Security Directory

K

KOPOS Elektro PL Sp. z o.o.

kopos.pl

55

KOPOS Elektro PL Sp. z o.o. is the Polish representative of the Czech manufacturer KOPOS KOLÍN a.s., specializing in electrical installation materials made from plastics and metal. The company offers a broad product range exceeding 5000 items, meeting international quality standards, and operates as one of 10 subsidiaries across Europe, Asia, and Central America. The website reflects a mature business with a strong market presence and a focus on B2B customers in the energy and manufacturing sectors. Technically, the website is built on Drupal 7 with a modern set of JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness, but the comprehensive business information, certifications, and multi-domain presence support the legitimacy of the company. Overall, the website is professional, secure, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a formal security policy, and providing incident response contact details to improve transparency and trust.

F

Fachverband BIOGAS e.V.

biovollgas.de

44

Fachverband BIOGAS e.V. operates the website biovollgas.de to promote biogas as a vital component of the energy transition in Germany. The organization focuses on educating the public about the benefits of biogas, dispelling myths, and supporting climate-friendly energy solutions. The website serves as an information hub with multimedia content, social media integration, and clear contact details, positioning the association as a trusted advocate in the renewable energy sector. Technically, the website is built on the ProcessWire CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Slider, and integrates analytics tools including Matomo and Facebook Pixel. The site is hosted on servers associated with kasserver.com and employs HTTPS with a good SSL configuration. Mobile optimization and SEO practices are well implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are available. No vulnerabilities or exposed sensitive data were found, indicating a solid but improvable security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for biogas information. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its position.

P

Plume Labs

plumelabs.com

63

Plume Labs is a technology company specializing in air quality monitoring and forecasting solutions. Founded in 2014, it offers personal air quality tracking devices (Flow), a consumer-facing air quality forecast app, and business data APIs powered by AI. The company positions itself as an innovative leader in environmental health technology, targeting individuals, communities, and businesses concerned with air pollution exposure. The website is professionally designed, mobile-optimized, and rich in relevant content, including press coverage and user testimonials, which enhance trust and credibility. Technically, the site uses modern frameworks like Gatsby and integrates multiple analytics and marketing tools, hosted on AWS infrastructure. Security posture is strong with HTTPS and domain status protections, though DNSSEC is not enabled and no explicit security policy or incident response page is found. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. Overall, the domain registration data aligns well with the business history, supporting legitimacy. Recommendations include enabling DNSSEC and publishing a formal security policy and vulnerability disclosure program to further enhance trust and security maturity.

P

PRO-BIO, obchodní společnost s r.o.

probio.cz

58

PROBIO is a Czech-based company specializing in the sale of 100% BIO certified organic food products, including gluten-free items and eco-friendly detergents. The company operates a well-structured e-commerce platform supported by content marketing such as recipes and blogs, targeting health-conscious consumers primarily in the Czech Republic. The website demonstrates a good level of digital maturity with modern technologies like Facebook Pixel and Google Tag Manager integrated for marketing and analytics purposes. However, the absence of WHOIS data and explicit privacy policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enforced but lacks some recommended security headers and formal security policies. Overall, PROBIO presents a professional and trustworthy online presence with room to enhance privacy compliance and domain registration transparency.

K

Kitl s.r.o.

kitl.cz

42

Kitl s.r.o. is a Czech family-owned company founded in 2007 specializing in the production and retail of natural herbal and fruit syrups, mead, and mineral waters. The company emphasizes the use of organic and environmentally friendly raw materials. The website presents a professional e-commerce platform with a clear product catalog and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enforced for secure communications. However, the absence of WHOIS data and registrant information reduces domain trustworthiness. Privacy and cookie policies are not clearly presented, which may impact compliance with GDPR regulations. Overall, the site is well-designed and functional, targeting general consumers interested in natural health products.

G

Giersiepen GmbH & Co. KG

gira.com

56

Gira, operated by Giersiepen GmbH & Co. KG, is a well-established company specializing in electrical installation products and smart home solutions. Their website demonstrates a professional and comprehensive digital presence targeting private customers, professionals, and architects. The company offers a broad range of products including switches, sockets, smart home systems, and door intercoms, supported by detailed product information, brochures, and a smart home configurator tool. The site is well-structured, mobile-optimized, and integrates modern web technologies and analytics tools with user consent mechanisms in place. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, Facebook Pixel, and Matomo for analytics, alongside reCAPTCHA for form security. The site uses HTTPS with good SSL configuration, though HTTP security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Contact information is clearly presented with multiple channels, enhancing business credibility. From a security perspective, the site shows good practices such as encrypted connections and consent-based tracking but lacks explicit security policy or incident response contact details. The absence of WHOIS data for the domain is unusual and should be monitored, though the website's professional appearance and consistent branding support its legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, indicating a trustworthy and mature online presence.

