Security Directory

M

MERKURIA - ARTES a.s.

branocentrum.cz

44

MERKURIA - ARTES a.s. operates the website branocentrum.cz as an authorized dealer and service provider for BRANO brand lifting and door closing technology. The company offers a broad range of industrial lifting equipment and related products, targeting industrial and commercial customers primarily in the Czech Republic. The website features an e-commerce platform with product listings, pricing, and purchase options, supported by a physical showroom and service center. Technically, the site uses legacy JavaScript libraries and a CMS platform called Webareal, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks modern security headers and uses outdated libraries, posing potential risks. WHOIS data is unavailable, reducing domain trust from a registration perspective, but business information and contact details are clearly presented, supporting legitimacy. Privacy compliance is basic with cookie consent but no explicit privacy policy page found. Overall, the site is professional and trustworthy for its business domain but would benefit from technical and security improvements.

M

MERKURIA-ARTES a. s.

nilfiskcentrum.cz

42

Nilfiskcentrum.cz is a Czech Republic-based specialized retailer and service provider focused on professional cleaning equipment, primarily the Nilfisk and Nilfisk Alto brands. The company MERKURIA-ARTES a. s. operates the site, offering a broad range of cleaning machines, accessories, and related services including machine rental and ecological disposal. The website targets professional cleaning service providers and end customers within the Czech market. The business model is primarily e-commerce combined with service offerings, positioning itself as a regional leader in cleaning technology retail and support. Technically, the website runs on the BohemiaSoft e-commerce platform, utilizing a mix of legacy and modern JavaScript libraries such as jQuery 1.8.3, jQuery UI, Select2, and Owl Carousel. Google Analytics and Facebook SDK are integrated for analytics and marketing purposes. The site is mobile optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in updating legacy libraries. From a security perspective, the site enforces HTTPS and uses standard security cookies including CSRF tokens and session management. However, the use of outdated jQuery versions introduces potential vulnerabilities. Security headers are minimal, and no explicit security policies or incident response information are published. Cookie consent mechanisms are implemented, indicating GDPR awareness. Overall, the website is professional and trustworthy in appearance, with clear contact information and social media presence. The absence of WHOIS data for the domain reduces domain trust and raises questions about registration transparency. There are no indications of adult or questionable content, and the site is fully accessible without WAF or blocking mechanisms. Strategic recommendations include updating JavaScript libraries to mitigate vulnerabilities, enhancing security headers, publishing clear security and incident response policies, and verifying domain registration details to improve trustworthiness.

M

MERKURIA - ARTES a.s.

vodacentrum.cz

44

Vodacentrum.cz is an established Czech e-commerce retailer specializing in kitchen sinks, faucets, valves, and range hoods, primarily offering products from reputable European brands such as Franke, Silfra, and Paffoni. The company, MERKURIA - ARTES a.s., targets consumers and businesses in the Czech Republic seeking quality sanitary and kitchen installation products. The website demonstrates a professional and consistent brand presence with clear navigation and relevant product offerings. Technically, the website employs a variety of JavaScript libraries including jQuery, jQuery UI, and several UI components like MasterSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. The site is built on the Webareal CMS platform and uses HTTPS to secure communications. However, the use of an outdated jQuery version poses potential security risks, and there is no evidence of advanced security headers such as CSP. From a security perspective, the site follows basic best practices including HTTPS enforcement and cookie consent mechanisms. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact details appear legitimate and professional. Overall, Vodacentrum.cz presents a trustworthy and functional e-commerce platform with room for improvement in security practices and domain transparency. Strategic enhancements in updating libraries, implementing security headers, and publishing vulnerability disclosure policies would strengthen its security posture and trustworthiness.

F

Flipohity

flipohity.pl

51

Flipohity is a Polish travel website specializing in offering cheap flight tickets and travel inspiration. The site targets travelers primarily from Poland and Germany, providing curated flight deals and travel articles authored by their editorial team. The business operates on an affiliate marketing model, partnering with flight booking platforms such as Flipo.pl to monetize traffic. The website is relatively young, founded in 2018, and maintains a consistent brand presence with active social media channels. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and advertising services to support its business model. Security posture is adequate with HTTPS enabled, but lacks advanced DNS security and explicit security headers. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, Flipohity presents as a legitimate small business travel portal with room for improvement in security and compliance transparency.

I

International Network of Boutique and Independent Law Firms

inblf.com

61

The International Network of Boutique and Independent Law Firms (INBLF) operates as a professional legal network connecting highly credentialed boutique and independent law firms across the United States, Canada, and internationally. The network offers specialized legal services in various practice areas, targeting individuals, businesses, nonprofits, and government entities seeking personalized and cost-effective legal representation. The website reflects a mature organization with a founding date around 2011 and maintains a consistent brand presence with active social media channels and event promotions. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Cookiebot for privacy compliance. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile optimized with good SEO practices and structured data enhancing search visibility. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which impacts the overall security posture. Overall, the website presents a professional and trustworthy front for a legal network but should address domain registration transparency and enhance security documentation to improve stakeholder confidence and compliance posture.

