Security Directory

M

Merck Sharp & Dohme s.r.o.

ockovaniprotihpv.cz

62

The website ockovaniprotihpv.cz is a professionally designed healthcare information portal focused on HPV infection and vaccination awareness, operated by Merck Sharp & Dohme s.r.o., a subsidiary of Merck & Co., Inc. It targets a broad audience including parents, women, men, and children eligible for vaccination, providing educational content and promoting the Gardasil®9 vaccine. The site maintains consistent branding and offers clear navigation with good content relevance and quality. Technically, it is built on WordPress VIP with modern technologies such as React and integrates Google Tag Manager and OneTrust for analytics and cookie consent, respectively. Hosting is supported by AWS DNS infrastructure, ensuring reliability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, linking to a comprehensive privacy policy hosted on a dedicated domain. Contact information is clearly provided, including company email, phone, and physical address. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy source for HPV vaccination information.

F

Formspark

submit-form.com

66

Formspark is a technology-focused SaaS company founded in 2018, providing a backend service that connects web forms to email and other integrations without requiring users to manage servers or databases. The company targets agencies, freelancers, developers, and marketing teams, positioning itself as a reliable and easy-to-use form backend solution trusted by over 20,000 companies. The website is professionally designed with excellent content quality and clear navigation, supporting multiple languages and integrations with popular platforms such as Slack, Zapier, and various spam protection services. Technically, the website leverages modern frameworks including Next.js and React, hosted on AWS infrastructure. It demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, secure form handling, and multiple anti-spam protections, although some security headers are not explicitly detected and DNSSEC is not enabled. Privacy compliance is good with a comprehensive privacy policy and GDPR page, but lacks a cookie consent mechanism. Overall, the security maturity is solid for a small SaaS provider, with no visible vulnerabilities or suspicious patterns. The domain registration is privacy protected but consistent with the business profile and age. Contact information is available via email and support forms, with active social media presence. No critical issues were found, and the website is safe for general audiences. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing a formal security policy and vulnerability disclosure program, and adding cookie consent to enhance privacy compliance and trust.

M

Mastodon gGmbH

mastodon.online

75

Mastodon.online is a non-profit operated Mastodon server run by Mastodon gGmbH, providing decentralized social networking services as part of the fediverse. The platform targets general users interested in open, ad-free social media alternatives. The website demonstrates a solid technical infrastructure using modern web technologies such as Ruby on Rails and React, hosted on Exoscale. It offers good mobile optimization and accessibility, with a clean and professional design. Security posture is strong with HTTPS enforcement and appropriate security headers, though DNSSEC is not enabled and privacy policies could be more comprehensive. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

The MS Barometer website is an informational platform focused on providing data and statistics related to Multiple Sclerosis in Europe. It targets healthcare professionals, researchers, and the MS community by offering findings, comparisons, and country-specific insights. The site uses modern web technologies including React, Next.js, and Material-UI, hosted likely on DigitalOcean infrastructure. Google Analytics and Tag Manager are employed for user tracking, with a visible cookie consent mechanism ensuring basic compliance. However, the absence of explicit privacy policies, terms of service, and contact information limits its privacy compliance and business credibility. Security posture is moderate with HTTPS enforced but lacking security headers and vulnerability disclosures.

R

Roche

roche.pt

58

Roche Portugal's website presents a professional and well-branded digital presence focused on healthcare innovation, treatment, and diagnostic solutions. The company is positioned as a global leader in healthcare, targeting a general audience interested in pharmaceutical and diagnostic services. The technical infrastructure leverages modern web technologies such as Gatsby and React, providing a responsive and accessible user experience. However, the website lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust in the healthcare sector. The absence of contact details and forms limits direct user engagement and support. Overall, the site is credible and trustworthy but requires enhancements in security and privacy transparency to meet industry standards fully.

A

Arthrex Inc.

arthrexvetsystems.com

54

Arthrex Vet Systems is a division of Arthrex Inc., specializing in orthopedic and orthobiologic medical devices for veterinary applications, targeting veterinarians treating large and small animals. The website offers educational courses and product information, positioning itself as a leader in veterinary orthopedic solutions. The technical infrastructure is modern, leveraging Next.js, React, and CDN services to deliver a responsive and performant user experience. Security posture is generally good with HTTPS and reCAPTCHA usage, though lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trust. Overall, the site is professional and trustworthy in content but requires improvements in privacy compliance and security transparency.

