Security Directory

I

International Judo Federation

ijf.org

11

The International Judo Federation (IJF) operates a comprehensive and professionally designed website serving as the official hub for the global judo community. The site offers extensive content including news, event calendars, world rankings, video libraries, and educational resources, positioning IJF as a leading authority in the sport of judo worldwide. The federation's presence in over 200 countries and its Olympic status since 1964 underscore its global influence and reach. Technically, the website employs modern web technologies such as JavaScript, CSS3, and HTML5, with integrations like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is hosted behind Cloudflare CDN, ensuring performance and security benefits. Mobile optimization and accessibility are well addressed, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a mature approach to user privacy and data protection. However, explicit security headers and a public security policy or vulnerability disclosure page are absent, representing areas for improvement. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature and does not detract from the site's legitimacy. Overall, IJF.org demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. The site is safe for general audiences, free from adult or questionable content, and well-positioned to serve its community effectively.

M

Mäspoma spol. s r.o.

maspoma.sk

64

Mäspoma spol. s r.o. is a Slovak manufacturer and retailer specializing in spices, spice blends, and meat auxiliary materials. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting general consumers and businesses within Slovakia. The website presents a professional and consistent brand image with a focus on local production and quality. Technically, the site leverages modern web technologies including WPBakery Page Builder, Slider Revolution, Google Tag Manager, and Cookiebot for cookie consent management. Security posture is strong with HTTPS enforced, appropriate security headers, and anti-bot measures like reCAPTCHA. However, the absence of explicit privacy policies, terms of service, and incident response contacts indicates room for improvement in compliance and transparency. Overall, the site is functional, secure, and trustworthy, but would benefit from enhanced privacy and security disclosures.

C

Corneliani S.p.A.

corneliani.com

74

Corneliani S.p.A. is a well-established Italian luxury menswear brand specializing in high-end clothing, shoes, and accessories. The company targets discerning male customers seeking timeless elegance and quality craftsmanship. The website serves as an official e-commerce platform offering the latest collections, gift cards, and store locator services, supporting a global audience with multiple language and country versions. The business model focuses on direct retail through an online store, complemented by physical retail presence. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries such as RequireJS, KnockoutJS, and jQuery. It integrates advanced marketing and payment tools including Google Tag Manager, Klarna, Amazon Pay, and Hotjar for analytics and user experience enhancement. The site is mobile optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on login forms, and applies secure cookie settings. However, some security headers are not explicitly visible in the HTML source and could be verified or improved. No explicit security policy or incident response contact is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy front for Corneliani's luxury retail business. The main concern is the absence of WHOIS registration data, which is unusual for a commercial domain and slightly reduces domain trustworthiness. This may be due to privacy protection or a WHOIS server issue. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing a security policy and incident response information.

Č

Člověk v tísni

doucujte.cz

56

Doučujte.cz is a Czech non-profit educational platform affiliated with the reputable organization Člověk v tísni. The website focuses on supporting children in need through tutoring and provides methodological support to volunteers, non-profit workers, students, parents, and teachers. It offers curated materials, tips, and recommendations to facilitate and enhance tutoring efforts. The platform targets a broad audience involved in educational support and operates primarily in the Czech Republic. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for optimization, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The site is well-structured with good mobile optimization and moderate performance. It employs HTTPS with a strong SSL configuration and includes cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, some advanced security headers like Content-Security-Policy are not confirmed, and no security.txt or vulnerability disclosure pages are present. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of explicit privacy policy and terms of service pages slightly impacts privacy compliance. Overall, Doučujte.cz presents a trustworthy and professional online presence for a non-profit educational initiative. The lack of WHOIS data is consistent with privacy protection practices common among non-profits. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, and providing explicit contact information for security and privacy concerns to strengthen trust and compliance.

J

JSNŠ

jsns.cz

59

The website www.jsns.cz represents an educational initiative named Jeden svět na školách (JSNS), focused on providing free and legal documentary film screenings for schools in the Czech Republic. The platform supports educators by offering activities and projects to enrich teaching. The site targets schools and educators, positioning itself as a niche non-profit educational content provider. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Leaflet.js for mapping, and standard web libraries such as Font Awesome and Select2. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security-wise, HTTPS is enforced with appropriate security headers, and no vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating GDPR awareness, although no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professionally designed, secure, and serves a clear educational purpose, but would benefit from enhanced privacy disclosures and contact information to improve compliance and trust.

