Security Directory

D

Datalab.MN d.o.o.

datalab.me

53

Datalab.MN d.o.o. operates a professional website promoting the PANTHEON ERP business information system, targeting enterprises in Montenegro and Southeast Europe. The company offers comprehensive ERP software solutions, digitalization tools, cloud hosting, and support services, positioning itself as a regional leader with a strong user base and over 20 years of market presence. The website is well-structured, multilingual, and rich in content, including testimonials, knowledge bases, and webinars, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, employs HTTPS with reCAPTCHA for form security, and demonstrates good SEO and mobile optimization. Security posture is solid but could be enhanced with additional HTTP headers. WHOIS data is privacy protected, which is common for business domains, and no suspicious patterns were detected. Overall, the site presents a trustworthy and professional business front with effective digital infrastructure.

J

Julia Boldt Fotografie

juliaboldt.de

55

Julia Boldt Fotografie is a small, locally focused photography and photo training business based in Rostock, Germany. The company offers relaxed photoshoots and photo workshops primarily targeting individuals and families interested in nature photography. The website is professionally designed using WordPress with the Divi theme and integrates e-commerce capabilities via WooCommerce, enabling product sales or bookings. The technical infrastructure includes modern web technologies and consent management tools, reflecting a mature digital presence for a small business. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms implemented, although no explicit security policy or incident response information is published. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and comprehensive policies. The domain registration data aligns well with the website content, indicating legitimacy and consistency.

G

Globus

globus.hu

55

Globus is a Hungarian company specializing in the manufacturing and retail of canned vegetable products, including peas, corn, beans, lentils, and vegetable mixes. The website serves as a product showcase and customer engagement platform, offering recipes, blog content, and career information. The company appears to hold a solid position in the Hungarian canned vegetable market with a medium-sized business model focused on retail and manufacturing. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Tag Manager and Swiper.js for analytics and user interface enhancements. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

L

Lemon Chili Games

superfarmingboy.com

56

Super Farming Boy is an indie game developed by Lemon Chili Games, offering a unique blend of action, puzzle, and farming simulation gameplay. The business targets casual and indie gamers across multiple platforms including Steam, Epic Games Store, Xbox, Android, and Nintendo Switch. The website serves as the official promotional and informational hub, providing demos, purchase links, and company contact information. Technically, the website is built on the Readymag platform, leveraging modern web technologies and standard marketing analytics tools. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's indie game market presence.

H

Hireology

hireology.com

11

Hireology is a well-established technology company specializing in applicant tracking system (ATS) software solutions tailored for businesses to streamline their hiring processes. Founded in 2008, the company has positioned itself as a significant player in the recruitment technology sector, offering a B2B SaaS model targeting businesses seeking efficient recruitment management tools. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress with Elementor, hosted on Amazon AWS infrastructure, and employs modern web technologies including Google Fonts and Font Awesome. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS with a good SSL configuration and implements several security headers, indicating a solid security posture. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit vulnerability disclosure mechanisms and incident response contacts. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR compliance indicators. Business credibility is high, supported by clear contact information, professional content, and trust signals like SSL and legal documentation. Overall, Hireology's website is trustworthy, secure, and professionally maintained, with minor recommendations to enhance DNS security and publish security policies. The risk level is low, making it a reliable platform for its users and clients.

P

Provident Photography

providentphotos.com

45

Provident Photography is a small, locally focused photography business based in Hastings, Nebraska, specializing in business headshots, senior portraits, family and children photography, sports, and school photos. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a trusted local provider. The technical infrastructure is built on WordPress with modern plugins and libraries such as jQuery, Font Awesome, and Owl Carousel, supporting a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

H

Hausarztzentrum Aubing

haz-aubing.de

53

Hausarztzentrum Aubing is a small local healthcare provider based in Munich, Germany, offering comprehensive general medical and internal medicine services. The website presents a professional image with clear descriptions of services, a team of doctors, and accessible contact information. The business targets families and individuals seeking primary care and preventive health services. Technically, the site is built on WordPress with common plugins and uses HTTPS, ensuring secure communication. However, there is room for improvement in security headers and privacy compliance mechanisms. The presence of third-party scripts for online reception introduces some risk that should be managed carefully. Overall, the site is functional, trustworthy, and serves its intended audience well.

