Security Directory

P

pixelfed.de

pixelfed.de

50

pixelfed.de is a German-based decentralized photo sharing social media platform powered by Pixelfed software. It positions itself as an ethical alternative to centralized platforms, offering features such as photo posts, albums, filters, collections, and federation with other platforms. The platform supports mobile apps, stories, and video content, targeting a general audience interested in privacy-respecting social media. The website is moderately sized with over 76,000 total users and 3,300 active users, indicating a healthy community presence. The business model revolves around providing a federated, open-source social media experience without advertising or centralized control. Technically, the website uses modern JavaScript frameworks including Vue.js and the Plyr video player, with responsive design and good SEO practices. The site is served over HTTPS with a valid SSL configuration and includes CSRF protection tokens, indicating a good security baseline. However, explicit security headers are not detected, and no cookie consent mechanism is present, which are areas for improvement. The site does not appear to use third-party analytics or tracking, aligning with its privacy-focused ethos. From a security perspective, pixelfed.de demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The lack of detailed security policies or incident response contacts is a gap, as is the absence of a vulnerability disclosure or security.txt file. The WHOIS data is minimal but consistent with the website's German origin and business history, with no privacy protection applied. Contact information is limited to an email address for the administrator, with no phone or physical address provided. Overall, pixelfed.de is a trustworthy and well-maintained platform serving a niche community interested in decentralized and ethical social media. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, expanding contact information, and publishing explicit security and incident response policies to further build trust and compliance.

W

webfontapp.com

webfontapp.com

60

Webfontapp.com operates a niche Mac OS application designed to help designers and developers create and manage custom SVG icon fonts and SVG sprites. The business targets creative professionals who require streamlined workflows for icon font management and team collaboration. The website presents a freemium business model with a free tier and a Pro subscription priced at $9.99 per year. The market position is focused and specialized, serving a small but dedicated user base. Technically, the site uses modern web technologies including Vue.js, Google Analytics, and Paddle for payment processing, indicating a moderate level of digital maturity. The website is well-designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Security posture is adequate but could be improved by implementing security headers, cookie consent mechanisms, and publishing a vulnerability disclosure policy. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. The site is free of adult or questionable content and maintains a professional online presence.

F

FormBeat

formbeat.com

63

FormBeat is a specialized AI-powered cycling analytics platform designed to help cyclists of all fitness levels improve their training and performance. The company offers a subscription-based SaaS model with monthly and yearly plans, integrating with popular cycling platforms such as Strava, Garmin, and Zwift. The website demonstrates a high level of professionalism, excellent content quality, and a clear focus on user experience and mobile optimization. Technically, the platform leverages modern JavaScript frameworks (Vue.js), cloud CDN hosting, and multiple analytics and marketing tools to deliver a fast and responsive user experience. Security posture is good with HTTPS enforced and CSRF protections, though there is room for improvement in security headers and explicit privacy compliance mechanisms. Overall, the business appears legitimate and well-positioned in the niche cycling analytics market, with strong trust indicators such as testimonials and recognized trademarks.

P

Pepper Deals Ltd.

hotukdeals.com

47

hotukdeals.com is a leading UK-based e-commerce community platform operated by Pepper Deals Ltd., a subsidiary of Atolls GmbH. The site offers a vibrant community-driven environment where users share deals, discounts, and voucher codes, positioning itself as Europe's largest shopping rewards company. The platform targets savvy shoppers seeking to maximize savings through crowdsourced deals and affiliate partnerships. Technically, the website employs modern JavaScript frameworks such as Vue.js, uses service workers for performance, and leverages Amazon Cloudfront CDN for hosting, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforced and multiple security headers implemented, though explicit privacy and cookie policies are not readily found, indicating room for compliance improvement. The absence of WHOIS data limits domain registration trust verification, but the professional branding, verified social media presence, and active community engagement strongly support the site's legitimacy. Overall, hotukdeals.com presents a mature, well-maintained e-commerce community platform with solid technical and security foundations but would benefit from enhanced privacy transparency and incident response documentation.

M

MyDr Spółka z o. o.

dr100.pl

53

The website dr100.pl represents a professional SaaS platform specializing in dental practice management software tailored for dentists, orthodontists, and prosthetists primarily in Poland. The company, MyDr Spółka z o. o., offers a comprehensive suite of services including electronic medical documentation, e-prescriptions, NFZ billing modules, and mobile applications, positioning itself as a trusted solution with a significant user base and presence at industry events. The platform emphasizes ease of use, compliance with healthcare regulations, and integration with national health systems. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, and jQuery, and supports mobile platforms via dedicated apps on iOS and Android. Analytics and marketing tools like Google Analytics and Facebook Pixel are used to monitor and enhance user engagement. Security posture is solid with HTTPS and encrypted connections, though improvements like DNSSEC and security headers are recommended. Privacy policies and terms of service are present, supporting GDPR compliance, but cookie consent mechanisms are lacking. Overall, the site is professional, trustworthy, and well-positioned in its niche.