P

Pimcore GmbH

pimcore.com

70

Pimcore GmbH is an established Austrian technology company founded in 2009, specializing in enterprise data and experience management platforms. Their offerings include PIM, MDM, DAM, DXP/CMS, CDP, and digital commerce solutions targeting medium to large enterprises seeking rapid digitization and efficient data management. The company maintains a strong market position with global clients and partners, supported by a professional and content-rich website. Technically, the site leverages modern technologies such as HubSpot CMS, Cloudflare DNS, and integrates Google Analytics 4 and Cookiebot for analytics and privacy compliance. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, Pimcore demonstrates high business credibility and trustworthiness with consistent WHOIS data and transparent policies.

P

PlaxidityX (Formerly Argus)

plaxidityx.com

75

PlaxidityX is a newly established automotive cybersecurity company, recently rebranded from Argus, focusing on providing cybersecurity solutions tailored for the automotive industry. The company targets vehicle manufacturers and related stakeholders, positioning itself as a specialized provider in the transportation technology sector. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and performance tools such as Yoast SEO and Cookiebot for cookie consent management. The technical infrastructure includes lazy loading scripts and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is newly registered with GoDaddy, consistent with the company's recent rebranding and launch. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures and more visible contact information to improve trust and compliance.

D

Demänová Rezort

demanovarezort.sk

64

Demänová Rezort is a hospitality resort business based in Slovakia, offering hotel-like services, relaxation, and entertainment to tourists and leisure travelers. The website is professionally designed using WordPress with Elementor and optimized for multiple languages targeting regional visitors. The technical infrastructure includes modern analytics and tracking tools with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. The absence of privacy and terms of service pages, as well as contact information, represents compliance and trust gaps. Overall, the website is functional and credible but would benefit from enhanced transparency and security practices.

AVE CZ odpadové hospodářství s.r.o. is a leading Czech company specializing in waste management, municipal services, environmental remediation, demolition, road maintenance, and facility management. The company positions itself as a market leader with a strong focus on ecological responsibility and community engagement. Their website reflects a professional and comprehensive digital presence, featuring detailed service descriptions, press releases, and CSR initiatives. Technically, the site is built on modern frameworks such as Next.js and React, hosted on DigitalOcean, and incorporates standard marketing and analytics tools like Google Tag Manager and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers are not confirmed. The absence of WHOIS data limits domain trust assessment, but the website content and business operations appear legitimate and well-established. Overall, the site demonstrates a mature digital infrastructure with good content quality and user experience, supporting the company's market position and business credibility.

M

Mairie de Megève

megeve-booking.com

61

The website megeve-booking.com serves as the official online booking platform for the Megève tourism office, specializing in accommodation and activity reservations in the Megève ski resort area in Haute-Savoie, France. It targets tourists and visitors seeking a seamless booking experience for hotels, chalets, and local activities. The platform is positioned as a trusted and official channel supported by the local municipality (Mairie de Megève), enhancing its credibility and market presence. Technically, the site employs modern web technologies including JavaScript frameworks, lazy loading for images, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The platform is hosted under a stable domain registered in 2021 with a 5-year validity period. The website is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC and explicit security headers, and no dedicated security policy or incident response contact is published. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the security posture is solid but could be improved with additional security best practices. The overall risk assessment is low, with no signs of malicious activity or suspicious content. The site complies with GDPR requirements, providing privacy and cookie policies, and offers clear contact information. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a security.txt file to enhance transparency and trust.

S

Spin On

spin-on.fr

61

Spin On is a small, professional web agency based in Besançon, France, specializing in the creation of websites, e-commerce platforms, mobile applications, and custom software development. The company has been operating since 2013 and serves primarily local and regional businesses. Their website demonstrates a solid digital presence with a focus on GDPR compliance and user privacy, evidenced by the integration of Cookiebot for cookie consent management. The agency leverages modern web technologies and frameworks such as WordPress, Drupal, Prestashop, and Laravel to deliver tailored solutions to clients. Technically, the website employs a modern tech stack including JavaScript libraries like jQuery, TweenMax, and Rellax for enhanced user experience and performance optimizations such as lazy loading. Hosting is provided via DigitalOcean, a reputable cloud provider, ensuring reliable infrastructure. The site is mobile-optimized and SEO-friendly, although accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The use of Facebook Pixel and Google Analytics indicates moderate user tracking, balanced with GDPR compliance. Overall, Spin On presents a trustworthy and professional digital footprint with room for improvement in security hardening and accessibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance posture.