P

Praha Bike

prahabike.cz

56

Praha Bike is a small, established tourism business based in Prague, specializing in guided bike tours and bike rentals including city, mountain, and electric bikes. The company has been operating since 2002 and targets tourists and visitors seeking active sightseeing and outdoor experiences in Prague. The website is built on the Tilda CMS platform, leveraging modern web technologies such as jQuery and Google Fonts, and integrates Google Analytics for visitor tracking. The site is well-structured with clear navigation and multiple language options, supporting a good user experience and mobile responsiveness. Security-wise, the website enforces HTTPS and implements standard security headers, though it lacks a visible cookie consent mechanism and dedicated security or incident response policies. WHOIS data is unavailable or privacy protected, which limits domain registration trust analysis but is likely justified for this business type. Overall, the website presents a professional and trustworthy online presence suitable for its market niche.

A

Auto*Mat

auto-mat.cz

46

Auto*Mat is a small, community-focused organization based in the Czech Republic dedicated to urban mobility and sustainable transportation solutions. The website serves as an informational and engagement platform for the local community and stakeholders interested in city transportation projects. The business operates primarily as a non-profit or advocacy group with a niche market position in transportation within the Czech Republic. Technically, the website is built on WordPress, hosted by GreenGeeks, and employs modern web technologies including Google Tag Manager, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is adequate with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing advanced security headers and publishing a security policy. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the domain is legitimate, well-aged, and consistent with the business claims, indicating a trustworthy online presence.

KARLINSKI is a small, self-employed graphic design business based in Mecklenburg, Germany, offering a range of creative services including logo design, corporate identity, print and web design, and production support. The website serves as a professional portfolio and contact point, targeting local businesses, cultural institutions, and agencies. The technical infrastructure is based on WordPress with common plugins for SEO and contact forms, hosted on kasserver.com. While the site is functional and well-structured with good content quality and GDPR-compliant privacy and cookie policies, it uses outdated WordPress and plugin versions, which pose potential security risks. No advanced security policies or incident response mechanisms are evident. Overall, the site is trustworthy and professional but would benefit from technical updates and enhanced security measures.

C

Apteka Internetowa Cefarm24: leki, kosmetyki, suplementy diety

cefarm24.pl

55

Cefarm24.pl is a Polish online pharmacy specializing in the sale of over-the-counter medicines, branded cosmetics, dietary supplements, and products for mothers and children. The website positions itself as a legal and trustworthy pharmacy, supported by a registration badge linking to the official Polish medical registry. The business model is e-commerce retail focused on healthcare products with competitive pricing and professional pharmaceutical care. The site targets a broad general audience in Poland seeking convenient online access to health-related products. Technically, the website is built on the AptusShop.pl CMS platform and integrates modern technologies such as Google Tag Manager for analytics and Ceneo for product reviews and tracking. The site is HTTPS secured and includes a cookie consent mechanism, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, with good navigation and content relevance. From a security perspective, the site uses HTTPS but lacks visible security headers, which could be improved to enhance protection against common web attacks. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is partial, with cookie consent present but no explicit privacy policy or terms of service pages found in the provided content. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website presents a legitimate and professional online pharmacy with a good trust level but could benefit from enhanced security headers, explicit privacy and terms documentation, and clearer contact details. These improvements would strengthen compliance and user trust while reducing potential security risks.

N

NUTRICIA Polska Sp. z o.o.

posilkiwchorobie.pl

64

Posilkiwchorobie.pl is a professionally developed healthcare nutrition website operated by NUTRICIA Polska Sp. z o.o., focusing on medical nutrition for oncological and neurological diseases. The site provides trusted advice, recipes, and product information, targeting patients and caregivers in Poland. It maintains a consistent brand presence and offers e-commerce links for specialized nutrition products. Technically, the site is built on WordPress with modern frontend technologies and integrates Google Tag Manager and New Relic for analytics and monitoring. The website demonstrates good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting its role as a healthcare information and product platform.

Z

Zagrebački inovacijski centar

zicer.hr

58

ZICER (Zagrebački inovacijski centar) is a Croatian innovation center focused on supporting startups and entrepreneurs by providing incubation and business development services. The website positions itself as a regional innovation hub with a medium-sized organizational footprint, founded around 2021. The target audience includes innovators and startup founders seeking support and resources. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Fonts. It employs Facebook Pixel for marketing and tracking purposes, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some recommended security headers, which could be improved to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy page found. Overall, the website is professional, trustworthy, and safe for general audiences, with a legitimacy score reflecting consistent domain registration and business information.

