Security Directory

B

Big Fish Games

bigfishgames.com

10

Big Fish Games operates a leading e-commerce platform specializing in downloadable casual games for PC and Mac users. The website offers a broad catalog of games, subscription services like Game Club, and exclusive deals, positioning itself as a trusted marketplace in the casual gaming sector. The technical infrastructure leverages Adobe Experience Manager CMS, React framework, and integrates modern analytics and payment processing technologies, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, secure payment gateways, and monitoring tools, though explicit privacy and cookie policies are not clearly presented in the analyzed content. Overall, the site is professional, user-friendly, and safe for general audiences, but could improve transparency in privacy compliance and incident response.

Matyáš Herman is a professional fullstack developer specializing in modern web technologies such as React, Node.js, and PHP, with over 5 years of experience. The website presents a strong portfolio and professional presence, targeting brands and businesses seeking performant and story-driven websites. The technical infrastructure is modern, leveraging Next.js and TypeScript, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though lacking explicit security headers and formal privacy policies. The absence of WHOIS data reduces domain trustworthiness, but the professional content and social media presence support legitimacy. Overall, the site is well-designed and functional, with room for improvement in privacy compliance and security disclosures.

E

eVstupenka

evstupenka.cz

68

eVstupenka.cz is a well-established online ticketing platform primarily serving the Liberec region in the Czech Republic. Founded in 2006, it offers a comprehensive catalog of cultural events including theater, concerts, musicals, festivals, and other entertainment options. The platform supports online ticket sales, subscription packages, and gift vouchers, targeting local residents and visitors interested in cultural activities. The website demonstrates a consistent brand presence and provides a user-friendly experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies such as React and Next.js, integrated with DatoCMS for content management, and employs Google Tag Manager and Analytics for tracking.

Global Concept Consulting is a well-established communication agency based in Brussels, Belgium, with over 20 years of experience delivering strategic communication, public affairs, media relations, event management, branding, video production, and web development services. The company has a strong international presence, working on projects in more than 80 countries and maintaining close proximity to European institutions. Their market position is reinforced by awards such as the German Brand Awards and partnerships with European and United Nations agencies. Technically, the website is built on a modern React and Next.js framework with a headless WordPress CMS backend, hosted via OVH sas, providing a solid digital infrastructure with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-branded, though it would benefit from enhanced privacy compliance and security best practices.

A

Amusnet

amusnet.com

70

Amusnet is a well-established gaming provider founded in 2012, specializing in online casino games, live casino, and land-based slot cabinets. The company holds a strong market position supported by numerous industry awards and a broad network of partners. Their business model focuses on B2B services, delivering innovative gaming solutions and reliable support to operators worldwide. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, although improvements are recommended in DNSSEC and security headers. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which is a notable gap. Overall, Amusnet demonstrates high business credibility and trustworthiness but should enhance privacy and security transparency to align with best practices.

M

Mito Group

mito.group

76

Mito Group is a well-established independent digital agency based in Hungary, specializing in digital product development, communication campaigns, and integrated marketing services for multinational companies across Europe. The company operates through four interconnected business units, offering a broad range of services from creative development to data-driven marketing and CRM solutions. Their client portfolio includes major brands such as Magyar Telekom, Wizz Air, Mastercard, Nokia, and others, indicating a strong market position and trust in their capabilities. Technically, the website is built on modern frameworks like Next.js and React, hosted likely on AWS Cloudfront, and employs advanced tools such as Google Tag Manager and reCAPTCHA Enterprise for analytics and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and implements privacy and cookie policies with consent mechanisms, demonstrating good security hygiene. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, Mito Group presents a professional, trustworthy, and secure online presence consistent with its business claims. The domain WHOIS data is privacy protected but aligns with the company's Hungarian base and business history. Strategic recommendations include enhancing security transparency, adding vulnerability disclosure mechanisms, and publishing data protection officer contact details to further strengthen compliance and trust.

O

Optimove Inc.

optimove.com

69

Optimove Inc. is a technology company specializing in AI-driven Positionless Marketing platforms that empower marketers to independently execute personalized, multichannel campaigns at scale. The company is recognized as a visionary leader in multichannel marketing by Gartner and serves enterprise clients across retail, e-commerce, iGaming, forex, and social gaming sectors. Their platform includes AI decisioning, customer engagement, digital personalization, gamified marketing, and predictive AI tools. Technically, the website is built on modern frameworks like React and Next.js, with strong mobile optimization and fast performance. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a minor trust concern but is offset by strong branding, client testimonials, and compliance with GDPR. Overall, Optimove presents a professional, credible, and technically mature online presence suitable for enterprise marketing clients.

