Security Directory

The website www.jidlopodnos.cz is an online food ordering and delivery platform primarily serving the Czech Republic. It offers services such as food delivery with added benefits like cashback and promo codes, targeting consumers in over 30 cities. The site is professionally designed with a modern tech stack including Bootstrap, jQuery, Leaflet maps, and Lottie animations, indicating a mature digital infrastructure. Tracking and marketing tools such as Google Analytics and Facebook Pixel are integrated with a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy and terms of service pages, along with missing WHOIS registration data, slightly diminishes the overall trust and compliance posture. Security practices include HTTPS enforcement and muted console logs in production, but lack explicit security headers. Overall, the site is functional, user-friendly, and safe for general audiences, but would benefit from enhanced transparency and security hardening.

R

Restaurace Arbes - Formanka

restauracearbes.cz

43

The website restauracearbes.cz presents a local hospitality business focused on renting restaurant space in Česká Lípa, Czech Republic. It offers detailed information about the property, including size, facilities, and contact phone numbers. The site also promotes an associated Indian restaurant. Technically, the website uses modern frontend technologies such as Bootstrap 5, jQuery, and slick carousel, providing a responsive and visually appealing user experience. However, it lacks advanced SEO and accessibility features and does not include privacy or cookie policies. Security posture is weak due to missing HTTPS verification and absence of security headers or policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and informative but requires improvements in security, compliance, and trust signals.

A

Applepie

applepie.nl

62

Applepie is a well-established full-service digital agency based in the Netherlands, specializing in branding, digital marketing, campaign content, and web development services primarily for small and medium-sized enterprises (SMEs). The company positions itself as a growth partner with over 20 years of experience and a strong client portfolio exceeding 200 organizations. Their service offerings are comprehensive, covering branding and positioning, digital marketing and data analytics, campaign and content creation, and web development technologies. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Bing Ads, LinkedIn Insight Tag, and Leadinfo for analytics and marketing purposes. The site is built on a proprietary CMS (ApplepieCMS) and demonstrates good mobile optimization and SEO practices. Performance is moderate, with asynchronous loading of scripts to enhance speed. However, explicit security headers are not visibly implemented, though HTTPS is enforced, indicating a good SSL configuration. From a security standpoint, the website follows best practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. Certifications like Google Partner and Meta Certified, along with industry awards, enhance trustworthiness. However, the absence of a published security policy, incident response contacts, or a vulnerability disclosure mechanism suggests room for improvement in security transparency and readiness. Overall, Applepie presents a low-risk profile with a strong business credibility and digital maturity. Strategic recommendations include implementing explicit security headers, publishing a security policy and incident response information, and adding a security.txt file to facilitate vulnerability reporting. These steps would further strengthen their security posture and compliance stance.

W

WMD d.o.o.

wmd-webprostor.com

47

WMD d.o.o. is a Croatian technology company specializing in web hosting, domain registration, and related web services. The company positions itself as a provider of super fast support available 24/7/365, targeting web developers and businesses seeking reliable hosting and domain solutions. Their market presence includes over 10,000 users across 73 countries, emphasizing experience and customer service. The website content is professional and well-structured, reflecting a mature business model focused on service quality and customer satisfaction. Technically, the website leverages modern web technologies including jQuery, Bootstrap, FontAwesome Pro, and Craft CMS with Formie forms. It integrates Plausible Analytics for privacy-focused tracking and Crisp Live Chat for customer support. The site is mobile optimized and performs well, with HTTPS enforced and CSRF protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for security enhancements. Security posture is moderate with good practices like HTTPS and domain transfer protection, but lacks published security policies or incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms, which could pose regulatory risks especially under GDPR. The domain WHOIS data is consistent and supports the legitimacy of the business. Overall, WMD d.o.o. presents a credible and professional web presence with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

W

WMD HOSTING

wmd.hr

53

WMD HOSTING is a Croatian-based web hosting and domain registration provider offering a range of services including web development, SEO marketing, SSL certificates, and internet marketing. The company targets businesses and individuals seeking comprehensive web solutions, positioning itself as a regional player with promotional offers such as 'Hosting AKCIJA 1+1'. The website demonstrates a good level of digital maturity with modern technologies like Craft CMS, Bootstrap, jQuery, and integration of analytics and chat services. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, although some security headers and explicit privacy policies are missing. Overall, the site is professional and trustworthy but could improve compliance transparency and contact accessibility.