M

MyDr Sp. z o.o.

mydr.pl

50

MyDr Sp. z o.o. operates a Polish-language healthcare platform providing patients with online access to medical data, appointment booking, and telemedicine services. The company is a recognized leader in cloud-based Electronic Medical Documentation software in Poland, with a strong market presence and a portfolio including specialized software for dental clinics. The website is professionally designed, mobile-optimized, and integrates with official app stores for iOS and Android applications. Technically, the site uses modern JavaScript frameworks such as Vue.js and mapping libraries like Leaflet.js, delivering a moderate performance experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the platform demonstrates a mature digital infrastructure suitable for its healthcare audience.

D

Doctoralia

doctoralia.pe

66

Doctoralia.pe is a professional healthcare platform focused on connecting patients in Peru with medical specialists. It offers services such as specialist search, patient reviews, expert Q&A, and online appointment booking. The platform is part of the larger Docplanner group, which operates internationally. The website demonstrates a mature digital infrastructure using modern technologies like Vue.js, Algolia for search, and integrates analytics and marketing tools such as Google Analytics and HubSpot. Security posture is good with HTTPS enforced and some security best practices observed, though explicit security headers and cookie consent mechanisms could be improved. The WHOIS data is missing or unavailable, which is a concern for domain legitimacy but the brand and content quality strongly indicate a legitimate and trusted service. Overall, the website is well-designed, user-friendly, and serves a large user base in the healthcare sector.

D

Doctoralia

doctoralia.co

69

Doctoralia Colombia is a well-established online platform that connects patients with medical specialists, enabling appointment booking and access to expert health advice. It serves a large user base in Colombia with over 60,000 healthcare professionals listed. The platform is part of the Docplanner group, a recognized player in healthcare technology. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks, integrated analytics, and secure HTTPS connections. Privacy policies and terms of service are clearly linked, supporting compliance with data protection regulations such as GDPR. However, the absence of a visible cookie consent mechanism and dedicated security policy pages indicates room for improvement in privacy compliance and transparency. Security posture is strong with proper HTTPS and security headers, but incident response readiness and vulnerability disclosure are not publicly documented. Overall, the website is professional, trustworthy, and safe for general audiences seeking healthcare services online.

D

Doctoralia

doctoralia.cl

68

Doctoralia Chile is an online healthcare platform that enables users to find medical specialists, read patient reviews, and book medical appointments both for in-person visits and online consultations. The platform is part of the Docplanner group, a recognized international healthcare technology company. The website targets Chilean patients and offers a wide range of medical specialties and services, emphasizing ease of use and accessibility. Technically, the site employs modern web technologies including Vue.js, Algolia search, Google Analytics, and HubSpot marketing tools, providing a responsive and interactive user experience. Security posture is strong with HTTPS enforcement and standard security headers, though cookie consent mechanisms could be improved to enhance privacy compliance. The absence of WHOIS data limits domain registration trust assessment, but the overall branding and content quality indicate a legitimate and professional service. Strategic recommendations include enhancing privacy consent transparency, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

D

Doctoralia

doctoralia.com.br

67

Doctoralia is a leading online healthcare platform in Brazil that enables users to find healthcare professionals, read patient reviews, and schedule appointments both locally and via teleconsultation. The platform hosts over 500,000 specialists and offers a comprehensive directory with filtering by specialty, location, and insurance plans. The website is well-designed, mobile-optimized, and uses modern technologies such as Vue.js, Algolia search, and various analytics and marketing tools. Security is robust with HTTPS and security headers, though cookie consent mechanisms could be improved to enhance privacy compliance. The WHOIS data aligns with the business claims, showing a legitimate and consistent registration. Overall, Doctoralia presents a professional and trustworthy service for healthcare consumers and providers in Brazil.

D

Doctoralia

doctoraliar.com

68

Doctoralia is a prominent online healthcare platform in Argentina that facilitates finding medical specialists, reading patient reviews, and booking appointments both in-person and online. The website is well-structured, professionally designed, and targets patients and healthcare professionals in Argentina. It offers a comprehensive directory of specialists and integrates modern search and booking functionalities. The platform leverages advanced technologies including Vue.js, Algolia search, and multiple analytics and marketing tools to provide a seamless user experience. Security measures such as HTTPS and security headers are properly implemented, though some privacy compliance aspects like cookie consent banners could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding are consistent with a reputable healthcare service. Overall, Doctoralia presents a strong digital presence with room for enhancements in privacy transparency and contact information availability.