J

Jednota tlumočníků a překladatelů

jtpunion.org

47

Jednota tlumočníků a překladatelů (JTP) is a Czech non-profit professional association representing translators, interpreters, and audiovisual translators. The organization provides a membership platform, professional directories, events, training, and advocacy for its members. The website serves as a resource for clients seeking qualified language service providers and for professionals interested in joining the association. The site is well-branded and clearly targets the Czech professional translation and interpreting community. Technically, the website is built on WordPress using the Kadence theme and several professional plugins including Advanced Custom Fields Pro and The Events Calendar. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO and event promotion. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected or unavailable, but the domain age and content consistency support legitimacy. Overall, the website is professional, secure, and compliant with basic privacy regulations. Strategic improvements include adding cookie consent, security headers, and publishing security policies to enhance trust and compliance.

T

Trip Trap

triptrapescape.ch

58

Trip Trap is a Swiss-based company specializing in immersive escape game experiences, operating multiple themed locations in Geneva. The company has established a strong market position with multiple industry awards and a clear focus on delivering engaging entertainment for a broad audience including families, corporate clients, and children. Their business model revolves around physical escape rooms, team building events, and gift vouchers, supported by a professional online booking platform. Technically, the website is built on WordPress with modern plugins and tracking tools, offering good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, security headers, and anti-bot measures, though lacking a dedicated security policy or incident response information. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professional branding.

W

Winston bros., s.r.o.

shoppingin.eu

50

Shopping in EU operates as a European price comparison platform offering consumers the ability to find the best prices for thousands of products from hundreds of stores across Europe. The company behind the website is Winston bros., s.r.o., based in Slovakia. The platform supports multiple languages and countries, targeting a broad European audience interested in e-commerce and product price comparison. Key services include product search, merchant and brand listings, and a CSS service to optimize Google Merchant accounts for advertisers. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Google Fonts, and integrates Google Tag Manager and Adsense for analytics and advertising. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Privacy compliance is well addressed with a visible cookie consent mechanism and linked privacy and terms documents. From a security perspective, the site uses HTTPS and implements consent management for cookies, but lacks explicit security headers such as X-Frame-Options and X-Content-Type-Options. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is not publicly available due to EURid privacy policies, but the website provides legitimate company contact information consistent with a real business entity. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and providing incident response contact details to further improve trust and compliance.

B

BlueWinston

bluewinston.sk

65

BlueWinston is a Slovakia-based technology company specializing in automated PPC product advertising campaigns, primarily for Google Ads and Microsoft Ads platforms. Their SaaS solution enables e-commerce businesses to quickly create and optimize product search ads and shopping campaigns using XML feeds and AI-powered tools. The company positions itself as a niche player offering advanced automation and optimization features, including AI bidding and keyword generation, targeting online retailers and advertisers seeking efficiency and performance improvements. Technically, the website is built on WordPress with a modern tech stack including Avada theme, various JavaScript libraries, and integrations with major analytics and marketing platforms. The site demonstrates good SEO and mobile optimization, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but explicit security and privacy policies are lacking. Overall, the business appears legitimate and professional with consistent WHOIS data and a clear market focus. Strategic recommendations include adding comprehensive privacy and terms of service pages, implementing a security.txt file, and enhancing incident response transparency to improve trust and compliance.

R

RADONOVA Slovakia s. r. o.

radonova.sk

40

RADONOVA Slovakia s. r. o. is a specialized company providing professional radon measurement services and accredited radon detectors in Slovakia, leveraging the expertise of its parent company Radonova Laboratories AB. The company targets residential customers, workplaces, municipalities, and property management companies, emphasizing health and safety through accurate radon detection. The website is well-designed, content-rich, and consistent with the company's business model and market positioning. Technically, the site uses WordPress with WooCommerce and integrates modern web technologies, hosted by Websupport with DNSSEC enabled and HTTPS enforced. Security posture is good but could be improved by adding explicit security policies and cookie consent mechanisms. The domain registration is consistent with the business launch, enhancing trustworthiness. Overall, the website presents a professional and credible digital presence for a new but specialized business.

B

Bluewinston.com

bluewinston.com

73

BlueWinston.com is a specialized technology company offering automated product advertising tools for Google and Microsoft Ads platforms. Their services focus on automating XML feed-driven product search and shopping ads, including Performance Max campaigns, dynamic search ads, and AI-powered optimization tools. The company targets e-commerce businesses and advertisers seeking to improve ad performance and efficiency. The website demonstrates a professional digital presence with integrations of multiple marketing and analytics tools, including Google Tag Manager, Hotjar, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response information are absent. The lack of WHOIS registration data raises some concerns about domain legitimacy, but the active business presence and social media links support credibility. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in privacy compliance and transparency.