H

Hosting i Domene AKCIJA 1+1

wmd.hosting

45

WMD Hosting operates as a regional web hosting and domain registration provider based in Croatia, offering a comprehensive suite of web services including domain registration, hosting packages, SSL certificates, and web development. The company targets web developers and businesses of various sizes, positioning itself with promotional offers such as the 'AKCIJA 1+1' campaign. Their market presence is supported by over 20 years of experience and a user base exceeding 10,000 clients across 73 countries. The website is professionally designed with multilingual support and integrates modern web technologies and accessibility features.

J

Johnson & Johnson MedTech

sp-institute.com

71

Johnson & Johnson MedTech operates a professional medical technology portal targeting healthcare professionals in the EMEA region. The website provides product information, complaint handling, and medical information request services, positioning itself as a trusted resource within the healthcare industry. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie compliance, reflecting a mature digital presence. Security measures such as HTTPS and Google reCAPTCHA are implemented, though additional security headers could enhance protection. The absence of WHOIS data for the subdomain is typical and does not detract from the site's legitimacy given its corporate branding and domain structure. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, supporting its role as a professional healthcare information platform.

B

Baytree Interactive Ltd

jackpotcity.com

62

Jackpot City is a well-established online casino platform operated by Baytree Interactive Ltd, registered in Guernsey. The website offers a comprehensive range of casino games including slots, blackjack, roulette, and video poker, targeting both novice and experienced players globally. It emphasizes convenience, mobile compatibility, and a rewarding user experience through bonuses and loyalty programs. The platform is certified by reputable bodies such as eCOGRA and regulated by the Kahnawake Gaming Commission, enhancing its credibility in the online gambling market. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cloudflare for hosting and performance optimization. The website is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, likely due to privacy protection, which is common in the gambling industry but slightly reduces transparency. Overall, Jackpot City presents a professional, trustworthy, and user-friendly online casino experience with room for improvement in security disclosures and direct contact information.

A

Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej)

evangelische-jugend.de

52

The Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej) operates as a national umbrella organization for Protestant youth work in Germany. Their website serves as a comprehensive portal offering resources, advocacy information, funding guidance, and project details targeted at children, youth, and professionals in youth work. The organization maintains a strong presence with clear contact channels, social media engagement, and a newsletter subscription service. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery and FontAwesome, supported by Matomo analytics for privacy-conscious tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure.

C

CEC Praha a.s.

starcasinoteplice.cz

9

Star Casino Teplice operates as a modern casino located in Teplice, Czech Republic, offering a variety of live casino games including American Roulette, Black Jack, and Poker, alongside Video Lottery Terminals (VLT) from multiple providers. The business targets adult customers seeking gambling entertainment with additional food and beverage services enhancing the experience. The website is professionally designed with clear navigation and mobile optimization, reflecting a medium-sized hospitality business with a local/regional market focus. Technically, the site uses modern JavaScript libraries and Google services, with HTTPS enforced and a GDPR-compliant cookie consent mechanism. However, the absence of a privacy policy page and security headers indicates room for improvement in compliance and security posture. The WHOIS data is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the consistent business information and active social media presence. Overall, the site is functional, trustworthy, and suitable for its target audience but would benefit from enhanced security and compliance documentation.

C

CEC Praha a.s.

starcasinoplzen.cz

10

Star Casino Plzeň operates as a local casino in Plzeň, Czech Republic, offering live casino games and a variety of VLT machines with jackpots and bonuses. The business is part of the larger Star Casino Group managed by CEC Praha a.s., a registered company in Prague. The website targets adult customers with clear age verification and legal disclaimers about gambling risks. Technically, the site uses modern JavaScript libraries and fonts, with a responsive design and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable, likely due to privacy protection, which is common in the gambling industry. Overall, the site presents a professional and trustworthy front for its business operations.

NECHTENASBYT.CZ is a Slovak online magazine providing content focused on home renovation, finance, energy, business, and lifestyle topics. The website is built on WordPress and features a variety of blog posts authored primarily by 'Magazín Admin' and other contributors. The site targets Slovak-speaking homeowners, investors, and professionals interested in practical advice and industry insights. Technically, the site uses standard WordPress technologies including jQuery and FontAwesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small media sites. Overall, the site is functional, content-rich, and moderately trustworthy but would benefit from enhanced privacy compliance and security best practices.