H

HAMAG BICRO

hamagbicro.hr

47

HAMAG BICRO is a Croatian government agency dedicated to supporting small businesses and investments. The agency provides comprehensive assistance to entrepreneurs throughout all stages of business development, from idea research and development to commercialization and market placement. The website reflects a national-level institution with a focus on fostering economic growth and innovation in Croatia. Technically, the website is built on WordPress with SEO optimization plugins, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and presents content in Croatian, targeting local entrepreneurs. Security posture shows room for improvement, with no detected security headers and missing privacy and cookie policies, which are critical for GDPR compliance. Overall, the domain registration and WHOIS data align well with the agency's profile, confirming legitimacy. Strategic recommendations include enhancing security headers, adding privacy and cookie policies with consent mechanisms, and publishing clear contact and incident response information to improve trust and compliance.

A

Agencija za ugljikovodike

azu.hr

55

The website azu.hr represents the Agencija za ugljikovodike, a Croatian government agency specializing in the management and development of hydrocarbon and geothermal energy resources. The agency positions itself as a key player in Croatia's sustainable energy transition, providing data resources, coordinating projects, and supporting the development of new energy technologies. The website content is rich with news updates, project information, and sector-specific resources, targeting energy professionals, government stakeholders, and researchers. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, Material Icons, and accessibility tools like the UserWay widget. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured navigation. Hosting appears to be managed under Croatian academic or government infrastructure, consistent with the agency's profile. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No forms or direct contact information were found in the analyzed content, which may limit user engagement or support channels. Overall, the website is professional, trustworthy, and aligned with its governmental role. The domain registration data supports legitimacy and consistency with the agency's history. Strategic improvements in privacy compliance and security headers would further strengthen the site's posture.

The website www.javnanabava.hr serves as the official Croatian government portal dedicated to public procurement. It provides authoritative information, legal frameworks, news updates, statistical data, and educational resources aimed at public sector entities, suppliers, and other stakeholders involved in public procurement processes. The portal is managed by the Ministry of Economy's Directorate for Public Procurement Policy, reflecting a strong government presence and trustworthiness. Technically, the site leverages modern web technologies including Blazor, Bootstrap, and Oqtane CMS, ensuring a responsive and accessible user experience. Accessibility tools and cookie consent mechanisms are implemented, demonstrating compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, well-maintained, and serves its governmental informational purpose effectively.

N

NUTRICIA Polska Sp. z o.o.

nutridrink.pl

64

The website posilkiwchorobie.pl is a professionally developed WordPress site representing NUTRICIA Polska Sp. z o.o., a recognized player in the healthcare sector specializing in medical nutrition products such as Nutridrink. The site provides comprehensive product information, usage guidance, and educational content targeted at patients with nutritional deficiencies related to illness, particularly elderly and chronically ill individuals. The business model focuses on product sales combined with patient education and support, positioning Nutridrink as a trusted nutritional supplement in the Polish market. Technically, the site leverages modern web technologies including WordPress CMS, Google Tag Manager, and New Relic for performance monitoring, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and incident response policies are not evident. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with consistent branding and positive user feedback.

N

NUTRICIA Polska Sp. z o.o.

nutriciawdomu.pl

65

The website posilkiwchorobie.pl is a professionally maintained healthcare nutrition platform operated by NUTRICIA Polska Sp. z o.o., a subsidiary of the Nutricia brand. It provides comprehensive information and products related to enteral nutrition, targeting patients and healthcare professionals in Poland. The site demonstrates a consistent brand presence and offers educational content, product information, and patient support resources. Technically, the site is built on WordPress with modern analytics and monitoring tools such as Google Tag Manager and New Relic, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with a clear consent mechanism. Contact information is available primarily via phone and contact forms, with no public emails disclosed. Overall, the site is trustworthy, well-structured, and serves its healthcare audience effectively.

