Security Directory

Smaily is a technology company providing a SaaS platform focused on email marketing and newsletter creation. The website offers a simple, user-friendly interface with social login options and an award-winning drag and drop editor, targeting businesses and marketers seeking efficient email marketing solutions. The platform emphasizes ease of use and integration capabilities with over 1000 services. Technically, the website uses modern web technologies including HTTPS, Google Fonts, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enforced and social authentication, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain is a significant concern, suggesting possible domain registration issues that impact trustworthiness. Privacy compliance is partial with a Terms of Service link but no visible cookie consent or privacy policy on the login page. Overall, the site is functional and professional but requires improvements in transparency, security policies, and domain legitimacy verification.

Focus Nerez is a specialized professional magazine dedicated to stainless and corrosion-resistant steels, targeting industry professionals and businesses in the manufacturing sector. The website provides news, technical articles, e-paper subscriptions, and advertising opportunities, positioning itself as a niche media outlet within the Czech Republic and neighboring regions. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. However, some technical improvements are needed, particularly in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site demonstrates a moderate level of digital maturity with room for security and compliance enhancements.

PROHELP SERVICES, s.r.o. is a Czech-based company specializing in communication solutions across various sectors including office environments, retail, industrial settings, security forces, and marine applications. The company offers a range of products such as telephones, radios, headsets, voice communicators, intercoms, and safety equipment, complemented by services like web design, marketing, and support. Their market position is that of a niche specialist providing tailored communication solutions to business clients. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on WordPress, leveraging modern plugins for SEO, GDPR compliance, and customer support. It uses common web technologies such as jQuery and Google Maps API, and implements HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response plans, and vulnerability disclosure information are not present. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate. Overall, the website presents a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and WHOIS data verification are recommended to enhance trust and compliance.

M

MyWebdesign.cz s.r.o.

mywebdesign.cz

52

MyWebdesign.cz s.r.o. is a Czech-based technology company specializing in custom development of extensive e-commerce platforms and mobile applications. With over 20 years of experience, the company serves businesses aiming to scale their online sales, offering tailored solutions including B2B and B2C functionalities, integration with accounting and inventory systems, and 24/7 support. The website reflects a professional and trustworthy brand with strong client testimonials from notable companies such as ZOOT and Plzeňský Prazdroj. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google reCAPTCHA v3 integrated for spam protection. Hosting is managed by REG-ZONER, consistent with WHOIS data. The site is mobile-optimized, fast-loading, and SEO-friendly, though it lacks some advanced security headers and publicly available privacy and cookie policies. From a security perspective, the site uses HTTPS and reCAPTCHA, but the absence of explicit security headers and privacy documentation indicates room for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website presents a high-quality, professional digital presence with minor compliance gaps. Strategic enhancements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

F

Financial Planning Standards Board Ltd.

fpsb.org

63

Financial Planning Standards Board Ltd. (FPSB) is a globally recognized standards-setting organization dedicated to advancing the financial planning profession. The website highlights FPSB's role in promoting CFP certification as the global mark of excellence, supporting a worldwide network of affiliate organizations, and providing research, advocacy, and professional development resources. The site is well-structured, professionally designed, and targets financial planning professionals and consumers seeking trusted financial advice. Technically, the site is built on WordPress, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity, with Cloudflare providing DNS and CDN services. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent managed via OneTrust. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Overall, the website demonstrates a mature digital presence with good privacy compliance and trust indicators.

Budoucipestouni.cz is a professionally maintained website operated by Sdružení pěstounských rodin z.s., a Czech non-profit organization dedicated to supporting foster families and promoting foster care and adoption. The site offers a variety of services including online and email counseling, educational quizzes, webinars, and informational infographics, targeting prospective foster parents and stakeholders in child welfare. The organization has a credible market position with a history dating back to 1995 and receives support from the Czech Ministry of Labour and Social Affairs. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR for cookie consent management. It uses HTTPS with good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like security headers and a published privacy policy are missing. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy and terms of service documents and security headers that could enhance protection against common web threats. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency. Overall, Budoucipestouni.cz presents a trustworthy and professional online presence for a non-profit organization focused on foster care support. Strategic improvements in privacy documentation and security headers would further strengthen its security posture and compliance.