I

Internetpositionering i Sverige AB

casinoexpo.se

53

CasinoExpo.se is a well-established Swedish online casino comparison and informational website operated by Internetpositionering i Sverige AB since 2017. It provides comprehensive listings, reviews, and bonus offers for Swedish-licensed online casinos, targeting adult Swedish players. The site maintains a strong market position as one of Sweden's largest casino guides, emphasizing responsible gambling and compliance with Swedish regulations. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics, hosted via Loopia AB. It is mobile-optimized and SEO-friendly, with good content quality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are absent. Overall, the site is trustworthy, compliant with GDPR, and provides valuable business and user information.

R

RecyBag

recybag.ch

48

RecyBag is a Swiss-based company focused on environmental sustainability, offering recycling bags and related products to consumers interested in contributing to a better future. The website presents a professional design with consistent branding and a clear focus on its niche market. The technical infrastructure relies on standard web technologies including jQuery and custom CSS, with no detected use of major CMS platforms or third-party analytics. Security posture is basic, with no evident security headers or policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is functional and accessible but would benefit from enhanced security and compliance measures.

L

LMS.at

lms.at

63

LMS.at is an Austrian educational platform focused on providing a comprehensive learning management system tailored to teachers, students, and parents. It supports individualized teaching, GDPR-compliant communication, course and document organization, and offers free learning aids for students. The platform integrates with Austria's Bildungsportal and Office365 for authentication, indicating a strong alignment with national education infrastructure. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, LMS.at uses OpenACS as its CMS framework, enhanced with jQuery and Foundation CSS for frontend responsiveness. The platform employs standard security practices such as CSRF tokens and double-click prevention on forms but lacks visible HTTP security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. Performance is moderate with room for improvement in SEO and accessibility. Security posture is adequate but could be enhanced by implementing security headers (CSP, HSTS), publishing explicit security policies, and establishing vulnerability disclosure processes. No blocking or WAF mechanisms were detected, and the WHOIS data aligns well with the website's Austrian educational focus, supporting legitimacy. Overall, LMS.at presents a trustworthy and functional educational platform with good business credibility and content quality. Strategic improvements in privacy compliance and security practices would further strengthen its position and user trust.

C

Cortusa Group s.r.o.

cortusa.cz

53

Cortusa Group s.r.o. is a small regional real estate developer based in the Czech Republic, specializing in residential housing projects near Plzeň. The company emphasizes affordable, modern, and energy-efficient homes with a focus on customer satisfaction and proximity to nature. Their website reflects a professional approach with clear contact information, project showcases, and financing options. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and CookieScript for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for small businesses. Overall, the website is safe, compliant with GDPR, and presents a trustworthy business front.

E

eSports.cz, s.r.o.

tenisovysvet.cz

45

Tenisový svět is a Czech-language media portal focused on comprehensive tennis news, rankings, tournaments, and live streams. It serves tennis fans primarily in the Czech Republic but covers international tennis events as well. The site is professionally designed and maintained by eSports.cz, s.r.o., a media company with a solid presence in the Czech sports media market. The business model relies on advertising revenue, supported by Google Adsense and partnerships with companies like OK System. The website offers rich content including daily news, player rankings, tournament schedules, and live match coverage, targeting tennis enthusiasts and sports followers.

П

ПРОФИ КРЕДИТ НМК

proficredit.mk

51

Proficredit.mk is a North Macedonia-based financial services company specializing in fast consumer loans ranging from 3,000 to 120,000 Macedonian denars. The company offers flexible loan terms, minimal documentation requirements, and online application and signing options. The website positions Proficredit as a trustworthy and customer-focused lender with multiple physical offices and a strong local presence. The business targets individuals seeking quick credit solutions with a straightforward application process and rapid approval. The site includes customer testimonials and regulatory registrations, enhancing credibility. Technically, the website is built on WordPress 6.0.11 using Bootstrap and jQuery frameworks, with SEO optimization via Yoast and GDPR compliance through a dedicated cookie consent plugin. Hosting is provided by MKHOST-REG, a local Macedonian hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Analytics and marketing tools include Google Analytics, Google Tag Manager, and Facebook Ads retargeting. From a security perspective, the site enforces HTTPS and implements GDPR cookie consent mechanisms. However, explicit HTTP security headers are not detected, and no dedicated security or incident response policies are published. The site does not expose sensitive data and uses secure forms for data collection. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, proficredit.mk presents a professional and trustworthy online presence for a mid-sized financial services provider in North Macedonia. The site is content-rich, user-friendly, and compliant with privacy regulations, though security posture could be enhanced by adding security headers and incident response information.