E

Hlavná stránka - Energoland.sk

energoland.sk

45

Energoland.sk is a Slovak website focused on providing educational and entertaining content related to energy. The site appears to target a general audience interested in energy topics, leveraging interactive and engaging content to fulfill its mission. The business model is primarily content-driven, likely supported by advertising and informational services. The domain has been active since 2014, indicating a stable presence in its niche. Technically, the website is built on WordPress, utilizing popular plugins such as Yoast SEO and Booked for functionality. It integrates standard analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, reflecting a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, it lacks several important security headers and does not provide visible security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, but improvements in security best practices and privacy compliance are recommended. Overall, Energoland.sk presents a trustworthy and professional platform within its sector but would benefit from enhanced privacy disclosures, security policies, and contact transparency to improve user trust and compliance with regulations.

E

eBIZ Corp s.r.o.

ezakazky.sk

53

eZakazky.sk is a Slovak electronic public procurement platform operated by eBIZ Corp s.r.o., established in 2012. The platform facilitates electronic communication and auctions between public procurers and suppliers, targeting government entities and commercial suppliers. It holds a strong market position as a national tool for efficient public procurement processes. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and DataTables, with a custom ColdFusion backend. The site is moderately performant and mobile-optimized, with good SEO and accessibility basics. Security posture is adequate with HTTPS implied and no exposed sensitive data, but lacks explicit security headers and documented security policies. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism or vulnerability disclosure. Overall, the website is professional, trustworthy, and safe for general audiences.

P

PETROF, spol. s r.o.

petrofgallery.cz

45

PETROF Gallery is a cultural venue and showroom operated by PETROF, spol. s r.o., offering event spaces, a cafe, and a showroom primarily targeting visitors interested in music and cultural events. The website is professionally designed with consistent branding and provides comprehensive information about its services and event calendar. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and reCAPTCHA for security. The site demonstrates good privacy compliance with cookie consent mechanisms and GDPR-aligned privacy policies. Security posture is solid with HTTPS and anti-bot measures, though some improvements in security headers and library updates are recommended. The absence of WHOIS data is a concern for domain legitimacy verification but the website content and branding suggest a legitimate business presence. Overall, the site is well-maintained and trustworthy for its audience.

M

Magyar Mérnöki Kamara / Mérnökmagazin

mernokvagyok.hu

45

The website mernokvagyok.hu serves as the official portal for the Hungarian Engineering Chamber and its associated engineering magazine. It provides professional news, event information, and resources targeted at engineering professionals in Hungary. The site is positioned as a niche professional platform with a medium-sized audience, reflecting its founding in 2014 and consistent domain registration data. Technically, the site is built on WordPress using the Divi theme framework, incorporating modern JavaScript libraries and plugins for enhanced user experience such as event calendars and form handling. The site employs HTTPS with a good SSL configuration and integrates Google Analytics for visitor tracking, including opt-out capabilities. However, explicit privacy and terms of service pages are not detected, which impacts privacy compliance scores. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and well-branded, but could improve in privacy transparency and security best practices.

F

FBN Corporate

fbn-i.org

55

FBN Corporate is a global federation of member associations dedicated to supporting business families across 65 countries. Founded in 1989 and headquartered in Lausanne, it provides a platform for networking, learning, and sharing among 4,500 business families and 20,000 individual members. The organization emphasizes intergenerational learning and community building to guide family involvement in business and promote family business models in society. Technically, the website employs modern JavaScript libraries, responsive design, and security measures such as HTTPS and hCaptcha. Privacy compliance is robust with clear cookie consent and GDPR-aligned policies. Security posture is solid with encrypted connections and anti-bot protections, though some security headers could be improved. Overall, the site presents a professional, trustworthy presence with no signs of malicious activity or content safety concerns.

В

ВЕРЕН

veren.bg

56

The website veren.bg represents a Bulgarian Christian bookstore and publishing house offering a wide range of religious literature, stationery, gifts, and printing services. It operates an online shop with detailed product catalogs and additional services such as a copy center and room rental. The business targets Christian communities, families, and educational groups within Bulgaria. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses a combination of jQuery, Bootstrap, Owl Carousel, and other JavaScript libraries, hosted behind Cloudflare DNS and CDN services, ensuring reasonable performance and security. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though some outdated libraries and missing advanced security headers present moderate risks. Privacy compliance is strong, with GDPR-aligned policies and cookie consent implemented in Bulgarian. Overall, the domain and website appear legitimate and trustworthy, with no signs of malicious activity or content safety concerns.