M

MVKM s.r.o.

mvkm.cz

53

MVKM s.r.o. is a Czech Republic based marketing agency specializing in performance marketing, PPC campaigns, SEO, social media management, and video production. The company targets businesses seeking measurable marketing results and ROI, positioning itself as a small but professional agency with over 20 satisfied clients and a high client satisfaction rate. The website is modern, well-designed, and mobile-optimized, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and React, with service workers for enhanced performance. Security posture is good with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is limited, with no dedicated privacy policy page found, though a cookie consent banner is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

Lasvit is a Czech-based company specializing in bespoke glass design, manufacturing unique lighting installations and architectural glass products. Established in 2007, it blends traditional craftsmanship with innovative design to serve a global clientele including architects, designers, and luxury commercial and residential customers. The company maintains a strong market position in the high-end bespoke glass industry with a focus on artisanal quality and design excellence. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data and some security policy disclosures slightly reduce trust scores.

K

KELER KSZF Zrt.

kelerkszf.hu

62

KELER KSZF Zrt. operates as a leading clearing house in Hungary and Central and Eastern Europe, providing clearing, central counterparty, risk management, and guarantee services primarily for financial and energy markets. The company is EMIR authorized and has nearly 20 years of experience, serving multiple market platforms including Budapest Stock Exchange and various energy exchanges. The website reflects a professional business presence with clear service offerings and market focus. Technically, the site uses modern frameworks such as Next.js and React, with Google Tag Manager for analytics and cookie consent management. Security posture is strong with HTTPS and security headers, though explicit privacy and terms policies are missing. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is well-structured and trustworthy but could improve privacy compliance and contact transparency.

M

MH CET

maharashtracet.org

68

The analyzed website is an authentication portal for the mh-cet realm, likely related to Maharashtra's Common Entrance Test or a government educational service. It uses Keycloak for identity and access management, leveraging OpenID Connect protocols for secure user authentication. The portal is designed primarily for login purposes and does not contain public-facing business content or marketing information. The technical infrastructure includes React and PatternFly for UI components, indicating a modern but minimalistic design approach focused on functionality rather than content richness. Security posture is moderate with HTTPS enabled and secure authentication flows; however, the absence of security headers and privacy policies indicates areas for improvement. The lack of WHOIS data transparency reduces domain trustworthiness, though the domain's linkage to a government-related domain suggests legitimacy. Overall, the site serves a critical authentication function with a basic but functional technical implementation.

S

Standard Chartered

sc.com

74

Standard Chartered is a global banking institution focused on wealth, corporate, and investment banking services primarily across Asia, Africa, and the Middle East. The website presents a professional and comprehensive digital presence with clear branding and extensive content targeting corporate, institutional, and affluent clients. The business model emphasizes cross-border capabilities combined with wealth management expertise. Technically, the site is built on WordPress with modern JavaScript frameworks like React and uses Google Tag Manager and OneTrust for analytics and consent management. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though security headers are not detected and no explicit incident response contacts or vulnerability disclosure mechanisms are found. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and professional, though WHOIS data is unavailable, which is unusual for a major bank domain and should be monitored. Strategic recommendations include improving HTTP security headers, publishing a security.txt file, and providing explicit incident response contacts.

N

Northern Trust

northerntrust.com

73

Northern Trust is a well-established financial services company specializing in wealth management, asset servicing, and investment management, targeting prominent individuals, families, and institutions primarily in Europe. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. The technical infrastructure leverages modern web technologies including React, Adobe Experience Manager, and multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly visible. Overall, the website presents a trustworthy and professional image consistent with an enterprise-level financial institution.

K

KELER Zrt.

keler.hu

64

KELER Zrt. is a leading central securities depository and clearing house in Central and Eastern Europe with over 30 years of experience. The company provides comprehensive financial market infrastructure services, including securities custody, clearing, and facilitating Target2-Securities benefits. The website reflects a professional and modern digital presence built on React and Next.js frameworks, integrated with Sense/Net CMS and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a cookie consent mechanism and a clear privacy policy. Overall, the website demonstrates high business credibility and technical maturity, supporting KELER's market position as a trusted financial institution.