A

AC Sparta Praha

sparta.cz

66

AC Sparta Praha operates an official website serving as the primary digital platform for the football club, providing fans with news, match results, player information, and ticket purchasing options. The site targets football enthusiasts primarily in the Czech Republic and maintains a strong brand presence consistent with its long history since 1893. The domain age and WHOIS data confirm the legitimacy and stability of the online presence. Technically, the site is built on modern frameworks such as Next.js and leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The use of Cookiebot for consent management and integration with major analytics and advertising platforms like Google Analytics, Facebook Pixel, and Gemius demonstrates a mature digital marketing and compliance posture. Security-wise, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data, though explicit security policies and incident response contacts are not published. Overall, the website is professional, secure, and compliant with GDPR, making it a trustworthy platform for its audience.

C

Coinmate s.r.o

ushop.cz

66

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily targeting customers in Czechia and Slovakia, with a focus on trading cryptocurrencies against the euro and Czech koruna. The company has been in operation since 2013, positioning itself as a trusted and local player in the crypto finance sector. Their services include quick buy options, automated recurring purchases, a professional trading platform integrated with TradingView, and API access for automated trading bots. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience.

T

TPA Group

tpa-group.cz

67

TPA Group is a professional services firm specializing in comprehensive tax, accounting, and advisory services in the Czech Republic. The company targets businesses seeking expert financial and consulting support, leveraging local expertise and a personalized approach. The website reflects a medium-sized enterprise with a solid market position in the regional finance sector. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Tag Manager and Cookiebot shows attention to analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response contacts are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference.

Č

Člověk v tísni

skutecnydarek.cz

61

The website skutecnydarek.cz operates as an e-commerce platform for charitable gifts affiliated with the non-profit organization Člověk v tísni. It targets a Czech-speaking audience, offering original charitable gifts that support people in need. The site is professionally designed with consistent branding and good content quality, reflecting a medium-sized non-profit entity with a clear mission. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Microsoft Clarity for analytics, and Stripe for payment processing. The presence of HTTPS and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security headers could be confirmed. Privacy compliance is good with a detailed cookie policy and consent banner, but no explicit privacy policy or terms of service pages were detected in the provided content. The absence of WHOIS data limits domain trust analysis, but the website's content and technology usage suggest legitimacy. Overall, the site is a trustworthy, well-maintained charitable e-commerce platform with room for improvement in transparency and security documentation.

M

MND

mnd.cz

78

MND is a Czech energy supplier offering gas and electricity services primarily to households (B2C). The website provides an online price calculator and facilitates switching to MND as a supplier, positioning itself as a stable and fair energy provider in the Czech market. The digital infrastructure is built on Kentico CMS with integrated Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and uses modern web technologies, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, standard security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive cookie policy. However, WHOIS data is unavailable, likely due to privacy protection, which is common for commercial entities. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations, though it lacks explicit contact information and some policy pages such as terms of service and security policy. Strategic recommendations include publishing incident response contacts, adding a security policy page, and improving accessibility features.

P

PHATEC

phatec.com

63

PHATEC is a Czech-based company specializing in the design and realization of custom single-purpose machines, targeting industrial clients requiring tailored automation solutions. The website is professionally designed using WordPress and Elementor, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and integrates multiple analytics and advertising services such as Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registration data raises questions about domain legitimacy, though the active and professional website presence mitigates some concerns. Overall, the website presents a moderate risk profile with recommendations to enhance transparency and security.