N

NUTRICIA Polska Sp. z o.o.

nutriciaoncology.pl

65

Posilkiwchorobie.pl is a professionally maintained healthcare website operated by NUTRICIA Polska Sp. z o.o., focusing on medical nutrition for patients with oncological and neurological conditions. The site offers educational content, product information, recipes, and expert advice, positioning itself as a trusted resource in the Polish healthcare nutrition market. The business model combines informational services with product promotion and e-commerce links, targeting patients, caregivers, and healthcare professionals. The website demonstrates consistent branding and a clear focus on its niche audience. Technically, the site is built on WordPress 6.8.2, leveraging modern web technologies including Google Tag Manager and New Relic for performance and monitoring. It is hosted by cyber_Folks S.A., a reputable registrar and hosting provider. The site shows good mobile optimization, accessibility, and SEO practices, with fast loading times and structured metadata enhancing search visibility. From a security perspective, the website enforces HTTPS and uses monitoring tools but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting adherence to GDPR requirements. Overall, posilkiwchorobie.pl presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing a security policy, and establishing a vulnerability disclosure process to further enhance trust and security posture.

R

Radio Dechovka

radiodechovka.cz

60

Radio Dechovka is a specialized private radio station focusing on brass band, folk, and traditional music from Czechia and Slovakia. It serves a niche audience interested in regional and folk music genres, offering interactive features such as song requests via phone and email. The website is built on WordPress using the Astra theme and incorporates GDPR compliance tools including a cookie consent banner. Social media integration is present with active Facebook, Instagram, and Twitter accounts. However, the absence of a privacy policy page and WHOIS data limits full trust assessment. Technically, the site is well-structured, mobile-optimized, and uses modern web technologies, though security headers are missing.

R

Rozhlednovým rájem - Rozhledny ČR | Rozhlednovým rájem

rozhlednovymrajem.cz

45

Rozhlednovým rájem is a Czech language website serving as a unique catalog of observation towers across the Czech Republic, providing descriptions, photo galleries, and additional information to visitors interested in these landmarks. The website targets general audiences including tourists and photography enthusiasts. The business model appears to be informational and possibly tourism-related, focusing on content aggregation rather than direct sales or services. The site was first published in 2011, indicating a long-standing presence in its niche. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for search engine optimization, Contact Form 7 for user interaction, and Google reCAPTCHA v3 for spam prevention. The site loads with moderate performance and is mobile optimized with good SEO practices in place. Security posture is solid with HTTPS enabled and reCAPTCHA integration, though it lacks some advanced security headers and policies. No WHOIS data is available, which limits the ability to fully verify domain legitimacy and ownership details. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced transparency and security practices.

Obec Máslovice operates an official municipal website serving the local community of Máslovice, Czech Republic. The site provides comprehensive information about local services, events, municipal office activities, and public notices. It targets residents and visitors interested in community engagement and local governance. The website is built on WordPress, utilizing common web technologies such as jQuery and Google Analytics with IP anonymization to respect user privacy. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is generally good with HTTPS enforced, though the absence of security headers and cookie consent mechanisms suggests room for improvement. The lack of WHOIS data reduces domain registration transparency but does not detract from the site's apparent legitimacy as a government entity.

C

Colloredo-Mannsfeld spol. s r.o.

lesyzbiroh.cz

56

Colloredo-Mannsfeld spol. s r.o. is a medium-sized forestry and fishery management company based in the Czech Republic, with a long historical background linked to aristocratic roots. The company manages extensive forest areas and fishponds, focusing on sustainable forestry practices and nature conservation. Their website provides detailed information about their services, history, and ongoing projects, targeting a general audience interested in forestry and environmental stewardship. Technically, the website is built on WordPress using popular plugins like Yoast SEO and WPBakery Page Builder, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal policies. Overall, the site is professional and trustworthy but could improve privacy compliance and explicit contact information.

M

Minimalizace šikany

minimalizacesikany.cz

43

Minimalizace šikany is an educational program website focused on helping schools reduce the frequency and severity of bullying incidents. The site targets schools and educational institutions primarily in the Czech Republic. The business model appears to be service-oriented, providing programs and support for bullying prevention. The website uses WordPress with the Divi theme and includes SEO optimizations but lacks configured analytics and privacy compliance features. Technically, the site is moderately optimized for performance and mobile responsiveness but could improve accessibility and security headers. Security posture is basic with no evident vulnerabilities but lacks important security headers and privacy policies. Overall, the risk is moderate due to missing WHOIS data and privacy compliance gaps. Strategic recommendations include adding privacy and cookie policies, configuring analytics properly, improving security headers, and providing clear contact information to enhance trust and compliance.

