Security Directory

D

Digital Garden - Tvorba web stránok Bratislava

digitalgarden.sk

45

Digital Garden is a Slovak-based creative agency specializing in professional web design, web development, SEO optimization, online marketing, and corporate identity branding. The company targets businesses and individuals seeking comprehensive digital solutions to enhance their online presence and sales channels. The website is built on WordPress, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Slider Revolution, indicating a modern and maintainable technical infrastructure. The site is mobile-optimized and includes social media integration, enhancing its digital maturity. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy image consistent with a small technology service provider in Slovakia.

B

bart.sk s.r.o.

bart.sk

64

bart.sk s.r.o. is a well-established Slovak technology company specializing in the development of custom digital products, including e-commerce platforms, web and mobile applications, and AI implementations. With over 27 years of experience, the company serves both B2B and B2C clients, positioning itself as a trusted partner in digital transformation. Their website showcases detailed case studies, client testimonials, and a strong social media presence, reflecting a mature and professional business model. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates advanced analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity and technical competence. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. The presence of ISO 9001 certification further underscores their commitment to quality and information security. However, the absence of explicit security headers and a public incident response or vulnerability disclosure policy suggests areas for improvement. Overall, bart.sk demonstrates a strong security posture and business credibility with no critical vulnerabilities detected. The website is safe for general audiences and complies well with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

A

AJ Produkty

ajprodukty.sk

63

AJ Produkty is a well-established European company specializing in office, warehouse, and industrial furniture and equipment. Founded in 1975 in Sweden, it has expanded to 19 countries, including Slovakia, where this localized website operates. The company offers a broad product range with over 15,000 items, focusing on ergonomic and functional solutions for various business environments. Their market position is strong, supported by a consistent brand presence and comprehensive customer service including warranties and free shipping offers. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics and error monitoring tools are integrated, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with strong SSL configuration and a Content Security Policy header. Cookie consent is implemented with opt-in mechanisms, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include publishing security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further strengthen trust and compliance.

The American Institute of Physics (AIP) operates as a federation of physical science societies, providing a broad range of services including scientific publications, advocacy, research resources, and educational support. The organization targets physical scientists, researchers, students, and STEM professionals, positioning itself as a leading non-profit entity in the physical sciences domain. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to its audience. Technically, the site leverages modern web technologies such as WebComponents, MathJax for scientific rendering, and integrates third-party services like Google Tag Manager and Facebook SDK for analytics and marketing. The content management system identified is Brightspot CMS, supporting a structured and scalable content delivery. Performance and mobile optimization are good, with accessibility features implemented to a reasonable standard. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or incident response information are not evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards, supporting the legitimacy of the organization. The absence of WHOIS data due to privacy protection is typical for organizations of this nature and does not detract from the trust assessment. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clear security contact channels.

I

Instant System

instant-system.com

62

Instant System is a French-based company founded in 2013 specializing in white-label passenger information applications and Mobility as a Service (MaaS) solutions. The company collaborates closely with local public transport authorities and operators to deliver scalable and modular mobility solutions across 80 territories worldwide. Their offerings include journey planning, ticketing integration, and back office management tools tailored for cities, transport partners, and corporations managing employee mobility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting B2B clients in the transportation sector. Technically, the site uses modern JavaScript frameworks such as Knockout.js and integrates cookie consent management via tarteaucitron.io, ensuring GDPR compliance in cookie handling. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements are recommended in security headers and explicit security policies. Overall, the site demonstrates high business credibility and technical maturity with minor gaps in privacy documentation.

The website kobotdev.com currently displays a maintenance placeholder page titled 'The Genealogy Reporter - System Maintenance | Under Construction'. The content indicates a temporary system upgrade in progress with no active business or service information presented. The domain is registered since 2008 with GoDaddy.com, LLC and shows legitimate registration status with client protection flags, but DNSSEC is not enabled. The website lacks privacy, cookie, and terms of service policies, as well as any contact information or forms. No analytics or tracking technologies are detected, and social media links are placeholders without real URLs. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no CMS or frameworks detected. The site is mobile optimized with a visually appealing design but limited content and navigation. Security posture is weak due to missing security headers and lack of HTTPS information, though no critical vulnerabilities or malicious content are evident. Overall, the site appears to be temporarily offline for maintenance with minimal risk but lacks compliance and business credibility indicators.