W

WUNSCHHAUS Architektur & Baukunst

wunschhaus.at

49

WUNSCHHAUS Architektur & Baukunst is a well-established architecture and construction firm based in Vienna, Austria, specializing in custom single-family homes with a focus on modern and classical designs. The company has a strong market position supported by a portfolio of over 569 completed houses and recognition such as the Rising Star Austria award in 2019. Their website reflects a professional and content-rich digital presence, targeting private individuals and families in the Vienna region seeking architectural services. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, though lacking explicit security headers and published security policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

H

Hotel Duo, a.s.

hotel-duo.cz

46

Hotel Duo, a.s. operates a hospitality business in Horní Bečva, Beskydy, Czech Republic, offering accommodation, wellness, dining, and event hosting services. The company targets families, corporate clients, seniors, and groups, providing a range of services including rooms, wellness packages, and recreational activities. The website is professionally designed, mobile-optimized, and includes comprehensive content and clear navigation. It leverages WordPress CMS with modern plugins for SEO, GDPR compliance, and marketing automation. The presence of social media channels and a cookie consent mechanism indicates digital maturity and privacy awareness. However, the absence of WHOIS data limits domain trust verification, which is a concern for full legitimacy assessment. Security posture is good with HTTPS and cookie consent, but could be improved by adding explicit security headers and incident response information. Overall, the website presents a trustworthy and professional image with room for security and compliance enhancements.

P

Playou

playou.com

52

Playou is a Prague-based content marketing agency specializing in helping businesses convert the right audiences into customers through content production, marketing operations, and customer outreach. The company targets complex B2B sectors such as IT, Pharma, Fintech, and professional services across Europe. Their website demonstrates a professional and modern digital presence, leveraging WordPress with Elementor, integrated analytics, and marketing automation tools like HubSpot and Dreamdata. The site is well-structured with comprehensive content and strong branding consistency. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website professionalism and external trust signals.

N

Nacionālie bruņotie spēki

mil.lv

57

The website www.mil.lv is the official online presence of the Latvian National Armed Forces, providing authoritative information on military service, reserves, training, and national defense news. It serves primarily Latvian citizens interested in defense matters and military careers. The site is well-branded, consistent, and professionally maintained, reflecting its governmental status. Technically, it is built on Drupal 9, hosted on Azure, and employs modern analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive cookie policy and consent mechanism. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are present. Overall, the site is trustworthy, professional, and serves its public service mission effectively.

G

Gaulhofer Industrie-Holding GmbH

gaulhofer.com

53

Gaulhofer Industrie-Holding GmbH is a well-established Austrian manufacturer specializing in windows, doors, and sun protection solutions with over a century of tradition. The company targets both end consumers and professional partners in construction and renovation sectors, offering a broad portfolio including wood, wood-aluminum, and aluminum products, as well as innovative configurators for customized house doors. The website reflects a strong market position with comprehensive product information, certifications, and a professional digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Google Tag Manager, and demonstrates good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and business indicators are consistent with a reputable enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security posture.

A

Aeris

aeris.de

71

Aeris operates a professional e-commerce website specializing in ergonomic office chairs and furniture designed to promote movement and comfort at work. The company targets office workers and businesses seeking ergonomic solutions, leveraging a Shopify platform with multilingual support and a comprehensive customer claims portal. The website is well-structured, with good content quality and consistent branding, supporting a medium-sized business presence in Germany. Technically, the site uses modern web technologies including Shopify, Google Analytics, Hotjar, and GDPR-compliant cookie consent mechanisms, ensuring a solid digital infrastructure. Security posture is strong with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, adding a vulnerability disclosure channel, and enhancing accessibility features to further strengthen trust and compliance.

