Security Directory

S

SEVEN SPORT s.r.o.

insportline.si

51

The website www.insportline.si is an established e-commerce platform specializing in fitness and sports equipment retail, targeting primarily the Slovenian market. Operated by SEVEN SPORT s.r.o., the domain has been active since 2010, reflecting a mature business presence. The site offers a broad range of products including fitness machines, sports gear, outdoor equipment, and health and beauty items, supported by promotional campaigns and a structured product catalog. The business model is retail-focused with a clear online sales channel and regional sister sites across Europe. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility.

S

SEVEN SPORT s.r.o.

insportline.hu

53

inSPORTline.hu is a well-established e-commerce and retail platform specializing in premium sports equipment and fitness products. Operated by SEVEN SPORT s.r.o., the website targets general consumers interested in sports, fitness, and outdoor activities primarily in Hungary and surrounding Central European markets. The company maintains a strong regional presence with sister sites in multiple countries, offering a broad product range and customer support services. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience.

S

SEVEN SPORT s.r.o.

insportline.sk

54

SEVEN SPORT s.r.o. operates the inSPORTline brand, the largest manufacturer and retailer of fitness equipment in Slovakia. The company offers a broad range of fitness, sports, outdoor, and health-related products through a professional e-commerce platform supported by physical stores. Their market position is strong within Slovakia and supported by sister sites in multiple European countries. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Google Analytics, and personalization tools like Persoo. Security is well implemented with HTTPS, security headers, and secure forms. Privacy and cookie policies are present and GDPR compliant, reflecting good regulatory adherence. Overall, the business is credible, well-branded, and trustworthy.

Czech Virtuosi, z.s. is a non-profit cultural organization based in the Czech Republic that organizes classical music concerts and international music competitions. The organization is supported by local government entities such as the city of Brno and the South Moravian Region, reflecting a strong regional presence and community engagement. Their website serves as a portal for event information, ticket sales, and news updates, targeting classical music enthusiasts and cultural event attendees. The business model relies on sponsorships, government funding, and ticket sales to sustain its activities. Technically, the website is built using modern web technologies including React and slick carousel for interactive content presentation. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Google Analytics is used for visitor tracking, though privacy compliance could be improved by implementing cookie consent mechanisms. The website lacks explicit security headers and incident response policies, which are areas for enhancement. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership transparency. No critical vulnerabilities or security issues were detected in the visible content. The organization should consider publishing security policies and improving GDPR compliance measures to strengthen trust. Overall, Czech Virtuosi presents a professional and trustworthy online presence for a small non-profit cultural entity. Strategic improvements in security posture and privacy compliance will enhance their digital maturity and stakeholder confidence.

C

CESK, s.r.o.

cesk.cz

46

CESK, s.r.o. is a Czech company specializing in the sale and servicing of professional gastronomic equipment, including ice cream machines, coffee machines, dispensing technology, and kitchen appliances. With over 30 years of market presence, CESK serves a broad audience ranging from confectioneries, cafes, and restaurants to home users. The company operates an e-shop, offers professional servicing, and organizes training courses, positioning itself as a trusted partner in the hospitality retail sector. The website reflects a mature digital presence with comprehensive product offerings and partner collaborations with reputable brands such as Plzeňský Prazdroj and Heineken. Technically, the website employs modern web technologies including Google Tag Manager, SmartEmailing, and Foxentry for marketing and user interaction. The site is mobile-optimized with good SEO practices and uses HTTPS with secure form handling. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security and compliance perspective, the site demonstrates good GDPR compliance with a detailed privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. No critical vulnerabilities or suspicious activities were detected. Overall, CESK's website is professional, secure, and compliant, supporting its business operations effectively. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

T

THAI MICE CONNECT

thaimiceconnect.com

59

THAI MICE CONNECT operates as a specialized online marketplace platform dedicated to the MICE industry in Thailand, connecting various business categories such as accommodations, event venues, organizers, and government agencies. The platform offers automated event planning tools and promotional campaigns, targeting event organizers and corporate clients within the Thai MICE sector. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and various JavaScript libraries, hosted behind Cloudflare for DNS and CDN services. While the site is mobile-optimized and integrates modern analytics tools like Google Analytics and Facebook Pixel, it uses an outdated jQuery version and lacks some modern security headers, which could pose security risks. The domain registration is consistent with the business history, and no blocking or WAF challenges were detected, allowing full content accessibility. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance is basic. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility.