R

Rainmaker Live

rainmakerlive.com.au

58

Rainmaker Live operates a professional web-based SaaS platform called Rainmaker MarketPro, which integrates financial market data, research, and editorial content to serve financial professionals and market analysts primarily in Australia. The platform is positioned as a niche market intelligence hub under the parent company Institutional Shareholder Services, reflecting a medium-sized business with a focus on media and financial data services. The website demonstrates consistent branding and a good level of content quality, targeting a specialized audience with subscription-based services. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and various data visualization and export libraries, indicating a mature digital infrastructure. However, mobile optimization and accessibility features are basic and could be improved to enhance user experience across devices. Security-wise, the site enforces HTTPS and uses hCaptcha for bot protection on login forms, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected, but the absence of incident response or vulnerability disclosure information suggests room for improvement in security transparency. Overall, the website is safe, professional, and trustworthy, with a moderate security posture and some gaps in privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, improving mobile and accessibility features, and providing clear incident response contacts to strengthen trust and compliance.

D

Digital CITY d.o.o.

digitalcity.ba

51

Digital CITY d.o.o. operates a professional e-commerce platform specializing in mobile phones, accessories, and related electronics primarily serving the Bosnia and Herzegovina market. The company offers a broad product range with over 10,000 items, targeting both retail consumers and wholesale clients. The website demonstrates a solid market position as a leading local retailer and wholesaler in its sector. Technically, the site employs modern front-end libraries and tracking tools, ensuring a responsive and user-friendly experience. Security measures include HTTPS, secure payment integration via Monri, and anti-spam reCAPTCHA, though some security headers and explicit policies are missing. Overall, the site is trustworthy and professionally maintained, with minor gaps in privacy compliance and security documentation.

K

Kvakomat

coinemic.com

73

Kvakomat is a newly established company (2024) operating cryptocurrency ATMs primarily in the Czech Republic, Slovakia, Hungary, and Poland. It offers services for buying and selling Bitcoin and other cryptocurrencies for cash, integrated with the KvaPay platform which provides digital wallets and blockchain payment solutions. The website is professionally designed, mobile-optimized, and provides clear user guidance and contact options. Technically, it employs modern JavaScript libraries and tracking tools, with HTTPS enforced and CSRF protection implemented. However, DNSSEC is not enabled and no explicit security or incident response policies are published. The domain registration is consistent with the business launch, registered via a reputable registrar with transfer protection enabled. Overall, the site demonstrates a solid digital presence with moderate to good security posture and compliance indicators.

B

BERNET COMMUNICATION GMBH

kliemt.blog

59

Kliemt.blog is a specialized German labor law blog operated by BERNET COMMUNICATION GMBH, providing comprehensive legal insights, articles, and podcasts focused on labor law topics such as compliance, restructuring, and ESG. The website targets legal professionals and business decision makers interested in labor law developments. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but should improve privacy and security practices.

M

Młodzieżowa Akademia Siatkówki

mlodziezowasiatkowka.pl

44

The website 'Młodzieżowa Akademia Siatkówki' serves as a comprehensive platform dedicated to youth volleyball training and education in Poland. It offers a wide range of resources including training programs, educational materials, event updates, and a directory of training bases and schools. The site targets youth players, coaches, and sports educators, positioning itself as a key national resource for volleyball development. Technically, the site employs a variety of modern web technologies such as jQuery, Google Maps API, Facebook SDK, and media players, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and includes reCAPTCHA for forms, but lacks some security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the site content and structure appear professional and legitimate. Overall, the site is a valuable educational resource with moderate security and privacy compliance, suitable for its audience.

E

Elvia

elvia.pl

66

Elvia is a Polish travel insurance provider specializing in online sales of travel, sport, ski, business, and work insurance products. The company positions itself as a leader in the travel insurance market in Poland, offering quick and easy insurance purchase options through its website. The site is professionally designed, mobile-optimized, and provides clear navigation and contact options, including phone support and social media presence. The parent company is Mondial Assistance, a recognized name in the insurance assistance sector. Technically, the website uses a modern JavaScript stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and reCAPTCHA to enhance user experience and security. The site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, no explicit security headers or incident response policies are publicly available, which could be improved to enhance security posture. WHOIS data is not publicly available, likely due to privacy protection, but the website content and trust signals indicate a legitimate and professional business. Overall, the site demonstrates a solid digital presence with moderate to good technical and security maturity.

M

Mondial Assistance

mondial-assistance.pl

64

Mondial Assistance Poland operates as a well-established provider of assistance and insurance services, focusing on travel, automotive, medical, home, and business assistance. The company emphasizes its nearly 60 years of experience in delivering specialized help to clients both domestically and internationally. The website is professionally designed, targeting individual and business customers seeking reliable assistance solutions. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and integrates Google services for analytics and security, reflecting a moderate to good digital maturity level. Security posture is generally sound with HTTPS enforced and reCAPTCHA implemented; however, the absence of security headers and explicit cookie consent mechanisms indicates room for improvement. The lack of WHOIS data limits domain trust verification, though the website content and branding suggest legitimacy. Overall, the site presents a professional and trustworthy front but should enhance transparency and security practices to strengthen compliance and user trust.