L

LINA community

lina.community

62

LINA is a European architecture community platform founded in 2022 that connects emerging creatives with institutions in spatial practices. It offers membership, fellowship programs, architecture events, and educational resources. The platform targets architects, creatives, and institutions interested in European spatial practices. Technically, the website uses modern JavaScript libraries, integrates marketing and analytics tools such as Mailchimp, Google Analytics, and Facebook Pixel, and implements GDPR-compliant cookie consent mechanisms. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and explicit security policies are absent. The domain is privacy protected but registered with a reputable registrar and shows no suspicious patterns. Overall, the website is professional, trustworthy, and well-positioned in its niche.

U

UFC Strike

ufcstrike.com

60

UFC Strike operates as an e-commerce platform specializing in the sale of fully licensed UFC video NFTs, targeting UFC fans and NFT collectors. The business appears to be relatively young, founded around 2021, and focuses on a niche market within the digital collectibles space. The website's branding and description emphasize licensed UFC content, positioning it as a specialized provider in the sports NFT market. However, the website content is minimal and currently displays an error message, indicating possible technical or deployment issues that impact user experience and content delivery. Technically, the website leverages modern web technologies including React, Bootstrap, and integrates multiple third-party analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Singular SDK. Hosting appears to be on Amazon AWS infrastructure, supported by AWS DNS servers. Despite the modern tech stack, the website lacks key security headers and DNSSEC is not enabled, which are areas for improvement. Performance is moderate with basic mobile optimization and limited accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. There is no evidence of privacy, cookie, or terms of service policies, nor contact information for security or incident response. Extensive user tracking is implemented via multiple analytics and marketing scripts, but privacy compliance is poor due to missing policies and consent mechanisms. The domain WHOIS data is consistent and legitimate, with no privacy protection but stable registration status. Overall, UFC Strike presents a niche digital collectibles business with a modern technical foundation but suffers from poor content availability, lack of privacy and security policies, and minimal user trust signals. Strategic improvements in website content delivery, security hardening, and privacy compliance are recommended to enhance credibility and user confidence.

U

UFC Collectibles

ufccollectibles.com

72

UFC Collectibles operates as an official licensed e-commerce store specializing in UFC memorabilia, targeting MMA fans and collectors. The business leverages Shopify's robust platform and integrates multiple marketing and analytics tools to optimize customer engagement and sales. The website demonstrates a professional design with clear branding and trust signals such as official partnership claims and customer reviews. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, UFC Collectibles presents a credible and trustworthy online retail presence with room for improvement in security transparency and DNS security.

U

Ultimate Fighting Championship (UFC)

ufcfightclub.com

71

UFC Fight Club is an official membership platform targeting MMA enthusiasts, offering exclusive benefits such as pre-sale ticket access, travel discounts, dining deals, and premium experiences. The website reflects a strong brand presence consistent with UFC's global reputation and leverages modern web technologies including React, Material-UI, and major analytics and marketing tools. The technical infrastructure is robust, hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and a consent management platform in use. Overall, the site is professional, trustworthy, and well-aligned with UFC's business model and audience.

L

Lucid Travel

lucidtravel.com

68

Lucid Travel operates a specialized travel management platform focused on sports teams, tournaments, universities, and event organizers. The company offers hotel booking, group room blocks, car and bus rentals, and flight booking services, with a business model that includes cash back incentives and integration partnerships with leading sports technology companies. The website is professionally designed, mobile-optimized, and integrates multiple third-party analytics and marketing tools, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data raises questions about domain legitimacy, though references to its parent company, HotelPlanner.com, support its credibility. Security posture is solid with HTTPS and standard best practices, but improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site presents a trustworthy and functional platform for its niche market.

O

On Location Events, LLC

ufcvip.com

64

UFC VIP, operated by On Location Events, LLC, is a specialized e-commerce platform offering official UFC ticket packages with exclusive VIP experiences. The website targets UFC fans seeking premium access including prime seating, weigh-in events, and athlete meet & greets. The business positions itself as an official and trusted provider in the sports hospitality sector, leveraging strong branding and customer service. Technically, the site employs modern web technologies such as React, integrates multiple analytics and marketing tools, and uses AWS infrastructure. Security measures include HTTPS, reCAPTCHA, and bot protection, though some security headers could be improved. Privacy and terms policies are clearly linked, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence with a solid security posture and trustworthy domain registration.