E

Effet Webservice

effet.info

48

Effet Webservice is a small Austrian technology company specializing in server administration, TYPO3 CMS, WordPress, ownCloud/Nextcloud hosting, SEO, and web marketing services. The company targets businesses and organizations seeking professional web hosting and digital marketing solutions. Their market position is that of a niche specialist with a focus on TYPO3 CMS and managed hosting services. The website is professionally designed, consistent in branding, and provides clear contact information including a physical address and phone number. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery frameworks, delivering a moderate performance and good mobile optimization. The site uses HTTPS and includes proper meta tags for SEO but lacks advanced security headers and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of privacy policy and cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of cookies but lacks security headers and formal security policies. The WHOIS data is privacy protected, which is justified for this business type, and no suspicious domain registration patterns were found. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional nature of the site and absence of vulnerabilities, but the company should enhance privacy compliance and security best practices to strengthen trust and regulatory adherence.

G

Grow

grow.me

54

Grow is a technology-driven platform focused on enabling readers to curate and save content from their favorite creators for free. The platform emphasizes ease of use with a single login for content bookmarking and subscription, targeting content consumers who value efficient content management. Affiliated with Mediavine, Grow benefits from established market presence and resources. Technically, the website is built on WordPress with modern JavaScript libraries and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and consent-based tracking, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, privacy-conscious, and trustworthy, with no signs of malicious activity or content safety concerns.

H

hockeydata GmbH

hockeydata.net

56

hockeydata GmbH is a specialized Austrian company providing software solutions and professional services focused on sports statistics, association management, and live graphics for sports broadcasts. The company holds a leading position in Austria's sports software market, serving clubs, leagues, broadcasters, and fans with tailored products and services. Their offerings include sport statistics software, multimedia display systems, and operational support for sports events and TV productions. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder, jQuery, and Google APIs. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is unavailable or indicates the domain may not be registered under the queried name, which raises concerns about domain legitimacy. However, the website content and business presence suggest an operational and credible entity. No signs of WAF or content blocking were detected, allowing full content analysis. Overall, hockeydata GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security policy transparency. Verification of domain registration is recommended to strengthen trust and legitimacy.

L

Leonardo Demartino

demartino.ar

52

Leonardo Demartino's website serves as a professional portfolio highlighting his expertise as a lead developer in software, game development, and multimedia applications. The site showcases a variety of projects across multiple platforms including iOS, Android, Steam, and consoles, positioning him as a niche player in the indie game and multimedia software market. The business model is primarily personal branding and project promotion, targeting developers, gamers, and potential collaborators. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and Google Fonts, ensuring good mobile optimization and user experience. The site is well-structured with clear navigation and professional content presentation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. No forms or analytics scripts reduce the attack surface and tracking footprint, but the absence of incident response or vulnerability disclosure information indicates room for improvement in security maturity. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user confidence.

O

OpenPandora GmbH

dragonbox.de

62

DragonBox Shop, operated by OpenPandora GmbH, is a specialized e-commerce retailer based in Germany focusing on retro gaming products, accessories, and mini-PCs. The company targets retro gaming enthusiasts and technology hobbyists, offering a curated selection of products including game controllers, adapters, and repair services. The website demonstrates a consistent brand presence with clear business information and trust signals such as Trusted Shops certification and GDPR-compliant privacy and cookie policies. Technically, the site is built on the PrestaShop 1.7 platform, leveraging modern web technologies including jQuery, Matomo Analytics, and layered sliders for enhanced user experience. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with a well-structured navigation system supporting a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contact details. Security headers are not fully evident, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, DragonBox Shop presents a trustworthy and professional online presence with a solid privacy compliance posture and a niche market focus. Strategic enhancements in security policies and technical security headers would further strengthen its security posture and customer trust.

A

Atari®

atari.com

74

Atari.com is the official e-commerce website for Atari®, a well-known brand in the gaming industry. The site offers classic and modern gaming consoles, cartridges, merchandise, and collectibles, targeting gamers and collectors worldwide. The website leverages the Shopify platform, integrating multiple third-party services for reviews, marketing, and product customization, reflecting a mature digital infrastructure. The site is professionally designed with good content relevance and user experience, supporting its position as a large, established brand in the gaming and entertainment sector. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though there is room for improvement in explicit security headers and published security policies. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and business credible, with a strong domain history and consistent WHOIS data.

