alumni

centraliens-lille.org

55

Centrale Lille Alumni is a professional alumni association website dedicated to graduates and students of Ecole Centrale de Lille. It provides resources, networking opportunities, career development services, event information, and a job board tailored to its community. The site is well-branded and targets primarily French-speaking alumni and recruiters, with English language support available. The business model centers on membership and community engagement, positioning itself as a key player in alumni relations for the institution.

C

Centrale Méditerranée Alumni

centraliens-mediterranee.fr

51

Centrale Méditerranée Alumni operates as a regional alumni network for graduates and students of Centrale Méditerranée, providing a platform for networking, career development, and community engagement. The website serves as a hub for members to access news, events, job opportunities, and group activities, positioning itself as a key resource for its alumni community in France. Technically, the site employs modern web technologies including Vue.js, Google Analytics, and Google Maps API, ensuring a responsive and interactive user experience. Security measures include HTTPS enforcement and OAuth-based authentication with major providers, enhancing user trust and data protection. However, the absence of WHOIS data limits domain registration transparency, though the site’s professional presentation and official branding support its legitimacy. Overall, the site demonstrates a mature digital presence with good content quality and security posture, suitable for its educational and non-profit sector audience.

A

Aira Communication, s.r.o.

bydlimekvalitne.cz

58

BydlímeKvalitně.cz is a Czech online magazine focused on modern living, home decoration, and lifestyle inspiration. Operated by Aira Communication, s.r.o., the site provides editorial content, tips, and trends for home and garden enthusiasts. The business model relies primarily on advertising revenue, supported by multiple ad networks and tracking technologies. The website is built on Drupal CMS and integrates various modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent management, though some advanced security headers could be added. The absence of WHOIS data is a concern but the site presents clear business identity and contact information, supporting legitimacy. Overall, the site is professional, content-rich, and well-structured for its target audience.

D

DeepValidator

deepvalidator.swiss

10

DeepValidator is a Swiss-based technology company specializing in digital signature validation compliant with Swiss ZertES and EU eIDAS standards. The company offers a SaaS platform and API for businesses to verify digital signatures and the signing authority of individuals, integrating real-time checks against the Swiss commercial register. Positioned as a niche provider, DeepValidator emphasizes legal compliance and security in digital document workflows. The website reflects a professional and modern digital presence, leveraging WordPress CMS and integrating multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be enhanced. The domain WHOIS data is privacy protected but consistent with the business profile. Overall, DeepValidator demonstrates a mature digital infrastructure suitable for its market segment.

D

DeepCloud AG

deepninja.swiss

58

DeepCloud AG operates DeepNinja, an intuitive business software platform tailored for self-employed individuals, small businesses, and startups primarily in Switzerland. The company positions itself as a Swiss-based technology provider with a strong ecosystem of integrated services including document sharing, digital signatures, digital identity, and banking integrations. DeepNinja leverages AI for data capture and automation, enhancing operational efficiency for its users. The website reflects a mature digital presence with multilingual support and a clear focus on Swiss market compliance and standards. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and analytics. It uses Google Tag Manager, Google Analytics, Matomo, and reCAPTCHA v3 to balance user experience and security. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. Security posture is strong, supported by ISO 27001 and ETSI certifications, secure HTTPS configuration, and privacy-compliant policies. However, explicit security headers are not detected and incident response contact details are not publicly disclosed, representing areas for improvement. Overall, the website and business demonstrate a high level of professionalism and trustworthiness with no signs of malicious activity or content blocking. The domain WHOIS data is privacy-protected, which is justified for this business type. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security.