S

Session Rewind

sessionrewind.com

61

Session Rewind is a technology SaaS company founded in 2020 that provides affordable session recording, heatmaps, error tracking, and dashboard analytics to optimize website user experience. Positioned as a cost-effective alternative to established players like FullStory and Hotjar, it targets solopreneurs, startups, and enterprises seeking actionable insights into user behavior. The website demonstrates a professional design with clear navigation and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern JavaScript frameworks (Vue.js), integrates analytics tools like Heap and Google Tag Manager, and uses Cloudflare for DNS, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and standard security headers present, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic with a comprehensive privacy policy and cookie policy present but lacking a consent mechanism. Overall, the site is safe, business-focused, and credible with no signs of malicious activity or suspicious content.

D

Dash Social

dashhudson.com

10

Dash Social is a Canadian-based technology company founded in 2013 that offers a comprehensive social media management platform. Their SaaS solution integrates AI-powered tools for content performance prediction, creator and influencer management, social analytics, campaign reporting, scheduling, and social commerce. The company targets brands, marketers, and social media managers seeking to optimize social media engagement and ROI. The website demonstrates a mature digital presence with rich content, customer testimonials, and partner badges from major platforms like TikTok, Meta, and Pinterest, indicating strong market positioning. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel for interactive features. It employs Google Tag Manager and HubSpot for analytics and marketing automation. The site is mobile-optimized, fast-loading, and SEO-friendly. Security practices include HTTPS enforcement and a cookie consent mechanism with opt-in compliance, though explicit security headers are not detected. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or data source limitations. The presence of a suspicious external script domain warrants further review. Overall, the site maintains good privacy compliance and business credibility but could improve transparency in domain registration and security disclosures. Strategically, Dash Social should enhance its security posture by publishing a vulnerability disclosure policy, adding security headers, and providing incident response contacts. These steps will strengthen trust and compliance. The technical infrastructure is solid but could benefit from continuous monitoring of third-party scripts and further accessibility improvements.

B

Billetterie en ligne complète - Meilleur tarif de France 🎫

billetweb.fr

51

The website www.billetweb.fr is an online ticketing platform primarily serving the French market, offering event ticket sales and management services. The site is built using modern web technologies including Prismic CMS and Tailwind CSS, providing a good user experience with responsive design and clear navigation. However, the absence of WHOIS data limits the ability to verify domain legitimacy and ownership, which is a concern for trustworthiness. Security posture is weak due to lack of visible security headers and unclear SSL configuration. Privacy and cookie policies are not detected, indicating potential compliance gaps with GDPR and other privacy regulations. Overall, while the business model and technical implementation are sound, improvements in security and compliance are necessary to enhance trust and protect user data.

MYBACKNUMBER.com is an e-commerce website specializing in official judo back numbers for international federations such as IJF, EJU, and DJB. The site targets judo athletes, clubs, and federations, offering customized back numbers and club registration services. The business operates primarily in Germany and appears to be a niche market leader in its segment. The website is professionally designed with clear navigation and consistent branding, supporting a small-sized retail business model focused on sports equipment. Technically, the website employs a classic JavaScript stack including Prototype.js and Scriptaculous, with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site shows moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured navigation. However, no modern CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No security policy or incident response contacts are published, and WHOIS data is missing, which raises concerns about domain registration legitimacy. The site does not expose sensitive data or show obvious vulnerabilities but would benefit from enhanced security practices. Overall, the website is functional, professional, and trustworthy from a user perspective but has gaps in domain registration transparency and privacy compliance. Strategic improvements in security headers, cookie consent, and WHOIS data verification are recommended to strengthen trust and compliance.

A

adidas Combat Sports

combat-sports.net

44

The website combat-sports.net represents a small-scale online presence focused on adidas Combat Sports products, likely targeting combat sports enthusiasts and athletes interested in adidas apparel and equipment. The site is built on WordPress using the Salient theme and includes basic integrations such as Instagram Feed. The technical infrastructure is moderate, hosted by OVH sas, a reputable provider, with HTTPS enabled but lacking advanced security headers and DNSSEC. The content is basic and consistent with the brand but lacks comprehensive privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is average with room for improvement in headers and vulnerability disclosures. Overall, the site is safe with no adult or questionable content detected.