O

Outfindo

outfindo.cz

71

Outfindo is a technology company specializing in AI-driven guided selling software and product data enrichment solutions aimed at enhancing the online shopping experience for e-commerce businesses. Their platform leverages proprietary AI agents to analyze customer behavior and automate product data management, enabling retailers to provide tailored shopping guidance that improves conversion rates. The company positions itself as a niche provider in the e-commerce technology space, offering SaaS solutions with a focus on seamless integration and user-friendly setup. Technically, the website is built on the Webflow CMS platform and integrates multiple modern marketing and analytics tools including HubSpot, Facebook Pixel, Microsoft Clarity, and Apollo.io. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable anomaly, reducing transparency but not necessarily indicating malicious intent given the professional nature of the site. Overall, Outfindo presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security policy transparency and domain registration disclosure would enhance trust and compliance posture.

U

Union poisťovňa, a. s.

union.sk

70

Union poisťovňa, a. s. is a prominent Slovak insurance company combining public health and commercial insurance services under one brand. The company targets Slovak residents seeking comprehensive health, vehicle, property, travel, and life insurance products. The website reflects a strong market position with a professional and consistent brand presence, supported by clear business information and multiple customer engagement channels. Technically, the site is built on WordPress using modern tools like Elementor, UberMenu, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and transparency of the domain registration, aligning well with the company's identity and operations. Overall, the website is professional, secure, and compliant, serving as a trustworthy digital front for the company.

F

Fundación ONCE para la Atención de Personas con Sordoceguera

foaps.es

63

Fundación ONCE para la Atención de Personas con Sordoceguera is a Spanish non-profit organization dedicated to supporting individuals with deafblindness. It operates under the umbrella of the ONCE group, providing social, educational, and informational services tailored to this community. The website reflects a professional and consistent brand presence aligned with its mission, targeting affected individuals, their families, and professionals. Technically, the site is built on the Plone CMS platform, utilizing modern web technologies and ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear policies and GDPR adherence. The absence of WHOIS data limits domain registration insights, but the overall trust indicators and official branding support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

F

Fundación ONCE Baja Visión

fundaciononcebajavision.es

65

Fundación ONCE Baja Visión is a specialized non-profit organization dedicated to supporting people with low vision in Spain. It operates under the umbrella of the Grupo Social ONCE, providing research, advocacy, and direct support services to its beneficiaries. The website reflects a mature digital presence with clear branding and consistent messaging aligned with its mission. Technically, the site is built on the Liferay DXP platform, leveraging modern web technologies such as React and jQuery, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers. The absence of WHOIS data due to query restrictions limits domain registration insights, but the overall trust signals and affiliations strongly indicate legitimacy. The site is well-optimized for accessibility and mobile use, catering effectively to its target audience. Overall, the foundation maintains a professional and trustworthy online presence suitable for its non-profit mission.

F

Folio AS

folio.no

70

Folio AS operates a modern, simple online banking platform tailored for small businesses and self-employed individuals in Norway. The service is delivered in partnership with Sparebanken Norge, providing a full suite of banking products including business accounts, payment cards, and integrated accounting tools. The website demonstrates a strong market position with high customer satisfaction and a clear focus on ease of use and transparency. Technically, the site is built on a modern Next.js framework with React, optimized for performance and mobile responsiveness. Security posture is robust with HTTPS, security headers, and consent management in place, though explicit security policies and incident response information are not publicly detailed. Overall, Folio presents a trustworthy and professional digital presence with room for improvement in transparency around security and contact details.

I

International Distribution Services plc

royalmailgroup.com

55

International Distribution Services plc is a large UK-based holding company primarily managing Royal Mail and GLS, two major players in the postal and parcel delivery industry. The company focuses on providing mail and parcel distribution services across the UK and Europe, targeting businesses, investors, and customers requiring reliable logistics solutions. The website reflects a professional corporate presence with consistent branding and clear navigation, supporting its market position as a key logistics provider. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, uses Google Tag Manager for analytics, and implements Cookiebot for cookie consent management. The CMS identified is Umbraco, indicating a mature content management approach. Performance and mobile optimization are good, with accessibility and SEO features well implemented. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces trust slightly, but the presence of official company registration details and consistent branding mitigates concerns. Overall, the website is secure, professional, and compliant with privacy regulations, though improvements in transparency around security policies and incident response are recommended to enhance trust and compliance.