N

Neovize s.r.o.

neovize.cz

49

NeoVize s.r.o. operates a professional ophthalmology clinic in Prague and Brno, Czech Republic, specializing in laser eye surgeries, cataract operations, and treatment of various eye diseases. The company has been active since 2008 and holds multiple accreditations including ISO 9001:2015 and Ministry of Health certifications, positioning it as a reputable healthcare provider in the region. The website is well-designed, mobile-optimized, and provides comprehensive information about services, team, and patient testimonials, targeting patients seeking advanced eye care. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Bing Ads. The site uses HTTPS with good SSL configuration but lacks visible security headers in the HTML source. Some suspicious URL parameters suggest potential injection testing, indicating a need for improved input sanitization and security hardening. From a security perspective, the site demonstrates good practices like HTTPS enforcement and no exposed sensitive data, but could improve by adding security headers and CSRF protections. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the absence of WHOIS data limits domain legitimacy verification, which slightly reduces overall trust. Overall, NeoVize's website reflects a mature healthcare business with strong branding and user experience, moderate technical sophistication, and a generally good security posture with room for improvement in vulnerability management and domain transparency.

H

HarperCollins

harpercollins.com

71

HarperCollins is a globally recognized book publisher with a rich history dating back to 1817. The company operates a professional e-commerce website built on the Shopify platform, offering a wide range of books and author-related content. The site targets a general audience including readers, educators, and book clubs, positioning itself as a world-leading publisher with a strong market presence. The website features comprehensive content, clear navigation, and consistent branding, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Vue.js, jQuery, Algolia for search, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Visual Website Optimizer. Hosting and content delivery are managed via Shopify's CDN, ensuring fast performance and mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs secure authentication via Auth0. While explicit security policies and incident response contacts are not published, the site uses CAPTCHA protections and avoids exposing sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. However, the absence of WHOIS data transparency for the domain is a concern, potentially due to privacy protection services. Overall, HarperCollins.com demonstrates a strong business and technical foundation with good security hygiene. The main risk lies in the lack of domain registration transparency and absence of published security policies. Strategic recommendations include enhancing security disclosures, publishing incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

P

PRK Partners s.r.o.

prkpartners.com

58

PRK Partners s.r.o. is a well-established legal services firm operating primarily in the Central European region, with offices in Prague, Ostrava, and Bratislava. The firm offers a broad range of legal advisory services including corporate law, mergers and acquisitions, and tax expertise. It holds a strong market position supported by multiple industry awards and partnerships, targeting businesses and professionals seeking high-quality legal counsel. The website is professionally designed, multilingual, and provides comprehensive information about services and recent news. Technically, the website is built on the Solidpixels CMS platform and integrates modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, HotJar, and Leady tracking. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a strong SSL configuration but lacks some advanced security headers, which could be improved. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements and provides detailed privacy and cookie policies. However, no explicit security policy or incident response contact information is found. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional nature of the site and trust indicators mitigate some risk. Overall, PRK Partners presents a credible and professional online presence with strong content quality and privacy compliance. The main risk lies in the lack of transparent domain registration data, which should be addressed to enhance trustworthiness and security posture.

I

International Education Society Ltd.

ies-info.com

53

International Education Society Ltd. operates the website ies-info.com, providing international certification services for educational institutions and individual graduates. The company positions itself as a credible partner for professional development and educational quality assurance, offering certifications such as IES and ICI. The website is professionally designed, multilingual, and targets educational institutions and professionals seeking certification to enhance their market competitiveness. Technically, the site uses ProcessWire CMS and integrates modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The presence of a cookie consent mechanism and GDPR-compliant privacy policy indicates a good level of privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data for the domain is a concern for domain legitimacy, but the overall business presence and content quality support a moderate trust level. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration.

H

Holba

holba.cz

50

Holba.cz is the official website of Holba, a Czech brewery with a long-standing history dating back to 1997. The company produces beer and offers brewery tours, museum visits, and an online shop for their products. The website is professionally designed using modern web technologies such as Vue.js and Nuxt.js, supporting multiple languages to cater to a broad audience. The site integrates several third-party marketing and tracking tools including Google Tag Manager and Facebook Pixel, indicating a moderate level of digital marketing maturity. Security posture is adequate with HTTPS enforced, but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

D

Datlab s.r.o.

datlab.cz

60

Datlab s.r.o. is a Czech-based company specializing in data gathering, processing, and analytics with a focus on economic data and public procurement. Their website showcases a suite of products aimed at helping businesses, public authorities, and researchers navigate sanctions, tenders, and risk detection in public procurement. The company serves a diverse audience including government bodies, municipalities, state-owned enterprises, and academic institutions, positioning itself as a trusted regional player in the data analytics sector. Technically, the website employs modern web technologies including JavaScript frameworks (Vue.js implied), Google Analytics, Google Tag Manager, and multiple tracking pixels with a consent management system in place. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. Hosting and domain registration are consistent with the company's Czech Republic base. From a security perspective, the website enforces HTTPS and uses consent-based tracking mechanisms. However, it lacks explicit security headers and published security policies such as incident response or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and content-rich, with moderate tracking and good business credibility. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance the security posture and compliance standing.