R

Retex

retex-kariera.cz

54

Retex is a manufacturing company specializing in the production and development of nonwoven textiles, operating a career-focused website targeting job seekers in the Czech Republic. The company positions itself as a major regional employer offering diverse job opportunities and employee benefits, emphasizing talent development and a positive work environment. The website is professionally designed using WordPress CMS with modern technologies such as Bootstrap, jQuery, and Gravity Forms, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and GDPR compliance evident through privacy policies and consent mechanisms in forms, though cookie consent is missing. Contact information is comprehensive, including emails, phone numbers, physical address, and social media presence on Facebook and LinkedIn. Overall, the site is trustworthy, well-maintained, and aligned with the company's business objectives.

P

Partners Investiční společnost

partnersis.cz

63

Partners Investiční společnost is a modern and innovative investment company based in the Czech Republic, offering a range of investment funds and financial services targeted at investors seeking professional asset management solutions. The website presents detailed fund information, including downloadable PDFs, and emphasizes accessibility with investment opportunities starting from low amounts without entry fees. The company positions itself as a trusted player in the Czech financial market with a focus on client-oriented services. Technically, the website employs a custom CMS with a technology stack including jQuery, Bootstrap, TinyMCE, and Google Maps API, ensuring a responsive and user-friendly experience across devices. The site is secured with HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. However, some outdated libraries and missing security headers suggest room for technical improvements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks visible advanced security headers and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and professional presentation support its legitimacy. No vulnerabilities or malicious content were detected. Overall, the website is well-designed and functional, with strong privacy compliance and a clear business focus. Strategic improvements in security headers, library updates, and domain registration transparency would enhance trust and security posture further.

S

Śląskie. Informacja Turystyczna Województwa Śląskiego

slaskie.travel

47

The website slaskie.travel serves as the official tourism information portal for the Silesian Voivodeship in Poland. It provides comprehensive information on regional attractions, cultural heritage, nature, events, accommodation, and gastronomy, targeting tourists and visitors interested in this region. The site is well-structured with multiple language options and accessibility features, indicating a mature digital presence. Technically, it employs modern web technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy or terms of service detected. Overall, the domain age and country alignment support the legitimacy of the site as a regional government-affiliated portal.

Wewillweb.it is a small, specialized technology service provider focused on creating high-quality WordPress websites, online shops, and providing SEO and UX audits along with brand identity and graphic design services. The company emphasizes partnership with clients and serves Polish and European markets. The website is built on WordPress using the Salient theme and WPBakery Page Builder, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, though some advanced security headers and privacy compliance features are missing. No blocking or WAF challenges were detected, allowing full content analysis. Overall, the site presents a professional and trustworthy image with client testimonials and portfolio references.

Z

Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku

krainagornejodry.travel

45

Kraina Górnej Odry is a regional tourism website focused on promoting the Upper Odra region in Poland, managed by the Zwiazek Gmin i Powiatow Subregionu Zachodniego Wojewodztwa Slaskeigo z siedziba w Rybniku. The site offers comprehensive information on thematic trails, cultural heritage, events, accommodation, gastronomy, and multimedia resources to attract tourists and visitors interested in the Silesian region. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages including Polish, English, German, and Czech. Technically, it uses a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar. The site is hosted by OVH SAS and uses HTTPS with domain status protections, though DNSSEC is not enabled.

S

Slaska Organizacja Turystyczna

beskidy.travel

48

The website beskidy.travel serves as a regional tourism portal for the Beskidy and Silesian Cieszyn regions in Poland, operated by the Slaska Organizacja Turystyczna. It provides comprehensive information on cultural heritage, tourist trails, events, accommodations, gastronomy, and multimedia content aimed at tourists and visitors interested in exploring the region. The business model focuses on regional tourism promotion and information dissemination, positioning itself as an important regional authority in hospitality and tourism sectors. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Google Tag Manager, and Hotjar, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of a visible privacy policy, though cookie consent is implemented. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

D

Domain Protection Services, Inc.

slaskcieszynski.travel

45

The website slaskcieszynski.travel serves as a regional tourism portal focused on the Beskidy and Śląsk Cieszyński areas in Poland. It provides comprehensive travel information including thematic and tourist routes, cultural heritage sites, events, accommodation, gastronomy, and multimedia content such as galleries and virtual tours. The platform targets tourists and travelers interested in exploring these regions, positioning itself as a key regional information provider with a small-scale business model. The domain is relatively new, registered in 2019, and uses privacy protection services typical for such websites. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile optimized with good accessibility and SEO practices. It uses the SonataCore CMS framework, indicating a structured content management approach. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options, which are recommended to enhance security posture. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is safe, professional, and trustworthy for general audiences interested in regional tourism. Strategic improvements include enabling DNSSEC, adding security headers, publishing comprehensive privacy and security policies, and enhancing incident response transparency to strengthen trust and compliance.