C

Clearstream

clearstream.com

68

Clearstream is a leading provider of post-trade infrastructure and securities and fund services, operating as part of the Deutsche Börse Group. The company serves international and domestic capital markets with a comprehensive suite of financial services including securities custody, fund services, collateral management, and digital solutions. The website reflects a mature and professional digital presence with modern technologies such as React and Next.js, and integrates analytics and cookie consent mechanisms to comply with privacy regulations. Security posture is strong with HTTPS enforcement, secure forms, and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, Clearstream's website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its enterprise-level financial services business.

B

Barevný svět dětí

superkamos.cz

40

The website superkamos.cz represents a non-profit initiative called 'Kámoš' under the organization Barevný svět dětí, focused on supporting at-risk children and their families in the Czech Republic. The project pairs children with personal assistants who provide mentorship and social support, funded through sponsorships and donations. The site serves as a platform to inform potential donors about the project and facilitate contact and support. Technically, the site is built using modern React and Material-UI frameworks, hosted likely by Wedos, and integrates a WordPress backend for content management. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. Contact information is clearly provided, enhancing business credibility. Overall, the site is legitimate, safe, and well-positioned for its non-profit mission but would benefit from enhanced privacy compliance and security best practices.

T

The Procter & Gamble Company

pg.com

76

The Procter & Gamble Company operates a comprehensive and professionally designed website at us.pg.com, serving as a digital presence for its consumer goods business in the United States. The company is a global leader in manufacturing and retail of consumer products, with a strong emphasis on sustainability, innovation, and community impact. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, hosted on Azure, and integrates advanced analytics and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers should be verified. Privacy compliance is robust, with clear policies and consent mechanisms in place. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the main domain pg.com is a well-established and trusted corporate domain. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

S

Selfstorm

creativefastaid.com

60

Selfstorm is a small media-focused business offering digital tools for brand strategists and creatives, including data research, brand strategy frameworks, demand analytics, and creative inspiration delivered via editable Google Slides. The website is built on modern technologies such as Next.js and React, with integration of Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and professional content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence suitable for its niche audience.

BRACKETS by TRIAD s.r.o is a Slovakia-based technology company specializing in AI-driven agile software development, UX design, and digital transformation services. Founded in 2022, the company serves demanding clients with over 10 years of combined experience and is recognized by industry awards such as Clutch. Their business model focuses on B2B partnerships, delivering tailored technology solutions including cloud infrastructure, API integrations, and 24/7 support. The company is part of the Devin Band marketing and technology group, enhancing its market reach and capabilities. Technically, the website and company infrastructure leverage modern technologies including Docker, React, Laravel, AWS, and DigitalOcean hosting. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. Analytics and marketing tools such as Google Tag Manager, Plausible, and Smartlook are used with user consent mechanisms in place, demonstrating privacy awareness. From a security perspective, the website enforces HTTPS and employs cookie consent with GDPR compliance. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration is consistent with the company’s founding date and business claims, enhancing trustworthiness. Overall, the company presents a professional, trustworthy, and technically competent profile with strong business credibility. Strategic improvements in security policy transparency and DNSSEC implementation would further strengthen their posture.

L

Loterie Maxa s.r.o.

korunka.eu

66

Loterie Maxa s.r.o. operates a Czech lottery and gambling platform offering a variety of games including lotteries, online scratch cards, bingo, and Vegas-style casino games. The company targets adult users interested in gaming and gambling, providing daily opportunities to win significant prizes. The website demonstrates strong branding and partnerships with established Czech betting companies such as Tipsport and Chance, enhancing its market position. The business model revolves around online and physical lottery services with promotional bonuses and a partner program to expand reach. Technically, the website is built using modern web technologies including React and JavaScript, with integrations for analytics and performance monitoring via Google Tag Manager and Dynatrace. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved. The website enforces HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data for the domain is a concern for trust and legitimacy verification, although the website content and partnerships suggest a legitimate operation. Overall, the website presents a professional and trustworthy platform for lottery gaming in the Czech Republic, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance.