D

Datlab Institut z.s.

zindex.cz

56

Datlab Institut z.s. operates the zIndex.cz website, providing public procurement buyers ranking data to motivate more efficient procurement in the Czech Republic. The organization is a Czech economic think-tank affiliated with Charles University, focusing on data-driven economic research impacting public policies. The website targets public sector entities including government bodies, municipalities, and hospitals, offering data analytics services related to public procurement. The business is positioned as a small, specialized non-profit entity with a professional online presence and consistent branding. Technically, the website uses modern frameworks such as Bootstrap and Vue.js, integrates multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, and employs Google Tag Manager for tag management. The site is mobile-optimized with good design and navigation, though accessibility and SEO optimizations are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, despite the use of tracking technologies. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and formalized security policies to strengthen its security posture and regulatory adherence.

M

Milujeme Kameny

milujemekameny.cz

65

Milujeme Kameny is a Czech Republic based small retail e-commerce business specializing in the sale of minerals, gemstones, jewelry, and feng shui related products. The website presents a well-structured online store with a clear focus on niche products appealing to consumers interested in decorative and spiritual items. The company has been operating since 2018 and maintains a consistent brand presence with comprehensive privacy and cookie policies, as well as clear contact information. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and third-party analytics and marketing pixels to support business growth. Security posture is adequate with HTTPS and monitoring tools in place, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, making it a reliable platform for its target audience.

B

business promotion CZ s.r.o.

mailstep.cz

64

Mailstep.cz is a Czech Republic based company specializing in professional fulfillment services for e-commerce businesses. Established in 2000, it positions itself as a market leader offering comprehensive logistics solutions including storage, packing, shipping, and returns management. The website is well designed, multilingual, and targets online retailers seeking to outsource their logistics to focus on marketing and sales. The technical infrastructure leverages modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, HubSpot, and Facebook Pixel, hosted likely on Microsoft Online infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy and security policies are not published on the site. WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the site reflects a mature digital presence with room for improvement in privacy and security transparency.

D

Divadlo Spejbla a Hurvínka

spejbl-hurvinek.cz

48

Divadlo Spejbla a Hurvínka is a well-established Czech puppet theater specializing in family-friendly performances for children and adults. The theater offers a variety of shows, workshops, and venue rental services, positioning itself as a cultural institution with a strong local presence supported by the City of Prague. The website reflects a professional and consistent brand image with clear communication of services and events. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good digital maturity and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate operation.

P

Performia

performia.cz

65

Performia is a Czech Republic-based company specializing in recruitment, employee productivity, and HR education services. Established since 2004, it positions itself as a trusted partner for managers and HR professionals to build effective teams. The website showcases a professional digital presence with rich content including podcasts, webinars, conferences, and client references, indicating a mature business model focused on education and consulting in human resources. Technically, the site uses a modern CMS (Solidpixels), integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, and employs a cookie consent mechanism, reflecting a reasonable level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit published security policies. The absence of WHOIS data for the domain reduces trust slightly, though the website content and social media presence support legitimacy. Overall, the site is well-designed, user-friendly, and business-focused, but could improve transparency and security practices.

M

Magyar Suzuki Corporation Ltd. branch office Czech Republic, organizační složka

suzuki.cz

57

Magyar Suzuki Corporation Ltd. branch office Czech Republic operates as the official regional representation of Suzuki Motor Corporation, focusing on the sale and servicing of Suzuki automobiles and motorcycles within the Czech market. The website serves as an information portal for current vehicle offerings, dealer networks, after-sales services, and owner events, targeting consumers and Suzuki enthusiasts in the region. The business model centers on automotive retail and customer support, leveraging the global Suzuki brand to maintain a strong market presence in transportation. Technically, the website is built on legacy ASP.NET WebForms technology, enhanced with modern JavaScript libraries and tracking tools. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages present compliance and trust challenges. Security posture is moderate, with cookie consent implemented but missing security headers and no visible incident response contacts. Overall, the site is functional and trustworthy from a branding perspective but would benefit from improved transparency and security hardening.