P

Poradenské a krizové centrum, p. o.

pkcentrum.cz

43

Poradenské a krizové centrum, p. o. is a Czech non-profit organization founded in 2022, providing accessible help and support to individuals and families facing difficult life situations, including children at risk and victims of domestic violence. The organization operates primarily in the Zlín region and offers a range of social and psychological services such as crisis intervention, counseling, mediation, and substitute family care. The website reflects a professional and consistent brand image with strong regional partnerships and sponsors. Technically, the site is built on WordPress with modern web technologies, includes accessibility features, and enforces HTTPS with cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

T

TTP GROUP s.r.o.

materasso-eshop.cz

68

Materasso-eshop.cz is an established Czech e-commerce retailer specializing in high-quality mattresses, beds, bed frames, and bedding accessories. The company, operating under TTP GROUP s.r.o., emphasizes detailed craftsmanship and advanced technology in mattress production, targeting consumers seeking comfort and personalized sleep solutions. The website offers a broad product catalog with clear pricing, variants, and availability, supported by customer service and a physical store pickup option. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and uses the Jednicky e-shop system CMS. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response contacts suggests areas for enhancement. The lack of WHOIS data limits domain trust verification, but the professional presentation and business transparency mitigate concerns. Overall, the website presents a trustworthy and user-friendly platform for mattress retail, with recommendations to improve security headers, publish security policies, and verify domain registration details to strengthen trust and compliance.

I

InstaGYM

instagym.cz

63

InstaGYM is a Czech-based fitness company specializing in organizing fitness camps primarily in Slovakia and abroad, as well as providing online personal training and nutrition consulting services. The company positions itself as a market leader in its niche, targeting fitness enthusiasts seeking professional training and wellness solutions. The website is professionally designed using modern web technologies such as Nuxt.js and integrates popular analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Exponea. The technical infrastructure supports a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, although a cookie consent mechanism is implemented. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is not uncommon for small businesses. Overall, InstaGYM presents a credible and professional online presence with room for improvement in privacy and security transparency.

G

GEO Materiály

geomaterialy.sk

48

Geomaterialy.sk is a Slovak-based small business specializing in the supply of geosynthetic and construction materials such as hydroisolation foils, geotextiles, geomeshes, and related products. The company targets construction professionals and industrial clients within Slovakia, operating primarily through an e-commerce platform. The website is professionally designed with clear navigation and product categorization, reflecting a focused business model in the manufacturing sector. The domain is relatively new, registered in 2023, consistent with the company's recent establishment. Technically, the website employs modern web technologies including jQuery, Bootstrap 4, and Google Analytics, hosted on Websupport infrastructure with DNSSEC and HTTPS enabled, ensuring a secure connection. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks visible security headers and a cookie consent mechanism. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure information is provided. Tracking is done via Google Analytics and Tag Manager, indicating moderate user tracking without advanced privacy controls. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business credibility is strong given clear contact information and consistent domain registration data. Strategic recommendations include implementing security headers, cookie consent, and detailed privacy policies to enhance trust and compliance.

F

Fotoklub Čakovec

fotoklub-cakovec.hr

40

Fotoklub Čakovec is a small, local photography club based in Croatia, established in 2008. The organization focuses on photography education, community workshops, exhibitions, and publishing photography-related books. Their website is built on WordPress and uses a variety of plugins to support photo galleries, user interaction, and SEO. The club targets photography enthusiasts including children and adults, providing educational and cultural services. The website content is rich and professionally presented, with consistent branding and good navigation. Technically, the site uses modern web technologies including WordPress 6.4.7, Yoast SEO, and Google Fonts. It is hosted under a Croatian registrar (CARNET) with DNS managed by infoitdns.com. The site is served over HTTPS with good SSL configuration and includes CAPTCHA protection on forms to prevent abuse. However, some security best practices such as security headers are not explicitly detected, and there is no cookie consent mechanism despite GDPR privacy policy presence. From a security perspective, the site shows a moderate security posture with HTTPS, CAPTCHA, and no visible sensitive data exposure. The absence of explicit security headers and lack of published incident response or vulnerability disclosure policies are areas for improvement. The domain registration data is consistent with the website content and business type, indicating legitimacy and trustworthiness. Overall, the website is a well-maintained, content-rich platform for a non-profit photography club with good technical and security foundations but could enhance privacy compliance and security transparency to improve trust and compliance.