T

Thuasne

thuasne.com

58

Thuasne is a healthcare company specializing in medical devices such as orthopedic supports and compression therapy products, serving an international market with localized websites for multiple countries. The website is built on modern web technologies including React and Next.js, providing a good user experience with mobile optimization and basic accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy policies, terms of service, and detailed contact information which are important for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and should be investigated further. Overall, the site is professional and trustworthy in appearance but requires improvements in transparency and security best practices.

Unilabs is the largest private provider of laboratory and diagnostic services in the Czech Republic, operating over 20 laboratories and 80 collection points with a workforce exceeding 1200 employees. The company offers a broad range of routine and specialized diagnostic tests including biochemistry, hematology, microbiology, immunology, pathology, genetics, and forensic genetics, also serving veterinary practices. The website reflects a professional and comprehensive digital presence with clear navigation, modern technology stack, and compliance with GDPR and cookie consent regulations. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and explicit security policies could be improved. The absence of WHOIS data reduces domain trust from a registration perspective but does not detract from the professional business presentation. Overall, Unilabs demonstrates a mature digital infrastructure supporting its market-leading position in healthcare diagnostics.

N

Nadační fond Dům Ronalda McDonalda

drmcd.cz

61

Nadační fond Dům Ronalda McDonalda is a Czech non-profit organization dedicated to supporting families of children with serious long-term illnesses by providing free accommodation near hospitals. The organization operates the first Ronald McDonald House in Motol and is actively fundraising for a second house in Olomouc. The website reflects a professional and well-established charity with a clear mission and strong community engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, hosted by Active24, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and secure donation processing via a trusted third-party platform. Privacy compliance is evident with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, with active social media presence and transparent business information.

K

KB Pojišťovna

kb-pojistovna.cz

60

KB Pojišťovna is a Czech insurance company offering a broad range of life and non-life insurance products including travel, property, liability, and investment-linked insurance. The website positions the company as a reliable provider with a focus on customer protection and convenience. The company targets individuals and families in the Czech Republic seeking insurance coverage. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content. Technically, the site uses modern JavaScript frameworks (React), integrates multiple analytics and marketing tools, and employs HTTPS for secure communication. However, no WHOIS data was found, which limits domain trust verification. Security posture is good with HTTPS and cookie consent mechanisms, but lacks visible security headers and published security policies. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security disclosures.

OET.com is the official website for the Occupational English Test, a globally recognized English language test specifically designed for healthcare professionals. The website offers test booking, preparation courses, career resources, and access solutions, targeting international healthcare professionals seeking to work, study, or register in English-speaking countries. The business is well-established, with a domain age dating back to 1998, indicating a mature market presence and trustworthiness. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and React, supported by Cloudflare DNS and Google services for analytics and maps integration. Security posture is generally good with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is a high-quality, professional platform serving a niche healthcare education market with strong business credibility but could improve privacy and security transparency.

F

Formthotics

formthotics.com

64

Formthotics is a healthcare-focused company specializing in custom thermoformable medical orthotic insoles, targeting healthcare professionals, clinicians, sports retailers, and patients. The company leverages over 40 years of foot science expertise to provide clinically proven orthotic solutions that enhance patient comfort and performance. Their business model includes product manufacturing, distribution, and professional training services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, but lack some advanced security headers and explicit security policies. The security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of privacy policy and terms of service pages represents a compliance gap. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and domain registration verification. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

K

KeriMedical

kerimedical.com

50

KeriMedical is a specialized medical device company focusing on hand and wrist surgery implants, digital surgical planning solutions, and professional training workshops for surgeons. The company positions itself as a niche leader with advanced technology and strong ties to the Medartis Group, enhancing its market credibility. The website is professionally designed, multilingual, and optimized for performance and SEO, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS data suggests privacy protection or recent registration, common in medical sectors for privacy reasons. Overall, the site presents a trustworthy and professional image suitable for healthcare professionals and patients.