E

ekom21 – KGRZ Hessen

ekom21.de

67

ekom21 – KGRZ Hessen is a prominent IT service provider specializing in digital solutions for public administration in the German state of Hessen. The company offers a broad range of services including software solutions, consulting, IT infrastructure, and training seminars tailored to the needs of municipal governments and public sector entities. Their market position is strong within the regional public sector IT landscape, supported by certifications such as ISO 27001 and ISO 9001:2015, which underscore their commitment to quality and information security. Technically, the website is built on the ionas4 CMS platform and leverages modern web technologies including jQuery, Vue.js, SystemJS, and Matomo analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. The presence of a cookie consent mechanism and comprehensive privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, uses invisible reCAPTCHA for forms, and prominently displays certifications related to information security. While some advanced security headers could be improved, no critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but consistent with the business claims, and no WAF or blocking mechanisms interfere with content access. Overall, ekom21 presents a trustworthy, professional, and secure digital presence aligned with its role as a public sector IT service provider. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact visibility to further strengthen their security posture.

E

EXIM S.A.

exim.pl

58

EXIM S.A. operates the website exim.pl, a prominent Polish travel agency and tour operator specializing in holiday packages, last minute deals, and flight tickets. Positioned as the fifth largest tour operator in Poland, EXIM targets Polish travelers seeking diverse vacation options including exotic destinations, group travel, and customizable plans. The website is professionally designed with a clear focus on user experience, offering rich content and easy navigation. Technically, the site leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager, Usercentrics for consent management, and employs reCAPTCHA for bot protection. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

A

Advantage Consulting, s.r.o.

acjobs.cz

59

Advantage Consulting, s.r.o., operating the website www.acjobs.cz, is a leading Czech personnel agency established in 2002. The company specializes in helping job seekers find employment and offers recruitment services to employers. The website reflects a professional business model targeting both job seekers and companies within the Czech Republic, positioning itself as the largest personnel agency in the country. The site provides a broad range of job offers and related content, including blogs and partner employer listings. Technically, the website employs a modern technology stack including Vue.js, Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. It is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance and user privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF token usage, and cookie management. However, explicit security policies and incident response information are not publicly available, which could be improved. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain registration transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and improving WHOIS data visibility to strengthen trust and compliance further.

Extrema S.r.l. is an Italian company specializing in manufacturing mobility and accessibility solutions such as servoscala, montascale, and piattaforme elevatrici. With over 25 years of experience and a presence in more than 50 countries, Extrema positions itself as a trusted provider focused on improving quality of life through innovative and customizable products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to individuals and organizations seeking barrier-free mobility solutions. Technically, the site leverages modern frameworks like Nuxt.js and Vue.js, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with privacy regulations, including GDPR, supported by clear privacy and cookie policies.

G

Grandwin

grandwin.com

66

Grandwin is an established online gambling platform founded in 2012, offering a comprehensive suite of services including online casino games, live casino, virtual sports, sports betting, and esports betting. The platform targets adult users interested in gambling and betting, primarily in European markets such as Finland. The business operates under Ardevar Ltd, which is referenced in the website footer, indicating a parent or technology partner relationship. The website is professionally designed with multi-language support and clear navigation, providing a good user experience and trust signals such as responsible gaming information and live chat support. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Cloudflare DNS/CDN services. It employs various third-party services for analytics, real user monitoring, and customer support chat, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. The site uses CAPTCHA and offers two-factor authentication, but the latter is off by default. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligned with GDPR requirements. Overall, Grandwin presents a low to moderate risk profile with a solid business and technical foundation. Strategic improvements in DNS security, explicit security policies, and vulnerability disclosure programs would enhance trust and compliance further.

C

Czech Cultural Institute

pq.cz

62

The Prague Quadrennial website represents a well-established international cultural event focused on scenography, performance design, and space. It is organized by the Czech Cultural Institute under the auspices of the Ministry of Culture of the Czech Republic. The event has a strong market position as the largest in its field, attracting participants from over 80 countries. The website content is professionally presented, targeting professionals and enthusiasts in the arts and cultural sectors. Technically, the site uses modern frameworks such as Vue.js and includes media players like Plyr, indicating a moderate level of digital maturity. However, there is room for improvement in performance optimization and accessibility. Security posture is moderate; while HTTPS is presumably enabled, no security headers or explicit security policies are detected, and there is a lack of vulnerability disclosure or incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe and trustworthy but would benefit from enhanced security and compliance measures.