H

Hrvatska poštanska banka d.d.

hpb.hr

63

Hrvatska poštanska banka d.d. (HPB) is the largest Croatian-owned bank, offering a comprehensive range of financial services including retail and business banking, credit products, investment services, and digital banking solutions. The website reflects a mature and professional banking institution with a strong market position in Croatia. The bank emphasizes customer convenience with over 1500 cash withdrawal points and advanced mobile and internet banking platforms. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap 5, Swiper.js, and Flatpickr, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are clearly presented with consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with the bank's business objectives.

DALTEN media s.r.o. operates the website realitnibalicek.cz, offering a comprehensive package of services tailored for real estate agencies, brokers, and developers in the Czech Republic. Their offerings include a popular real estate portal RealityMIX.cz, real estate software iRest.cz, and various web presentation services for properties, agencies, and brokers. The company leverages over 20 years of experience and maintains a strong market presence with partnerships across multiple related domains. Technically, the website employs modern JavaScript libraries, Google Fonts, and a cookie consent management system, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

D

DALTEN media s.r.o.

rmixmls.cz

54

RMIX MLS is a Czech Republic-based B2B platform designed to serve real estate agents by providing a comprehensive Multiple Listing Service (MLS) ecosystem. The platform enables agents to share property listings, including public and non-public offers, and facilitates collaboration to accelerate property sales and rentals. The business is operated by DALTEN media s.r.o., a company with over 20 years of experience in real estate software development, positioning RMIX MLS as a credible and established player in the Czech real estate market. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience of real estate professionals. Technically, the website employs modern JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing purposes. It uses HTTPS with good SSL configuration and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the site lacks explicit security headers and a dedicated security policy page, which are areas for improvement. The contact information is clearly presented, including phone, email, physical address, and a contact form, enhancing business credibility. From a security perspective, the site demonstrates good practices such as encrypted connections and consent-based tracking, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business information, showing consistent registration details and domain age appropriate for the company's founding year. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, RMIX MLS presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic enhancements in security headers and incident response disclosures would further strengthen its security posture and trustworthiness.

The website webnem.cz is operated by DALTEN media s.r.o. and offers specialized web presentation services for real estate properties, enabling clients to create dedicated websites for individual properties with marketing and SEO benefits. The business targets real estate professionals and property sellers primarily in the Czech Republic, leveraging over 20 years of experience and partnerships with multiple real estate platforms. Technically, the site uses modern JavaScript libraries including jQuery and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and consent-based cookie management, though some security headers are missing. Privacy compliance is evident through GDPR consent mechanisms and a linked privacy policy hosted on a partner site. Contact information is comprehensive and prominently displayed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

DALTEN media s.r.o. operates the Web Makléře platform, providing real estate agents in the Czech Republic with customizable personal websites integrated with their RealityMIX.cz profiles. The service offers fast setup, professional templates, and hosting, targeting real estate professionals seeking to enhance their online presence. The company leverages over 20 years of experience in real estate software development and maintains partnerships with major real estate portals, positioning itself as a trusted provider in the local market. Technically, the website uses modern JavaScript libraries, Google Fonts, and cookie consent management, with responsive design and moderate performance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though security headers could be improved. Privacy compliance is good, linking to a GDPR-compliant privacy policy on a partner domain. Contact information is clear and comprehensive. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

B

Bundesnetzagentur

elektronische-vertrauensdienste.de

57

The Bundesnetzagentur's Elektronische Vertrauensdienste website serves as an authoritative platform providing comprehensive information on electronic trust services in Germany. It targets a broad audience including government authorities, consumers, and businesses, offering detailed guidance on services such as digital signatures, seals, timestamps, and validation. The site reflects the Bundesnetzagentur's role as a regulatory body ensuring trust and security in digital communications. Technically, the website is built on the Government Site Builder CMS and utilizes modern web technologies including jQuery and Bootstrap. It demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be considered. The hosting and DNS infrastructure are consistent with a government entity, enhancing trust. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response procedures. The absence of a cookie consent mechanism is a minor compliance gap given GDPR requirements. Overall, the website is professional, trustworthy, and well-aligned with its governmental mandate. Strategic enhancements in security transparency and privacy compliance would further strengthen its posture and user trust.