K

KWON KG - Kampfsportartikel

kwon.com

41

KWON KG operates an e-commerce platform specializing in martial arts and security equipment, targeting martial arts practitioners primarily in Germany. The website offers a broad range of products including gear for Taekwondo, Karate, Judo, MMA, and other combat sports. The business model focuses on online retail with additional services such as product individualization and multilingual support. The company appears to be a medium-sized retailer with a consistent brand presence and a professional website design. Technically, the website uses modern web technologies including JavaScript and Google Tag Manager for analytics. The CMS is likely Shopware, inferred from URL and CSS patterns. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and HTTPS is enforced, ensuring secure data transmission. From a security perspective, the site has a solid SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No WHOIS data is available for the domain, which raises concerns about domain registration legitimacy and reduces overall trust. Contact information is provided via phone and WhatsApp, but no company emails or physical addresses were found. Overall, the website is functional and professional but would benefit from improved transparency in privacy and security policies, better WHOIS registration clarity, and enhanced security headers to strengthen trust and compliance.

I

IPPON-SHOP.COM

ippon-shop.com

64

IPPON-SHOP.COM is a specialized e-commerce platform established since 2003, serving martial arts practitioners including Judoka, Karateka, and BJJ fighters. The site offers a wide range of high-quality martial arts products, including their own brand IPPON GEAR, and targets both individual consumers and clubs. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and comprehensive product categorization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some explicit security headers which could enhance protection. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the website presents a professional and trustworthy front for its business, but domain registration details should be verified to strengthen trust.

J

Never miss a throw! - JudoTV

judotv.com

67

JudoTV is a niche media streaming platform dedicated to the sport of Judo, offering live competitions, expert commentary, training tips, and community engagement. The website targets Judo enthusiasts and sports fans, positioning itself as a specialized destination for Judo content. The business appears to be small-sized with a long-standing domain registration dating back to 2004, indicating an established presence in its niche. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates third-party services such as YouTube for video playback, OneSignal for notifications, and Cookiebot for cookie consent management. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security at the infrastructure level. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. From a security perspective, HTTPS is properly enabled, and cookie consent mechanisms are in place, reflecting awareness of privacy regulations. However, the absence of security headers, privacy policy, terms of service, and incident response contacts indicates areas for improvement in compliance and security posture. No vulnerabilities or suspicious elements were detected, and the domain registration details support the legitimacy of the business. Overall, JudoTV presents a professional and focused platform with good content quality and technical implementation but requires enhancements in privacy compliance, security best practices, and transparency to strengthen trust and regulatory adherence.

Eleventy is an open-source static site generator designed for simplicity, performance, and flexibility. It targets developers who want full control over their static website output without the overhead of client-side JavaScript frameworks. The project is mature, founded in 2017, and enjoys strong community support and sponsorship from reputable organizations. The website is professionally designed with excellent content quality and clear navigation, reflecting a high level of digital maturity.

I

INSPIRE CZ s.r.o.

clubspire.cz

62

CLUBSPIRE.cz is a Czech-based software solution specializing in comprehensive management systems for fitness and sports centers. The platform offers a wide range of modules including reservation systems, membership management, email marketing, access control, and point of sale functionalities. With a client base of over 200 sports centers, CLUBSPIRE positions itself as a reliable and efficient tool for business managers in the fitness industry. The website reflects a professional and consistent brand image, supported by active content updates and social media engagement. Technically, the website employs a modern technology stack including Java-based backend architecture, Google reCAPTCHA for form security, and Google Analytics for user tracking. The site is optimized for multiple platforms including Windows, Linux, and Apple, and demonstrates good mobile responsiveness and SEO practices. Security measures such as HTTPS and consent-based cookie management are implemented, though some security headers could be enhanced. From a security perspective, the site shows a solid posture with encrypted communications and protection against automated abuse via CAPTCHA. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active business operations mitigate some concerns. Overall, CLUBSPIRE.cz is a credible and well-maintained business website with good technical and security foundations. Strategic enhancements in security policy publication, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance posture.

A

AG2R LA MONDIALE

ag2rlamondiale.fr

65

AG2R LA MONDIALE is a leading French insurance and social protection group specializing in health mutual insurance, provident insurance, savings, and retirement products. The website targets individuals, professionals, enterprises, accountants, and brokers, offering a wide range of insurance and financial services. The company positions itself as a specialist in social and patrimonial protection in France, with a strong market presence and comprehensive service offerings. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript libraries and the Jahia CMS platform, with good performance and accessibility features. Security posture is strong, with HTTPS enforced and multiple security headers present, although no explicit incident response or vulnerability disclosure policies are publicly available. Privacy and cookie policies are present and GDPR compliant, indicating good privacy practices. Overall, the website is trustworthy, professional, and well-aligned with the company's business identity.