The Landespolizei des Fürstentums Liechtenstein is the official national police authority of Liechtenstein, providing comprehensive law enforcement and public safety services. Their website serves as a central hub for citizens and visitors to access police news, digital reporting services, prevention campaigns, and contact information. The site targets the general public and government stakeholders, positioning itself as a trusted government entity with a clear mission to ensure safety and security within the principality. Technically, the website employs a modern technology stack including Vue.js, Axios, and the concrete5 CMS platform, ensuring a responsive and user-friendly experience. The site is mobile optimized and includes accessibility features, although some improvements could be made. Performance is moderate, with good SEO and structured navigation. From a security perspective, the site enforces HTTPS and uses obfuscated email addresses to protect contact information. However, it lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration details. Overall, the website demonstrates a strong security posture and professional presentation suitable for a government institution. Strategic improvements in privacy compliance and security headers would further enhance trust and regulatory adherence.

S

Symetro s.r.o.

cenyzaprojekty.cz

43

The website cenyzaprojekty.cz is a Czech-language platform offering specialized online tools for architects, project planners, and technicians to estimate construction project costs, plan schedules, and calculate professional fees. It is powered by Symetro s.r.o. and recommended by professional organizations such as ČKAIT and ČSSI, positioning it as a niche service in the construction and engineering consulting sector. The site provides multiple applications covering cost estimation for building and transport projects, honorarium calculations, professional roles budgeting, timelines, and documentation standards. Technically, the site employs modern web technologies including Vue.js, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and bot protection, though explicit security headers and incident response policies are absent. Privacy compliance is supported by cookie consent and published privacy and cookie policies. However, the absence of WHOIS registration data reduces domain trustworthiness and raises concerns about domain legitimacy. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and security disclosures.

S

SOPREMA

soprema.ae

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetated solutions for roofing, building envelopes, and civil engineering sectors. The company maintains a strong market presence with subsidiaries in Canada, France, Italy, and other regions, targeting construction professionals and building owners. Their website reflects a professional business model focused on manufacturing and supplying high-quality building materials. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js and Axios, supported by analytics and marketing tools such as Google Analytics, Crazy Egg, and HubSpot. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

S

SOPREMA

soprema.com.au

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetative solutions for the roofing, building envelope, and civil engineering sectors. The company targets construction professionals and operates primarily in the manufacturing and construction industries with a large-scale business presence in Australia and internationally. The website reflects a professional B2B business model with a focus on product documentation, warranties, and project showcases, supporting its market position as a trusted supplier. Technically, the website is built on WordPress with Elementor and uses modern JavaScript frameworks such as Vue.js and Axios for enhanced user experience. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Crazy Egg, and HubSpot, indicating a mature digital marketing infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data shows a legitimate domain registration without privacy protection, consistent with a professional business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

K

Kulturní Plantáž Blatná

icblatna.cz

58

Kulturní Plantáž Blatná operates as a local cultural and tourist information center in Blatná, Czech Republic. The organization provides visitors and residents with comprehensive information about accommodation, cultural and sports events, local history, natural landmarks, and tourist services. It also offers souvenirs, books, guided tours, and exhibition spaces, positioning itself as a key local hub for cultural engagement and tourism support. The website reflects a small-sized non-profit entity focused on community and visitor services. Technically, the website employs a modern technology stack including jQuery, Tiny Slider, LightGallery, Vue.js, and tracking tools such as Google Tag Manager and Smartlook. It is built on CMS Made Simple and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. The site uses HTTPS, ensuring secure communication. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data limits domain trust assessment, but the presence of official certifications and clear business information supports legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance its security posture and trustworthiness.

D

DEKMETAL s.r.o.

dekmetal.cz

63

DEKMETAL s.r.o. is a Czech-based manufacturer specializing in ventilated metal facade and roofing systems, operating since 2003 as part of the DEK a.s. group, a leading building materials supplier in Czechia and Slovakia. The company offers custom sheet metal solutions tailored to architects, investors, and project designers, positioning itself as a professional and reliable player in the construction materials manufacturing sector. The website reflects a medium-sized enterprise with a clear business focus and consistent branding. Technically, the site employs modern web technologies including Vue.js, UIkit, and integrates advanced tracking and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on contact forms, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a GDPR-compliant cookie consent mechanism and a dedicated privacy statement. Overall, the website is professional, secure, and trustworthy, supporting the company's market position and business credibility.