E

EP Energy Trading

epet.sk

51

EP Energy Trading operates as a medium-sized energy supplier focused on providing electricity and gas services primarily in Slovakia and the Czech Republic. The company is part of the larger EPH energy group, which lends it stability and market credibility. Their website emphasizes reliable energy delivery, customer satisfaction, and ease of switching suppliers, targeting both residential and business customers. The digital presence is professional and well-structured, supporting their business goals effectively. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience. The site is mobile-friendly and includes SEO best practices such as meta tags and structured data. However, some improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site uses HTTPS and implements bot protection via reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through the presence of a privacy policy and cookie consent mechanism, though terms of service and incident response information are absent. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a trustworthy and professional front for EP Energy Trading, with moderate technical sophistication and good security hygiene. Strategic enhancements in security policies and accessibility could further strengthen their posture.

Q

Registrácia domén, hosting a servery :: WebSupport.sk

qawa.sk

37

The domain qawa.sk is newly registered and currently hosts a placeholder page provided by WebSupport.sk, a Slovak domain registration and hosting provider. The page indicates no active content is uploaded yet and provides guidance for domain owners to upload content. The business behind the domain is not explicitly identified, and the page serves primarily as a parked domain placeholder. The technical infrastructure is basic, relying on HTML, CSS, and jQuery, hosted by WebSupport.sk with DNSSEC enabled, indicating a secure DNS configuration. However, no HTTPS enforcement or advanced security headers are evident in the provided data. The security posture is minimal but not alarming given the lack of active content. Privacy and cookie policies are absent, and no contact or business information is presented on the site, limiting trust and compliance indicators. Overall, the domain appears legitimate but inactive, with a low content and security maturity level.

G

Grünbeck AG

gruenbeck.de

66

Grünbeck AG is a well-established German company specializing in water treatment solutions for over 75 years, serving both private households and industrial clients. The company holds a leading market position in the energy sector focused on water quality and hygiene. Their website reflects a mature digital presence with comprehensive product offerings, including water softening, filtration, disinfection, and related services. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google services for analytics and tag management with GDPR-compliant consent mechanisms. Security measures include HTTPS enforcement and Google reCaptcha for form protection. The domain registration data aligns well with the company's history and legitimacy, showing no suspicious patterns. Overall, Grünbeck demonstrates a strong security posture, good privacy compliance, and professional business credibility.

B

Bäder Dunkelmann

baederdunkelmann.de

46

Bäder Dunkelmann is a well-established bathroom renovation and planning company serving Hamburg, Norderstedt, and surrounding areas. With over 55 years of experience, they offer comprehensive bathroom solutions including planning, renovation, and full project management with a focus on stress-free, dust-free implementation and fixed pricing. Their market position is that of a trusted regional specialist with a large showroom and a strong customer base. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for mobile and SEO. Security posture is good with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with a clear privacy and cookie policy and GDPR consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its target audience.

M

Mateřská škola Světýlko s.r.o.

svetylko.com

62

Mateřská škola Světýlko s.r.o. is a private kindergarten based in Třebíč, Czech Republic, founded in 2011. The institution focuses on providing quality preschool education with an emphasis on cooperation with families, individual approach to children, and fostering a friendly atmosphere. The website serves as an information portal for parents and prospective clients, offering details about the school, enrollment procedures, events, and contact information. The business operates locally with a clear target audience of families seeking early childhood education services.

S

Sappex Aluminium s.r.o.

sappex-aluminium.cz

9

Sappex Aluminium s.r.o. is a Czech manufacturer and supplier specializing in high-quality aluminum windows, doors, sliding systems, facades, and fire protection systems. With over 10 years of tradition, the company offers comprehensive services including price calculation, precise measurement, professional installation, and after-sales service. Their market position is strong within the Czech Republic, targeting residential and commercial construction sectors. The website reflects a professional digital presence with clear navigation, good content quality, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and SEO best practices, though no CMS or hosting provider is explicitly identified. Security posture is good with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact details appear legitimate and consistent with a small manufacturing business.

H

Harvest

getharvest.com

11

Harvest is a well-established SaaS company specializing in time tracking and invoicing software, serving over 70,000 businesses globally. Their platform offers comprehensive features including time tracking, reporting, invoicing, and team scheduling through Harvest Forecast. The website demonstrates a mature digital infrastructure leveraging HubSpot CMS, Google Analytics, and other modern marketing and analytics tools, ensuring a professional and user-friendly experience across desktop and mobile platforms. Security practices are robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and market presence. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further build trust.