U

UAB RoboLabs

robolabs.lt

32

RoboLabs is a Lithuanian company specializing in modern accounting services, document processing, and business analytics, delivered through their proprietary ROBO platform. The company targets businesses across Lithuania, offering scalable service plans and a user-friendly digital platform that integrates accounting with business management tools. With over 1300 companies trusting their services, RoboLabs positions itself as a modern and efficient accounting service provider in the Lithuanian market. Technically, the website is built using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Facebook SDK for analytics and marketing, alongside Cookiebot for GDPR-compliant cookie consent management. The technical infrastructure supports a professional user experience with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the website content and business presence suggest legitimacy. Overall, RoboLabs demonstrates a strong digital presence and business credibility with room for improvement in domain registration transparency and published security governance. Strategic enhancements in these areas would further strengthen trust and compliance.

O

Ottobock

ottobock.cz

68

Ottobock is a globally recognized healthcare technology company specializing in prosthetics, orthotics, and mobility solutions. The company has a strong market position as a leader in rehabilitation and medical devices, serving patients and healthcare professionals worldwide. Their website reflects a mature digital presence with modern technologies such as Next.js and React, integrated with consent management and analytics tools to ensure compliance and user experience. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information could be improved. Overall, the website demonstrates professionalism, trustworthiness, and compliance with privacy regulations, supporting Ottobock's reputation as a reliable healthcare provider.

Zimmer Biomet is a leading global healthcare company specializing in orthopedic and musculoskeletal medical devices and surgical solutions. The website presents a professional and comprehensive digital presence, targeting healthcare professionals, patients, and caregivers with detailed product information, services, and educational resources. The company positions itself as a market leader with a broad portfolio of innovative healthcare solutions. Technically, the site leverages modern frameworks such as React and Next.js, hosted on Vercel, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. Overall, the site reflects a mature digital infrastructure aligned with enterprise healthcare standards.

L

LAMOMEDIC, s.r.o.

peptys.cz

61

LAMOMEDIC, s.r.o. operates the PEPTYS website, offering an innovative medical device focused on treating joint pain and degenerative changes by stimulating natural collagen production. The company targets patients with osteoarthritis and sports injuries, positioning itself as a niche healthcare innovator with clinical support and a clear product offering. The website is well-structured, professionally designed, and provides comprehensive business and contact information, enhancing trust and credibility. Technically, the site uses modern React-based technologies hosted on Websupport infrastructure, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis.

P

phactMI

phactmi.org

62

phactMI is a non-profit collaboration of pharmaceutical industry Medical Information leaders dedicated to providing healthcare professionals with accurate, evidence-based drug information to support clinical decision making. The organization offers a searchable drug information database, scientific responses to healthcare professional inquiries, and access to clinical experts within member companies. Their market position is that of a trusted source in the pharmaceutical and healthcare information sector, primarily targeting licensed healthcare professionals in the United States and Puerto Rico. Technically, the website is built using modern web technologies including React, Google Analytics, Google Tag Manager, and various marketing and tracking tools. The site is mobile optimized with good navigation and content relevance. Performance is moderate, and SEO practices are adequately implemented. The site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and a dedicated security policy page. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it could improve by implementing comprehensive security headers and publishing incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with clear privacy and cookie policies. Overall, phactMI presents a professional, trustworthy, and secure online presence appropriate for its healthcare-focused mission. Strategic recommendations include enhancing security headers, publishing a security policy, and improving transparency around incident response to further strengthen trust and compliance.

D

Datarun

datarun.cz

66

Datarun is a Czech technology company specializing in data processing and automation solutions, targeting business clients. The website is built using modern web technologies including React and Next.js, hosted behind Cloudflare, and incorporates cookie consent mechanisms via Cookiebot. The site demonstrates a moderate level of digital maturity with good design quality and mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of a privacy policy and contact information reduces compliance and trust levels. The domain WHOIS data is unavailable, likely due to privacy protection, which slightly impacts legitimacy assessment. Overall, the website is professional and functional but would benefit from enhanced transparency and compliance documentation.