I

International Distribution Services plc

internationaldistributionservices.com

58

International Distribution Services plc is a large UK-based holding company specializing in parcel and mail distribution services, owning major subsidiaries such as Royal Mail and GLS. The company operates in the transportation sector with a focus on logistics and multi-channel parcel delivery solutions. The website reflects a professional corporate presence targeting investors, customers, and regulatory bodies. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent, built on the Umbraco CMS platform. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and provides comprehensive business information aligned with WHOIS data.

O

ONCE

once.es

65

ONCE is a well-established Spanish non-profit organization dedicated to the inclusion and autonomy of blind and visually impaired persons. The website reflects a mature digital presence with comprehensive social services information, educational resources, and employment support. The organization holds a strong market position in Spain as a leader in disability inclusion and social support. Technically, the website is built on the Plone CMS platform, leveraging modern web technologies including jQuery and Google Tag Manager, with a focus on accessibility and compliance with WCAG standards. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though some areas like explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and Spanish transparency laws.

G

Grupo Social ONCE

gruposocialonce.com

65

Grupo Social ONCE is a large non-profit organization based in Spain dedicated to achieving equality for persons with blindness and other disabilities. It operates through entities such as ONCE, Fundación ONCE, and Ilunion, providing employment, social investment, training, and inclusion services. The website reflects a strong social mission with a professional and accessible digital presence built on Liferay DXP and modern web technologies. Security posture is good with HTTPS, cookie consent, and domain protections, though some security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

F

Fiken

fiken.no

66

Fiken.no is a Norwegian accounting software provider targeting small business owners and self-employed individuals. Founded in 2015, it offers a subscription-based SaaS platform that simplifies bookkeeping, invoicing, and tax reporting. The website is professionally designed using modern technologies such as Next.js and React, hosted on Vercel, and optimized for mobile devices. It employs comprehensive cookie consent mechanisms and integrates multiple third-party analytics and marketing tools, including Google Analytics, Facebook Pixel, and Intercom. Security posture is strong with HTTPS enforced and appropriate cookie management, although explicit privacy and terms of service pages are not detected in the provided content. The domain WHOIS data aligns well with the business claims, supporting legitimacy.

F

FUJIFILM Cellular Dynamics, Inc.

fujifilmcdi.com

63

FUJIFILM Cellular Dynamics, Inc. is a specialized biotechnology company focused on providing human induced pluripotent stem cell (iPSC) services and products to support scientific research and cell therapy development. The company operates a professional and well-branded website targeting researchers, pharmaceutical, and biotech firms. Their market position is that of an established leader in the iPSC field, supported by a medium-sized business infrastructure and backed by the FUJIFILM Holdings Corporation. Technically, the website leverages a modern Magento eCommerce platform integrated with WordPress for content, using advanced search and analytics tools such as Algolia, Google Tag Manager, and Hotjar. Privacy and cookie compliance are well implemented with a consent mechanism and comprehensive policies. Security posture is good with HTTPS, security headers, and form protections, though the absence of a published security policy and incident response details is noted. The lack of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, the website is secure, compliant, and professionally maintained, suitable for its B2B healthcare audience.

T

Taste

taste.cz

65

Taste is a Czech digital agency established in 2014, specializing in cross-channel online solutions for business projects. The website presents a professional image with a clear focus on digital marketing and online project development. The technical infrastructure includes modern tools such as Google Tag Manager and Cookiebot for privacy compliance, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the website is trustworthy and well-positioned in its market segment, but lacks visible direct contact information and formal terms of service, which could enhance credibility.

O

Outfindo

outfindo.com

69

Outfindo is a technology company specializing in AI-driven guided selling software and product data enrichment solutions aimed at enhancing the online shopping experience for e-commerce businesses. Their platform leverages proprietary AI agents to analyze customer behavior and automate product data management, positioning them as an innovative player in the e-commerce technology sector. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent management implemented; however, the absence of explicit security policies, incident response details, and WHOIS transparency slightly reduce trustworthiness. Overall, the site is safe, well-structured, and business credible, though improvements in security transparency and domain registration clarity are recommended.

V

Vivantina

vivantina.com

64

Vivantina is a Slovak-based innovative marketing agency specializing in data-driven marketing solutions including PPC, SEO, social media management, and web development. The company positions itself as a modern, customer-oriented agency with a strong portfolio of over 250 successful projects and campaigns across 30 countries. Their website is professionally designed, mobile optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. Security posture is good with HTTPS and reCAPTCHA implemented, though some security headers and policies are not explicitly found. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional appearance and trust signals on the site. Overall, Vivantina demonstrates a solid marketing agency profile with room for improvement in privacy transparency and domain registration clarity.