C

Codeblocks

codeblocks.sk

59

Codeblocks is a small Slovak technology company specializing in software development and innovative digital solutions. Their website showcases a professional portfolio of projects for clients such as Pelikan and United Fashion Group, highlighting their expertise in PHP, Symfony, Vue.js, and Magento among other technologies. The company emphasizes agile methodologies, continuous learning, and a collaborative team culture. Technically, the website is modern, fast, and mobile-optimized, leveraging a rich tech stack including Astro, Tailwind CSS, and various backend databases. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy and cookie policies are missing, representing compliance gaps. Contact information is not explicitly provided on the main site, limiting direct communication channels. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

M

Městský úřad Meziměstí

mezimesti.cz

56

Meziměstí.cz is the official municipal website for the town of Meziměstí in the Czech Republic. It serves as a comprehensive information portal for residents and visitors, providing details about the city administration, local services, news updates, event calendars, and contact information. The site targets local citizens and community members, offering a user-friendly experience with clear navigation and relevant content. The business model is typical for a government entity, focusing on public service and community engagement. The website is well-branded and consistent with municipal identity, supported by a domain registered since 2001, indicating a stable online presence. Technically, the website utilizes modern web technologies including JavaScript frameworks like Vue.js and Mustache.js, integrates Google reCAPTCHA v3 for bot protection, and offers multilingual support via Google Translate. It is built on the Vismo CMS platform and hosted likely by Active24, a known Czech hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate automated abuse. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a formal security or incident response policy. Cookie policy information is present but lacks an active consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data aligns well with the website's official municipal nature, supporting its legitimacy. Overall, mezimesti.cz is a trustworthy and professionally maintained municipal website with solid technical foundations and good content quality. Strategic improvements in security policy transparency and privacy compliance would enhance its security posture and regulatory adherence.

S

Studio Hrdinů

studiohrdinu.cz

55

Studio Hrdinů is a small cultural venue and theatre studio based in Prague, Czech Republic, established in 2012. The website serves as a platform to showcase theatrical productions, exhibitions, and cultural events, targeting a general audience interested in the arts. The business model revolves around event organization and ticket sales, supported by partnerships such as GoOut.net for ticketing services. Technically, the website is built on WordPress and leverages common JavaScript libraries like jQuery, Vue.js, and Moment.js, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie policy present but no detailed privacy or terms of service pages. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

V

VELUX Česká republika, s.r.o.

velux.cz

63

VELUX Česká republika, s.r.o. operates as a leading manufacturer and retailer of roof windows, skylights, sun tunnels, and shading accessories in the Czech Republic. The company is part of the global VELUX Group, known for its strong market position and comprehensive product offerings. The website targets homeowners, builders, architects, and professionals involved in construction and renovation, providing product information, customer support, and professional services. The digital presence is mature, leveraging modern technologies such as Vue.js and Sitecore CMS, with integrated search and analytics tools to enhance user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although public vulnerability disclosure and incident response information are absent. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility, supporting VELUX's market leadership and customer engagement strategies.

S

Sdružení tajemníků městských a obecních úřadů ČR, z. s.

tajemnici.cz

57

Sdružení tajemníků městských a obecních úřadů ČR, z. s. is a professional association representing over 500 secretaries of municipal and city offices in the Czech Republic. The organization focuses on professional development, knowledge exchange, and supporting effective public administration. It offers accredited educational seminars, conferences, and training, and actively participates in advisory bodies of various Czech government ministries. The website is well-structured, professionally designed, and provides comprehensive information about membership, events, and organizational bodies. Technically, the website uses a modern CMS (Vismo6), integrates Google services such as Analytics, Tag Manager, reCAPTCHA v3, and Google Translate. It is served over HTTPS with good security practices, although some security headers are missing. The site is mobile-optimized and accessible, with clear navigation and relevant metadata for SEO. From a security perspective, the site demonstrates a solid baseline with HTTPS and bot protection but lacks explicit security policies and incident response contacts. The absence of WHOIS data reduces trustworthiness assessment, but the professional presentation and external partnerships support legitimacy. Privacy compliance is addressed with cookie consent and a privacy policy. Overall, the site is a credible, professional platform for a government-related non-profit association, with recommendations to enhance security headers and publish security policies to improve trust and compliance.

V

Vzdělávání lékařů

vzdelavanilekaru.cz

75

The website 'Vzdělávání lékařů' serves as an educational platform primarily targeting medical professionals in the Czech Republic. It is associated with the Czech Medical Chamber and offers online courses and continuing professional development resources. The platform uses modern web technologies including Vue.js and Vuetify, and integrates third-party services such as Google reCAPTCHA and Zoom for enhanced functionality. The domain is registered with REG-ZONER since 2020, consistent with the platform's profile as a relatively new educational service. Security measures include HTTPS and a Content-Security-Policy header, though additional security headers could improve the overall posture. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is minimal, with no explicit emails or phone numbers found in the content. Overall, the site is professionally designed, mobile-optimized, and trustworthy for its intended audience.