A

Allwyn

allwynentertainment.com

75

Allwyn is a global lottery-led entertainment company that operates across multiple countries including the United Kingdom, Austria, Czech Republic, Greece, Cyprus, and the United States. The company offers a diverse portfolio of gaming products such as lottery games, instant win games, scratch cards, iGaming, retail casinos, and sports betting. Their business model centers on creating engaging play experiences that bring hope and excitement to players while emphasizing social responsibility and community impact. The website reflects a strong market position with partnerships including Formula 1 and McLaren, highlighting their brand strength and global reach. Technically, the website is built using modern web technologies including React and Next.js, optimized for performance and mobile responsiveness. It employs Google Tag Manager and reCAPTCHA for analytics and security respectively. The site demonstrates good SEO practices, accessibility, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a solid baseline security posture. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain is a notable transparency gap, although the website content and branding suggest legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in transparency around security policies and domain registration details are recommended to enhance trust and credibility.

Dun & Bradstreet is a globally recognized leader in business data and analytics, offering comprehensive solutions to help organizations manage risk, control costs, and drive growth. The Czech Republic localized website presents a professional and content-rich experience targeting enterprises and small to medium businesses. The company leverages modern web technologies including React and Adobe Experience Manager, with integrated consent management and bot protection mechanisms. Security posture is moderate with room for improvement in security headers and explicit incident response disclosures. Overall, the website reflects a mature digital presence aligned with the company's market position and business model.

A

Association for Financial Markets in Europe (AFME)

afme.eu

75

The Association for Financial Markets in Europe (AFME) is a prominent trade association representing over 150 leading global and European banks and market participants. It serves as the voice of these institutions in Europe’s financial markets, focusing on advocacy, policy development, research, and events. The organization plays a critical role in underwriting a significant portion of European corporate and sovereign debt as well as equity issuances, positioning itself as a key influencer in the financial ecosystem. The website reflects this stature with professional design, comprehensive content, and clear navigation tailored to financial professionals and regulators. Technically, the website is built using modern technologies such as React and Umbraco CMS, with integrations for cookie consent (Cookiebot) and analytics (Google Analytics). The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed, including HTTPS enforcement and appropriate security headers, although some security policy and incident response information could be more transparent. From a security perspective, the site demonstrates a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned cookie consent and privacy policies. However, the lack of publicly available WHOIS data due to privacy protection limits domain registration transparency. Despite this, the website’s content quality, trust signals, and industry alignment support its legitimacy. Overall, AFME’s website is a well-constructed, secure, and professional platform that effectively supports its role as a leading financial markets association in Europe. Strategic recommendations include enhancing public security policy disclosures, incident response contacts, and vulnerability disclosure mechanisms to further strengthen trust and compliance.

Mutumutu.cz is an online life insurance platform offering flexible and comprehensive coverage for illnesses, injuries, and income protection. The company operates in the Czech Republic and partners with the established insurer Komerční pojišťovna, a.s., which has over 25 years of market presence. The website is designed to facilitate quick and easy insurance calculations and purchases online, targeting individuals seeking modern and transparent life insurance solutions. The business model focuses on direct-to-consumer sales with an emphasis on technology-driven cost savings and customer rewards for healthy lifestyles. Technically, the website leverages modern frameworks such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although a dedicated security policy and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

J

J&T FINANCE GROUP SE

jtfg.com

66

J&T FINANCE GROUP SE is a well-established European financial group operating primarily in Central and Eastern Europe, offering a broad range of financial services including private and retail banking, asset management, investment banking, and project finance. The group has a significant market presence with subsidiaries across multiple countries and a history dating back to 1994. The website reflects a professional and consistent brand image with comprehensive information about its services and leadership. Technically, the website is built on modern web technologies such as Next.js and React, supported by a headless CMS (Kentico Kontent). It demonstrates good mobile optimization, accessibility, and SEO practices. Analytics and marketing tools like Google Tag Manager are in use, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data for the domain is a concern, though the website content and structure suggest legitimacy. Privacy compliance is partially addressed with a cookie policy and consent mechanism, but a clear privacy policy is not prominently found. Overall, the website presents a low risk with strong business credibility but would benefit from enhanced transparency in security and privacy policies, and verification of domain registration details.

S

SOS dětské vesničky

sos-vesnicky.cz

48

SOS dětské vesničky is a well-established Czech non-profit organization dedicated to supporting vulnerable children and families through various social services including foster care, crisis centers, and educational programs. The organization has a strong market position as the oldest charity of its kind in the Czech Republic, with nearly 60 years of experience. Their website reflects a professional and trustworthy image with clear messaging and calls to action for donations and support. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers in place, although the absence of a public privacy policy and WHOIS data are notable compliance and trust gaps. Overall, the site is safe, well-maintained, and effectively communicates its mission to its target audience of families, donors, and social workers.