H

Heineken

heineken.sk

67

Heineken's Slovakian website serves primarily as an age verification gateway, ensuring compliance with legal drinking age regulations before granting access to alcohol-related content. The site reflects the brand's global presence and commitment to responsible marketing. Technically, the site uses modern web standards with responsive design and Google Fonts integration, but lacks visible advanced frameworks or CMS indicators. Security posture is moderate; while HTTPS is implied, no explicit security headers or privacy policies are present on this page, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, but the strong brand presence and professional design mitigate concerns. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

C

CM Slovakia s.r.o.

nabager.sk

52

CM Slovakia s.r.o. operates a professional website focused on the sale and servicing of spare parts and machinery for construction equipment, including brands like Hyundai, Bobcat, and Honda. The company targets Slovak and broader European markets, offering B2B and B2C services such as parts sales, machinery rental, and maintenance programs. The website reflects a regional distributor position with a clear business model centered on construction machinery support. Technically, the website employs modern front-end technologies including jQuery, Slick Slider, FontAwesome, and Bootstrap 4, ensuring a responsive and user-friendly experience. SEO and accessibility are adequately addressed, though some improvements in accessibility and security headers could enhance the technical maturity. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or exposed sensitive data were detected, but security headers and formal policies should be added to strengthen the security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, presenting a low-risk profile. Strategic improvements in security policy transparency and technical security controls are recommended to further enhance trust and resilience.

V

VUMZ NZ

vumznz.sk

58

VUMZ NZ is a Slovakian company specializing in the manufacturing and assembly of steel constructions including steel halls, galvanized halls, fire ladders, stairs, and entertainment technology. The company offers comprehensive services from project documentation through construction and building approval. The website reflects a small-sized manufacturing business with a clear focus on steel architecture and construction solutions. The target audience includes businesses and individuals seeking durable steel building solutions. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, Skrollr.js, and Snowplow Analytics for tracking. The site is hosted on a CDN with HTTPS enforced and includes PWA features via service workers, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

L

LIPEX PLUS spol. s r.o.

hondacl.cz

43

Honda Česká Lípa, operated by LIPEX PLUS spol. s r.o., is a small-sized authorized dealer and service provider specializing in Honda vehicles and garden machinery in the Czech Republic. The company offers a comprehensive range of automotive services including sales of new and used cars, authorized repairs, tire services, emission testing, and garden equipment sales. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, positioning the company as a trusted local business with over 20 years of experience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance. The site is accessible without any WAF or blocking mechanisms, but the lack of WHOIS data reduces domain trustworthiness and raises questions about domain registration transparency. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the missing privacy and cookie policies and lack of incident response information highlight compliance gaps, particularly with GDPR. The use of Google Analytics suggests moderate user tracking, but without clear privacy disclosures. Overall, the security posture is moderate but could be enhanced with standard best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and verify domain registration details to improve trust and compliance. Enhancing incident response readiness and communicating data protection officer contacts would further strengthen their security culture and customer confidence.

S

SLOTPARTNERS

slotpartners.com

60

Slotpartners is an established online casino affiliate network founded in 2008, offering a portfolio of casino brands and attractive revenue share deals to affiliates. The website is professionally designed using WordPress and associated plugins, with a focus on promoting their affiliate program and brands. The technical infrastructure includes Cloudflare DNS and standard web technologies, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible within its niche but would benefit from enhanced privacy and security disclosures.

LunuBet is an online gambling platform targeting German-speaking users, offering betting and casino services. The website is relatively new, with domain registration in early 2024, and lacks transparency in business and compliance information. Technically, the site uses Cloudflare DNS and Google Fonts, with moderate performance and basic mobile optimization. Security posture is weak, with no DNSSEC, no security headers detected, and no visible privacy or cookie policies. No contact or incident response information is provided, which raises concerns about user support and compliance. Overall, the site presents a moderate risk profile typical of new gambling platforms with limited trust signals.