P

PFP s.r.o.

suri.cz

62

SURI.CZ is an independent Czech online platform specializing in car insurance comparison and brokerage services. Operated by PFP s.r.o., it offers users quick insurance comparisons, professional advisory services, and a mobile application to assist customers. The website targets Czech vehicle owners seeking optimal insurance solutions and partners with reputable insurance providers for legal protection, cycling, and golf insurance. The platform demonstrates a professional market position with clear branding and trust indicators such as a valid Czech National Bank license and active social media presence. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and PostHog. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. WHOIS data is missing, which slightly reduces trustworthiness, but the business information and contact details are transparent and professional. Overall, the site is safe, well-maintained, and suitable for its target audience.

K

Kuopion Energia

kuopionenergia.fi

74

Kuopion Energia Oy is a regional energy utility company based in Kuopio, Finland, providing electricity, district heating, and cooling services to households, businesses, and contractors. The company operates under the Väre group umbrella, offering a comprehensive portfolio of energy solutions including smart metering and energy management. The website reflects a mature digital presence with clear navigation, multilingual support, and professional content tailored to its target audience. Technically, the site is built on WordPress with modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts could be enhanced for greater transparency and preparedness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Frekvence 1

frekvence1.cz

74

Frekvence 1 is a prominent Czech radio station with a well-established online presence offering live streaming, news, entertainment, and lifestyle content. The website targets a broad Czech-speaking audience interested in music and related media. It operates under the parent company Active Radio a.s., providing a professional and consistent brand experience. The site integrates multiple advertising and analytics platforms, supporting its business model primarily through advertising revenue. Technically, the website employs modern frameworks like Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong, with clear cookie policies and GDPR adherence. The absence of WHOIS data limits domain trust analysis but does not detract from the site's apparent legitimacy. Overall, the site is professional, secure, and user-friendly, serving its media business effectively.

T

TRIMA NEWS, s.r.o.

libereckadrbna.cz

49

Liberecká Drbna is a regional news portal operated by TRIMA NEWS, s.r.o., delivering authentic local news and stories focused on Liberec and the Liberecký kraj region in the Czech Republic. The site offers a variety of news categories including society, politics, culture, transport, health, education, business, crime, and sports, targeting local residents and interested audiences. It supports user engagement through registration, premium ad-free subscriptions, and interactive features such as surveys. The business model relies on advertising and premium subscriptions, positioning itself as a key regional media outlet.

Č

Český florbal & eSports.cz, s.r.o.

wfc2025.cz

61

Český florbal is the official governing body for floorball in the Czech Republic, operating a comprehensive website dedicated to the Women's World Floorball Championship 2025 (MS žen 2025). The organization provides event information, ticket sales, news updates, fan engagement, and volunteer opportunities. The website reflects a mature digital presence with modern technologies and strong branding consistency. Despite the absence of WHOIS registration data, the site demonstrates legitimacy through official partnerships, social media presence, and compliance with GDPR and cookie regulations. Technically, the site employs a robust tech stack including Google Tag Manager, Facebook Pixel, reCAPTCHA, and Nette Framework components, ensuring good performance and security posture. Security best practices are observed, though some security headers could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for users across devices.

D

Datlab Institut z.s.

datlabinstitut.cz

52

Datlab Institut is a Czech non-profit organization affiliated with Charles University, specializing in research and analysis to promote transparency and efficiency in public procurement and political finance. The organization operates several projects such as ZINDEX and Politickefinance.cz, targeting public sector stakeholders and the general public interested in governance and public spending. The website reflects a professional and consistent brand image with clear contact information and active external partnerships. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a Vue.js-based cookie consent mechanism. Hosting appears to be managed through WEDOS, consistent with the domain registrar data. The site is mobile-optimized with good navigation and content relevance, though some accessibility and SEO improvements are possible. From a security perspective, the site enforces HTTPS and employs cookie consent defaults denying ad and analytics storage until consent. However, explicit security headers are not detected in the HTML, and no privacy policy or terms of service pages are present, indicating compliance gaps. No vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website presents a low-risk profile with good business credibility and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and trust.

