Security Directory

C

Cofidis España S.A.

cofidis-business-solutions.es

67

Cofidis España S.A. operates the website Cofidis Business Solutions, providing consumer financing solutions tailored for retail, e-commerce, and automotive sectors in Spain. The company leverages its 35 years of experience to offer innovative financial products that help businesses increase sales and provide flexible payment options to their customers. The website is professionally designed, mobile-optimized, and includes rich content such as testimonials, partner logos, and detailed service descriptions, positioning Cofidis as a trusted financial partner in its market segment. Technically, the site uses Drupal 9 CMS combined with WordPress plugins and modern JavaScript libraries, ensuring a robust and interactive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. However, WHOIS data is inaccessible due to registry restrictions, limiting domain trust analysis. Overall, the site reflects a mature digital presence with good business credibility and technical implementation.

E

EGOMOTION s.r.o.

cyklotoulky.cz

43

Cyklotoulky.cz is a specialized media platform operated by EGOMOTION s.r.o., focusing on cycling tourism in the Czech Republic and Slovakia. The website offers detailed cycling route guides, accommodation options, and media content including articles and videos, targeting cycling enthusiasts and tourists. The site is well-branded and maintains partnerships with recognized companies and media outlets, enhancing its market position in the regional cycling tourism sector. Technically, the website is built on Drupal 7 with modern front-end frameworks like Bootstrap and uses Google Analytics with privacy-conscious settings. While the site is mobile-optimized and offers a good user experience, it lacks visible privacy and cookie policies, which impacts compliance. Security-wise, HTTPS is enforced, but security headers are missing, and no WHOIS data is available, which reduces domain transparency and trust. Overall, the site is professional and trustworthy but would benefit from improved privacy disclosures and enhanced security headers.

G

GN-Galénův nadační fond

brezovylistek.cz

38

The website www.brezovylistek.cz represents a Czech non-profit community initiative focused on recognizing and supporting work with children and youth through various activities such as meetings, games, camps, and skill clubs. It is operated by GN-Galénův nadační fond, a foundation based in Třebíč, Czech Republic. The site serves as an informational and community hub, providing resources, rules, and a platform for engagement within the youth work community. The business model is centered on community support, distribution of badges and materials, and fostering connections among youth workers and volunteers. Technically, the website is built on WordPress using the Tempera theme, incorporating common JavaScript libraries such as jQuery and plugins like Nivo Slider and AddToAny for social sharing. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, ensuring secure communication, but lacks advanced security headers and privacy compliance mechanisms. From a security perspective, the site shows a basic security posture with HTTPS enabled but missing important security headers and privacy policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable concern, reducing the overall trustworthiness of the domain registration and requiring further investigation. Overall, the website is functional, content-rich, and serves its community purpose well but would benefit from enhanced security practices, privacy compliance, and transparency regarding domain registration to improve trust and professional credibility.

O

Outward Bound Czech Republic, pobočka PŠL

outwardbound.cz

46

Outward Bound Czech Republic, pobočka PŠL, is a well-established non-profit educational organization founded in 1999, offering outdoor adventure expeditions and school programs aimed at youth and young adults. The organization is part of the international Outward Bound network, focusing on personal development through authentic nature experiences. Their website reflects a professional and consistent brand image, with comprehensive content targeting schools, parents, and young participants. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics and Facebook Pixel for tracking, and Mailchimp for newsletter management. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and complete, enhancing business credibility. Overall, the site is trustworthy, safe, and professionally maintained.

R

Rada dětí a mládeže hlavního města Prahy

rdmp.cz

40

Rada dětí a mládeže hlavního města Prahy is a Czech non-profit umbrella organization representing approximately 70 member organizations and over 25,000 individual members focused on children and youth activities in Prague. The website provides information about their mission, events, educational workshops, equipment and meeting room rentals, and volunteer opportunities. The organization is well-established since 2011 and maintains a clear regional presence. Technically, the website is built on WordPress using the Virtue theme and common libraries like jQuery and Bootstrap, hosted likely by WEDOS. It integrates Google Analytics for visitor tracking but lacks comprehensive privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and incident response disclosures. Overall, the site is professional, content-rich, and trustworthy but could improve privacy compliance and security best practices.