(

(ant)

antstudio.cz

54

The website www.antstudio.cz represents a professional full-service digital marketing agency based in the Czech Republic, known as (ant). The agency offers a broad range of services including branding, strategy consulting, creative campaigns, performance marketing, web and e-commerce development, and training workshops. Their market position is supported by detailed case studies and client testimonials, indicating a medium-sized agency with a strong focus on delivering impactful digital marketing solutions. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS and Google reCAPTCHA v3, although some security headers and explicit privacy policies are missing. Overall, the site is professional and trustworthy, but the absence of WHOIS data and privacy compliance documentation slightly reduces the trust score.

L

Loterie Maxa s.r.o.

maxa.cz

67

Loterie Maxa s.r.o. operates a Czech Republic-based lottery and gambling platform offering a variety of games including traditional lotteries, online scratch cards, bingo, and vegas-style games. The company targets adult players interested in lottery and gambling entertainment, providing both online and physical lottery services. The website demonstrates a consistent brand presence with partnerships including Tipsport and Chance, and membership in the European Lotteries association, indicating a solid market position within the Czech gambling industry. Technically, the website is built using modern web technologies such as React and integrates analytics and monitoring tools like Google Tag Manager and Dynatrace. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security practices include HTTPS enforcement and cookie consent mechanisms, though additional security headers and vulnerability disclosure mechanisms are recommended to enhance security posture. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with privacy and cookie policies and consent management, though more explicit GDPR documentation and contact points for incident response could improve compliance. The absence of WHOIS data limits domain trust verification, but the website's content and partner affiliations support legitimacy. Overall, Loterie Maxa presents a professional and trustworthy online lottery service with moderate technical maturity and a solid security foundation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would further strengthen trust and compliance.

I

IAF Certification Validation - IAF CertSearch

iafcertsearch.org

55

The website www.iafcertsearch.org serves as a global database platform for validating accredited management system certifications, primarily targeting organizations and users seeking to verify certifications such as ISO standards. The site is built using modern web technologies including React and integrates common analytics and marketing tools like Google Analytics and LinkedIn Insight. Despite a professional technical setup with HTTPS and a strict Content-Security-Policy, the site lacks visible privacy policies, cookie consent mechanisms, and contact information, which are important for user trust and regulatory compliance. The WHOIS data is unavailable due to privacy protection or malformed queries, which limits transparency about domain ownership. Overall, the site appears functional and safe but would benefit from enhanced compliance and trust signals.

A

ATOM RTC s.r.o.

livesupp.com

10

LiveSupp, operated by ATOM RTC s.r.o., is a technology company founded in 2018 in the Czech Republic, offering an interactive marketing platform that integrates voice and video calls, text chat, screen sharing, electronic signatures, and real-time assistance to enhance remote customer engagement and marketing effectiveness. The platform targets businesses seeking to improve conversions and workflow efficiency through advanced communication tools. The website is built using modern technologies such as React and WebRTC, ensuring a responsive and interactive user experience. While the site demonstrates good design quality and usability, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS and secure WebRTC protocols, but improvements are recommended in DNS security and HTTP security headers. Contact information is clearly provided, and client testimonials add trustworthiness. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security hardening.

T

Twisto

twisto.cz

50

Twisto is a Czech financial technology company offering buy now, pay later services, allowing customers to shop and pay up to 45 days later. The website is professionally designed, mobile-optimized, and uses modern web technologies such as React and Next.js. It integrates multiple analytics and tracking services including Google Tag Manager, Microsoft Clarity, TikTok, and Facebook pixels, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and policies are not evident. The absence of WHOIS data suggests privacy protection, common for financial services, but limits domain trust verification. Privacy and cookie policies are not clearly found, which is a compliance gap. Overall, the site presents a trustworthy and professional front for its financial services in the Czech market.

C

Chakras

chakras.net

49

Chakras.net is a specialized educational website focused on the teachings of chakras and kundalini based on the Yoga in Daily Life system by Paramhans Swami Maheshwarananda. The site provides comprehensive multimedia content including lectures, symbolic explanations, and spiritual lineage information, targeting individuals interested in yoga and spiritual development. Technically, the site is built on modern web technologies such as React and Next.js, hosted on Vercel, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism implemented via CookieYes. Overall, the site is trustworthy, professional, and well-maintained, serving a niche spiritual education market.