遠

遠時數位科技股份有限公司

friday.tw

65

The website ec-w.shopping.friday.tw is an established e-commerce platform operated by 遠時數位科技股份有限公司, a subsidiary of the Far EasTone Telecommunications Group in Taiwan. It offers a wide range of consumer products including electronics, beauty, fashion, and daily necessities, enhanced by AI-driven product recommendations. The platform targets general consumers in Taiwan and maintains a strong market position supported by its parent company. Technically, the site is built on modern frameworks such as Vue.js, integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel, and provides a mobile-optimized experience. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks some advanced security headers, which could be improved to enhance protection against common web threats. Privacy compliance is moderate with a clear privacy policy but no explicit cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity with room for security and privacy enhancements.

C

ComAp

comap-control.com

61

ComAp is a well-established company specializing in innovative control solutions for smart and sustainable energy generation and management. The company targets businesses and industries requiring advanced power generation and energy management technologies, positioning itself as a global leader with over 30 years of experience and a strong international presence through multiple subsidiaries. Their key services include power generation control, smart energy management, marine control solutions, and tailored training and cloud-based services. The website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Vue.js, Kentico CMS, and Microsoft Azure hosting, complemented by robust analytics and tracking tools like Google Analytics and Microsoft Application Insights. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, although explicit incident response and vulnerability disclosure policies are not publicly detailed. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, but the overall website quality and business credibility remain high. Strategic recommendations include enhancing transparency around security policies and incident response, and verifying domain registration details to strengthen trust.

N

Národný inštitút vzdelávania a mládeže

spolu-together-jekhetane.sk

51

The website spolu-together-jekhetane.sk represents a Slovak educational project funded by Norway Grants, focused on improving intercultural competencies of teachers and supporting Roma community inclusion in schools. It is managed by the Národný inštitút vzdelávania a mládeže, a recognized national educational institute. The site provides comprehensive educational resources, training programs, and project updates targeting educators and stakeholders involved in Roma inclusion. Technically, the site uses modern frontend technologies including Vue.js and integrates Google Analytics for user tracking. It is hosted behind Cloudflare DNS with HTTPS enforced, ensuring secure access. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not present. Overall, the site is professional, trustworthy, and well-aligned with its stated mission and funding sources.

The website karolinka.cz serves as the official municipal portal for the town of Karolinka in the Czech Republic. It provides residents and tourists with up-to-date information on local events, cultural and sports activities, official announcements, and municipal services. The site targets local citizens and visitors, positioning itself as a trusted source of community information. Technically, the site is built using modern web technologies including Vue.js and Nuxt.js, styled with Tailwind CSS, and enhanced with interactive components like Swiper.js and Leaflet.js for maps. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and shows no signs of critical vulnerabilities, but lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. Overall, the domain is legitimate with a long registration history consistent with a municipal entity. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and adding incident response and vulnerability disclosure information to improve compliance and security posture.

O

OnePlus

oneplus.in

66

OnePlus India operates as the official regional website for the global consumer electronics brand OnePlus, specializing in smartphones, tablets, wearables, and audio products. The website serves as a direct e-commerce platform targeting Indian consumers, offering product sales, customer support, and membership programs such as the Red Cable Club. The brand holds a strong market position in India with a large footprint and multiple authorized service centers. Technically, the website is built using modern frameworks like Vue.js and Vuetify, with robust integration of analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Twitter tracking. The site is well-optimized for mobile and desktop, with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and multiple security headers present, though no explicit public security policy or incident response contacts were found. Overall, the site reflects a mature digital presence consistent with a major technology brand.

T

TVO spółka z ograniczoną odpowiedzialnością

klubtvokazje.pl

50

Klub TVOkazje is a loyalty program operated by TVO sp. z o.o., targeting retail customers in Poland who shop via TV Okazje. The program offers benefits such as gifts, discounts, points accumulation, free shipping, and birthday promotions. The website is built using modern frontend technologies like Vue.js and provides a good user experience with clear navigation and consistent branding. The technical infrastructure is moderate in performance and mobile optimized, hosted likely by OVH SAS. Security posture is adequate but could be improved by adding security headers and explicit incident response policies. Privacy compliance is strong with a comprehensive privacy policy and minimal tracking. Overall, the website is trustworthy and professionally maintained, supporting a small-sized retail loyalty business.

E

Energetika Slovensko, a.s.

zse.sk

63

Energetika Slovensko, a.s., operating under the ZSE brand, is a well-established energy supplier in Slovakia with over 100 years of history. The company provides electricity, gas, photovoltaic solutions, climate control, and electric mobility services to households, businesses, and organizations. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings. Technically, the site uses modern JavaScript frameworks such as Vue.js, integrates cookie consent management via Cookiebot, and employs Google Tag Manager and Exponea for analytics and marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information are absent. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the website is trustworthy, user-friendly, and aligned with the company's business claims and market position.