Prázdninová škola Lipnice is a Czech non-profit organization specializing in experiential pedagogy with a history dating back to 1977. The organization offers a variety of courses for the public, closed groups, and professionals, focusing on personal development, courage, resilience, and responsibility. The website is professionally designed using WordPress and integrates modern SEO and analytics tools, reflecting a mature digital presence. However, explicit privacy and cookie policies are not found, which is a compliance gap. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and incident response contacts. Overall, the site is trustworthy and well-positioned in its niche but could improve compliance and security transparency.

The website represents the Rada dětí a mládeže Středočeského kraje, a regional non-profit organization focused on youth activities and education within the Central Bohemian Region of the Czech Republic. It serves as an information hub for youth-related events, competitions, and educational programs, supported by regional government and the Ministry of Education. The site targets children, youth organizations, and stakeholders interested in youth development in the region. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, Google Fonts, Facebook SDK, and Google reCAPTCHA. The site is mobile-optimized with a moderate performance profile and good SEO practices. However, it lacks some modern security headers and formal privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and includes CSRF tokens and reCAPTCHA for form security. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit privacy and cookie policies and security headers are notable gaps. The site is not blocked by any WAF or security challenge, allowing full content access. Overall, the website is trustworthy and professional for its non-profit purpose but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

H

HELUKABEL

helukabel-thailand.com

47

HELUKABEL Thailand operates a comprehensive industrial cable supply and service website targeting sectors such as energy, transportation, and manufacturing. The company offers a wide range of cables including data, power, control, and specialized cables with international approvals, serving a global market. The website supports customer engagement through product catalogs, user registration with OTP verification, and order tracking features. Technically, the site uses modern front-end technologies including Bootstrap, jQuery, and Slick Carousel, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is moderate with HTTPS usage but lacks visible security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and detailed website content suggests a functioning business. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professionally designed and mobile optimized but requires improvements in security and privacy transparency.

M

mission‹one› GmbH

mission-one.de

66

mission‹one› GmbH is a German digital agency specializing in email marketing, software engineering, and loyalty solutions. The company operates as part of the port-neo Group and serves business clients seeking to enhance customer dialog and marketing effectiveness. Their market position is supported by a professional website showcasing a broad portfolio of services and notable client partnerships. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent mechanisms aligned with GDPR. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response information are lacking. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility.

T

Total Board Shop

totalboardshop.cz

56

Total Board Shop is a well-established retail business specializing in skateboarding and snowboarding equipment, streetwear, and custom textile printing services. Founded in 1994, it operates both a physical store in Prague and an online e-commerce platform. The company targets enthusiasts of skate and snow culture, offering a curated product range and supporting local talent. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript libraries and GDPR-compliant cookie management. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response details. Overall, the site is professional, user-friendly, and trustworthy, with good SEO and social media integration.

M

Mikroregion Roketnice

roketnice.cz

50

Mikroregion Roketnice operates as a local government association representing eight municipalities in the Czech Republic, providing official information, documentation, and promoting regional tourism and cultural activities. The website serves residents, local officials, and visitors with relevant content and contact details. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and accessible user experience, with a cookie consent mechanism indicating GDPR compliance awareness. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment, though the website content and structure suggest legitimacy as a government entity. Overall, the site is professional, accessible, and functional but would benefit from enhanced security practices and clearer domain registration transparency.

M

Město Slavkov u Brna

slavkovak.cz

46

Slavkovak.cz is a local leisure and tourism portal operated by the city of Slavkov u Brna, Czech Republic. It provides residents and visitors with news, event listings, information on local associations, gastronomy, accommodation, and tourist destinations. The site serves as an official community resource with a focus on promoting local culture and tourism. The business model is informational and community-driven, supported by the city administration. The website is well-branded and consistent, targeting a general audience interested in local events and tourism. Technically, the site uses a modern tech stack including UIkit for UI components, jQuery, Google Tag Manager, Google Analytics, Facebook SDK, and mapping APIs from Mapy.cz and Leaflet. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. The presence of cookie consent and GDPR documentation indicates awareness of privacy compliance, though privacy policy details are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit vulnerability disclosure or incident response policies. No WHOIS data was found, which raises concerns about domain registration legitimacy, though the site content and footer indicate official city operation. Overall, the site is trustworthy but would benefit from improved transparency and security hardening. The risk assessment is moderate with recommendations to improve security headers, add terms of service and security policies, and verify domain registration status to enhance trust and compliance.