Obec Zbýšov's official website serves as a comprehensive portal for local government information, community news, and public services for the residents of the Vyškov district in the Czech Republic. It provides access to municipal documents, event calendars, contact information, and reservation systems for local facilities, positioning itself as a trusted source for civic engagement and administrative transparency. The website targets local residents and stakeholders interested in municipal affairs, operating under a government public service model with a small organizational size. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services including reCAPTCHA for form security and Google Translate for multilingual support, alongside OpenWeatherMap for weather updates. The site demonstrates moderate performance with good mobile optimization and basic accessibility features, though there is room for improvement in SEO and security header implementation. From a security perspective, the website enforces HTTPS and employs Google reCAPTCHA to protect its contact form, minimizing exposure to automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and detailed security or incident response policies indicates areas for enhancement. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, fulfilling its role as a municipal information hub. Strategic improvements in security policies, privacy mechanisms, and technical optimizations would further strengthen its posture and user trust.

M

Městský úřad Vyškov

vyskov-mesto.cz

45

The website vyskov-mesto.cz is the official municipal portal for the city of Vyškov, Czech Republic, providing comprehensive information about city administration, services, news, events, and contact details. It serves residents, visitors, and local businesses with a broad range of public services and community resources. The site is well-established, with a domain registered since 2000, reflecting a mature digital presence. Technically, the site uses a custom CMS (vismo) with common web technologies including Bootstrap and jQuery, though the jQuery version is outdated and poses potential security risks. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, but the absence of visible security headers and a formal security policy indicates room for improvement. Privacy compliance is good, with a clear privacy and cookie policy, though the cookie consent mechanism could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, supporting the city’s communication and service delivery objectives effectively.

Burn IT, s.r.o. is a small Czech technology company specializing in web development, custom internet systems, Flash components, and internet marketing services. Their offerings include bespoke web presentations, internet system development, streaming applications, and packaged products such as Burn IT CMS and Burn IT E-shop. The website targets businesses seeking tailored online solutions and marketing support within the Czech Republic. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and references to Adobe Flash and Adobe Air platforms, indicating some legacy technology usage. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or privacy policies, and no visible contact or incident response information. The WHOIS data is missing, which raises concerns about domain registration transparency and reduces trust. Overall, the website is functional and provides relevant business information but requires improvements in security, privacy compliance, and transparency to enhance trust and professionalism.

R

Robel.sk

robelshoes.sk

59

Robel.sk is a Slovak-based e-commerce retailer specializing in branded footwear and accessories for women, men, and children. The company operates multiple country-specific domains, indicating a strong regional presence in Central and Eastern Europe. Their business model focuses on online sales complemented by in-store reservation and pickup options, with a customer-friendly 30-day return policy. The website is professionally designed with good navigation and multilingual support, targeting consumers seeking quality branded shoes and related products. Technically, the site uses a modern tech stack including Google Tag Manager, Facebook Pixel, Sentry for error tracking, and Cloudfront CDN, running on the CREATIVE shop CMS platform. Security practices are solid with HTTPS, CSRF protection, and reCAPTCHA integration, though cookie consent mechanisms and terms of service pages are missing, which could be improved for better GDPR compliance. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

I

INSPIRE CZ s.r.o.

inspire.cz

67

INSPIRE CZ s.r.o. is a Czech-based digital agency specializing in custom web development, e-commerce solutions, customer portals, reservation systems, and online marketing. With over 15 years of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence and operational efficiency. The website reflects a professional and modern digital infrastructure, utilizing contemporary web technologies and analytics tools to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, the absence of WHOIS data for the domain introduces a moderate trust concern that should be addressed. Overall, INSPIRE CZ demonstrates a mature digital presence with solid business credibility and compliance practices.

K

KNX Association

knx.org

73

KNX Association is a globally recognized standards organization specializing in smart home and building automation solutions. The website targets professionals in the automation industry, offering certification, training, and software tools such as ETS6. The organization positions itself as a leader with over 500 manufacturer members and 8000 certified products, emphasizing sustainability, security, and IoT integration. The website is professionally designed, well-structured, and provides comprehensive resources for its audience. Technically, the site uses a modern CMS (Weblication®), integrates various JavaScript libraries including jQuery and YouTube APIs, and employs HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. Privacy and cookie policies are clearly presented, indicating GDPR compliance. Security posture is solid with HTTPS and secure form handling, though explicit security headers and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious content were detected. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns. Overall, the website reflects a mature digital presence with strong business credibility and a good security baseline. Strategic improvements in security headers and incident response transparency would enhance trust further.