E

Endevel s.r.o.

escapemania.cz

45

Escapemania.cz is a well-established online platform founded in 2015, operated by Endevel s.r.o., that serves as the largest catalogue and ticketing service for escape rooms across Czechia and Slovakia. It offers users comprehensive listings, direct ticket purchases, universal vouchers, last-minute deals, and community features such as reviews and player diaries. The platform targets escape room enthusiasts ranging from beginners to experienced players, providing a user-friendly and multilingual experience. Technically, the website leverages modern web technologies including Django, Google Analytics, Smartlook, and Google Maps API, ensuring a responsive and moderately performant user experience. Security-wise, the site uses HTTPS and CSRF protections but lacks some advanced security headers and does not publish explicit security or incident response policies. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy, though GDPR compliance could be improved. Overall, the website demonstrates a solid business credibility and technical foundation with room for enhanced security and privacy transparency.

A

Adeon CZ

inventor3dblog.cz

43

Inventor 3D blog is a specialized Czech-language website focused on providing comprehensive content related to Autodesk CAD and CAM software, including Inventor and Fusion 360. The site offers tutorials, news, tips, and training services, targeting engineering professionals and CAD/CAM users. It maintains a consistent brand presence with social media integration and an e-commerce partner for related products. Technically, the site is built on WordPress with a modern plugin stack supporting SEO, user management, and content delivery. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and formal privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content and social presence support its legitimacy. Overall, the site is professional, content-rich, and serves a niche market effectively.

G

GALEOS a. s.

galeos.eu

51

GALEOS a. s. operates as a distributor of Progress Software technologies in the Czech Republic and Slovakia, providing software distribution, support, and professional services to application partners and direct customers. The company positions itself as a key technology intermediary for enterprise application development and integration, leveraging Progress Software's products such as OpenEdge and DataRPM. The website is professionally designed, multilingual, and includes modern web technologies and analytics tools, indicating a mature digital presence. However, explicit contact information and privacy policy details are limited in the accessible content. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved with additional security headers and clearer privacy compliance documentation. Overall, the domain appears legitimate and consistent with the business claims, though WHOIS data is privacy-protected as per EURid policies.

E

evzdelavani.cz

edukomforta.cz

51

Edukofmorta.cz is an established Czech educational platform founded in 2018, offering a broad range of in-person and online courses, professional exams, and subsequent training aimed at practical application of knowledge. The platform targets individuals and professionals seeking certification and skill development in sectors such as IT, finance, insurance, real estate, and construction. The business model revolves around e-commerce of educational services with a focus on verified instructors and comprehensive course offerings. Technically, the website is built on WordPress using WPBakery Page Builder and integrates modern JavaScript libraries and analytics tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is hosted likely by Active24, consistent with the domain registrar information. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though additional HTTP security headers could enhance protection. Privacy and cookie policies are present and GDPR compliance is indicated, but cookie consent mechanisms could be improved. Overall, the site demonstrates good professionalism, trustworthiness, and technical maturity with no blocking or WAF interference detected.

P

Polyweb.cz s.r.o.

dobre-nemovitosti.cz

45

Dobré-nemovitosti.cz is a well-established Czech real estate portal founded in 2006 and operated by Polyweb.cz s.r.o. The platform offers a comprehensive listing of over 4,600 properties for sale and rent, targeting individuals and businesses interested in the Czech real estate market. The website features categorized search filters, developer project promotions, and relevant real estate articles, positioning itself as a key player in the local real estate online marketplace. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Select2, and Google services for fonts, analytics, and advertising. The hosting and domain registration are consistent with the business claims, using WEDOS as registrar and nameservers. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and published privacy or terms of service pages, which are areas for improvement. Overall, the website is professional, user-friendly, and trustworthy, though it could enhance compliance and security transparency.

B

B3 Technology, s.r.o.

realitymat.cz

42

Realitymat.cz is a Czech Republic-based real estate platform operated by B3 Technology, s.r.o., providing property listings for sales, rentals, and auctions. The platform targets real estate buyers, renters, and agencies within the Czech market, offering a user-friendly search interface and relevant blog content to support user engagement. The website demonstrates a professional design and consistent branding, positioning itself as a reputable regional real estate marketplace. Technically, the site leverages modern web technologies including jQuery, Bootstrap, Select2, and the Yii PHP framework. It integrates Google Analytics and Adsense for analytics and advertising, alongside a consent management platform for GDPR compliance. The site is mobile-optimized with moderate performance and basic accessibility features. However, explicit privacy and cookie policies are not detected in the provided content, indicating room for improvement in compliance transparency. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, but lacks visible security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data suggests domain privacy protection, which aligns with the business type. Overall, the security posture is moderate but could benefit from enhanced header policies and clearer privacy disclosures. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact channels for security incidents to improve trust and compliance.