Z

ZotaBet

zotabet.com

56

ZotaBet operates as an online casino and sportsbook platform offering a wide range of gambling services including over 10,000 games, sportsbook betting, promotions, and VIP programs. The website targets adult users interested in online gambling and sports betting. The platform supports multiple languages and provides secure payment options along with 24/7 customer support. Technically, the site is built using modern JavaScript frameworks such as React, with integrations for customer tracking and payment processing. The site is mobile optimized and SEO friendly, providing a good user experience. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies or vulnerability disclosure programs. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

S

Solid Solutions

solidsolutions.so

54

Solid Solutions is a small technology company specializing in AI-driven SaaS products and solutions. Their website showcases an ecosystem of AI tools including custom AI agents, AI email writers, and sales agents for WhatsApp. The company targets developers, engineers, and growth professionals interested in AI innovation. The technical infrastructure is based on Webflow CMS with standard web technologies and moderate performance. The website is well designed, mobile optimized, and provides clear contact options but lacks formal privacy and security policies. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. Overall, the company appears legitimate but should improve transparency and security documentation.

K

Karki s.r.o.

indickadiyalo.cz

44

Diyalo Restaurant is a small hospitality business specializing in authentic Indian and Nepalese cuisine located in Česká Lípa, Czech Republic. The company, legally registered as Karki s.r.o., was founded in 2023 and has quickly established a strong local presence, supported by excellent customer reviews and recognition from Restaurant Guru. The website provides comprehensive information about the restaurant's offerings, including dine-in, online ordering through multiple partners, and event hosting services. The digital infrastructure is built on standard web technologies with a focus on responsive design and user experience, though it lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS usage but could be improved with additional headers and policies. Overall, the website is professional and trustworthy but should address privacy and security policy gaps to enhance compliance and user trust.

Č

Česká internistická společnost

cisweb.cz

10

Česká internistická společnost (ČIS) is a professional association representing over 2,000 medical professionals specializing in internal medicine and its subspecialties in the Czech Republic. The organization focuses on education, training, event organization, and dissemination of medical guidelines and news to its members. The website serves as a portal for members to access educational videos, event calendars, and professional resources. The site is well-branded, professionally designed, and targets medical professionals with relevant and up-to-date content. Technically, the website uses a modern CMS (Solidpixels), integrates Google Fonts, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although a formal privacy policy is not clearly found on the main page. Security posture is good with HTTPS enforced and secure form handling, but lacks some advanced security headers. WHOIS data is unavailable, which reduces domain trustworthiness from a registration perspective, but the professional content and partner affiliations support legitimacy. Overall, the website is a credible and valuable resource for internal medicine professionals in the Czech Republic.

S

SPAK-EKO, a.s.

spakeko.sk

37

SPAK-EKO, a.s. is a Slovak non-profit joint initiative formed by major tobacco companies to address environmental pollution caused by cigarette butts. The organization operates a voluntary system for cigarette waste collection and promotes environmental awareness and innovative reuse of tobacco product waste. The website is built on WordPress using the Divi theme, hosted likely by Websupport, and presents a professional and consistent brand image targeted at municipalities, clients, and the general public concerned with environmental issues. Technical infrastructure is modern but basic, with no advanced analytics or tracking detected. Security posture is good with HTTPS and DNSSEC enabled, though explicit security headers and policies are missing. Privacy and cookie policies are absent, indicating a compliance gap. Overall, the website is trustworthy and serves its informational and advocacy purpose effectively.

V

VUMZ

vumz.sk

41

VUMZ is a Slovak-based company specializing in comprehensive technological solutions for industry and waste management, including custom manufacturing of specialized machinery, steel constructions, energy solutions, and logistics services. The company has a strong market presence with 20 years of experience and offers a wide range of services tailored to industrial clients. Their digital infrastructure is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security policies and some security headers. Privacy compliance is partial with cookie consent implemented but missing a clear privacy policy. Overall, the website reflects a legitimate and professional business with room for improvement in security and compliance documentation.

N

Norwit SLOVAKIA

norwit.sk

41

Norwit SLOVAKIA operates a corporate website primarily targeting the Slovak market. The company appears to be established since 2003, with a domain age supporting a mature business presence. The website uses WordPress with the Divi theme, integrating common SEO and analytics tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and Facebook Pixel. While the site includes a cookie consent mechanism indicating GDPR awareness, it lacks explicit privacy policy and terms of service pages in the analyzed content. The technical infrastructure is modern and mobile-optimized, but security headers are not detected, which is a potential area for improvement. No contact emails or phone numbers are clearly presented, which may affect user trust and compliance. Overall, the security posture is moderate with HTTPS enabled and no visible vulnerabilities, but the absence of detailed security policies and contact information limits the security maturity. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, and providing clear contact channels for incident response.