E

Eplan

eplan.com

68

Eplan is a well-established provider of cloud-based engineering software solutions, targeting engineers and manufacturing professionals globally. Their website demonstrates a mature digital presence with comprehensive product offerings such as Eplan Platform, eStock, eManage, eView, eBuild, and Data Portal. The site is built on Adobe Experience Manager, leveraging modern web technologies and providing a seamless user experience with strong mobile optimization and accessibility. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The WHOIS data for the domain is missing, which raises minor concerns but does not detract significantly from the site's professionalism and trustworthiness. Overall, Eplan's website reflects a large enterprise with consistent branding, good content quality, and a strong market position within the technology and manufacturing sectors.

V

VfB Stuttgart

vfb.de

53

VfB Stuttgart operates a comprehensive official website serving as the primary digital platform for the football club. The site offers extensive content including news, team rosters, match schedules, ticketing, merchandise sales, and fan engagement features. The club maintains a strong market position in German football with a large fan base and professional digital presence. Technically, the website employs modern JavaScript frameworks, consent management tools, and integrates advertising and analytics services while maintaining good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, making it a reliable source for fans and stakeholders.

S

Sector s.r.o.

onlinehry.sk

39

Onlinehry.sk is a Slovak online gaming portal operated by Sector s.r.o., offering a wide range of free online games including flash, unity, and HTML5 games. The site targets a general audience including children and families, providing categorized games and multiplayer options. The business model is primarily advertising-supported, leveraging Google Adsense and related ad services. The site integrates user account management via the sector.sk passport system, enhancing user engagement through features like game archiving and discussions. The portal holds a moderate market position within the Slovak online gaming niche, supported by a medium-sized operation and consistent branding.

Institut Curie is a prominent French non-profit foundation dedicated to cancer research, treatment, and education. The organization operates a hospital staffed with leading experts, an internationally recognized research center, and educational programs to train future cancer specialists. Their website reflects a professional and trustworthy presence, targeting patients, donors, researchers, and the general public interested in cancer-related initiatives. Technically, the website employs modern web technologies including Nuxt.js, Tailwind CSS, and Swiper.js, with performance and mobile optimization rated as good to excellent. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. Hosting is likely provided by Gandi SAS, a reputable registrar and hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the organization's history and business claims, enhancing trustworthiness. Overall, the website is well-designed, content-rich, and professionally maintained, with room for improvement in explicit privacy and security policy disclosures. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and compliance.

V

Václav Nocar, AZnet

aznet.cz

45

Václav Nocar, operating under AZnet, is a small Czech Republic-based technology service provider specializing in web design, web hosting, SEO, IT consulting, and advertising services. The company targets local businesses and individuals primarily in Teplice and surrounding regions, offering a broad portfolio of digital and IT solutions including domain registration, programming, and promotional materials. The website reflects a modest but functional online presence with basic content and navigation, supported by integration with Facebook and Google Analytics for marketing and tracking purposes. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and explicit HTTPS enforcement details, indicating room for improvement in security posture. Privacy compliance is partially addressed through a cookie consent banner and a linked privacy PDF, though no comprehensive privacy or security policies are present. Contact information is clearly provided, enhancing business credibility. Overall, the site is accessible and safe, with no adult or questionable content detected.

G

GBG

gbg.com

72

GBG is a professional enterprise specializing in identity verification and fraud prevention solutions. Their website presents a comprehensive range of services targeting businesses that require secure and reliable customer identity validation. The company positions itself as a market leader with a broad client base and offers advanced technology-driven solutions including biometric verification, document authentication, and fraud risk management. The website is well-designed, mobile-optimized, and uses modern analytics and monitoring tools to ensure performance and user experience. Security posture is strong with HTTPS enforced and monitoring tools in place, though explicit security headers and policies could be improved. Privacy compliance is addressed with clear cookie and privacy policies, including GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, warranting further investigation. Overall, GBG demonstrates a mature digital presence with a solid business model and trustworthy online representation.

O

Orest Bida

orestbida.com

71

Orest Bida is a freelance web designer and developer offering bespoke high-performance and secure web solutions. The website serves as a professional portfolio showcasing the individual's skills and projects, targeting clients seeking freelance web design and development services. The business operates independently with a small scale and has been active since 2018. Technically, the site is built using the Eleventy static site generator, hosted with Cloudflare DNS and registrar services, and optimized for mobile and SEO. The site employs HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and contact is provided solely via a contact form without direct email or phone numbers. Social media presence is established on GitHub, Codepen, and Twitter, supporting professional credibility. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve privacy compliance and security posture by adding relevant policies and headers.