I

International SOS

internationalsos.com

76

International SOS is a globally recognized leader in international health and security risk management, providing comprehensive services to protect business travellers and international assignees from health and security threats worldwide. The company offers tailored solutions including travel risk management aligned with ISO 31030, executive protection, and a proprietary assistance app. Their market position as a pioneer and their 40 years of operational history underscore their expertise and reliability in this niche. Technically, the website is built on modern web technologies such as React and JavaScript, with a responsive design optimized for mobile devices. The site integrates multiple analytics and marketing tools, including Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, reflecting a mature digital marketing strategy. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and uses secure forms with consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file and incident response contact details suggests room for improvement in transparency and security communication. Overall, the website presents a professional, trustworthy, and well-maintained digital presence. The lack of WHOIS data reduces some trustworthiness but is likely due to privacy protection or domain management practices. Strategic recommendations include publishing vulnerability disclosure information, enhancing incident response transparency, and maintaining rigorous security practices to uphold their market leadership.

M

Malta Union of Midwives and Nurses (MUMN)

mumn.org

62

The Malta Union of Midwives and Nurses (MUMN) operates as a professional union representing healthcare workers in Malta, including nurses, midwives, physiotherapists, ECG technicians, and social workers. The organization focuses on safeguarding workplace rights, improving working conditions, and promoting continuous professional development for its members. The website reflects a well-structured union with active news updates, member testimonials, and initiatives such as benevolent funds and educational seminars. Technically, the site is built on modern web technologies including React and integrates Google Analytics and Tag Manager for tracking. Media assets are hosted on Microsoft Azure Blob Storage, indicating a cloud-based hosting approach. Security posture is generally good with HTTPS enforced, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves its target audience effectively.

L

Ljósmæðrafélag Íslands

ljosmaedrafelag.is

66

Ljósmæðrafélag Íslands is a professional association dedicated to midwives in Iceland, providing comprehensive support and services to both practicing midwives and midwifery students. The organization focuses on labor issues, professional development, and member benefits, positioning itself as a key national entity in the healthcare sector for maternal care. The website is well-structured, professionally designed, and serves as a central hub for information, news, and resources relevant to its members and the public. Technically, the site leverages modern web technologies including Next.js and Prismic CMS, ensuring a responsive and accessible user experience. Security measures such as HTTPS and appropriate security headers are in place, contributing to a strong security posture. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement in transparency and security readiness. Overall, the site reflects a mature digital presence aligned with the organization's professional and non-profit nature.

P

PC Financial

pcfinancial.ca

51

PC Financial is a Canadian financial services brand offering banking and credit card products integrated with the PC Optimum loyalty rewards program. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates multiple marketing and analytics tools to optimize user engagement and business insights. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, trustworthy financial brand with a strong focus on customer rewards and digital banking convenience.

L

Loblaws Inc.

pcoptimum.ca

69

PC Optimum is a prominent Canadian loyalty rewards program operated by Loblaws Inc., offering customers the ability to earn and redeem points across a wide network of grocery stores, pharmacies, and fuel stations. The program integrates with PC Financial Mastercard to provide enhanced rewards, targeting Canadian consumers who frequently shop at affiliated retail locations. The website demonstrates a mature digital presence with a modern React-based tech stack, integration of third-party services for analytics, marketing, and user engagement, and strong mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although incident response contact details are not publicly visible. Overall, the domain and website content align with a legitimate enterprise-grade retail loyalty program.

H

Hyve

hyve.com

75

Hyve is a professional managed hosting and cloud services provider with a global footprint, offering tailored IT infrastructure solutions including private cloud, dedicated servers, and colocation. The company positions itself as a customer-centric, secure, and reliable partner with over 35 global locations and multiple industry certifications. The website demonstrates a mature digital presence with modern technologies and strong SEO and accessibility features. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall professional presentation and trust signals mitigate this risk. Strategic recommendations include publishing detailed security policies and monitoring domain registration status to enhance trust.