O

OnePlus

oneplus.com

68

OnePlus is a globally recognized technology company specializing in the design, manufacture, and sale of smartphones, tablets, wearables, and audio devices. The company operates a direct-to-consumer e-commerce platform with localized websites, including this Finnish version, offering a comprehensive product catalog and community engagement. OnePlus maintains a strong market position as a premium yet accessible brand with a loyal customer base and active online community. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Vuetify, integrates advanced analytics and fraud prevention tools, and demonstrates excellent mobile optimization and accessibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy documentation is limited. Overall, the site reflects a mature digital presence aligned with industry best practices, supporting a high level of trust and user experience.

H

Holtzbrinck Buchverlage GmbH

holtzbrinckverlage.de

62

Holtzbrinck Buchverlage GmbH is a prominent German publishing group managing several well-known imprints including Rowohlt, S. Fischer, Argon, Kiepenheuer & Witsch, and Droemer Knaur. The website serves as a corporate portal presenting these subsidiaries and their publishing activities, targeting a general audience interested in literature and media. The business model centers on book publishing and author representation, positioning Holtzbrinck as a major player in the German media industry. Technically, the site employs modern JavaScript frameworks (Vue.js) and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or malicious content.

G

Gewerkschaft der Polizei (GdP)

gdp.de

62

The Gewerkschaft der Polizei (GdP) is the largest police union globally, representing police employees primarily in Germany. The website serves as the official online presence of the GdP Bundesvorstand (Federal Board), providing information about the union and its services. The target audience is police personnel seeking membership and professional representation. The website is built on modern frontend technologies such as Vue.js and Nuxt.js, hosted behind Cloudflare DNS for performance and security. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. No analytics or advertising scripts were detected, indicating minimal user tracking.

P

Polkomtel Sp. z o.o.

plus.pl

57

Plus (Polkomtel Sp. z o.o.) is a leading Polish telecommunications provider offering a wide range of services including mobile telephony, internet, and television. The website showcases subscription plans, bundled services, and device offers targeting both individual consumers and businesses. The company operates under the parent company Cyfrowy Polsat S.A., positioning itself strongly in the Polish telecom market. The digital presence is modern, mobile-optimized, and professionally designed, reflecting a mature and customer-focused business model. Technically, the site leverages modern frameworks such as Vue.js and Tailwind CSS, integrates Google Analytics and Tag Manager for marketing and analytics, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response information are not publicly available. WHOIS data is unavailable due to registry policies, but the website's professionalism and branding strongly indicate legitimacy. Overall, the site represents a secure, compliant, and well-maintained digital asset for a major telecommunications operator in Poland.

S

Skygate

skygate.io

51

Skygate is a custom software development company founded in 2016, serving Bay Area founders and Fortune 500 companies. Recently, it joined the Mindpal family, indicating a strategic partnership or acquisition. The company offers a broad range of services including product design, web development, blockchain and Web3 solutions, and mobile development across multiple platforms. The website is professionally designed using WordPress and Elementor, reflecting a medium-sized technology service provider with a consistent brand image and reputable client base. Technically, the site uses modern web technologies and frameworks, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks some advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is privacy protected but consistent with the business claims, and no blocking or WAF interference was detected.

F

Forendors

forendors.cz

64

Forendors is a Czech-based digital platform that connects content creators with their audiences, providing tools for community building and content monetization. The platform supports creators through a web interface and mobile applications available on iOS and Android, enhancing user engagement with notifications and offline content access. The business positions itself as a niche player in the media sector, focusing on creator empowerment and audience interaction. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted likely on DigitalOcean infrastructure, and integrates Google Tag Manager for analytics and marketing. Security measures include HTTPS enforcement and standard security headers, though no explicit security policy or vulnerability disclosure mechanisms are present. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data is a notable anomaly, suggesting privacy protection or registration issues, but the professional site content and social media presence support legitimacy. Overall, Forendors demonstrates a solid digital maturity with room for improvement in transparency and security disclosures.

I

Istropolitana Ogilvy

istropolitana.sk

56

Istropolitana Ogilvy is a Slovak marketing and advertising agency providing creative and strategic marketing services. The website presents a professional digital presence with a modern tech stack including Vue.js and Nuxt.js frameworks. The site is well-optimized for mobile and includes standard tracking tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers properly configured, though explicit security and privacy policies are absent. The absence of contact information and formal policies slightly reduces privacy compliance and business credibility scores. Overall, the website is trustworthy and professionally maintained, serving a business audience in the marketing sector.