G

GTS ALIVE s.r.o.

isic.cz

70

GTS ALIVE s.r.o. operates the ISIC.cz website, providing internationally recognized student and youth discount cards in the Czech Republic. The company has a strong market position with a history dating back to 2000, offering various card types including ISIC Scholar and teacher cards. The website is well-structured, targeting students and young people, and provides comprehensive information about its services and benefits. Technically, the site employs modern JavaScript libraries and is hosted on Amazon AWS, ensuring reliable performance and scalability. Privacy compliance is robust, with clear cookie consent mechanisms managed by Cookiebot and detailed privacy policies in Czech. Security posture is good, with HTTPS enforced and no critical vulnerabilities detected, although some security headers could be improved. Overall, the site demonstrates professionalism and trustworthiness, with transparent advertising and tracking practices. No contact emails or phone numbers were explicitly found in the analyzed content, and no terms of service or explicit security policies were detected.

H

Hivebrite

hivebrite.com

55

Hivebrite is a technology company based in France, founded in 2020, offering a best-in-class online community engagement platform. Their SaaS model targets organizations and communities seeking customizable and easy-to-set-up engagement solutions. The website reflects a professional and consistent brand presence with good content quality and clear messaging focused on community engagement. Technically, the site is built on WordPress, leveraging modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Visual Website Optimizer, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, safe for general audiences, and well-positioned in the technology sector.

B

Bonami

bonami.cz

67

Bonami.cz is a well-established e-commerce platform specializing in home furnishings, decor, kitchenware, textiles, and garden products primarily serving the Czech Republic and several neighboring countries through localized sister sites. The website demonstrates a mature digital presence with a modern React and Next.js technology stack, optimized for mobile and desktop users alike. It offers a comprehensive product catalog with detailed navigation and user-friendly design. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is evident through the presence of a cookie consent mechanism and a comprehensive privacy policy. Overall, Bonami.cz presents a professional, trustworthy, and user-centric online retail experience.

E

EASYDIET

easydiet.sk

54

EASYDIET is a Slovakian small business specializing in healthy meal box diet delivery services aimed at individuals seeking weight loss and healthy eating solutions. The website is built using modern frontend technologies such as Bootstrap 5 and integrates marketing and tracking tools including Google Tag Manager and Facebook SDK. Cookie consent is implemented via Cookiebot, indicating some level of privacy awareness. However, the absence of a privacy policy and terms of service pages represents a compliance gap. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response contacts. Overall, the website presents a professional and trustworthy front for a local diet meal delivery service but would benefit from enhanced privacy and security documentation.

Z

Zámek Wichterle

zamekwichterle.cz

44

Zámek Wichterle is a hospitality business based in the Czech Republic offering hotel accommodation and unique wellness services including a beer spa. The website presents a professional and modern design built on WordPress with the Divi theme, enhanced by SEO optimizations via Yoast and user consent management through Cookiebot. The technical infrastructure is solid with HTTPS enabled and integration of Google Tag Manager for analytics. However, the site lacks explicit privacy and terms of service policies, and no direct contact information is readily available, which may impact user trust and compliance. Security posture is moderate with SSL in place but missing security headers and vulnerability disclosure mechanisms. Overall, the business appears legitimate and consistent with its domain registration data, but improvements in compliance and security transparency are recommended.

A

Amgen

amgen.be

70

Amgen is a global leader in biotechnology, focusing on innovative medicines and healthcare solutions. The website presents a professional and comprehensive digital presence targeting healthcare professionals, patients, and partners. The technical infrastructure includes modern JavaScript libraries such as VideoJS and Cookiebot for video and cookie consent management, respectively, with Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforced and content security policies in place, though additional headers could enhance protection. Privacy compliance is robust, with clear GDPR adherence and cookie consent mechanisms. Overall, the website reflects a mature enterprise-level digital asset with high trustworthiness and professionalism.