L

Lightning Source LLC

ingramspark.com

64

IngramSpark, operated by Lightning Source LLC under the Ingram Content Group umbrella, is a leading online self-publishing platform offering print-on-demand, ebook publishing, global distribution, and book marketing services. The company targets authors and independent publishers seeking professional quality and wide reach. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it leverages HubSpot CMS, Bootstrap, and multiple marketing and analytics tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable publicly, slightly reducing transparency but not detracting significantly from overall legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure info, and providing direct contact channels for security and support.

S

Skybound Game Studios, Inc.

invinciblevs.com

10

Invincible VS is a newly launched video game project by Skybound Game Studios, Inc., focusing on a brutal 3v3 tag fighting game set in the Invincible universe. The website serves as a promotional and community engagement platform, offering detailed character profiles, game highlights, and closed alpha registration. The business targets gamers and fans of the Invincible franchise, positioning itself within the niche superhero fighting game market. Technically, the site is built on WordPress with modern plugins and integrates Cloudflare DNS and Google Tag Manager for performance and analytics. Security posture is solid with HTTPS, CAPTCHA on forms, and an age gate for mature content, although some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and mature-content appropriate, with a domain registration consistent with the business timeline.

S

SONNTAG GROUP

sonntag.group

60

SONNTAG GROUP is a well-established German professional services group with over 45 years of experience, specializing in finance, tax, legal advisory, family office management, IT compliance, and auditing. The group operates multiple specialized subsidiaries and serves a broad business clientele including high net worth families and enterprises. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site uses modern frontend frameworks and libraries such as Bootstrap, jQuery, and Video.js, ensuring a responsive and visually appealing user experience. However, some technical aspects like security headers and cookie consent mechanisms are missing, which could be improved to enhance security and compliance. The WHOIS data is unavailable or privacy protected, which is common for professional firms in Germany due to GDPR, but limits transparency. Overall, the site is secure, professional, and trustworthy with room for improvement in security best practices and privacy disclosures.

L

Land Vorarlberg

vorarlberg.at

20

Land Vorarlberg operates an official regional government website serving the Austrian state of Vorarlberg. The site provides public information, services, and resources to citizens and visitors. It holds a strong market position as the authoritative source for regional government content and services. The website leverages a mature technical infrastructure based on Liferay Portal CMS, enhanced with modern JavaScript frameworks such as React and Metal.js, and employs self-hosted Matomo analytics for privacy-conscious user tracking. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. Security posture is robust with HTTPS enforcement, security headers, and no detected vulnerabilities. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

The Umweltbildungszentrum Flensburg is a small, non-profit educational institution affiliated with the Naturwissenschaftliches Museum Flensburg, focusing on environmental education and sustainability programs. Founded in 2014, it serves local schools, kindergartens, and the general public with a variety of educational offerings including excursions, workshops, and exhibitions. The website reflects a professional and consistent brand presence with clear contact information and official city sponsorship. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. No critical vulnerabilities or security issues were detected in the content or scripts. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional digital presence for an educational institution, with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and formal security policies could further enhance its posture.

F

FunRun 2025

funrunsuedwest.de

44

FunRun 2025 is a German event website dedicated to organizing and promoting the FunRun running events, targeting hobby and frequent runners as well as Nordic walkers. The site provides event information, race results, photo galleries, and news updates, positioning itself as a local/regional event organizer. Technically, the website is built on WordPress 6.0.1 using the Avada theme, with jQuery and Leaflet.js for interactive features, and integrates hCaptcha for form security. The site is served over HTTPS, indicating a good baseline for secure communications. However, it lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels.

E

Eureden

eureden.com

55

Eureden is a large agro-food cooperative group based in Brittany, France, serving thousands of farmer-cooperators and employees. The group operates multiple branches including agriculture, eggs, meat, frozen foods, long life products, and retail distribution, emphasizing sustainable and innovative practices. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it uses WordPress with modern plugins and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS and secure forms, though some security headers and explicit policies could be improved. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility is supported by consistent branding, social media presence, and detailed corporate information. Recommendations include enhancing security headers, publishing incident response info, and verifying domain registration details.