E

ENVI - PAK

envipak.sk

61

ENVI - PAK is a Slovak producer responsibility organization specializing in waste management, recycling, and compliance services for manufacturers and municipalities. Established in 2003, it holds a leading market position as the longest operating OZV in Slovakia, supported by multiple industry awards and certifications. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it uses modern web technologies including Google Tag Manager and analytics, with DNSSEC and HTTPS ensuring strong security foundations. However, the absence of an explicit privacy policy and security incident response documentation represents compliance and transparency gaps. Overall, the site is trustworthy, content-rich, and well-aligned with the business's environmental mission.

K

KANAL M.P.S. s.r.o.

kanal-mps.sk

43

KANAL M.P.S. s.r.o. is a Slovak company specializing in sewer and drainage system services including electromechanical cleaning, high-pressure cleaning, and TV monitoring of sewer pipes. Established in 2003, it holds a stable market position with a medium-sized operation focused on servicing Slovak businesses and institutions. The website reflects a professional business model with clear service offerings and a consistent brand presence. Technically, the site uses modern JavaScript libraries such as jQuery, Lodash, Swiper.js, and Fancybox, hosted likely on Websupport infrastructure with DNSSEC enabled, ensuring domain security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and DNSSEC but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partial, with a cookie consent mechanism but no dedicated privacy policy or terms of service pages. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

B

BIOPEL, a. s.

biopel.sk

44

BIOPEL, a. s. is a Slovak company specializing in the production and sale of wood biofuels including pellets, briquettes, and wood chips. The company also offers complementary products such as hygienic bedding and garden supplies, alongside services in heat production and distribution. Positioned as one of the few ENplus certified producers and traders in Slovakia, BIOPEL maintains a reputable market presence with a focus on ecological and renewable energy solutions. Their target audience includes residential and commercial customers seeking sustainable heating options. The website reflects a medium-sized enterprise with a consistent brand image and professional content presentation. Technically, the website is built on Joomla CMS with modern frontend technologies including jQuery and Bootstrap. It incorporates Google Analytics for traffic monitoring and a cookie consent mechanism to comply with basic privacy regulations. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the website uses HTTPS with a good SSL configuration and implements cookie consent. However, it lacks visible security headers and published security or privacy policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns well with the business claims, supporting the legitimacy of the domain and company. Overall, BIOPEL's website is professional and trustworthy, serving its business goals effectively. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture, further strengthening user trust and regulatory adherence.

U

Urząd Miasta Torunia

torun.pl

56

The website www.torun.pl is the official online presence of the City of Toruń, Poland. It serves as a comprehensive portal for residents, tourists, and businesses, providing extensive information on city governance, cultural events, tourism, education, sports, and development initiatives. The site is well-structured with clear navigation and consistent branding, reflecting its role as a trusted government resource. The content is primarily in Polish, targeting local and regional audiences, with links to English tourism resources.

P

PRZEDSIĘBIORCY.PL Ogólnopolska Federacja Przedsiębiorców i Pracodawców

rekomendowani.org

43

The website rekomendowani.org represents a Polish federation focused on promoting business reliability and cooperation among entrepreneurs, local governments, and institutional partners. It offers membership programs, networking opportunities, legal and economic advisory services, and certification for ethical business practices. The federation holds a notable market position with media patronage and multiple partnerships, targeting business owners, managers, and local government units in Poland. Technically, the website employs modern web technologies including Turbo Frames and Swiper.js for dynamic content presentation. The site is mobile optimized and presents a professional design with clear navigation. However, some technical aspects such as CMS identification and hosting provider remain unclear. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS (implied by external Google Fonts and script sources) and implements a cookie consent mechanism compliant with GDPR. No explicit security headers or incident response contacts were found, and WHOIS data is unavailable, which reduces domain trustworthiness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site is safe, professional, and compliant with privacy regulations, but would benefit from enhanced security headers, transparent WHOIS data, and explicit contact information to improve trust and security posture.