C

Cyberworx Technologies Pvt Ltd

cyberworx.in

46

Cyberworx Technologies Pvt Ltd is a well-established digital agency based in Delhi NCR, India, specializing in website design, development, ecommerce solutions, mobile app development, SEO, and digital brand development. The company positions itself as a top-tier service provider with a strong portfolio and client base, supported by a high aggregate rating and extensive service offerings. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Microsoft Clarity, and Materialize CSS, ensuring a responsive and user-friendly experience. However, there is room for improvement in security posture, particularly in implementing security headers and formal privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and social media presence.

D

Dalkia

dalkiasolutions.com

55

Dalkia Solutions is a large energy efficiency solutions provider offering a comprehensive range of services including chiller services, combined heat and power, digital services, intelligent load management, LED lighting and controls, operations and maintenance, refrigeration, retail energy, smart infrastructure solutions, solar plus storage, and strategic energy management. The company targets commercial and industrial clients nationwide and is part of the EDF Group, a well-known energy conglomerate. The website demonstrates a professional and consistent brand presence with detailed service descriptions and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and OwlCarousel, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS with CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No explicit incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. The absence of WHOIS data is a concern but the website content and branding align with a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security headers, explicit contact information, and improved privacy compliance mechanisms to strengthen its security posture and user trust.

openscienceASAP is an educational and community-focused platform dedicated to promoting open science practices. The website provides resources, research, education, and social engagement opportunities for researchers and advocates of open science. The platform operates as a small-scale non-profit or community resource hub with a niche focus on open science within the education sector. Technically, the website is built on WordPress with standard web technologies including PHP and JavaScript, and uses external resources such as Google Fonts and Fontello icons. The hosting and domain registration are stable and consistent with the website's age and purpose. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response details are provided, limiting transparency. Overall, the website is functional but basic in content and technical sophistication.

#

#to chce odvahu

tochceodvahu.cz

10

The website tochceodvahu.cz represents a recently launched non-profit mental health awareness campaign named '#to chce odvahu', initiated in 2025. It is a collaborative effort involving the Office of the President of the Czech Republic, Nadační fond Flaminia, and Nevypusť duši. The campaign provides resources such as crisis helpline information, ambassador stories, and a help directory aimed at supporting mental health, particularly targeting youth and adults. The site is professionally designed with consistent branding and clear navigation, reflecting a high level of digital maturity for a small non-profit initiative. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Font Awesome icons and Google/Fontshare fonts. It embeds YouTube videos for richer content delivery and uses the Umami analytics platform for minimal user tracking. Hosting is provided by WEDOS, a reputable Czech hosting provider. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms collecting personal data are present on the main page, reducing immediate data protection risks. The WHOIS data shows a consistent and transparent domain registration aligned with the campaign's launch timeline, supporting legitimacy. Overall, the website is a trustworthy and well-executed campaign platform with excellent content quality and business credibility. However, it should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

T

TJ Spartak Hořovice, z.s.

plavanihorovice.cz

47

TJ Spartak Hořovice is a local Czech sports club specializing in swimming and modern pentathlon. The website serves as an information hub for club members and the local community, providing event calendars, news updates, photo galleries, and training schedules. The club operates as a non-profit entity, focusing on youth and amateur sports activities in the Hořovice region. The site is well maintained with consistent branding and relevant content for its target audience. Technically, the website is built on Joomla CMS with supporting frameworks such as Bootstrap and UIkit, leveraging jQuery and Google Fonts for enhanced user experience. The site is mobile optimized and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS but lacks several important security headers like Content-Security-Policy and HSTS, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a moderate risk profile with good business credibility but could benefit from improved security practices and enhanced privacy documentation. Strategic recommendations include implementing security headers, publishing a comprehensive privacy policy, and maintaining up-to-date software to mitigate potential risks.

H

HMS Stavby

hms-stavby.cz

37

HMS Stavby is a small construction company based in the Czech Republic, operating since 2012. The website presents basic information about the business and its services, targeting a general audience interested in building and construction. The site is built on WordPress using the Divi theme, with standard web technologies such as jQuery and Google Fonts. The hosting provider is WEDOS, consistent with the Czech location. The website has basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but no security headers detected and an expired domain status which poses a risk. Privacy compliance is minimal with no privacy policy or terms of service found, though a cookie consent mechanism is implemented. Overall, the site is functional but lacks comprehensive security and compliance measures.