Č

Česká asociace farmaceutických firem

caff.eu

50

Česká asociace farmaceutických firem (ČAFF) is a professional industry association representing pharmaceutical companies in the Czech Republic, focusing on generics, biosimilars, and value-added medicines. The organization serves as a key advocate and information hub for its members and stakeholders, maintaining strong ties with European pharmaceutical bodies such as Medicines for Europe. The website reflects a medium-sized organization with a clear focus on healthcare industry stakeholders, providing member services, certification, and public information. The content is primarily in Czech with some English support, targeting industry professionals, media, and members.

E

Economist Impact

economistimpact.com

66

Economist Impact is a specialized division of The Economist Group focused on partnering with corporations, foundations, NGOs, and governments to drive change in key global themes such as sustainability, health, and globalisation. The organization leverages a combination of independent research, bespoke content creation, advertising, sponsorship, and large-scale events to influence policy and business decisions worldwide. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports its mission. Technically, the site is built on modern web frameworks including React and Next.js, uses Contentful as a CMS, and integrates advanced monitoring and analytics tools such as New Relic. The presence of a consent management platform indicates attention to privacy compliance, particularly GDPR. Performance and mobile optimization are strong, contributing to a positive user experience. From a security perspective, the site uses HTTPS and monitoring tools but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data for the subdomain is not publicly available, which is typical for subdomains, and the domain is strongly associated with the reputable Economist brand. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and providing vulnerability disclosure information to further strengthen trust and compliance.

L

Loblaw Companies Ltd.

loblaw.ca

66

Loblaw Companies Ltd. is a leading Canadian retail company specializing in grocery, health, beauty, financial services, and fashion. The website showcases a comprehensive portfolio of brands and services aimed at serving Canadian consumers with a focus on affordability, health, and lifestyle. The company operates an extensive network of stores and subsidiaries, positioning itself as a dominant player in the Canadian retail market. Technically, the website is built on modern web technologies including React and Next.js, with integrations for analytics and authentication such as Google Analytics, Google Tag Manager, and Okta. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure authentication mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website presents a professional, trustworthy, and secure digital presence for Loblaw Companies Ltd. The lack of WHOIS data is attributed to privacy protection, which is justified for a large enterprise. Strategic recommendations include publishing a vulnerability disclosure policy and enhancing incident response transparency to further strengthen security posture.

Rek.ai, operated by Sandskogen AI Aktiebolag, is a Swedish technology company specializing in artificial intelligence solutions for website personalization. Founded in 2018, the company targets businesses seeking to enhance user experience through AI-driven personalized content and analytics. Their market position is that of a niche AI personalization provider primarily serving the Scandinavian region. The website reflects a modern technical infrastructure built on React and Next.js frameworks, with Cloudflare DNS services and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides clear navigation and business-focused content. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Contact information is available via a contact page but lacks direct emails or phone numbers in the visible content. Overall, the website is trustworthy, business-oriented, and safe for general audiences.

Rivile is a well-established Lithuanian software company specializing in accounting and business management solutions, including cloud-based ERP and desktop applications. The company targets businesses in Lithuania, offering modular software products that cover a wide range of business needs such as payroll, POS, and document digitization. Their market position is strong, supported by over 20 years of operation and a large client base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates professionalism, compliance with GDPR, and a trustworthy digital presence.

R

Revolut

revolut.com

73

Revolut is a leading global fintech company providing a comprehensive suite of financial services including personal and business accounts, international money transfers, currency exchange, savings, investments, cryptocurrency, and insurance products. With over 65 million customers worldwide and strong regulatory authorizations from the UK's Financial Conduct Authority, Revolut holds a significant market position in the digital banking and fintech space. The website reflects a mature digital presence with excellent content quality, user experience, and mobile optimization. Technically, the website leverages modern web technologies such as React and Next.js, delivering fast performance and strong SEO optimization. Security measures are robust, including HTTPS enforcement and multiple security headers, alongside a proactive fraud detection team and a responsible disclosure program. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Revolut demonstrates a strong security posture with no critical vulnerabilities detected. The absence of WHOIS data is likely due to privacy protection, which is common for fintech companies to mitigate spam and abuse risks. The website is trustworthy, professional, and well-aligned with industry best practices, making it a reliable platform for financial services users.