M

Mateřská škola Jiříkovice

msjirikovice.cz

46

Mateřská škola Jiříkovice operates as a local preschool educational institution in the Czech Republic, providing early childhood education and related services such as childcare and school meals. The website serves primarily parents and guardians seeking information about the school, its operations, and events. The institution is positioned as a small, community-focused educational provider with a clear local presence and official contact details. Technically, the website is built on a CMS platform by Galileo Corporation, utilizing common web technologies like jQuery, Bootstrap, and Leaflet for maps. The site is mobile-optimized and accessible, with an accessibility certification indicating compliance with inclusive design standards. Security posture is moderate, with HTTPS in use and cookie consent implemented, but lacking explicit privacy policies and security headers. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security best practices are recommended.

ZŠ Jiříkovice is a small local primary school located in Jiříkovice, Czech Republic, providing education for the first stage of primary schooling. The institution offers additional services such as a school daycare, canteen, and extracurricular activities, targeting primarily parents and students in the local community. The website reflects a well-maintained digital presence with regular updates on school news and events, supporting effective communication with its audience. Technically, the site is built on WordPress with common libraries like jQuery and FontAwesome, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and privacy mechanisms are recommended. Overall, the site demonstrates a trustworthy and professional online representation of the school, with clear contact information and compliance with GDPR through a dedicated page. Strategic enhancements in privacy consent and security policies would further strengthen its compliance and user trust.

T

TVVU s.r.o.

povodnovyportal.cz

46

TVVU s.r.o. operates the Povodňový portál, a specialized website dedicated to flood management solutions in the Czech Republic. The company provides digital flood plans, flood warning systems, monitoring services, and mobile flood barriers, targeting government agencies and emergency services. The website reflects a niche market position with strong partnerships with Czech hydrometeorological and water management institutions. Technically, the site uses a basic but modern tech stack including Google Analytics and Bootstrap-like CSS classes, hosted via WEDOS. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with no visible security headers and no incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

K

KTS Ekologie s.r.o.

kts-ekologie.cz

47

KTS Ekologie s.r.o. is a Czech company specializing in ecological waste management services, including waste collection, disposal, and compost sales. The company primarily serves municipalities, businesses, and citizens within the Czech Republic, positioning itself as a regional service provider with a focus on environmental sustainability. The website reflects a professional and consistent brand image, with clear contact information and integration of social media for community engagement. The presence of EU-funded projects further supports the company's legitimacy and public sector involvement. Technically, the website is built on Drupal 10 with Bootstrap 5, ensuring a responsive and modern user experience. The site loads with moderate performance and includes accessibility and SEO best practices, although some improvements could be made in accessibility and performance optimization. The hosting provider is inferred to be Webglobe based on DNS data, aligning with the domain registration information. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, there is a lack of visible security headers and no published security or incident response policies, which are areas for improvement. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent mechanism and vulnerability disclosure reduces compliance completeness. Overall, the security posture is moderate but could be enhanced with additional policies and technical controls. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing cookie consent, publishing security policies, adding security headers, and conducting regular security audits to strengthen the security posture and compliance. These steps will enhance trust and protect both the company and its users.

P

PayIDPokies

payid-pokies.net

69

PayIDPokies operates as an affiliate and informational platform specializing in Australian online casinos that accept PayID as a payment method. The website provides detailed casino reviews, payment guides, and affiliate links to gambling sites, targeting Australian players interested in fast and secure PayID transactions. The business model relies on affiliate revenue generated from referrals to casino platforms. Technically, the site is built on WordPress with common web technologies such as jQuery and LiteSpeed caching, offering a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and SSL encryption but lacks advanced security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The WHOIS data is not publicly available, indicating privacy protection, which is common in this industry but reduces transparency. Overall, the site presents a moderate risk profile with good content quality and business credibility but could improve in privacy compliance and security best practices.

Z

Zwan

myzwan.com

53

The website represents Zwan, a company specializing in the manufacturing and distribution of ambient meat products including luncheon meat, cocktails, hotdogs, and vegetarian options. The site is professionally designed using WordPress and the Divi theme, featuring structured data and a cookie consent mechanism. The business targets consumers and business customers interested in premium quality meat products and recipes. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and Google reCAPTCHA for form security. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled and form protections, but lacks security headers and explicit privacy policies. Overall, the site is functional and business-focused but would benefit from improved transparency and security practices.