L

Levelpath

levelpath.com

61

Levelpath is a technology company offering an AI-native procurement platform designed to simplify and enhance procurement processes for enterprises. The company positions itself as a leader in AI-driven procurement solutions, recognized by Gartner as a Cool Vendor in sourcing and procurement technology. Their platform includes modules such as Front Door to Procure, Sourcing, Pipeline, Contracts, and Risk Management, targeting enterprise customers seeking efficiency and innovation in procurement. Technically, the website is built using modern frameworks like Next.js and React, hosted likely behind Cloudflare, and integrates multiple marketing and analytics tools including HubSpot, Google Tag Manager, and Microsoft Clarity. The site is well optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with detailed categories. However, it lacks visible security headers and published security policies or incident response information. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the professional web presence and business signals mitigate this risk. Overall, Levelpath presents a strong digital and business profile with room for improvement in transparency around privacy policies, security disclosures, and domain registration information. Strategic recommendations include publishing explicit privacy and security policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

ZaVodou.cz is a Czech online pension savings platform established in 2019, offering users the ability to save for retirement with state bonuses. The website targets individuals in the Czech Republic interested in pension savings, providing a simple and accessible online service. Technically, the site is built on a modern Next.js and React stack, hosted with Cloudflare DNS and CDN services, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, OneSignal, and Meta advertising platforms. The site implements a comprehensive cookie consent mechanism via Cookiebot, reflecting good privacy compliance practices. Security posture is solid with HTTPS and Cloudflare DNS, but lacks explicit security headers and detailed security policies. Contact information and terms of service pages are not explicitly found, which could be improved to enhance trust and compliance. Overall, the website is professional, well-branded, and serves a niche financial service market effectively.

ADIT Agency s.r.o. is a Slovak-based full-service digital agency specializing in software and hardware development, consulting, and body leasing services. Established in 2009, the company serves a diverse clientele including government bodies, healthcare institutions, utilities, and commercial enterprises. Their offerings range from information systems for public administration to innovative healthcare solutions and custom hardware design. The company maintains a strong market position supported by reputable clients and a credit guarantee from COSIMOME LLP. Technically, the website is built on modern frameworks such as React and Next.js, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The site employs DNSSEC and HTTPS, reflecting good security practices. However, explicit security headers and formal privacy and cookie policies are absent, indicating areas for improvement in compliance and security transparency. From a security perspective, the site demonstrates a solid baseline with encrypted communications and GDPR compliance references in the contact form. No vulnerabilities or exposed sensitive data were detected. The absence of incident response and vulnerability disclosure information suggests a need for enhanced security governance documentation. Overall, ADIT Agency presents a professional and trustworthy digital presence with strong business credibility and technical maturity. Strategic enhancements in privacy documentation, security headers, and incident response transparency would further strengthen their security posture and compliance standing.

C

curl.to | Convert curl commands to code

curl.to

56

curl.to is a specialized developer tool website that provides an online utility for converting curl commands into code snippets in multiple programming languages. It targets developers working with APIs and web services, offering support for languages such as JavaScript, Python, PHP, Go, Ruby, C#, and Java. The site positions itself as a free resource to improve developer productivity by reducing errors and saving time during API development. Technically, the website is built using modern web technologies including React and Next.js, with Google Fonts for typography. The site appears to be moderately optimized for performance and mobile responsiveness, with a clean and professional design. However, accessibility features are basic, and no CMS or hosting provider information is evident from the HTML content. From a security perspective, the site uses HTTPS as indicated by the URL, but no explicit security headers are detected in the HTML content. There are no visible privacy, cookie, or terms of service policies, nor any contact information for security incidents or data protection officers. No analytics or advertising scripts were found, indicating minimal user tracking. The absence of these policies and contact details suggests room for improvement in privacy compliance and security transparency. Overall, the website is safe and professional with a clear focus on developer utility. The lack of privacy and security policies, as well as contact information, lowers its trustworthiness and compliance posture. Strategic improvements in these areas would enhance user trust and regulatory compliance.

T

The Goldman Sachs Group, Inc.

goldmansachs.com

78

The Goldman Sachs Group, Inc. is a globally recognized leader in investment banking, securities, asset management, and wealth management services. The website reflects its enterprise stature with professional design, comprehensive service descriptions, and a clear focus on institutional and high-net-worth clients. The firm maintains a strong market position as a leading financial services provider. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Akamai CDN, ensuring fast performance and excellent mobile optimization. Security is robust with HTTPS enforced, multiple security headers, and adherence to recognized frameworks like ISO 27001 and NIST. Privacy and compliance are well addressed with clear policies and GDPR compliance indicators. Overall, the site demonstrates a mature digital presence aligned with the company's global reputation.