R

Retargetly

retargetly.com

61

Retargetly is a Latin American technology platform specializing in data-driven advertising solutions, now operating as part of the global marketing company Epsilon. The website serves primarily as a transitional landing page informing visitors of this corporate change, with limited direct content or interactive features. The business is positioned as a leader in data and advertising convergence in Latin America, serving over 250 clients. Technically, the site is built on Webflow with standard web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS services. Security posture is moderate with HTTPS enabled and domain transfer lock in place, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial, with privacy policies available but no cookie or terms of service policies evident. No direct contact or incident response information is published, limiting transparency. Overall, the site is safe, professional, and consistent with the business narrative but could improve in privacy and security disclosures.

F

Fundacja Polskiego Godła Promocyjnego Teraz Polska

terazpolska.pl

10

Fundacja Polskiego Godła Promocyjnego Teraz Polska is a well-established non-profit foundation founded in 1991, dedicated to promoting Polish business, products, services, and innovations through quality certification and promotional marks. The website serves as an informational and promotional platform targeting Polish businesses, municipalities, and consumers interested in Polish quality standards. The foundation holds a reputable market position as a recognized promoter of Polish business excellence. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, and various social media tracking pixels, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility improvements could be made. Security-wise, the website uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no indications of malicious activity or content safety concerns.

T

TERRAN Slovakia s.r.o.

terran.sk

52

TERRAN Slovakia s.r.o. is a well-established manufacturer specializing in premium concrete roofing tiles and accessories, serving primarily the Slovak market and surrounding regions. The company emphasizes quality, innovation, and tradition, supported by multiple certifications and a strong brand presence. Their website reflects a mature digital infrastructure with comprehensive product information, downloadable catalogs, and customer engagement tools such as calculation services and newsletters. The target audience includes consumers, architects, and construction professionals seeking reliable roofing solutions. Technically, the website is built on WordPress with WooCommerce components, enhanced by performance optimizations like WP Rocket and integrated marketing tools such as Google Tag Manager and MailerLite. The site is mobile-optimized, SEO-friendly, and employs modern web standards, ensuring a fast and accessible user experience. Hosting is managed through a reputable provider with DNSSEC enabled, contributing to domain security. From a security perspective, the site enforces HTTPS, uses DNSSEC, and implements bot detection scripts. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and explicit user consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with no indications of content blocking or security challenges. Strategic recommendations include publishing formal security policies, establishing incident response contacts, and enhancing security headers to further strengthen the security posture.

Y

YMY CL s.r.o.

ymy.cz

46

YMY CL s.r.o. is a Czech-based company specializing in interior design services including office and residential interiors, 3D visualizations, and complete realization and furnishing. Established in 1994 and operating as a limited liability company since 2010, it serves clients primarily in Prague, Liberec, Česká Lípa, and Northern Bohemia. The company positions itself as a professional and comprehensive service provider in the interior design sector with a focus on customer needs and quality execution. Technically, the website employs modern web technologies such as jQuery, Foundation CSS, and analytics tools like Google Analytics and Piwik, indicating a moderate level of digital maturity. However, the absence of WHOIS data and privacy/cookie policies reveals gaps in transparency and compliance. Security posture is moderate with HTTPS usage but lacks security headers and formal incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

C

Cornelissen aannemingsbedrijf

cornelissenbouw.nl

43

Cornelissen aannemingsbedrijf is a Dutch construction contracting company specializing in managing both large and small building projects with an emphasis on craftsmanship and customer involvement. The company targets individuals and businesses in the Netherlands seeking reliable construction services. The website is built on WordPress, utilizing Yoast SEO for search engine optimization and Google Analytics for visitor tracking. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory requirements.

T

Tours Val de Loire Box

valdeloire-box.fr

41

Tours Val de Loire Box is a small French hospitality business specializing in selling curated experience gift boxes focused on the Val de Loire region. Their offerings include cultural passes, vintage vehicle rides, helicopter tours, gastronomy workshops, and weekend stays, targeting tourists and gift buyers interested in unique regional experiences. The website is professionally designed using WordPress with the Divi theme and WooCommerce platform, supported by modern web technologies such as jQuery and Snap.svg. The site is hosted by OVH, a reputable French provider, and includes SEO optimizations and mobile responsiveness. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy policies and terms of service are present and accessible, indicating GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence for a niche tourism business.