Y

Home -

yuton.rs

47

The website www.yuton.rs represents a Serbian-based food product distributor operating under the Gaston Grupa umbrella. The company offers a variety of food products including tuna, seafood, fruits, vegetables, olives, oils, vinegars, pasta, rice, and specialty items. The site targets retail and wholesale buyers in Serbia and neighboring regions, positioning itself as a regional distributor within a larger group of related brands. The business is relatively new, with domain registration in early 2023, consistent with the company's recent establishment. From a technical perspective, the website uses several JavaScript libraries including multiple versions of jQuery, jQuery UI, and plugins for UI enhancements such as sliders and lightboxes. The site is moderately optimized for performance and mobile use but shows room for improvement in accessibility and SEO. The CMS or hosting provider is not explicitly identified. The website is accessible without any WAF or security challenges. Security posture is moderate; HTTPS is enabled but no DNSSEC or security headers are present. Multiple jQuery versions loaded may introduce vulnerabilities. No privacy or security policies are published, though a cookie consent banner is implemented, indicating some GDPR awareness. Contact information is clearly provided, enhancing business credibility. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security policies. Strategic improvements in security headers, privacy documentation, and script management are recommended to enhance trust and compliance.

K

Klub svobodných matek z.s

klubsvobodnychmatek.cz

38

Klub svobodných matek z.s is a Czech non-profit organization dedicated to supporting single-parent families across the Czech Republic. The organization provides financial, material, legal, and informational assistance to help single parents and their children manage daily challenges. Their services include aid for food, housing costs, school supplies, summer camps, and clothing through their Oděvní banka program. They also offer a free helpline and legal online advice. The website reflects a well-established entity with a clear mission and consistent branding, supported by testimonials and active social media channels. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. The hosting and domain registration are consistent with a Czech-based non-profit organization, with no suspicious indicators. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable compliance gap. Tracking is implemented via Leadhub pixels, indicating moderate user tracking. Overall, the website is professional and trustworthy for its intended audience but should enhance privacy compliance and security best practices to improve its security posture and regulatory adherence.

Městský společenský dům v Kolíně operates as a local cultural center in Kolín, Czech Republic, offering concerts, balls, exhibitions, and venue rental services. The website targets local community members and visitors interested in cultural events, positioning itself as a key venue for social and cultural gatherings. The business model centers on event hosting and space rental, serving a small-sized organization with a focus on hospitality and cultural activities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript with MooTools and jQuery libraries, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and provides a cookie consent mechanism, indicating some level of privacy awareness. However, no CMS or advanced frameworks are detected, and performance is moderate. From a security perspective, the site lacks visible security headers and a published privacy policy, which are areas for improvement. The WHOIS data is missing, reducing transparency and trustworthiness. No blocking or WAF mechanisms are detected, and no critical vulnerabilities are apparent from the provided data. The cookie consent banner and clear contact information are positive security and compliance indicators. Overall, the website is functional and serves its business purpose well but would benefit from enhanced security practices, privacy policy publication, and improved WHOIS transparency to increase trust and compliance.

D

Dokobit

dokobit.com

76

Dokobit is a technology company specializing in electronic document signing services within the European Union, leveraging compliance with eIDAS and GDPR regulations. The company offers a SaaS platform with API solutions for signing, identification, and sealing, targeting businesses and individuals requiring legally binding electronic signatures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive compliance documentation. Technically, Dokobit utilizes modern analytics and marketing tools integrated with a robust consent management framework, hosted on AWS infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and certifications such as ISO 27001 and QTSP status, although DNSSEC is not enabled and no public security.txt was found. Overall, Dokobit presents a trustworthy and professional service with a solid market position in the EU e-signature space.

C

Cofidis SA

cofidis.fr

74

Cofidis is a well-established French financial services company specializing in online consumer credit, personal loans, credit refinancing, and credit insurance. With over 35 years of experience and a strong market presence in France, Cofidis offers a comprehensive range of financing solutions tailored to individual customer needs. The website reflects a mature digital infrastructure with modern technologies, responsive design, and extensive content that supports user engagement and trust. The integration of third-party review platforms like Trustpilot and visible certifications further enhance credibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in France and does not detract from the site's legitimacy. Overall, Cofidis demonstrates a strong business and digital maturity with good compliance to privacy regulations and user experience standards.