M

mStart plus d.o.o.

mstart.hr

58

mStart plus d.o.o. is a well-established Croatian IT services company specializing in digital transformation, ERP implementations, IT infrastructure, security services, and payment solutions. With over 10 years of market presence, the company serves a diverse client base across retail, finance, hospitality, and technology sectors. Their strong partnerships with global technology leaders such as SAP, Microsoft, IBM, and Oracle, along with multiple certifications including ISO/IEC 27001 and PCI DSS, position them as a trusted regional technology provider. Technically, the website employs modern web technologies including jQuery, Alpine.js, and Google Tag Manager, with a custom CMS or framework. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Cookie consent and privacy compliance are robustly implemented, reflecting a mature digital infrastructure. From a security perspective, the company maintains a strong posture with HTTPS enforcement, ISO 27001 certification, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in implementing additional security headers and publishing incident response contacts. The absence of a terms of service page is a minor compliance gap. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance, with no indications of malicious or suspicious activity. Strategic recommendations include enhancing security headers, formalizing incident response disclosures, and improving accessibility features to maintain and elevate their security and compliance standards.

H

Hrvatska gospodarska komora

hgk.hr

57

Hrvatska gospodarska komora (HGK) is a Croatian national chamber of commerce that serves as a professional and business organization representing the interests of its members before governmental and other bodies domestically and internationally. The website provides a range of services including information databases, entrepreneurial education, legal advice, business partner matchmaking, co-financing for trade fairs, and guidance on EU funding applications. HGK holds a strong market position as an authoritative institution within Croatia's business ecosystem. Technically, the website employs modern JavaScript libraries such as jQuery, Vue.js, and Summernote, along with CSS frameworks like Tailwind, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes accessibility features, though some improvements could be made in SEO and performance optimization. Security posture is generally good with HTTPS enforced and Google reCAPTCHA integration; however, the absence of security headers and explicit security policies suggests room for enhancement. Privacy compliance is limited due to missing explicit privacy and cookie policies, which could be a compliance risk. Overall, the website is professional and trustworthy, but strategic improvements in privacy disclosures and security practices are recommended.

H

Hrvatski zavod za norme

hzn.hr

60

Hrvatski zavod za norme (HZN) is an independent, non-profit public institution serving as the national standards body of the Republic of Croatia. The organization focuses on the development and promotion of standards, facilitating voluntary application of norms within Croatia, and ensuring access to international and European standards through its memberships. The website reflects a well-established institution with a clear mission to support normization activities and provide related services such as sales of Croatian standards and membership management. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with good mobile optimization and accessibility features. It integrates Google Analytics for user tracking and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. The site is served over HTTPS with no visible security misconfigurations, although some security headers could be improved. From a security perspective, the site demonstrates a mature posture with encrypted communications, privacy compliance, and no evident vulnerabilities or exposed sensitive data. However, it lacks explicit incident response or vulnerability disclosure information, which could enhance trust and preparedness. The WHOIS data is privacy protected due to GDPR, which is justified for this type of governmental-related entity, though it limits transparency. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining compliance with evolving privacy regulations to further strengthen security and trust.

L

Land Mecklenburg-Vorpommern

ecohesionportal-mv.de

57

The eCohesion-Portal Mecklenburg-Vorpommern is a government-operated web platform designed to facilitate electronic communication and data exchange between funding recipients and regional authorities or intermediaries. It primarily supports the management of approved funding projects within the region, co-financed by the European Union through the European Regional Development Fund. The portal itself does not process data but serves as a communication interface, targeting regional stakeholders involved in funding processes. Technically, the website employs a modern front-end stack including Bootstrap 5.1.3, jQuery, and Popper.js, ensuring responsive design and usability. The site implements a Content-Security-Policy header with restrictive directives, although the use of 'unsafe-inline' and 'unsafe-eval' weakens its security posture. No analytics or tracking technologies are detected, aligning with privacy-conscious government standards. The site lacks a cookie consent mechanism, which is a minor compliance gap given GDPR requirements. From a security perspective, the portal benefits from HTTPS and partial security header implementation but could improve by tightening CSP rules and adding additional headers such as HSTS and X-Frame-Options. No vulnerabilities or exposed sensitive data were identified in the analyzed content. WHOIS data confirms domain legitimacy and consistency with the regional government entity. Overall, the portal presents a trustworthy, professional, and functional government service with moderate technical sophistication and a good security baseline. Strategic improvements in security headers and privacy compliance would enhance its posture and user trust.