P

PODA

poda.cz

60

PODA is a Czech Republic-based internet service provider specializing in high-speed internet connections up to 2 Gb/s and TV services with over 160 channels. The company targets residential and business customers, offering both optical fiber and wireless internet solutions, alongside IPTV and VoIP calling services. The website reflects a medium-sized, established ISP with a professional online presence and consistent branding. Technically, the site is built on WordPress and leverages modern web technologies including Vue.js, Google Tag Manager, and various analytics and tracking tools. Security posture is strong with HTTPS, security headers, and CAPTCHA integration, though public security policies and incident response contacts are not found. Privacy compliance is indicated by the presence of privacy and cookie policies with consent mechanisms, though GDPR-specific details are basic. Overall, the website is well-structured, mobile-optimized, and trustworthy, with no signs of malicious activity or content blocking.

E

Endevel s. r. o.

endevel.cz

55

Endevel s. r. o. is a Czech-based small technology company specializing in custom development of web applications, websites, and e-shops. Founded in 2018, the company emphasizes modern technology and agile management processes to deliver quality software products efficiently. Their market position is that of a niche provider focusing on tailored software solutions for businesses requiring robust and user-friendly online systems. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the website employs a modern technology stack including Django, Python, Vue.js, and Angular frameworks, hosted on DigitalOcean infrastructure. It integrates Google services such as reCAPTCHA for bot protection, Google Tag Manager for analytics, and Google Maps API for location display. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility could be made. From a security perspective, the site uses HTTPS with strong SSL configuration and implements Google reCAPTCHA on its contact form to prevent spam. Cookie consent is managed with granular user controls and Google Consent Mode is configured to restrict ad personalization and analytics by default, indicating a privacy-aware approach. However, the absence of explicit security headers and published security or privacy policies suggests room for enhancement in security posture and compliance transparency. Overall, the website is safe, professional, and trustworthy with no signs of malicious content or blocking mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing privacy and security policies, adding security headers, and considering a vulnerability disclosure mechanism to further strengthen trust and compliance.

P

Perfect Planet

plnt.cz

61

Perfect Planet is a Czech-based creative agency specializing in brand design, visual identity development, and web application development. Established in 2015, the company has a solid market position with notable projects including university branding and a presidential campaign. The website reflects a professional and modern digital presence built on Vue.js and Nuxt.js frameworks, hosted with Cloudflare DNS services. The site is well-designed, mobile-optimized, and provides clear navigation and content relevant to its target audience of clients seeking branding and web development services. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture. Security-wise, the site uses HTTPS and Cloudflare DNS but does not present security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

Č

Česká komora architektů

diplom.ky

54

The website diplom.ky represents the official platform for the 26th edition of the 'Diplomky' competition, organized by the Czech Chamber of Architects (Česká komora architektů). It serves as a professional showcase and competition for diploma theses of architects, landscape architects, and urban planners from accredited Czech faculties. The site targets recent graduates, academic professionals, and the broader public interested in architectural education and development. The business model focuses on organizing and promoting this competition to foster professional growth and public awareness in the architectural sector. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience with moderate performance. Google Analytics is used for visitor tracking, although privacy compliance measures like cookie consent and privacy policies are missing. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal security policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security compliance.

Č

Česká komora architektů

cka.cz

63

Česká komora architektů is a legally established self-governing professional organization in the Czech Republic that unites authorized architects, landscape architects, and urban planners. The website serves as a comprehensive portal offering information about membership, professional services, architectural competitions, education, and legislative matters relevant to the architectural profession. It targets professionals in architecture and related fields, as well as public administration and clients seeking architectural services. The organization holds a strong national position as the official chamber for architects in the Czech Republic. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, providing a responsive and accessible user experience. The site is well-structured with good SEO practices and mobile optimization. Performance is moderate with no significant technical debt observed. However, there is no detected CMS or hosting provider information. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks several recommended security headers and explicit privacy and cookie policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, and no incident response or vulnerability disclosure information is published, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced transparency in domain registration, improved privacy compliance, and stronger security header implementation to elevate its security posture and user trust.

B

Boutiq Development s.r.o.

lario.cz

42

LARIO is a real estate development project by Boutiq Development s.r.o., focused on creating a new residential and commercial center in Dolní Měcholupy, Prague. The project includes apartments, row houses, and commercial spaces aimed at revitalizing the local community with essential services such as grocery stores, bakery, butcher, pharmacy, and municipal offices. The website presents a professional and well-structured digital presence, leveraging modern web technologies including Vue.js and Nuxt.js, with responsive design and clear navigation. Security posture is adequate with HTTPS usage and GDPR consent mechanisms in forms, though improvements are recommended in security headers and cookie consent implementation. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website reflects a credible and professional real estate business with room for enhanced privacy and security compliance.