C

Cofidis

cofidis.be

63

Cofidis Belgium operates as a financial services provider specializing in consumer credit and loan products, targeting French and Dutch speaking customers in Belgium. The website is bilingual and designed to guide users to their preferred language section. The business appears to be an established player in the Belgian consumer credit market, offering personal loans and financial solutions. The website infrastructure relies on HTTPS and uses a CDN for resource delivery, with JavaScript libraries such as jQuery for interactivity. However, the site lacks visible privacy and cookie policies and does not provide direct contact information on the landing page, which may impact user trust and compliance perception. Security posture is moderate with HTTPS enabled but missing visible security headers and incident response contacts. WHOIS data is restricted, showing privacy protection, which is common for financial entities but limits transparency. Overall, the site is functional and professional but could improve in privacy compliance and user trust signals.

S

Sector s.r.o.

vibe.sk

43

Vibe.sk is a Slovak music and entertainment website operated by Sector s.r.o., focusing on providing music news, music videos, and artist profiles primarily for Slovak and international audiences. The site offers categorized music content by genre and style, targeting general music enthusiasts. It maintains a moderate market position as a regional media portal with consistent branding and regular content updates. Technically, the site uses a mix of JavaScript libraries including jQuery, Google Analytics, Google Adsense, and Video.js for media playback, with a custom or sector.sk-based CMS platform. The website is served over HTTPS and includes cookie consent mechanisms compliant with GDPR, but lacks visible security headers and explicit security or incident response policies. No contact emails or phone numbers are publicly listed, which may impact user trust and support accessibility. Overall, the site is functional with good content quality and moderate technical implementation, but could improve security posture and compliance transparency.

T

TJ LOKOMOTIVA TRUTNOV, z.s.

lokotrutnov.cz

9

TJ Lokomotiva Trutnov is a well-established Czech non-profit sports association founded in 2001, offering a wide range of sports sections and community events primarily in Trutnov. The website serves as an information hub for sports activities, events, and organizational details targeting local sports enthusiasts, children, and seniors. The organization maintains a consistent brand presence and provides clear contact information, supporting its credibility and community engagement. Technically, the site is built on Joomla CMS with Bootstrap and T3 framework, ensuring responsive design and moderate performance. Integration with Google Analytics and Facebook SDK indicates moderate user tracking and marketing efforts. Security posture is moderate with some best practices like CSRF tokens but lacks visible security headers and cookie consent mechanisms. Privacy policy is present but basic and lacks explicit GDPR compliance indicators. WHOIS data confirms domain legitimacy and long-term operation consistent with the organization's history.

Město Trutnov is the official municipal government website for the city of Trutnov in the Czech Republic. It serves as a comprehensive portal for residents and visitors, providing access to city news, public services, event calendars, contact information, and administrative resources. The website targets local citizens and stakeholders seeking information about city governance, social services, and community events. The business model is that of a government service portal, focusing on transparency and public engagement. Technically, the website is built on the Public4u CMS platform and utilizes common web technologies such as jQuery and Google Tag Manager. It is served over HTTPS, ensuring secure communication. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and SEO optimization. External integrations include social media platforms and partner domains related to local government and services. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, no advanced security headers were detected, and there is no explicit security policy or incident response contact information published. The absence of WHOIS data for the domain is a notable gap in transparency, although the website content and official branding support its legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose as a municipal information portal. Strategic improvements in security header implementation, enhanced privacy disclosures, and domain registration transparency would further strengthen its security posture and user trust.

2

2exVia

masteredit.com

39

2exVia is a well-established French digital communication and marketing agency with over 25 years of experience. They offer a broad range of services including custom web and app development, video production, brand identity, and social media management. Their proprietary CMS, MasterEdit®, powers over 250 websites, demonstrating technical maturity and a strong market presence. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Matomo analytics and lazy loading for performance. Security posture is good with HTTPS and cookie consent implemented, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the overall trustworthiness given the professional content and social media presence. Overall, the site represents a credible and competent digital agency with a solid technical foundation.

O

Organization for Security and Co-operation in Europe

osce.org

62

The Organization for Security and Co-operation in Europe (OSCE) is a prominent intergovernmental organization dedicated to security, cooperation, and human rights across Europe and neighboring regions. The website reflects a mature digital presence with comprehensive multilingual content, clear navigation, and professional design, targeting governments, policymakers, and civil society. Technically, the site is built on Drupal CMS, leveraging modern web technologies and analytics tools such as Google Analytics and New Relic, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policy and incident response information could be improved. Overall, the site demonstrates high trustworthiness and business credibility, with no signs of malicious activity or content safety concerns.