M

MEDDI hub a.s.

meddi.com

65

MEDDI hub a.s. operates a telemedicine platform that enables patients and healthcare professionals to connect securely via calls, video calls, and chat. The platform supports multiple devices and languages, offering services such as online consultations, prescriptions, confirmations, and second opinions. The company holds partnerships with reputable medical institutions and maintains ISO 27001 certification, underscoring its commitment to security and compliance. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies with consent mechanisms. Technically, the site uses modern frameworks like Next.js and React, integrates Google Tag Manager for analytics, and enforces HTTPS with strong encryption practices. While WHOIS data is unavailable, the overall trust indicators and business presence suggest legitimacy. Security posture is strong, though improvements in publishing explicit security headers and incident response contacts are recommended.

O

Okredo

okredo.com

64

Okredo is a specialized business data provider focusing on delivering company ratings, credit limits, corporate values, and financial indicators to support business growth. The company targets businesses seeking reliable credit and financial insights primarily in Lithuania and selected European countries. Their market position is that of a niche data-as-a-service provider with a clear focus on financial data and credit risk management. The website is built on modern technologies including Next.js and React, integrating secure payment processing via Stripe and comprehensive cookie consent management through Cookiebot. The technical infrastructure reflects a mature digital presence with fast performance and good mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy hosted by Cookiebot. However, the site lacks explicit terms of service and security policy pages, and no direct contact information is provided on the main page, which could be improved to enhance business credibility. Overall, the website is professional, trustworthy, and well-structured, supporting Okredo's business objectives effectively.

The website tomashubik.cz represents a professional portfolio for Tomas Hubik, a Czech-based full stack developer specializing in front-end technologies such as Angular and React, with additional skills in UI/UX and graphical design. The site showcases a broad portfolio of freelance projects and indicates current employment as a lead software developer. The business model is primarily freelance and professional services targeting clients seeking development and design expertise. The website is well-structured with clear navigation and professional branding, targeting a general audience of potential clients and collaborators. Technically, the site uses a modern technology stack including JavaScript frameworks, PHP, Java, and related libraries. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The site includes Google Fonts and Google Analytics for tracking. The design is responsive and optimized for mobile devices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks published privacy and cookie policies, which is a compliance gap especially under GDPR. No security headers were detected, and the contact form lacks visible anti-spam protections. HTTPS usage is implied but not explicitly confirmed in the HTML content. There is no published incident response or vulnerability disclosure information. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enforcing HTTPS, adding anti-spam measures on forms, and providing incident response contacts. These improvements would enhance compliance, user trust, and security maturity.

J

Jackpotpiraten

jackpotpiraten.de

72

Jackpotpiraten is a German online slot gaming platform specializing in legal PayPal-based slot games such as Merkur and Novoline. The website positions itself as a trusted and legal online casino alternative, offering promotions like free spins with low deposit requirements. Technically, the site is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service documents are not found in the provided content. No WAF or blocking mechanisms interfere with content access. Overall, the platform targets adult German users interested in online gambling, maintaining a professional and consistent brand presence.

C

CaptchaFox

captchafox.com

52

CaptchaFox is a Germany-based technology company specializing in GDPR-compliant captcha and bot protection services for websites and mobile applications. Founded in 2020, it positions itself as a privacy-first alternative in the bot mitigation market, emphasizing compliance with European data protection standards and adaptive bot detection technologies. The website reflects a professional SaaS business model targeting companies seeking to protect their digital assets from malicious bot traffic while maintaining user privacy. Technically, the website is built using modern frameworks such as Next.js and React, hosted on bunny.net, and optimized for performance and accessibility. The site demonstrates good SEO practices and mobile responsiveness, with rich SVG graphics and structured data enhancing its digital maturity. However, explicit privacy and cookie policies are not directly found in the provided content, which could be improved to enhance transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. There is no evidence of security.txt or vulnerability disclosure mechanisms, and security headers are not detected in the provided data. The absence of explicit contact information and security policies suggests areas for improvement in incident response readiness and user trust. Overall, CaptchaFox presents a credible and professional online presence with a strong focus on privacy and compliance. Strategic enhancements in policy disclosures, security headers, and contact transparency would further strengthen its security posture and compliance standing.