S

Sense Coco s.r.o.

sensecoco.com

59

Sense Coco s.r.o. is a Czech Republic based small retail business specializing in 100% organic, vegan, and bio-certified coconut products. The company operates an e-commerce platform offering a range of coconut-based food items emphasizing fair trade and ecological sustainability. The website is professionally designed with good content quality and clear navigation, targeting health-conscious consumers interested in organic and vegan products. Technically, the site uses a modern tech stack including jQuery, Bootstrap 4, and Google APIs, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks DNSSEC and security headers, and no explicit privacy policy was found, indicating room for compliance improvement. Overall, the domain registration is consistent with the business claims, and the site maintains a good level of trust and credibility.

P

PBM INFOTECH PRIVATE LIMITED

pbminfotech.support

47

PBM INFOTECH PRIVATE LIMITED operates a customer support platform accessible via https://pbminfotech.support/. The website serves as a support ticket system using the osTicket software, enabling customers to open new tickets, check ticket status, and access a knowledgebase. The company appears to be a small technology business based in India, founded in 2022, focusing on providing support services to its customers. The site branding is consistent with the company name and domain registration details, indicating a legitimate business presence. Technically, the website employs a modern JavaScript stack including jQuery, jQuery UI, Bootstrap Typeahead, Redactor editor, and Select2 for UI enhancements. The platform is hosted by BigRock Solutions Ltd, a known registrar and hosting provider. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but functional. The site lacks advanced security headers and DNSSEC, which are recommended for improved security posture. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicitly provided), and the domain is protected against unauthorized transfers. However, the absence of DNSSEC and security headers reduces the overall security score. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Contact information is limited to a support ticket form, with no direct emails or phone numbers visible, which may impact user trust and accessibility. Overall, the website is functional and professional for its intended purpose but would benefit from enhanced security measures, privacy compliance documentation, and more transparent contact information to improve trust and compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and providing direct contact channels for better user support and regulatory adherence.

A

ACTIVE 24, s.r.o.

domeny.sk

69

ACTIVE 24, s.r.o. is a Slovak-based technology company specializing in domain registration and related web services. The website offers a comprehensive portfolio of over 380 domain extensions, including popular country-code and generic TLDs. Their business model focuses on providing domain registration, DNS management, web hosting, email services, and security features such as DNSSEC. The company targets individuals and businesses primarily in Slovakia and Central Europe, positioning itself as a reliable and established regional provider with transparent pricing and customer support.

Státní veterinární ústav Jihlava is a modern veterinary laboratory based in the Czech Republic, providing comprehensive laboratory diagnostics and advisory services in animal health, food safety, feed, and water. The institution holds important accreditations and serves a diverse audience including veterinary professionals, agricultural enterprises, food producers, and government bodies. The website reflects a medium-sized government-related entity with a professional online presence, including an e-shop, customer portal, and conference center rental services. Technically, the site employs a modern technology stack with libraries such as jQuery, Bootstrap, and Google APIs, ensuring good mobile optimization and user experience. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism, though explicit security headers and incident response contacts are absent. Overall, the site is trustworthy and compliant with GDPR, but the lack of WHOIS transparency and some missing security policies suggest areas for improvement.

S

Sporticus

sporticus.cz

58

Sporticus.cz is a Czech Republic-based specialized retail e-commerce website focusing on outdoor and cross-country skiing equipment. The company operates both online and a physical store in Prague, offering a wide range of products including skis, boots, poles, waxing equipment, functional clothing, GPS devices, and accessories for orienteering. The website targets sports enthusiasts, particularly those interested in skiing and outdoor activities, and provides expert advice and discounts for registered customers and sports clubs. Technically, the site uses modern JavaScript libraries such as jQuery, Select2, and Slick Carousel, along with lazy loading for images, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Security-wise, the site enforces HTTPS and uses deferred script loading but lacks visible security headers like CSP or X-Frame-Options, which could improve its security posture. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable, which reduces trust in domain legitimacy, but the website content and contact information appear consistent with a legitimate small retail business. Overall, the site presents a good user experience with clear navigation and professional design but could improve privacy compliance and security headers.

The website oauth.eskot.cz serves as an OAuth authentication portal for the Datového centra chovatelů (Data Center of Breeders), operated by Plemdat s.r.o. It provides login and registration functionality primarily for users associated with the breeding data ecosystem, with integration to partner sites such as igenetika.cz. The business operates in a niche sector, focusing on secure user authentication services within the Czech Republic. The site is small-scale and specialized, with a straightforward business model centered on OAuth authorization services. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI enhancement libraries. The site is mobile responsive and uses HTTPS, but lacks visible advanced security headers and privacy policies. The technical implementation is functional but basic, with room for improvement in security and privacy compliance. Performance is moderate, and accessibility features are minimal but present. From a security perspective, the site uses secure form submission and input validation but does not expose advanced security headers or policies. The absence of privacy and cookie policies, combined with missing WHOIS data, reduces transparency and trustworthiness. No WAF or blocking mechanisms were detected, and the site appears accessible and safe. The domain WHOIS data is unavailable, likely due to privacy protection, which is somewhat justified given the service type but still reduces trust. Overall, the website is moderately trustworthy and functional for its intended purpose but would benefit from enhanced security practices, transparent privacy policies, and improved WHOIS data availability to increase user confidence and compliance with data protection regulations.