D

DeepCloud AG

deepv.swiss

60

DeepCloud AG operates DeepV, a specialized cloud-based collaborative data visualization solution tailored for Abacus ERP customers. The platform enables secure sharing and interactive analysis of business data without requiring recipients to have an account, enhancing collaboration and decision-making. Positioned as a niche technology provider in Switzerland, DeepCloud AG emphasizes security and compliance, demonstrated by ISO/IEC 27001 and ETSI certifications. The website reflects a professional and trustworthy brand with clear messaging and a user-friendly interface. Technically, the website is built on WordPress with modern analytics and consent management tools, including Google Tag Manager, Google Analytics, Matomo, and CookieYes. It employs Google reCAPTCHA for bot protection and maintains a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized, accessible, and SEO-friendly, supporting multiple languages and currencies. Security posture is strong, with HTTPS enforced and certified security policies in place. However, the absence of visible HTTP security headers suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. Overall, DeepCloud AG demonstrates a mature digital presence with a focus on secure, compliant, and user-centric solutions. Strategic recommendations include enhancing HTTP security headers, providing explicit incident response contacts, and maintaining up-to-date software to sustain security and trust.

D

DeepO

deepo.swiss

38

DeepO is a Swiss-based technology company offering an advanced AI-powered data capture solution that automates document processing and data extraction. Positioned as an industry leader, DeepO targets businesses seeking to reduce manual data entry and streamline document workflows. The website demonstrates a mature digital presence with multilingual support, professional design, and integration within a broader ecosystem of related DeepCloud services. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and reCAPTCHA usage, though some HTTP security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data is privacy protected, common for Swiss domains, and does not raise immediate concerns. Overall, DeepO presents a credible and professional business with a solid technical foundation and trustworthy online presence.

D

DeepCloud

deepsign.swiss

59

DeepCloud operates the DeepSign platform, a Swiss-based SaaS provider specializing in secure, legally compliant digital signature solutions for businesses and individuals in Switzerland and the EU. The website presents a professional and modern interface, emphasizing trust and legal compliance. The company is positioned as a technology provider within a broader ecosystem of related services including digital identity, document sharing, and banking integrations. Technically, the site is built on WordPress with modern analytics and consent management tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms policies are not found. Overall, the site is trustworthy and well-constructed, supporting the company's market position as a reliable digital signature provider.

D

DeepBox

deepbox.swiss

59

DeepBox is a Swiss-based document sharing platform that offers secure, automated document sharing with direct integration to Abacus, a leading Swiss ERP software provider. The platform targets businesses and professionals in Switzerland, providing subscription-based services including document management, digital signatures via DeepSign, and AI-powered document processing through DeepO. The website demonstrates a modern technical infrastructure built on WordPress, enhanced with analytics tools such as Matomo and Google Tag Manager, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforcement and bot protection via Google reCAPTCHA, though improvements in security headers and published policies are recommended. Overall, DeepBox presents a professional and trustworthy online presence with a clear business focus and good technical maturity.

C

Cushman & Wakefield

cushmanwakefield.com

66

Cushman & Wakefield is a global leader in commercial real estate services, offering a broad portfolio of services including agency leasing, asset services, capital markets, tenant representation, and valuation. Founded in 1917 and headquartered in Chicago, the company operates at an enterprise scale with a workforce of approximately 52,000 employees. The website reflects a mature digital presence with comprehensive content, strong branding, and global reach. Technically, the site uses modern technologies such as jQuery, Google Tag Manager, Vidyard, and Coveo search, and is likely built on the Sitecore CMS platform. Security posture is solid with HTTPS and Content-Security-Policy headers, though some advanced security headers and explicit vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with cookie consent and privacy policies aligned with GDPR. The WHOIS data is unavailable, which limits domain registration trust analysis, but the overall site professionalism and market presence strongly indicate legitimacy.

SGS is a leading global company specializing in testing, inspection, and certification services, with a localized website for the Czech Republic market. The website presents professional branding and content focused on business and industrial clients, emphasizing their market leadership and key service offerings. The technical infrastructure leverages modern web technologies including Next.js, React, and Tailwind CSS, with integrated marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture shows room for improvement, with no detected security headers and missing visible privacy and cookie policies, which impacts privacy compliance and trust. The WHOIS data for the domain www.sgs.com is not available in the raw WHOIS output, which is unusual for a major enterprise domain and slightly reduces trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security and privacy transparency to improve compliance and user trust.