F

FLOWSPARKS

flowsparks.com

68

FLOWSPARKS operates as an online platform providing an authoring tool and learning management system (LMS) designed to enable users to create, manage, and update digital learning materials efficiently. The company targets businesses and organizations seeking accessible e-Learning development solutions, positioning itself as a provider of user-friendly and scalable e-Learning technology. The website content and branding are consistent and professional, supporting a medium-sized business profile within the education technology sector. Technically, the website leverages modern web technologies including Webflow CMS, Google Analytics, Google Tag Manager, Cookiebot for consent management, and various marketing and tracking tools such as Leadinfo and Pardot. Hosting appears to be supported by Cloudflare, enhancing performance and security. The site is mobile-optimized with good SEO and accessibility features, providing a positive user experience. From a security perspective, the website enforces HTTPS and implements a detailed cookie consent mechanism, reflecting good privacy practices. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. The extensive use of third-party tracking and marketing services indicates a high level of user data collection, which is managed through consent but requires transparent privacy disclosures. Overall, the website is professionally designed and functional, but the absence of WHOIS registration data and lack of explicit privacy and contact information reduce trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels to improve compliance and user confidence.

C

Chambre des Métiers du Luxembourg

cdm.lu

79

The Chambre des Métiers du Luxembourg website serves as the official online presence of the governmental chamber representing craftsmen and small businesses in Luxembourg. It provides information and services related to business registration, training, and advocacy. The site targets professionals and businesses within Luxembourg, positioning itself as a key institutional resource. Technically, the website is built on Joomla CMS and leverages modern web technologies including Google Fonts, Cookiebot for cookie consent, and multiple analytics platforms such as Google Analytics and Pirsch. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain trust analysis, though the .lu domain and content suggest legitimacy. Overall, the website demonstrates a moderate to good security posture and privacy compliance, with room for improvement in transparency and security best practices.

C

Chambre de Commerce Luxembourg

cc.lu

56

The Chambre de Commerce Luxembourg website serves as the official online presence of Luxembourg's Chamber of Commerce, a government-related institution supporting business activities within the country. The site provides information and services aimed at businesses and professionals, positioning itself as a key national entity for commerce facilitation. The website is built on TYPO3 CMS and incorporates modern web technologies including Cookiebot for cookie consent management and Eye-Able for accessibility enhancements. The content is professionally presented, with clear navigation and multilingual support, targeting a business audience in Luxembourg. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and visible incident response contacts. The absence of WHOIS data limits domain trust assessment, but the website's professional appearance and government affiliation provide strong legitimacy indicators. Overall, the site demonstrates a good balance of usability, compliance, and security, with room for improvement in transparency and security header implementation.

M

Mondo Spa

mondoworldwide.com

62

Mondo Spa operates a professional website focused on sport flooring systems and artificial turf, targeting sports facilities and athletes globally. The company positions itself as a leading provider of high-quality sport surfaces, supporting athletes in achieving outstanding results. The website demonstrates a moderate to advanced digital maturity with modern JavaScript technologies, CDN hosting, and integration of marketing and analytics tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to improve trust. Overall, the website is well-designed and functional but would benefit from enhanced privacy, security, and compliance disclosures.

T

Taste, a.s.

medio.cz

60

Taste, a.s. is a Czech digital agency founded in 2014, specializing in cross-channel online marketing solutions including paid advertising, SEO, email marketing, branding, and social media strategies. The company serves businesses seeking to enhance their online presence and marketing effectiveness. The website demonstrates a solid market position supported by multiple certifications such as Google Partner and Meta Business Partner, and a portfolio of reputable clients. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is strong with HTTPS and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and well-structured, reflecting a mature digital marketing business.

I

Innovatrics

innovatrics.com

65

Innovatrics is an established biometric technology provider specializing in solutions for government and enterprise sectors. Founded in 2004, the company claims to have helped over 1 billion people across more than 80 countries, indicating a strong global presence and market position. Their website reflects a professional and business-focused approach, targeting large organizations requiring biometric solutions. The company leverages modern web technologies including WordPress CMS, Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security measures such as HTTPS and Google reCAPTCHA are implemented, alongside a comprehensive cookie consent mechanism, demonstrating attention to user privacy and security. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, present areas for improvement in transparency and trust. Overall, the website is professional and secure but would benefit from enhanced compliance documentation and verified domain registration details.