Z

Zväz vojakov Slovenskej republiky

zvazvojakov.sk

46

Zväz vojakov Slovenskej republiky is a Slovak non-profit organization representing military veterans. The website serves as an information hub for members and the public, providing updates on events, legal advice, and cooperation with other military and veteran organizations. The site is built on WordPress using Elementor and JetEngine, reflecting a moderate level of digital maturity with good content quality and navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the website is legitimate and trustworthy, with room for improvement in privacy compliance and security best practices.

M

Múzeum SNP

muzeumsnp.sk

61

Múzeum SNP is a Slovak government-affiliated museum dedicated to preserving and presenting the history of the Slovak National Uprising from 1938 to 1945. It offers exhibitions, educational programs, archival collections, and public events, positioning itself as a key cultural and historical institution in Slovakia. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting the general public, researchers, and students. Technically, the site is built on WordPress with modern plugins and frameworks, including WPBakery, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, serving its educational and cultural mission effectively.

L

Letecké Opravovne Trenčín, a.s.

lotn.sk

59

Letecké Opravovne Trenčín, a.s. is a traditional Slovak company specializing in aircraft repair and manufacturing, uniquely positioned in its sector within Slovakia. The website serves as the official corporate portal, providing information about the company's services and heritage. The site is built on WordPress using the Astra theme, enhanced with SEO tools like Yoast and tracking via Google Analytics and Tag Manager. The technical infrastructure is modern and supports mobile responsiveness, though some performance optimizations could be considered. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site reflects a professional business presence but would benefit from enhanced transparency and security documentation.

H

HOREZZA, a.s.

granithotels.sk

44

HOREZZA, a.s. operates the Granit Hotels brand, managing multiple hotel properties in Slovakia, providing accommodation and booking services primarily targeting general consumers and travelers. The website presents a professional and consistent brand image with clear navigation and booking functionality. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, hosted on a CMS platform by SoftSolutions. Mobile optimization and user experience are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

SysCom, operated by Aglo Solutions s.r.o., is a Slovak technology company specializing in a proprietary content management system and application framework designed for rapid development of websites, intranet solutions, and online shops. The company targets businesses and developers seeking efficient web and application development platforms, boasting over 10 years of experience and a portfolio including government and corporate clients. The website presents a professional and consistent brand image with clear contact information and client references, positioning SysCom as a credible player in the regional technology sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and various UI plugins, running on the SysCom CMS platform. The site is mobile-optimized with good navigation and design quality, though performance is moderate. Google Analytics is used for visitor tracking, but no visible cookie consent or privacy policies are present, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, supporting legitimacy. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance, security header implementation, and formal policies to improve its security posture and regulatory adherence.

E

EUROMOTOR

euromotor.sk

61

EUROMOTOR is an authorized vehicle sales and service company based in Banská Bystrica, Slovakia. The company offers comprehensive services including vehicle sales, financing, insurance, and servicing, targeting general consumers in the local transportation sector. The website is professionally designed using WordPress CMS with modern plugins and tracking tools, indicating a moderate level of digital maturity. The presence of cookie consent via Cookiebot demonstrates some privacy awareness, although explicit privacy and terms of service policies are missing. Security posture is adequate with HTTPS and some best practices, but lacks detailed security policies and vulnerability disclosures. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

A

Automagazin.sk - Novinky, testy, recenzie

automagazin.sk

65

Automagazin.sk is a leading Slovak automotive media website offering news, vehicle tests, reviews, motorsport coverage, and travel advice. It targets Slovak-speaking automotive enthusiasts and maintains a strong market position as the most read motorist magazine in Slovakia. The business model relies on advertising and subscription services, supported by partnerships with related domains. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and Adsense, and it demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR consent. Overall, the site is professional, trustworthy, and content-rich, with no blocking or WAF interference detected.

A

Allianz - Slovenská poisťovňa, a.s.

allianzsp.sk

68

Allianz - Slovenská poisťovňa, a.s. operates a professional insurance website targeting private individuals and entrepreneurs in Slovakia. The company offers a broad range of insurance products including property, car (including electric and older vehicles), travel, life, and business insurance. The website reflects a strong market position as part of the global Allianz Group, with consistent branding and clear service offerings. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is trustworthy, well-structured, and provides a good user experience with moderate performance and good mobile optimization.

T

TIPOS, národná lotériová spoločnosť, a. s.

tipos.sk

56

TIPOS, národná lotériová spoločnosť, a. s., is the national lottery company of Slovakia, offering a broad range of gambling services including lotteries, sports betting, scratchcards, and online casino games. The company holds a dominant market position as the official national operator, targeting Slovak residents interested in regulated gambling entertainment. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools, with good performance and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates high business credibility with clear contact information, official certifications, and government affiliations.