P

Porsche Česká republika s.r.o.

volkswagenprestavby.cz

52

The website volkswagenprestavby.cz is a specialized portal operated by Porsche Česká republika s.r.o., focusing on modifications and conversions of Volkswagen commercial vehicles in the Czech Republic. It serves as an information hub for customers and end-users, providing detailed catalogs, news updates, technical information, and contact forms for inquiries. The site is well-branded with Volkswagen commercial vehicle identity and maintains a consistent professional presence with social media integration. Technically, the site uses AngularJS, Bootstrap, and jQuery, with analytics managed via Google Tag Manager and Tealium. While the site is functional and mobile-optimized, some security best practices such as security headers and updated frameworks could be improved. Privacy and cookie policies are present with consent mechanisms, but no explicit security or incident response policies are found. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy operation.

Ö

Österreichischer Wasser- und Abfallwirtschaftsverband

oewav.at

44

ÖWAV (Österreichischer Wasser- und Abfallwirtschaftsverband) is a well-established Austrian association focused on water and waste management. The organization provides a variety of services including educational courses, seminars, publications, and networking opportunities for professionals in the sector. The website is professionally designed, content-rich, and primarily targets stakeholders in Austria's water and waste management industries. Technically, the site is built on an ASP.NET framework with modern frontend libraries like Bootstrap and jQuery, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit incident response documentation. Overall, the domain registration data aligns well with the organization's identity, supporting its legitimacy. No suspicious or malicious content was detected, and the site maintains GDPR compliance with a comprehensive privacy policy.

E

eSports.cz, s.r.o.

streetfloorball.cz

41

Streetfloorball.cz is a Czech sports event website operated by eSports.cz, s.r.o., focused on promoting the KFC Street Floorball League. The site provides tournament schedules, registration, news articles, galleries, and partner information, targeting floorball players and fans primarily in the Czech Republic. It maintains a consistent brand presence aligned with the Czech Floorball Association and key sponsors such as KFC. Technically, the site uses modern JavaScript libraries and responsive design, ensuring good user experience across devices. However, it lacks explicit privacy and cookie policies and does not provide direct contact information on the homepage. Security posture is moderate with HTTPS usage and no exposed sensitive data but missing security headers and incident response details. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

M

Muzeum Hlučínska

muzeum-hlucinska.cz

59

Muzeum Hlučínska is a regional museum based in the Czech Republic focused on cultural exhibitions and educational programs related to the Hlučínsko region. The website presents a professional and content-rich platform showcasing permanent and temporary exhibitions, educational offerings for schools, and virtual tours. The institution targets a broad audience including local visitors, students, researchers, and tourists. Technically, the website employs modern JavaScript libraries and fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's professional presentation and partner affiliations support its legitimacy.

R

Runto

windson.eu

45

Windson.eu is a specialized e-commerce website focused on the manufacture, distribution, and sale of darts and related accessories, targeting both professional and amateur darts players. The business operates primarily in the retail sector, offering a range of products including steel and soft dart sets, shafts, flights, tips, and electronic targets. The website is built on a modern WordPress platform utilizing WooCommerce for e-commerce functionality and Elementor for page design, supported by plugins such as Rank Math SEO and Site Kit by Google for analytics and SEO optimization. Hosting is provided by INTERNET CZ, a.s., a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses security-related scripts such as reCAPTCHA and password strength meters, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no visible security or incident response policy, which suggests room for improvement in security maturity. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms implemented, which could pose regulatory risks especially under GDPR. Overall, the website presents a professional and trustworthy front for its niche market, with good technical implementation and SEO practices. The absence of critical security issues and malicious content supports a moderate security score. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and establishing clear incident response and vulnerability disclosure channels to improve compliance and trust.

T

Turistické informační centrum Hlučín

ic-hlucin.cz

47

The website www.ic-hlucin.cz serves as the official online presence of the Turistické informační centrum Hlučín, a local government-affiliated tourism information center in the Czech Republic. It provides visitors with historical, cultural, and tourist information about Hlučín and the surrounding region, including an event calendar and an e-shop for local products. The site targets tourists and local visitors interested in exploring the area. Technically, the site employs a modern JavaScript stack including jQuery, FullCalendar, and Mapy.cz API for interactive maps, along with Google Analytics for visitor tracking. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no critical vulnerabilities detected, but security headers are not explicitly observed. WHOIS data is unavailable, limiting domain legitimacy verification, though the site content and external links suggest a legitimate local government entity. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.