D

DANONE

jogurtdanone.pl

69

Danone Poland operates a comprehensive website focused on its yogurt and dairy product lines, reflecting the brand's global presence and commitment to nutrition and health. The site showcases a broad portfolio of products and related brands, targeting general consumers interested in dairy and plant-based nutrition. Technically, the website employs modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager and New Relic for analytics and performance monitoring, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not found on the analyzed page, which is a compliance gap. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response contact details suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, supporting Danone's market position as a leading food manufacturer.

M

Městská část Praha 6

praha6.cz

68

Městská část Praha 6 operates as the official municipal government website for the Prague 6 district in the Czech Republic. It provides residents and visitors with comprehensive information including news, events, traffic restrictions, public services, and official documents. The website is well-positioned as a trusted local government resource with a clear focus on community engagement and transparency. The site targets local citizens, public officials, and visitors seeking district-related information and services. Technically, the website employs modern web technologies such as Nuxt.js for server-side rendering, jQuery, Axios, and Litepicker for UI components, alongside Google Analytics and Tag Manager for tracking. The site is hosted by a reputable registrar and shows good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not published, and some recommended security headers are missing. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture but with room for improvement. Overall, the website demonstrates a solid balance of content quality, technical implementation, and privacy compliance, supporting its role as a credible government portal. Strategic enhancements in security headers and transparency policies would further strengthen its trustworthiness and resilience.

Ú

Úřad pro mezinárodněprávní ochranu dětí

umpod.cz

68

Úřad pro mezinárodněprávní ochranu dětí is a Czech government agency dedicated to providing international legal protection for children, particularly in cross-border family law matters such as custody, visitation, international adoption, and prevention of parental child abduction. The website serves as an official information portal offering resources, contact details, and guidance for families and legal professionals. It maintains a clear market position as a trusted government entity within the Czech Republic. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies including jQuery, Bootstrap, React, and Google Analytics for user insights. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its government affiliation and consistent branding. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

D

DEREZA, s.r.o.

dereza.cz

45

DEREZA, s.r.o. is a Czech construction company established in 2000, specializing in comprehensive building services including technical building equipment, earthworks, and transport. The company has a solid market position supported by references to significant projects such as Rudolfinum and Prague Castle. Their website is built on WordPress using the Avada theme, integrating modern technologies like Google Analytics and reCAPTCHA for security and analytics. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and security policies. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing security headers and incident response information. Overall, the website is trustworthy and functional with room for improvement in privacy compliance and security best practices.

Svazek obcí Dolní Povltaví is a voluntary association of municipalities in the Czech Republic, established in 2004. The website serves as an informational portal for the association and its 10 member municipalities, providing updates on social, cultural, and sports events. The site is built on WordPress and uses standard web technologies including jQuery and a cookie consent plugin. The technical infrastructure is moderate with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of explicit contact information and WHOIS data due to privacy restrictions limits full trust assessment. Overall, the site is legitimate, safe, and serves its community purpose effectively.

E

EDUin, o. p. s.

podporujuvzdelavani.cz

43

EDUin is a Czech non-profit organization dedicated to supporting and informing about education through various projects including audits, newsletters, podcasts, and networking for school founders. The website serves as a donation and information portal, targeting parents, educators, and stakeholders in the education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the site is professional, trustworthy, and well-aligned with its mission.

P

Planetary Networks GmbH

planetary-networks.net

49

Planetary Networks GmbH is a specialized hosting provider based in Berlin, Germany, with over 14 years of experience. The company offers a range of services including hosting, virtual and dedicated servers, groupware solutions based on Zimbra, backup services, and consulting. They operate their own infrastructure across two Berlin data centers with direct peering at BCIX, emphasizing high quality and reliability. The website reflects a professional and trustworthy business with ISO 9001 certification and TÜV quality management, targeting businesses and private customers seeking dependable hosting solutions. Technically, the website is built on WordPress 6.0.11 with common plugins such as Contact Form 7 and Borlabs Cookie for GDPR-compliant cookie management. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but some security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. Overall, the security posture is solid for a small hosting provider, with no visible vulnerabilities or suspicious elements. The domain WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, supporting legitimacy. The website content is safe for general audiences, professional, and well-structured, with clear navigation and trust indicators. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving accessibility compliance to further strengthen trust and security culture.