T

Tours City Pass

tourscitypass.com

65

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

S

Synergiles

synergile.fr

44

Synergiles is a French innovation cluster specializing in energy and ecological transition, acting as an interface between technical, scientific, and institutional stakeholders. The website presents a professional and consistent brand image with a clear focus on its mission and services. The technical infrastructure is based on WordPress with the Divi theme and includes modern web technologies and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the active social media presence and quality content support business credibility. Overall, the website is functional, secure, and professionally maintained but would benefit from enhanced transparency and security documentation.

T

Tours Événements

tours-evenements.com

62

Tours Événements is a professional event organization and venue management company based in Tours, France, specializing in congresses, salons, galas, and seminars. They operate key venues such as the Palais des Congrès de Tours and Parc Expo Tours, offering modular spaces and comprehensive event services including hospitality, audiovisual, and security. The company positions itself as a major regional player in the hospitality and event sector with a focus on sustainable event management, evidenced by their ISO 20121 certification. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrations such as Google Tag Manager, Hotjar, and Finsweet Cookie Consent for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete or unavailable, which slightly reduces trust but does not outweigh the professional presentation and contact transparency. Overall, the website demonstrates a strong digital presence and business credibility with minor areas for security and compliance improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and monitoring domain registration data for consistency.

O

OJS - Office de Justification des Statistiques

ojs.fr

39

OJS - Office de Justification des Statistiques operates as a trusted observatory and data controller for the French event industry, providing verified statistics, studies, and event data to stakeholders. The organization is accredited by COFRAC and follows ISO standards, reinforcing its credibility and regulatory compliance. The website serves as a public-facing platform to disseminate this information and support transparency in the sector. Technically, the site is built on WordPress using the Enfold theme and includes modern SEO and analytics tools, indicating a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policy disclosures. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

Eline GmbH operates a professional e-commerce website targeting the electrical and information technology trade sector in Germany. The company offers specialized products such as inspection stickers, inspection protocols, advertising materials, and printed matter. Founded in 1991, the business leverages a Shopify platform with a modern technical infrastructure including JavaScript frameworks, hCaptcha for form security, and GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and integrates social media channels to enhance customer engagement. Security posture is solid with HTTPS enforced and basic protections in place, though improvements in security headers and DNSSEC are recommended. Overall, the site presents a trustworthy and professional online presence with no critical vulnerabilities detected.

A

Alice Jeunesse

alice-editions.be

43

Alice Éditions is an independent Belgian youth publishing house established in 1995, focusing on producing engaging and value-driven books for children and adolescents. The company emphasizes respect, openness, and dialogue through its publications. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and libraries, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS and secure forms, though some security headers and cookie consent mechanisms are missing. The WHOIS data is restricted, which is common for privacy but limits domain transparency. Overall, the site is trustworthy and serves its niche audience effectively.

M

Mediactive Events

mediactive-events.com

63

Mediactive Events is a French-based company specializing in event technology, digital platforms, and network infrastructure for corporate and large-scale events. With over 30 years of experience, they serve a prestigious client base including major corporations and public institutions. Their key services include corporate events, trade shows and congresses, and event venue connectivity solutions. The company positions itself as a technology expert in the event industry, offering premium digital and network services to demanding brands. Technically, the website employs modern JavaScript libraries, uses Matomo for privacy-conscious analytics, and is hosted on a dedicated CDN. The site is well-structured with rich metadata and structured data, supporting SEO and user experience. Security posture is good with HTTPS and cookie-less analytics, but lacks some security headers and public security policies. The absence of WHOIS registrant data is a concern but the professional presentation and client list support legitimacy. Overall, the website is a strong digital asset for the company but would benefit from enhanced privacy and security disclosures.

M

MoorFutures

moorfutures.de

64

MoorFutures is a German environmental initiative focused on climate protection through the restoration and rewetting of moorlands, offering CO2 compensation certificates. The website positions itself as a national and regional platform linking four moor-rich German states, providing information and access to purchase certificates. The business model centers on environmental sustainability and biodiversity preservation, targeting environmentally conscious investors and organizations. Technically, the site is built on the 1AND1 Website Editor platform, utilizing modern web technologies including jQuery, service workers for PWA capabilities, and Mapbox for mapping services. The site is mobile-optimized and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No direct contact emails or phone numbers are exposed on the homepage, with contact likely via a dedicated contact page form. Overall, the site is professional, trustworthy, and aligned with its environmental mission.