N

NürnbergMesse GmbH

feuertrutz-messe.de

58

FeuerTrutz is a leading European trade fair and congress focused on preventive fire protection, organized by NürnbergMesse GmbH. The website serves as a comprehensive platform for exhibitors, visitors, and media representatives, providing detailed event information, registration options, and news updates. The business is well-positioned in the fire protection industry with a strong market presence and a clear focus on networking and knowledge sharing. Technically, the website is built on modern frameworks including React and Next.js, integrated with Sitecore CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though some improvements in privacy compliance and security transparency are recommended. Overall, the site reflects a professional and trustworthy organization with a high legitimacy score based on domain registration data and content consistency.

W

WhatIsMyIP.io - Check Your IP Address & Location

whatismyip.io

59

WhatIsMyIP.io is a technology-focused website providing free IP address lookup and geolocation services. It offers users detailed information about their IP address, location, ISP, connection type, time zone, and currency. The site targets a general audience seeking quick and accurate IP-related data. The business operates as a small-scale service launched in late 2022, with no evident parent company or subsidiaries. The website is built on modern web technologies including Next.js and React, hosted on infrastructure provided by Hetzner Online Gmbh, and uses Cloudflare DNS services for domain resolution.

C

HTML Colors

colors.to

61

Colors.to is a small informational website focused on providing a comprehensive reference of 148 named HTML and CSS colors for web developers and designers. The site offers color names, hex codes, and RGB values, along with tools such as color palette generation from images. It supports multiple languages, enhancing accessibility for a global audience. The business model is primarily informational, targeting web development professionals and enthusiasts. Technically, the website is built using modern technologies including React and Next.js, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The site uses privacy-focused analytics tools like Fathom and Plausible, and integrates advertising networks such as BuySellAds and Google DoubleClick. However, it lacks some security headers and formal privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses modern frameworks but does not implement additional security headers or provide security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration is privacy protected, which is typical for small informational sites, and no suspicious patterns were found. Overall, Colors.to is a well-designed, safe, and technically sound website with moderate business credibility. To improve, it should implement privacy and cookie policies, add security headers, and provide clearer business and security information to enhance trust and compliance.

I

InnoTrans

innotrans.de

62

InnoTrans is a leading international trade fair specializing in transport technology, serving as a key platform for national and international suppliers and buyers within the transportation sector. The website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Next.js and React, and integrating cookie consent mechanisms via Usercentrics to ensure privacy compliance. Hosting is managed through professional managed IP services, and the site employs HTTPS with good SSL configuration, contributing to a secure user experience. However, explicit security policies and incident response contacts are not prominently available, indicating areas for improvement in transparency and security readiness. Overall, the site demonstrates a strong market position and digital maturity appropriate for a large-scale event organizer in Germany.

S

Spotify AB

megaphone.fm

58

Megaphone by Spotify is an enterprise podcast platform designed to empower podcast publishers with tools to publish, monetize, and grow their audience. The platform leverages Spotify's advertising marketplace, the Spotify Audience Network, to optimize revenue through dynamic ad insertion and real-time ad stitching. The website presents a professional and polished digital presence, reflecting a mature technical infrastructure built on modern web technologies such as React, Next.js, and Contentful CMS. Privacy and cookie policies are clearly stated, with consent mechanisms in place, indicating good compliance with GDPR and related regulations. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the site demonstrates a high level of business credibility and technical maturity, suitable for an enterprise-grade media technology service.

SEVT.cz is a well-established Czech e-commerce retailer specializing in school, kindergarten, and office supplies, including art materials, books, and games. Founded in 1998, it holds a strong market position as a specialist with a broad product range targeting educational institutions, parents, and office users. The website demonstrates a modern technical infrastructure using React and Next.js frameworks, hosted on Forpsi servers, and optimized for mobile and SEO. Security posture is good with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and privacy policies. The absence of contact emails and phone numbers on the main page limits direct communication channels. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

O

OM Ashram

omashram.com

58

OM Ashram is a spiritual and educational non-profit organization based in Rajasthan, India, focused on Yoga, Vedic culture, and humanitarian projects. The website presents a well-structured digital presence with rich multimedia content, event information, and detailed descriptions of their projects and mission. The organization targets spiritual seekers and community members interested in Yoga and cultural preservation. Technically, the site uses modern web technologies including Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though some security headers could be improved. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit privacy and security policies, and adding vulnerability disclosure information.