E

Euroleague Basketball

euroleaguebasketball.net

66

Euroleague Basketball operates as the official digital platform for the Euroleague basketball competitions, providing comprehensive media coverage including live matches, news, statistics, video highlights, and fan engagement features such as fantasy challenges. The website is well-designed, mobile-optimized, and uses modern web technologies like Next.js and React, hosted likely on Vercel. The platform integrates multiple advertising and analytics services, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and visible privacy/legal policies, which are areas for improvement. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, though the website content and branding appear professional and trustworthy. Overall, the site serves a specialized audience of basketball fans and stakeholders in European basketball with high-quality content and user experience.

W

Wines from Czech Republic

wineofczechrepublic.cz

63

The website www.vinazmoravyvinazcech.cz serves as a regional informational and promotional platform focused on wines from the Moravia and Bohemia regions of the Czech Republic. It targets wine enthusiasts, tourists, and consumers interested in Czech wines, offering details about wine varieties, events, and related content. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the absence of WHOIS registration data and lack of visible privacy, cookie, and contact policies reduce its trustworthiness from a security and compliance perspective. No security headers or SSL configuration details were available, and no explicit security or incident response contacts were found. Overall, the site is functional and informative but would benefit from enhanced transparency and security practices.

The website plus4u.net appears to represent a digital services platform focused on enabling users to compose their own online services from various applications. The site uses modern web technologies including React, UU5 framework, and Google Tag Manager for analytics. However, the visible content in the provided HTML snapshot is minimal, primarily technical scaffolding without substantive user-facing content or business details. The WHOIS data is unavailable or indicates the domain is not registered, which raises significant concerns about the legitimacy and trustworthiness of the domain. No contact information, privacy policies, or terms of service are present, limiting compliance and user trust. Security posture is weak due to lack of visible security headers and SSL configuration details. Overall, the site appears to be in an early or incomplete state or possibly a placeholder.

Unicorn a.s. is a well-established European IT company founded in 1990, specializing in delivering large-scale information systems and IT solutions. The company targets business customers primarily in the Czech Republic and broader European market, offering a range of IT products, services, and solutions that provide competitive advantages and high added value. The website reflects a professional business presence with consistent branding and clear contact information, supporting its market position as a reputable technology provider. Technically, the website employs modern web technologies including React and UU5 frameworks, with integration of Google Tag Manager for analytics and marketing. The site is hosted with a reputable registrar and DNS providers, though DNSSEC is not enabled. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit privacy or cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is published, indicating room for improvement in security transparency and governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and published security policies to strengthen its security posture and regulatory adherence.

The Technical University of Košice (TUKE) is a well-established public university in Slovakia, offering a broad range of higher education and research programs in innovative technical fields. The website reflects a strong market position as a leading educational institution with a large student body and international collaborations, including Erasmus+ and the Ulysseus European University alliance. The digital presence is modern, leveraging Next.js and React technologies, with excellent mobile optimization and user experience. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the university's mission and audience.

3

Events in Jablonec | 365 Jablonec

365jablonec.cz

47

The website 365jablonec.cz serves as a local event listing platform for Jablonec nad Nisou, Czech Republic, providing up-to-date information on cultural, sports, educational, and leisure events. It targets a general audience interested in local happenings and offers features such as event search and organizer information. The site uses modern web technologies including React and Next.js, indicating a contemporary technical infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve compliance and trust.

У

Українська національна лотерея

unl.ua

51

The website represents the official Ukrainian National Lottery, providing state lottery services and online ticket purchases. It targets Ukrainian citizens interested in participating in national lotteries. The site uses modern web technologies including React and integrates multiple analytics and tracking services such as Google Analytics, TikTok Pixel, and Facebook Pixel. The technical infrastructure appears moderately optimized for performance and mobile usage, with a good level of design and user experience. Security posture is adequate with HTTPS enabled, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of accessible privacy and cookie policies and no clear consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