A

AutoTužil

autotuzil.cz

54

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-kampagne-2019.de

42

The website 'bkk-kampagne-2019.de' represents a health awareness campaign by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on promoting healthy sleep habits. It provides educational content, tips, and resources related to sleep health, targeting the general German-speaking public. The campaign is positioned as a niche, non-profit initiative within the healthcare sector, with a clear and consistent branding approach. The website content is well-structured, professionally designed, and offers multilingual support (German and English). Technically, the site is built on WordPress, leveraging caching and minification plugins to optimize performance. It uses HTTPS with a good SSL configuration, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and security. No forms or data collection mechanisms are visible on the homepage, reducing privacy risks. Contact information is clearly provided, including a verified organizational email and physical address in Berlin. No suspicious or malicious indicators were found, and the domain appears legitimate and appropriate for the campaign's history and purpose.

C

Cesta z krize, z.ú.

linkapsychickepomoci.cz

48

The website linkapsychickepomoci.cz represents a non-profit organization named Cesta z krize, z.ú., providing free, anonymous, and 24/7 psychological crisis support services primarily to adults in the Czech Republic. The service offers telephone and chat support to individuals facing acute psychological distress or crisis situations. The organization is government co-financed and partners with other NGOs, positioning itself as a trusted social service provider in the mental health support sector. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and Smartsupp for live chat functionality. The site is hosted by Active24 and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO and metadata are present but could be enhanced for better discoverability. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a privacy policy and terms of service pages, as well as no security.txt file, indicates areas for compliance and security improvement. Overall, the website is safe, professional, and trustworthy, with a clear focus on mental health crisis support. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility compliance to strengthen user trust and regulatory adherence.

C

Cesta z krize, z.ú.

linkaztracenedite.cz

49

The website 'Linka pro rodinu a školu' is a Czech non-profit social service platform operated by 'Cesta z krize, z.ú.' focused on supporting families, children, and adults in crisis situations, particularly related to missing children and school or family problems. It offers telephone crisis intervention, online chat support, and professional counseling, positioning itself as a trusted and officially recognized service with backing from national and European institutions. The site targets a broad audience including families, educators, and the general public. Technically, the website employs modern web technologies such as Google Tag Manager and Cookiebot for consent management, with a moderate performance profile and good mobile optimization. Hosting is provided by Active24, consistent with the domain registration data. The site implements a comprehensive cookie consent mechanism with granular user controls, reflecting a good level of privacy compliance, although explicit privacy policy and terms of service pages are not clearly found in the provided content. From a security perspective, the site uses HTTPS (implied by external scripts loaded via HTTPS), but no explicit security headers or advanced security policies are evident in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the organization's profile, indicating a legitimate and stable domain registration. Overall, the website demonstrates a solid risk posture with good privacy compliance and business credibility. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

G

Grizzly Ads

grizzlyads.com

57

Grizzly Ads is a technology startup offering an ad booking and management platform targeted at creative businesses and content creators. The platform is currently in beta, focusing on enabling creators to sell ad slots directly to sponsors with unlimited bookings and direct payments. The website reflects this early stage with clear but limited content and a focus on onboarding beta users. Technically, the site is built on the Bubble.io platform, leveraging modern JavaScript libraries and cloud hosting via AWS Cloudfront CDN. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is adequate for a startup but could benefit from enhanced security configurations. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. There are no visible incident response or security policies, and cookie consent mechanisms are absent. Analytics usage is minimal, relying on plausible.io, which is privacy-focused. Overall, the security posture is moderate but requires improvements to meet best practices. The overall risk is moderate given the startup nature and limited exposure. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent and privacy enhancements, and publishing incident response contacts to improve trust and compliance.

S

Startup Tech Valley

startuptechvalley.org

59

Startup Tech Valley is a small event organization focused on fostering the startup ecosystem in the Capital Region of the United States. They organize premier startup events featuring pitches, networking, and community engagement, targeting entrepreneurs, investors, and business leaders. The website is professionally designed using Squarespace, with good mobile optimization and moderate performance. Social media presence is strong, supporting community outreach and event promotion. Security posture is good with HTTPS and HSTS enabled, and Google reCAPTCHA implemented to protect forms. However, the absence of privacy and cookie policies, lack of explicit contact information, and missing WHOIS data reduce overall trust and privacy compliance. The domain's legitimacy is partially uncertain due to unavailable WHOIS records, though the website content and external event registration links suggest a legitimate business. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance.