V

Vědavýzkum.cz

vedavyzkum.cz

58

Vědavýzkum.cz is a well-established Czech online portal dedicated to providing independent and comprehensive information about science and research. The platform serves a diverse audience including researchers, academics, students, and the general public interested in scientific developments. It offers a wide range of content such as news articles, interviews, analyses, opinions, grant information, event calendars, podcasts, and job listings, positioning itself as a key information hub in the Czech scientific community. The portal maintains strong partnerships with reputable Czech scientific institutions, enhancing its credibility and reach. Technically, the website is built on the Joomla CMS platform, utilizing modern frontend technologies such as jQuery, Awesomplete, Owl Carousel, and the Gantry 5 framework. It employs Google Analytics for traffic analysis and implements GDPR-compliant cookie consent mechanisms. The site is hosted by REG-ZONER, a Czech hosting provider, and uses HTTPS with good SSL configuration, ensuring secure communications. The design is professional, mobile-optimized, and offers good navigation and SEO practices. From a security perspective, the portal demonstrates good practices including HTTPS enforcement and cookie consent management. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. The absence of a dedicated security policy or incident response contact suggests room for enhancement in security transparency. Overall, Vědavýzkum.cz presents a trustworthy, professional, and content-rich platform with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and user trust.

S

Sex18babes.com - XXX Video Free

sex18babes.com

57

Sex18babes.com is an adult entertainment website established in 2018, offering free pornographic video streaming and downloads. The site targets adult audiences with a wide range of explicit content categories and leverages affiliate marketing and advertising for monetization. Technically, it runs on the DataLife Engine CMS with jQuery and SVG icons, hosted behind Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact options are limited to a feedback form. The site is accessible without WAF or security challenges, but security posture is weak due to missing HTTPS enforcement and security headers.

I

Italian Trade Agency

machinesitalia.org

69

Machines Italia is a well-established B2B platform operated by the Italian Trade Agency, focused on connecting North American manufacturers with Italian machinery suppliers and associations. The website offers comprehensive sector information, events, educational programs, and B2B services, positioning itself as a key resource in the manufacturing and automation industry. The platform targets manufacturers, academic institutions, and public/private organizations interested in Italian technological innovations. Technically, the site is built on Drupal 10 with modern frameworks and libraries, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC could be improved. Privacy compliance is evident with GDPR-aligned cookie policies and privacy statements. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

S

SafetyGloves by HexArmor

safetygloves.com

67

SafetyGloves by HexArmor operates a professional e-commerce platform specializing in personal protective equipment including gloves, eyewear, helmets, hearing protection, arm and body protection, and footwear. The company positions itself as a leader in safety products for individuals and businesses, leveraging the HexArmor brand. The website is built on the Shopify platform using a modern Turbo theme, integrating multiple marketing and analytics tools such as Klaviyo, Hotjar, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced, domain status locks, and no exposed sensitive data, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is trustworthy, professional, and well-structured, serving a general audience seeking safety equipment.

H

HUisHU. Digitale Kreativagentur GmbH

huishu-agentur.de

48

HUisHU. Digitale Kreativagentur GmbH is a German digital creative agency with offices in Hannover and Hamburg. The company specializes in digital development, campaigns, and communication aimed at fostering growth for individuals, brands, and medium-sized enterprises. Their key services include brand building, social media campaigns, content creation, websites, and applications. The agency holds multiple industry certifications and awards, positioning itself as a reputable player in the media and creative sector within Germany. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Matomo Analytics, Google Tag Manager, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting appears to be managed via kasserver.com, consistent with the domain's nameservers. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious indicators were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, indicating GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and digital maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture.

C

Crédit Agricole

credit-agricole.fr

74

Crédit Agricole is a major French banking and insurance group offering a wide range of retail financial services including bank accounts, insurance, savings, investments, and credit products. The website targets individual customers ('particulier') and provides comprehensive information and digital services including secure login, contact options, and assistance chatbots. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, jQuery, Bootstrap, and third-party chat and privacy management tools. Security posture is strong with HTTPS, session management, CAPTCHA on forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable from AFNIC, but the website's branding, content quality, and official social media presence strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for its enterprise-scale banking business.