D

Datlab s.r.o.

tenderman.cz

54

Datlab s.r.o. operates the Tenderman platform, a Czech Republic-focused SaaS tool designed to assist public sector entities and contracting authorities in managing suppliers and tender documentation. The company leverages its expertise in economic data and public procurement to provide a specialized service with a clear market niche and reputable client base including government institutions. The website is professionally designed, mobile-optimized, and uses modern web technologies including Vue.js and Bootstrap, supported by multiple analytics and marketing tools. Security posture is solid with HTTPS and CSRF protections, though lacks published security policies and headers. Privacy compliance is partial, with no explicit privacy or cookie policies found despite cookie consent mechanisms. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

D

Datlab s.r.o.

datlab.eu

59

Datlab s.r.o. is a Czech-based company specializing in data gathering, processing, and analytics with a focus on economic data and public procurement. Their website highlights multiple specialized products aimed at public authorities, businesses, and researchers, including sanctions verification, tender documentation, supplier risk detection, and procurement monitoring. The company serves a diverse client base including government agencies, municipalities, universities, and NGOs, positioning itself as a trusted regional player in the public procurement data sector. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and professional design. Cookie consent is managed via a Vue.js component, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, registered under a reputable Czech registrar, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing a privacy policy and terms of service, adding security headers, and providing vulnerability disclosure information to enhance security posture and compliance.

M

Markkinointitoimisto Kraak Oy

kraak.fi

51

Markkinointitoimisto Kraak Oy is a Finnish digital marketing agency founded in 2020, specializing in data-driven marketing services for responsible companies. Their offerings include outsourced marketing management, content creation, graphic design, Google Ads, social media advertising, and website development. The company positions itself as a modern, analytics-focused partner delivering measurable results. Technically, the website is built on WordPress with Elementor and uses modern SEO and performance optimization tools. The site is well-structured, mobile-optimized, and integrates multiple marketing and tracking pixels, reflecting a mature digital marketing infrastructure. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is partial due to the absence of a dedicated privacy policy page, despite having cookie consent mechanisms. WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website presents a professional and trustworthy digital marketing service provider with room for improvement in privacy and security disclosures.

G

GALABAU VERBAND Österreich

gartengottwerden.at

54

The website www.gartengottwerden.at serves as a platform promoting gardening and landscaping jobs in Austria, operated by the GALABAU VERBAND Österreich association. It targets job seekers interested in the gardening sector, offering job listings, company portraits, and a merchandise shop. The site is well-branded and consistent with its association identity, providing relevant content in German for the Austrian market. Technically, the site is built on TYPO3 CMS, leveraging modern analytics tools like Matomo and Google Tag Manager, and implements a robust cookie consent mechanism via Klaro. The website is mobile-optimized and accessible, with good SEO practices in place. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and detailed security or incident response policies. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business, indicating legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, with room for improvement in security posture and contact transparency.

S

SkyPro Oy

skypro.fi

58

SkyPro Oy is a Finnish family-owned company specializing in the import and sale of promotional textiles and design products. The company operates an e-commerce platform targeting both business and consumer customers, with physical showrooms in Turku and Helsinki-Vantaa. Their product range includes a wide variety of textile and design items, including custom-made promotional products. The website is professionally designed, localized in Finnish, and provides comprehensive contact information and customer support options. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. It uses HTTPS with secure form handling and a robust cookie consent mechanism that complies with GDPR requirements. The site is mobile-optimized and offers a good user experience with clear navigation and search functionality. From a security perspective, the site demonstrates good practices such as CSRF protection and encrypted connections. However, it lacks some security headers that could enhance protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a detailed privacy policy and cookie management. Overall, the website presents a low risk profile with a trustworthy business presence, good technical implementation, and solid privacy and security measures. Strategic improvements could include adding terms of service, enhancing security headers, and publishing incident response information.

L

LecToGo

lectogo.com

59

LecToGo operates a technology-driven powerbank rental service available across Scandinavia, including Sweden, Finland, Denmark, and Norway. The company provides mobile app-based access to powerbank stations located in over 3000 venues, targeting general consumers who need on-the-go charging solutions. The website is professionally designed using Squarespace, with good mobile optimization and moderate performance. It integrates common marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Snap Pixel. Security-wise, the site enforces HTTPS with HSTS, indicating a strong baseline for secure communications. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS domain registration data present compliance and trust challenges. These gaps reduce the overall security posture and business credibility, suggesting areas for improvement in transparency and regulatory adherence.