N

Netpromotion group s.r.o.

netfirmy.cz

62

Netfirmy.cz operates as the largest regional business directory and lead generation platform focused on Eastern Bohemia, Czech Republic. It provides verified company listings, user ratings from Google and Facebook, and facilitates business inquiries with over 120,000 monthly requests. The website is owned by Netpromotion group s.r.o., a company with over 19 years of market presence, positioning itself as a trusted regional business resource. The platform targets general users seeking reliable local businesses and services.

Jéčko TV is a Czech internet television platform dedicated to children's educational and entertainment content, operated by HopeTV for the Seventh-day Adventist Church since 2023. The website offers streaming shows, games, and audio stories tailored for young audiences. The platform positions itself as a niche media provider within the Czech Republic, focusing on family-friendly and faith-based content. Technically, the site uses modern web technologies including JavaScript, CSS, and Google Tag Manager for analytics, with a responsive design suitable for mobile devices. Security posture is moderate, with HTTPS enabled and a cookie consent mechanism in place, but lacks visible security headers and formal privacy or terms of service documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding provide some trust signals. Overall, the site is functional and professionally presented but would benefit from enhanced security practices and clearer compliance documentation.

S

Statutární město Mladá Boleslav

mb-net.cz

51

The website https://mb-net.cz/ is the official online presence of the statutory city of Mladá Boleslav, Czech Republic. It serves as a comprehensive portal for residents and visitors, offering city information, municipal services, news updates, event calendars, and contact details. The site is well-positioned as a government entity's digital platform, providing essential public services and information in Czech language. The business model is focused on public service delivery and citizen engagement, with no commercial intent. The domain's long history since 1997 supports its credibility and established presence. Technically, the website employs a custom CMS (vismo®), modern web standards including HTML5, CSS3, and JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with excellent SSL configuration, employs reCAPTCHA to protect forms, and manages cookie consent responsibly. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is a trustworthy, professional municipal portal with good content quality and technical implementation. Strategic improvements include publishing security and incident response policies, enhancing security headers, and possibly adding terms of service to improve transparency and compliance.

M

Městský úřad Česká Lípa

mucl.cz

50

The website www.mucl.cz serves as the official municipal portal for the city of Česká Lípa in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, public services, events, and contact details. The site is well-structured, professionally designed, and targets local citizens and stakeholders. It offers key services such as news updates, event calendars, online forms, and access to municipal resources. The presence of official branding and social media links reinforces its legitimacy as a government entity. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate widgets. The site uses a custom CMS platform (vismo®) tailored for municipal websites. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. Security measures include HTTPS enforcement and CAPTCHA protection on forms, alongside a cookie consent mechanism compliant with GDPR. Security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable transparency gap, though the website content and official contact information strongly indicate a legitimate government presence. No signs of malicious content or blocking mechanisms were detected, and the site maintains a safe content rating suitable for general audiences. Overall, www.mucl.cz is a credible, well-maintained municipal website with good technical and security practices. Strategic improvements in domain transparency and security policy disclosures would further strengthen trust and compliance.

A

Alaio Inc.

bitrix24.net

71

Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free online workspace for businesses, integrating CRM, task management, collaboration, and sales tools. It targets businesses and teams seeking to streamline sales, communication, and project management. The platform is positioned as a mature and established player in the business software market, offering extensive features including AI-powered CoPilot tools across various modules. Technically, the website leverages the Bitrix Framework and modern web technologies, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, though security headers and incident response details are not evident. The site is transparent with privacy and cookie policies, showing GDPR compliance. Overall, Bitrix24 presents a professional, trustworthy, and feature-rich platform with room for security enhancements.

Wirtualna Polska is a leading Polish online media company providing a broad range of content including news, sports, finance, entertainment, and weather. The website www.wp.pl serves as a comprehensive portal for Polish users, offering various services such as email, TV online, and radio streaming. The platform is well-established with consistent branding and a large network of subsidiary and partner sites. Technically, the site uses modern web technologies including JavaScript frameworks, GraphQL APIs, and service workers, ensuring a responsive and engaging user experience. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and integrates analytics tools like Hotjar, although some advanced security headers could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and user trust indicators.