V

VIP Studio 360

vip-studio360.fr

45

VIP Studio 360 is a French-based small business specializing in virtual tours, 360° imaging, and virtual reality solutions aimed at enhancing online presence and customer engagement. The company targets sectors such as education, industry, institutions, tourism, and training, providing immersive digital experiences to boost conversions and visibility. The website is professionally designed using WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google Ads. Cookie consent is managed via Tarteaucitron, reflecting some level of privacy compliance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit privacy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but reduces transparency. Overall, the site is functional, professional, and business-focused with moderate technical maturity and security awareness.

C

Communauté d'Agglomération Sophia Antipolis

tourisme-prealpesdazur.fr

53

The website www.villagesvalleesdazur-tourisme.fr serves as a regional tourism portal managed by the Communauté d'Agglomération Sophia Antipolis, focusing on promoting the Villages Vallées d'Azur area in France. It provides visitors with information about local villages, events, guided tours, and outdoor activities, targeting tourists and families interested in cultural and natural experiences. The site positions itself as a key regional information source, supported by official regional branding and social media presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Matomo analytics with privacy-respecting configurations, and a comprehensive cookie consent mechanism via Tarteaucitron.js. The infrastructure is hosted within the regional network, ensuring moderate performance and good mobile optimization. Accessibility and SEO are adequately addressed, though there is room for improvement in SEO depth. From a security perspective, the site enforces HTTPS and provides a granular cookie consent panel, respecting GDPR requirements. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were identified in the analyzed content. The WHOIS data aligns well with the website's regional and governmental nature, supporting legitimacy and trustworthiness. Overall, the website demonstrates a solid digital presence with good privacy compliance and a safe content environment. The lack of explicit contact information and security policies suggests areas for enhancement to improve user trust and operational security. Strategic recommendations include implementing security headers, publishing incident response information, and enriching SEO and accessibility features.

A

AvalonKing

avalonking.com

69

AvalonKing is a specialized e-commerce business focused on providing high-quality automotive ceramic coating products directly to consumers. Established in 2017, the company has positioned itself as a leading provider of DIY ceramic coating kits with a strong reputation supported by thousands of positive customer reviews. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive product information. The business targets automotive enthusiasts and vehicle owners seeking durable and effective car protection solutions. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a robust digital presence and good performance. Security posture is strong with HTTPS enforced, domain registration consistent and stable, and privacy compliance evident through detailed policies and consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online store.

V

Viessmann s.r.o.

viessmann-partner.sk

55

Viessmann s.r.o. is a well-established company specializing in heating and climate solutions, operating a partner portal targeted at business partners and installers. The website reflects a professional B2B platform with consistent branding and a clear business focus on energy and climate technologies. The technical infrastructure is based on ASP.NET WebForms with modern frontend frameworks like Foundation and jQuery, supplemented by Usercentrics for cookie consent and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and secure form handling, though explicit security headers and policies are not evident in the provided data. Privacy compliance is strong, with clear links to privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Silverstripe Limited

silverstripe.org

66

Silverstripe Limited operates the Silverstripe CMS, an open-source content management system and framework designed for developers, marketers, authors, and IT managers. The company positions itself as a provider of flexible, extensible, and secure CMS solutions with enterprise-level support and a strong global community. Their website reflects a mature digital presence with comprehensive content, active community engagement, and regular updates on security and software releases. Technically, the site leverages modern web technologies including SilverStripe CMS, Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security practices include HTTPS enforcement and published security advisories, although explicit security headers and incident response contacts are not evident. Overall, the website is professional, trustworthy, and well-structured, supporting Silverstripe's market position as a reliable open-source CMS provider.

C

CRMT d.o.o.

crmt.si

43

CRMT d.o.o. is a well-established Slovenian technology company specializing in data-driven business transformation, controlling modernization, corporate performance management, and regulatory reporting solutions. With over 20 years of experience, CRMT serves business clients seeking to leverage advanced data management and analytics technologies to improve operational efficiency and compliance. The company maintains strong partnerships with leading technology providers such as Exasol, Qlik, and Wolters Kluwer, reinforcing its market position as a trusted consulting and solutions provider. Technically, the website is built on a modern WordPress CMS platform with common optimization and analytics tools including Google Tag Manager and Cookiebot for consent management. The site demonstrates good mobile optimization, clear navigation, and professional design, supporting a positive user experience. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, CRMT's website reflects a mature, professional business with a solid digital presence and good security posture. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.