N

Nadační fond pro podporu zaměstnávání osob se zdravotním postižení

nfozp.cz

45

Nadační fond pro podporu zaměstnávání osob se zdravotním postižení (NFOZP) is a Czech non-profit foundation dedicated to supporting the employment of persons with disabilities. Established in 2007, it operates primarily within the government and non-profit sectors, providing support services, information dissemination, and managing grants to facilitate employment opportunities for disabled individuals. The website serves as an informational and outreach platform targeting employers, persons with disabilities, and related stakeholders in the Czech Republic. Technically, the website is built on WordPress using the Divi theme, with standard JavaScript and Google Fonts integrations. It is hosted by a Czech hosting provider with a stable domain registration dating back to 2007, indicating a mature and legitimate online presence. Security-wise, the website uses HTTPS but lacks visible security headers and formal security policies, which suggests room for improvement in security posture and compliance. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is professionally designed with good accessibility features but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

N

Nadační fond Čas je mozek

nfcasjemozek.cz

42

Nadační fond Čas je mozek is a Czech non-profit organization dedicated to stroke awareness, education, and patient rehabilitation support. The foundation educates the public on stroke symptoms and the importance of timely emergency response, organizes fundraising events, and provides financial aid to stroke survivors. The website reflects a focused mission with clear content and active social media engagement. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Analytics, with a cookie consent mechanism implemented. However, the absence of a privacy policy and security headers indicates room for improvement in privacy and security compliance. The WHOIS data is missing, which limits domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured and professional, serving a clear non-profit healthcare mission.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

C

Comité du Risque Systémique

cdrs.lu

32

The website cdrs.lu represents the Comité du Risque Systémique, an institutional entity likely focused on systemic risk in Luxembourg. The site is primarily informational, presented in French, and built on WordPress using the Divi theme. The technical infrastructure is standard for a small institutional website, with moderate performance and basic mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which limits its compliance and trustworthiness. No WAF or blocking mechanisms were detected, indicating full accessibility. The WHOIS data shows Luxembourg-based name servers consistent with the domain's country code but lacks detailed registrant information, limiting full legitimacy assessment. Overall, the site is safe and suitable for general audiences but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

Asociacija ,,Padedu augti“ is a Lithuanian non-profit organization dedicated to supporting families with premature and seriously ill newborns. Established in 2011, it provides various services including social support projects, educational initiatives, and direct assistance to hospitals and families. The organization maintains a strong community presence through storytelling, events, and partnerships with healthcare institutions. Their website reflects a well-structured, content-rich platform with clear navigation and engagement tools such as a live chat widget. Technically, the website employs modern web technologies including jQuery, jQuery UI, Fancybox, and Google Fonts, hosted behind Cloudflare DNS and nameservers ensuring reliable performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal security policies. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a notable compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

K

Kökstavlor.se

xn--kkstavlor-07a.se

48

Kökstavlor.se is a Swedish niche affiliate marketing website specializing in kitchen posters and wall art. The site aggregates product information and links to partner retailers such as Designtorget, KitchenTime, Confident Living, and Solhem Inredning, providing users with curated selections and price comparisons. The business model relies on affiliate commissions while maintaining editorial independence and transparency through affiliate disclosures. The website is built on WordPress using Elementor and Yoast SEO, indicating a mature digital infrastructure with good SEO practices and mobile optimization. Security posture is solid with HTTPS enforced and standard security headers, though improvements like DNSSEC and Content-Security-Policy headers are recommended. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-positioned within its retail niche.

H

Hagstofa Íslands

hagstofa.is

58

Hagstofa Íslands is the official national statistical institute of Iceland, providing comprehensive statistical data and services related to population, society, economy, environment, and more. The website serves a broad audience including researchers, government entities, and the general public, offering open data access and custom statistical services. The domain is well-established since 1998, reflecting a stable government entity with a strong market position as Iceland's authoritative statistics provider. Technically, the website employs modern web technologies including jQuery, Matomo analytics for privacy-conscious tracking, and embedded interactive charts via Datawrapper. Hosting is managed by a local Icelandic provider, 1984 Hosting, with a moderate performance profile and good mobile optimization. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements are recommended such as enabling DNSSEC and implementing security headers. Privacy compliance is partially met with a clear privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its public mission effectively.