J

J&T BANKA, a.s.

jtbank.eu

62

J&T BANKA, a.s. is a reputable private and investment bank headquartered in Prague, Czech Republic, with a strong presence across Europe including Slovakia and Croatia. The bank specializes in bespoke wealth management, investment funds, corporate bond issuance, and project financing, targeting high net worth individuals and sophisticated corporate clients. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with integrated analytics via Piwik PRO. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates professionalism, trustworthiness, and compliance with banking industry standards, supporting the bank's market position and client trust.

W

World Nuclear Exhibition

world-nuclear-exhibition.com

65

World Nuclear Exhibition is a globally recognized event organizer specializing in the nuclear energy sector, hosting its 6th edition in November 2025. The website serves as a professional platform for industry stakeholders to access event information, network, and stay updated on nuclear industry developments. The site is built on modern web technologies including React and Adobe Experience Manager, with integrated analytics and cookie consent mechanisms, reflecting a moderate to advanced digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though the absence of explicit privacy and security policies and contact information limits full compliance and trust. The domain WHOIS data is notably missing, which raises concerns about registration transparency despite the professional web presence. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced transparency and compliance documentation.

G

GABBYS IRISH PUB

gabbyspub.cz

66

GABBYS IRISH PUB is a recently established hospitality business located in the heart of Prague, Czechia, offering a traditional Irish pub experience with a focus on quality drinks, food, and live sports broadcasts. The business operates a modern digital presence with online menus, reservation capabilities, and active social media engagement, positioning itself as a local favorite for both residents and tourists seeking nightlife and entertainment. Technically, the website is built on a modern React/Next.js stack hosted and managed via ChoiceQR platform, integrating Google Fonts, Google Analytics, Facebook Pixel, and other marketing tools. The site demonstrates good performance, mobile optimization, and SEO practices, with secure HTTPS and appropriate security headers implemented. From a security perspective, the site maintains a strong posture with SSL encryption and standard security headers, though it lacks explicit published security policies or incident response contacts. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and professionally maintained, with a moderate risk profile typical for small hospitality businesses. Strategic improvements could include publishing security policies and incident response information to enhance transparency and trust.

H

Harvard Business School

hbs.edu

61

Harvard Business School (HBS) is a globally recognized educational institution specializing in business management education. It offers a range of programs including MBA, doctoral degrees, executive education, and online certificate courses. The school is positioned as a leader in management education and thought leadership, serving a diverse audience of students, academics, business professionals, and alumni. The website reflects a mature digital presence with a modern tech stack including React and Next.js, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not prominently published. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site demonstrates high professionalism, excellent content quality, and strong branding consistency, aligning with the prestigious reputation of Harvard Business School.

A

Allwyn

allwyn.com

75

Allwyn is a global lottery-led entertainment company that operates national lotteries and digital-first games across multiple countries including the United Kingdom, Czech Republic, Greece, Cyprus, Austria, and the United States. The company emphasizes hope, play, and social impact through its gaming offerings and partnerships with major entities such as Formula 1 and McLaren. The website is professionally designed using modern technologies like Next.js and React, optimized for mobile and SEO, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust analysis but the overall digital presence and partnerships indicate a legitimate and credible business.

K

KKCG

kkcg.com

67

KKCG is a well-established investment and innovation group headquartered in Switzerland, operating across multiple sectors including entertainment, energy, technology, real estate, and diversified ventures. With a presence in over 40 countries and a significant EBITDA exceeding €1.5 billion, KKCG positions itself as a major multinational player leveraging its own resources to transform industries. The company maintains a professional and modern digital presence, utilizing advanced web technologies and analytics tools to engage its audience effectively. Social media integration and multilingual support further enhance its global reach. Security-wise, KKCG employs HTTPS, security headers, and reputable hosting and DNS providers, reflecting a strong security posture. However, the absence of an explicit privacy policy and security incident response information suggests areas for improvement in compliance and transparency. Overall, KKCG demonstrates a high level of business credibility and digital maturity, with recommendations to enhance privacy disclosures and formalize security policies to align with best practices.