F

Fashion Line

fashion-line.eu

46

Fashion Line is a Czech-based company specializing in prefabricated modular units designed for relaxation, office, and urban temporary use. The company emphasizes sustainability, design, and quick delivery, targeting consumers and businesses seeking flexible living and working spaces. The website is professionally designed, well-structured, and optimized for SEO and mobile use. Technically, it leverages WordPress with modern analytics and marketing tools, including Google Analytics and Facebook Pixel, with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and privacy respected, though some security headers could be improved. WHOIS data is privacy protected by EURid, which is common for European domains, and does not raise immediate concerns given the professional web presence. Overall, the site presents a trustworthy and credible business with clear contact channels and compliance with privacy regulations.

The International Congress and Convention Association (ICCA) operates a professional global network serving the international association meetings industry. Their website provides comprehensive resources, networking opportunities, and business intelligence services to meeting strategists, associations, and suppliers. The organization positions itself as a global leader and knowledge hub in this niche market. Technically, the website employs a modern technology stack including jQuery, Vue.js, RequireJS, and Google Tag Manager, hosted on a CMS platform likely Simpleview. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is publicly available. WHOIS data is unavailable due to privacy protection, which is typical for such organizations and does not detract from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained, supporting ICCA's role as a key industry association.

H

Hematologicko-onkologické oddělení, Fakultní nemocnice Plzeň

hematologieonkologie.cz

57

The Hematologicko-onkologické oddělení FN Plzeň website represents a specialized healthcare department within the Faculty Hospital Plzeň, uniquely accredited for all types of hematopoietic stem cell transplantation in the Czech Republic. The site provides comprehensive information about their services, accreditations, and partnerships, targeting patients and healthcare professionals. The business model focuses on delivering advanced hematology and oncology treatments, supported by clinical research and quality management. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Cookiebot for GDPR compliance, ensuring a responsive and user-friendly experience. However, some technical improvements could enhance accessibility and security headers. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, limiting full domain trust analysis.

R

Royal Museums of Fine Arts of Belgium

fine-arts-museum.be

74

The Royal Museums of Fine Arts of Belgium website serves as the official digital presence for a prominent cultural institution in Belgium, focusing on fine arts exhibitions and related events. The site targets art enthusiasts, tourists, and researchers, providing information about exhibitions, events, and publications. The domain is well-established, registered since 1995, and hosted under a reputable Belgian registrar, BELNET. The website employs a modern technical stack including jQuery, Bootstrap, Leaflet, and Cookiebot for cookie consent management, reflecting a moderate to good level of digital maturity.

L

Laboratoires Réunis Luxembourg S.A.

labo.lu

68

Laboratoires Réunis Luxembourg S.A. is a well-established healthcare laboratory service provider in Luxembourg, specializing in medical diagnostics, preventive medicine, and related laboratory analyses. The company operates multiple blood collection centers and offers services tailored to patients and medical professionals. Their affiliation with Biogroup and OLAS accreditation underscores their commitment to quality and reliability. The website is professionally designed, mobile-optimized, and provides comprehensive information about services, contact details, and corporate news. Technically, the site leverages TYPO3 CMS, Bootstrap, and modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website presents a trustworthy and professional image, though the absence of WHOIS data limits domain registration trust assessment.

S

SYNLAB Hungary

synlab.hu

69

SYNLAB Hungary operates as a medical diagnostics and laboratory testing service provider targeting patients and healthcare professionals within Hungary. The company leverages the BigCommerce platform to present its services online, integrating modern web technologies such as Google Analytics 4, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The website demonstrates a professional design with good mobile optimization and clear navigation, supporting a positive user experience. Security measures include enforced HTTPS and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

C

C4C systems GmbH

c4c-systems.de

53

C4C systems GmbH is a German-based IT consulting and software development company specializing in tailored digital solutions including PHP and Symfony development, database and backend services, CMS and website services, IT infrastructure and hosting, SEO and web analytics, and data protection consulting. Positioned as a trusted expert for enterprises, NGOs, and public institutions, the company emphasizes scalable architectures and sustainable consulting. The website is built on TYPO3 CMS and integrates privacy-friendly analytics (Matomo) and Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit incident response policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the digital maturity is moderate to good with room for security enhancements.