Aramco is a globally recognized leader in the energy sector, specializing in integrated oil, gas, and chemicals production and supply. The company operates at an enterprise scale with a strong market position and a comprehensive portfolio of services that support global energy demands. Their website reflects a mature digital presence with professional branding, extensive content, and a focus on corporate values and sustainability. Technically, the site employs modern web technologies including React, Google Tag Manager, and multiple analytics and tracking tools, hosted likely on Akamai's infrastructure, ensuring fast performance and mobile optimization. Security-wise, Aramco demonstrates a strong posture with HTTPS enforcement, comprehensive security headers, and adherence to best practices, although the absence of a security.txt file suggests room for improvement in vulnerability disclosure transparency. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, supporting a positive risk profile for users and partners.

M

Marketin.no

marketin.no

66

Marketin.no is a Norwegian digital marketing and web development agency founded in 2018. The company specializes in creating digital concepts, SEO optimization, and managing measurable advertising campaigns such as Google Ads and Facebook Ads. Their market position is that of a results-driven agency targeting Norwegian businesses seeking to improve their online presence. The website is built on a modern tech stack including Next.js and integrates popular analytics and marketing tools like Google Tag Manager, Facebook Pixel, and Hotjar. While the website is professional and well-structured, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is good with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and provides clear contact information and customer testimonials, supporting business credibility.

C

CLAGE VANNVARMERE

clage.no

51

CLAGE VANNVARMERE is a Norwegian company specializing in energy-efficient water heating solutions, primarily through-flow water heaters for showers, kitchens, and hand wash applications. The website presents a professional e-commerce platform built on WordPress with WooCommerce and Elementor, offering detailed product information and a catalog targeting consumers and businesses interested in sustainable water heating. The company holds the SINTEF GODKJENT certification, enhancing its trustworthiness in the energy sector. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and incident response contact information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is functional and professional but could improve in privacy and security transparency.

E

Exekutorská komora České republiky

portaldrazeb.cz

49

The website portaldrazeb.cz is an official auction portal operated by the Exekutorská komora České republiky (Executor Chamber of the Czech Republic). It serves as the largest Czech platform for judicial auctions of execution-seized assets, targeting residents and stakeholders interested in such auctions. The portal provides comprehensive auction listings, filtering options, and support services, positioning itself as a key government-affiliated resource in the real estate and judicial auction sector. Technically, the site employs modern JavaScript frameworks, likely Vue.js with Element UI components, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is secured with HTTPS and includes a cookie consent mechanism compliant with GDPR principles, although explicit privacy and terms of service pages are not found. The site is mobile-optimized with good navigation and user experience. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and bot protection via reCAPTCHA. However, it lacks visible security headers and a published security policy or vulnerability disclosure, which are recommended for enhanced security posture. The absence of WHOIS data reduces domain trust slightly but is mitigated by the official government affiliation and consistent branding. Overall, the website is a professional, trustworthy government portal with moderate technical maturity and a solid security baseline. Strategic improvements in privacy transparency, security headers, and incident response disclosures would further enhance its security and compliance stature.

D

Dick Johnson

dickjohnson.fi

63

Dick Johnson is a Finnish e-commerce business specializing in men's cosmetics and apparel, targeting men who seek quality grooming products and stylish clothing. The company operates a Shopify-based online store with a clear market niche in men's grooming and fashion in Finland. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern e-commerce technologies and integrates multiple marketing and analytics tools, ensuring robust digital infrastructure and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust. Strategic recommendations include enhancing security transparency and contact information to further improve trust and compliance.

L

LYOS

lyoskin.com

60

LYOS is a small Finnish e-commerce skincare brand launched in 2024, offering a playful and natural skincare product line. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Facebook Pixel for marketing. The brand has received industry recognition through awards and media features, positioning itself as a niche player in the clean and natural beauty market. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, LYOS presents a professional and trustworthy online presence but should improve privacy and compliance disclosures to enhance user trust and regulatory adherence.

H

Hartwall

hartwall.fi

68

Hartwall is a well-established Finnish beverage company specializing in a wide range of products including waters, soft drinks, specialty beverages, wines, spirits, beers, ciders, and long drinks. The website reflects a mature digital presence with a professional design and consistent branding, targeting a general and mature audience interested in beverage products. The company leverages multiple modern analytics and marketing technologies such as Piwik Pro, Facebook Pixel, Klaviyo, and Microsoft Azure Application Insights, indicating a sophisticated approach to user engagement and data-driven marketing. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers, although explicit security and incident response policies are not publicly available. Overall, the website demonstrates good compliance with GDPR and privacy regulations, with transparent cookie policies and user consent management. The domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.