The website www.priserkyvhlave.cz is an educational platform in Czech language focused on teaching about monsters through interactive games and resources, primarily targeting schools and children. It is a project supported and co-financed by the European Union and the Czech Ministry of Interior, indicating a non-commercial, public service nature. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided, which limits transparency and user trust. From a technical perspective, the site is built on a modern JavaScript framework with client-side rendering and moderate performance. No analytics or tracking scripts were detected, suggesting minimal user tracking. Security posture is limited due to the absence of security headers and no visible SSL configuration details. The WHOIS data for the domain is unavailable, likely due to privacy protection or domain registration issues, which negatively impacts the trustworthiness assessment. Overall, the website is safe and suitable for general audiences, with no adult or explicit content detected. The lack of WHOIS transparency and privacy policies are the main concerns. Strategic recommendations include implementing comprehensive privacy and cookie policies, improving security headers, providing clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

S

Sitejabber

sitejabber.com

63

Sitejabber is a leading online platform specializing in consumer business reviews and ratings, serving over 200 million customers and featuring reviews for more than 130,000 businesses. Positioned as a trusted resource, it offers consumers insights to make informed purchasing decisions and provides businesses with a platform to engage with customers. The company emphasizes trust, consumer protection, and transparency, supported by its award-winning status and Google Partner certification. Technically, Sitejabber employs modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security is robust with HTTPS enforcement and comprehensive security headers, although public incident response and vulnerability disclosure policies are not evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Sitejabber demonstrates a mature digital presence with high professionalism and trustworthiness, though WHOIS data unavailability slightly impacts domain transparency.

R

Roche

roche.cz

58

Roche Česká republika is a regional website representing Roche, a global leader in healthcare innovation specializing in pharmaceuticals and diagnostic tests. The website presents professional branding and content focused on innovative medicines and diagnostics aimed at improving patient outcomes worldwide. The technical infrastructure is modern, leveraging Gatsby and React frameworks, ensuring good mobile optimization and user experience. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is weak due to missing security headers and lack of visible security policies. Privacy compliance is minimal with no detected privacy or cookie policies. Overall, the website is professional and trustworthy in content but requires improvements in transparency and security practices.

J

jackpots.ch

jackpot.ch

69

jackpots.ch is a Swiss-based online casino platform offering over 2,000 casino games with legal authorization in Switzerland. The website targets adult Swiss players, providing welcome bonuses and free spins to attract users. The platform uses modern web technologies including React and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, and Usercentrics for consent management. Security posture is strong with HTTPS and security headers properly implemented, although explicit privacy and terms of service pages are not detected in the provided content. The absence of clear contact information and incident response details suggests areas for improvement in transparency and compliance. Overall, jackpots.ch presents a professional and trustworthy online gambling service within its regulated market.

Matyáš Herman is an independent fullstack developer specializing in React, Node.js, PHP, and modern web technologies, targeting brands and businesses seeking modern website solutions. The website serves as a personal portfolio showcasing skills and services. The technical infrastructure is based on modern frontend frameworks such as React and Next.js, providing a responsive and visually appealing user experience. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the active social media presence supports legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

C

Constellium

constellium.com

70

Constellium is a global leader specializing in the development, manufacturing, and recycling of aluminum products and solutions, serving key industries such as aerospace, automotive, and beverage can manufacturing. The company emphasizes innovation and sustainability, supported by its global learning program, Constellium University. The website reflects a professional and well-structured digital presence, leveraging modern technologies like Gatsby and React, and integrating analytics and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not published. The absence of WHOIS data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the website demonstrates a mature digital infrastructure aligned with corporate standards, with room for improvement in transparency around security policies and domain registration details.

P

Playtech Academy

playtechacademy.com

52

Playtech Academy appears to be an educational platform focused on providing product learning related to Playtech's offerings. The website content is minimal but consistent with an educational/training business model targeting a general audience interested in Playtech products. The technical infrastructure is based on modern web technologies such as React and includes Google Translate integration for multilingual support, indicating some digital maturity. However, the website lacks critical security and compliance features such as privacy policies, cookie consent mechanisms, and contact information, which impacts its trustworthiness and user confidence. The absence of WHOIS registration data raises concerns about the domain's legitimacy and age, suggesting it may be newly registered or unregistered, which is unusual for a business-oriented site. Overall, the security posture is weak with no visible security headers or HTTPS confirmation, and no analytics or tracking mechanisms are detected, indicating minimal user data collection but also limited business intelligence capabilities.