The website www.vojujezd-brdy.cz serves as an informational portal focused on tourism, hiking, cycling, and local history related to the former military area Brdy in the Czech Republic. It targets tourists and outdoor enthusiasts seeking less crowded natural areas. The site provides detailed descriptions of trails, accommodation options, and local services, monetized primarily through Google Adsense advertising. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and a consent management platform to comply with privacy regulations. The website is accessible without WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide direct contact information, which limits user trust and compliance transparency. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and relevant for its niche audience but could improve in privacy transparency, security best practices, and contact availability.

B

Berounský Region

berounskyregion.cz

56

Berounský Region is a regional media portal focused on culture and social life in the Beroun area of the Czech Republic. It provides news, event invitations, calendars, videos, and features on regional personalities, targeting residents and visitors interested in local cultural activities. The website is built on WordPress with common plugins and integrates Google Analytics for user tracking. It is mobile-optimized and regularly updated with relevant content. Security posture is moderate with HTTPS enabled but lacks some security headers and formal privacy/cookie policies. WHOIS data is unavailable, which slightly reduces trust but the active social media presence and content quality support legitimacy. Overall, the site serves as a valuable regional cultural information source with room for improvement in privacy compliance and security practices.

B

Bezplatná právní poradna online zdarma pro všechny

bezplatnapravniporadna.cz

47

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

H

Hotel zámek Berchtold

zamekberchtold.cz

59

Hotel zámek Berchtold is a hospitality business located in the Czech Republic offering a range of services including corporate events, teambuilding, weddings, family vacations, wellness, sports, and restaurant facilities. The website presents a professional and consistent brand image with clear navigation and relevant content targeting corporate clients, families, and tourists. The business is small-sized and has been established since 2006, supported by a domain registration consistent with its history. Technically, the website is built on WordPress hosted on WordPress.com, leveraging Jetpack and other standard plugins. It uses HTTPS with good SSL configuration and includes integrations such as Facebook SDK and Google Translate. Performance and mobile optimization are moderate to good, though accessibility features could be improved. From a security perspective, the site benefits from WordPress.com hosting security but lacks explicit security policies, vulnerability disclosure, and advanced security headers. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy or terms of service pages. Contact information is comprehensive and trustworthy. Overall, the website is safe, professional, and credible with minor gaps in privacy and security documentation. Strategic improvements in privacy policy publication, security headers, and incident response information would enhance trust and compliance.

M

MZ.cz

pruvodkarlaiv.cz

53

MZ.cz is a Czech-language content portal offering a wide range of informational articles, guides, and reviews across sectors such as finance, career, parenting, psychology, relationships, health, travel, shopping, and lifestyle. The website targets the general Czech-speaking public seeking practical advice and knowledge. Technically, the site is built on WordPress CMS, leveraging popular plugins like Yoast SEO and integrating Google services for analytics and advertising. The site demonstrates good digital maturity with responsive design, structured data, and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

N

National Heritage Institute

zamek-mnisek.cz

44

The website represents the official web presence of Mníšek pod Brdy Castle, managed by the National Heritage Institute of the Czech Republic. It provides detailed visitor information, including tours, events, opening hours, and contact details, targeting tourists and heritage enthusiasts. The site is well-positioned as a government-operated cultural heritage site with a medium-sized operational scope and a history dating back to 2007. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and integrates map services from Mapy.cz, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but present, with clear privacy and cookie policies linked from the site. Overall, the site is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.

C

Centrum LOCIKA, z. ú.

detstvibeznasili.cz

57

Centrum LOCIKA operates the website detstvibeznasili.cz, a Czech non-profit platform dedicated to providing direct support to children and families affected by domestic violence. The site offers chat support, educational resources, and awareness campaigns targeting children, teenagers, parents, and school professionals. It holds a strong market position within the Czech Republic's child protection sector, leveraging professional content and consistent branding to build trust. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and slick carousel for UI components. It integrates Google Analytics and TikTok Pixel for analytics and marketing purposes, with a cookie consent mechanism ensuring user privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with GDPR-aligned policies accessible. The absence of WHOIS data due to privacy protection is justified given the sensitive nature of the organization's work. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, privacy practices, and vulnerability disclosure would further enhance its security posture and user trust.

E

EDUin, o. p. s.

podporujuvzdelavani.cz

43

EDUin is a Czech non-profit organization dedicated to supporting and informing about education through various projects including audits, newsletters, podcasts, and networking for school founders. The website serves as a donation and information portal, targeting parents, educators, and stakeholders in the education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the site is professional, trustworthy, and well-aligned with its mission.