T

Team Vitality

vitality.gg

65

Team Vitality operates a professional esports team and an official merchandise e-commerce store targeting esports fans and gamers. The website is built on the Shopify platform, integrating modern marketing and analytics tools such as Google Tag Manager, Didomi for consent management, and Shoplift for A/B testing. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be enhanced. Privacy compliance is partially implemented with consent mechanisms but lacks visible privacy and terms of service pages. Overall, the website is professional and trustworthy but would benefit from improved transparency and contact information.

F

Fédération Française de Football

fff.fr

65

The Fédération Française de Football (FFF) is the official governing body for football in France, providing comprehensive information on national teams, competitions, clubs, and football-related activities. The website serves a broad audience including fans, players, officials, and stakeholders, offering news, event details, and official communications. The digital infrastructure employs modern web technologies, including JavaScript frameworks, consent management platforms, and analytics tools, ensuring a professional and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-branded, and professionally maintained, supporting the FFF's role as a key sports federation in France.

S

SK Slavia Praha

veznakuhvezdaje.cz

48

SK Slavia Praha is a well-established Czech football club celebrating its 130th anniversary with a new visual identity and logo. The website serves as a dedicated platform to showcase this rebranding effort, including the club's history, logo evolution, custom font, fanshop merchandise, and related brand extensions. The site targets fans, sports enthusiasts, and customers interested in official club products. Technically, the website uses modern web standards with custom fonts, video content, and Google Analytics for visitor tracking. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact information or incident response details are provided, which are areas for improvement. Overall, the domain registration aligns with the website's purpose, indicating legitimacy. The site is safe, free of adult or questionable content, and maintains consistent branding.

P

Petit Press, a.s.

sme.sk

60

SME.sk is a leading Slovak news portal operated by Petit Press, a.s., providing comprehensive news coverage across various sectors including politics, economy, culture, and sports. The website targets the general Slovak public and holds a strong market position as one of the most read news sources in Slovakia. The business model is primarily based on online media publishing with revenue streams from advertising and subscriptions. The site demonstrates a high level of content quality and consistent branding, reflecting its established reputation since its founding in 1993. Technically, SME.sk employs a modern web technology stack including JavaScript frameworks, Google Fonts, and multiple advertising and analytics platforms such as Google DoubleClick, PubMatic, and Gemius. The site uses a custom CMS and shows good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and accessibility. From a security perspective, the website enforces HTTPS with excellent SSL configuration and includes standard security headers. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for enhancement. Overall, SME.sk presents a secure, professional, and trustworthy online presence with minor gaps in explicit security governance documentation. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and enhancing accessibility to improve user experience and compliance.

S

StaMat CZ, s.r.o.

stamatcz.cz

45

StaMat CZ, s.r.o. is a small Czech Republic based company specializing in earthworks, demolition, construction waste recycling, and heavy transport services primarily serving the Pardubice region and surrounding areas. The company operates a waste collection and recycling center and offers a range of construction-related services. The website is professionally designed with clear navigation and relevant content, supporting the company's local market positioning. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with a cookie consent mechanism in place, indicating awareness of privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and functional online presence for a regional construction services provider.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible or blocked. The page contains no business-related content, contact information, or compliance policies. Instead, it hosts the Chrome Dinosaur offline game code and assets, which is a default error placeholder in Chrome browsers when a page cannot be loaded. Due to the lack of accessible content, no meaningful business or security posture can be assessed. The technical infrastructure is limited to standard HTML, CSS, and JavaScript for the offline game, with no external dependencies or analytics detected. Security posture cannot be fully evaluated due to missing headers and SSL information. Overall, the website is non-functional at this URL, and no privacy or compliance information is present.

V

Vodárny a čerpadla

vodarnycerpadla.cz

51

Vodárny a čerpadla is a Czech-language website providing practical tips for everyday life, focusing on household care, gardening, kitchen ideas, and DIY repairs. The site targets a general audience interested in improving home and garden maintenance with easy-to-follow advice. The business operates as a content publisher with a niche focus, maintaining a consistent brand and good content quality. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is limited, with no cookie consent mechanism and only basic privacy and terms pages. WHOIS data is inconsistent, showing a future domain creation date, which raises some trust concerns but does not detract from the site's professional presentation and content accessibility. Overall, the site is functional and trustworthy for its content niche but would benefit from enhanced security and privacy measures.