L

LIV by Neher

livbyneher.de

52

LIV by Neher operates an e-commerce website focused on selling humane insect catchers and complementary home products such as candles, candle holders, flower seeds, and vases. The website targets consumers interested in gentle and environmentally friendly insect removal solutions, primarily in Germany and the EU. The business model is retail e-commerce with a niche market positioning emphasizing humane treatment of insects and stylish home decor. The site is professionally designed with consistent branding and good content quality, including product descriptions and customer ratings.

STUDIO ERIGO, s.r.o. is a small Czech advertising agency based in Brno specializing in branding, marketing, graphic design, web design, and advertising services. The company targets businesses and organizations seeking comprehensive branding solutions both online and offline. Their website demonstrates a professional presence with a portfolio of clients and projects, indicating an established market position in the regional advertising sector. Technically, the website runs on TYPO3 CMS version 6.1, uses jQuery, Google Tag Manager, and Google Maps API, reflecting a moderately modern digital infrastructure. The site is accessible, mobile responsive to a basic degree, and includes cookie consent and privacy policy mechanisms, showing awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data is not publicly available, likely due to privacy protection, which is common for small businesses. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve technical and security aspects.

S

SPA Studio

spa-studiocz.com

62

SPA Studio is a medium-sized retail business specializing in luxury family hot tubs, swim spas, wellness, and sauna products, primarily serving the Czech and Slovak markets. The company operates multiple physical showrooms and provides expert advice, service, and maintenance, positioning itself as the exclusive dealer for Canadian Spa International® products in the region. The website is professionally designed, content-rich, and optimized for user experience and mobile devices. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and privacy plugins in use, but lacks explicit security headers and published incident response or vulnerability disclosure policies. Overall, the website is trustworthy and professional but would benefit from enhanced transparency on domain registration and security policies.

S

SPA Studio

spa-studio.sk

54

SPA Studio is a specialized retailer focused on selling family whirlpools and hybrid pools with counter-current swimming features under the Canadian Spa International® brand. The company operates primarily in Slovakia and the Czech Republic, offering over 47 unique whirlpool models and 9 swim spa models. Their market position is strong as an exclusive distributor with multiple physical showrooms and a professional e-commerce presence. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a fast and mobile-optimized user experience. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, professional, and well-aligned with business goals.

C

Canadian Spa International®

canadian-spa.com

41

Canadian Spa International® is a medium-sized company based in the Czech Republic specializing in the manufacturing and distribution of home and commercial spas, whirlpools, swim spas, and heat pumps. The company emphasizes innovation and quality, offering unique patented technologies and extended warranties. Their market position is that of a premium and innovative spa manufacturer targeting consumers and commercial clients interested in wellness products. The website is built on WordPress with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and no security headers were detected, which could be improved to enhance security posture. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website scores well in content quality and business credibility but needs improvements in privacy compliance and security best practices.

Z

Zdravotní klaun

zdravotniklaun.cz

58

Zdravotní klaun is a Czech non-profit organization dedicated to bringing joy and laughter to children in hospitals and geriatric patients in senior homes since 2001. The website reflects a mature digital presence with a professional design and consistent branding. It leverages TYPO3 CMS and integrates multiple modern frontend libraries and accessibility tools to enhance user experience. The organization uses comprehensive cookie consent mechanisms and integrates major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Microsoft telemetry to monitor and optimize its outreach and engagement. However, the absence of WHOIS data and explicit privacy policy pages introduces some concerns regarding domain legitimacy and full privacy compliance. Overall, the website demonstrates a good security posture with HTTPS enforcement and standard security practices, but could improve by adding more security headers and explicit privacy documentation.