The website at ww1.lesazahrada.com appears to be a parked or placeholder domain with minimal content primarily consisting of an iframe loading an external ad and tracking service. There is no identifiable business information, contact details, or privacy policies present. The WHOIS query returned no registration data, indicating the domain is either unregistered or inactive. Technically, the site lacks HTTPS and security headers, and the content quality is poor with heavy reliance on third-party ad domains. Security posture is weak with potential privacy and tracking concerns. Overall, the site does not represent a legitimate business presence and poses risks related to trust and security.

W

WebLinks - internetové odkazy filmy, inzerce, sběratelství, hobby

weblinks.cz

57

WebLinks.cz is a Czech language online catalog specializing in internet links related to films, classifieds, collecting, hobbies, and related topics. The website targets Czech users interested in these niche areas and monetizes primarily through Google AdSense advertising. The site structure includes multiple thematic subdomains focusing on specific interests such as model railways, women's inspiration, and job listings. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare DNS services but lacks modern CMS or frameworks. The design and user experience are basic with limited mobile optimization and accessibility features. Security posture is weak due to lack of HTTPS information, absence of security headers, and no visible privacy or cookie policies. WHOIS data is inconsistent, showing a domain creation date in the future, which undermines trust in domain legitimacy. Overall, the site is safe for general audiences but requires significant improvements in security, privacy compliance, and technical modernization.

L

Loqate

postcodeanywhere.co.uk

77

Loqate is a global provider of address verification, data validation, and geocoding services, operating under the parent company GBG. The company targets businesses across multiple sectors including retail, fintech, logistics, and utilities, offering a comprehensive suite of APIs and integrations to improve data quality and customer experience worldwide. The website demonstrates a mature digital presence with excellent content quality, professional design, and strong privacy compliance mechanisms including GDPR-aligned cookie consent. Technically, the site leverages modern analytics and monitoring tools such as Microsoft Application Insights, Google Analytics, and OneTrust, hosted likely on Microsoft Azure infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the company's established market position and branding. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and providing direct contact information for security and support purposes.

CLEVER Soft s.r.o. is a Czech Republic-based technology company specializing in automated production line control systems, quality management software, and IT services including hardware sales and web hosting. Established in 1997, the company targets manufacturing and industrial sectors, particularly automotive assembly lines, offering modular software solutions to integrate production automation with enterprise systems. The website reflects a mature business with clear contact information and a focus on industrial automation solutions. Technically, the site uses a custom CMS with legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with no HTTPS or security headers information provided, and no visible privacy or incident response policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

S

Statutární město Teplice

teplice.cz

51

The website represents the official portal of the statutory city of Teplice, Czech Republic. It serves as a comprehensive resource for residents, visitors, and local businesses by providing municipal services, news updates, event calendars, and contact information. The site is well-structured, professionally designed, and targets a broad audience including families, seniors, and tourists. The business model is government/public service with a focus on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, Google reCAPTCHA, and a Voiceflow chatbot for enhanced user interaction. It uses the Vismo CMS platform and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a dedicated security policy page and incident response contact details. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its public service role with moderate to good technical and security maturity. Strategic enhancements in security transparency and header implementation would further strengthen its posture.

S

Strombuch s.r.o.

strombuch.cz

41

Strombuch s.r.o. is a Czech Republic based company specializing in comprehensive forestry services including forest renewal, wood harvesting, sales, and maintenance activities. Established in 2004, the company serves private owners, municipal properties, and state organizations primarily in the Podkrkonoší region. The website reflects a professional business with clear service offerings and contact information, positioning itself as a trusted local forestry service provider. Technically, the website employs standard web technologies such as HTML5, CSS, and JavaScript, with integration of Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Security-wise, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact details suggest a legitimate business. No forms or data collection beyond analytics scripts are present, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection. The domain's WHOIS opacity slightly reduces trust but does not outweigh the positive business indicators.

D

DB SCHENKER

dbschenker.cz

66

DB SCHENKER operates as a leading global logistics and supply chain management provider, offering comprehensive services including land transport, air and ocean freight, contract logistics, and advanced 4PL solutions. The company is positioned as a major player in the transportation sector, supported by its parent company DSV. The website reflects a mature digital presence with multilingual support and customer portals, targeting business clients requiring sophisticated logistics solutions. Technically, the site employs modern web technologies such as web components, Adobe Launch for marketing and analytics, and enforces HTTPS with a strong Content Security Policy, indicating a robust security posture. While WHOIS data is unavailable, the website's professional presentation and linkage to known domains affirm its legitimacy. Overall, the site demonstrates high content quality, technical sophistication, and business credibility, with minor recommendations to enhance security headers and monitoring.