F

Fondation Daniel et Nina Carasso

fondationcarasso.org

56

Fondation Daniel et Nina Carasso is a non-profit organization dedicated to promoting sustainable food systems and civic art in France and Spain. The foundation operates under the aegis of Fondation de France and supports social and ecological transformation through financial grants, impact investments, and expert accompaniment. Their website reflects a professional and well-structured digital presence, targeting a broad audience including artists, researchers, and social entrepreneurs. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security measures include HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though some security headers could be improved. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and compliance indicators support legitimacy.

G

GRANDFILM

grandfilm.de

48

Grandfilm is a German-based film distribution and production company specializing in independent and art-house cinema. Their website showcases a broad portfolio of films currently in cinemas, upcoming releases, and educational film content, targeting film enthusiasts, cinema operators, and educators. The business operates primarily in the media sector with a small company size and a niche market position in Germany. Technically, the website is built on WordPress with modern analytics and marketing integrations such as Google Analytics, Google Tag Manager, and Facebook Pixel, all implemented with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security policy pages and some security headers, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Conversion Tracking Specialist · Google Tag Manager · Analytics

codeandtonic.com

66

Conversiontracking.io is a small, specialized digital agency founded in 2024, focusing on improving conversion tracking and analytics for marketers using Google and Meta advertising platforms. The website is built on Squarespace and integrates modern tracking technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel to deliver measurable improvements in ad performance. While the technical infrastructure is solid and the site is professionally designed with good user experience, there is a notable absence of visible privacy and cookie policies, which impacts compliance and privacy posture. Security practices are generally good with HTTPS and domain transfer protections, but DNSSEC and HSTS are not enabled, representing areas for improvement. Overall, the business appears legitimate and trustworthy, with a clear market niche and professional branding.

L

Liga Vozíčkářů

ligavozic.cz

45

Liga Vozíčkářů is a Czech non-profit organization dedicated to supporting wheelchair users and people with disabilities. Established since 2000, the organization provides various activities and advocacy services to its target audience. The website is built on WordPress using the Avada theme and several common plugins, including Contact Form 7 and Cookie Notice, indicating a moderate level of digital maturity. The site implements HTTPS and cookie consent mechanisms, reflecting basic compliance with privacy standards. However, it lacks explicit privacy and terms of service policies, which are important for full GDPR compliance. Security posture is adequate with no evident vulnerabilities or exposed sensitive data, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security documentation.

A

ARES, spol. s r.o.

ares.sk

45

ARES, spol. s r.o. is a Slovak company specializing in barrier-free accessibility solutions, including lifting devices for disabled and seniors, automobile modifications for disabled persons, custom elevator manufacturing, gift basket production, and magazine distribution. The company operates multiple related domains, indicating a diversified business model under the parent company ALTECH. The website is professionally designed, well-structured, and targets customers requiring mobility and accessibility products and services. It holds ISO9001 certification, demonstrating commitment to quality standards. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Google Analytics, and Google Tag Manager, ensuring good SEO and analytics capabilities. The site is mobile-optimized and provides a cookie consent mechanism, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie banner. Business credibility is high due to transparent contact information, certifications, and consistent branding. Overall, the website presents a trustworthy and professional digital presence for ARES, with recommendations to enhance security headers and publish incident response contacts to further strengthen security and compliance.

L

Lehner Lifttechnik GmbH

lehner-lifttechnik.at

46

Lehner Lifttechnik GmbH is a family-run Austrian company specializing in the design and manufacture of accessibility lifts including stairlifts, platform lifts, vertical platform lifts, and special lifts. With over 30 years of experience, the company focuses on enabling independent living for mobility-challenged individuals by providing safe, reliable, and innovative lifting solutions. Their market position is supported by a comprehensive product range and international presence. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Adobe Typekit fonts. The site is well-structured, mobile-optimized, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not clearly found, indicating room for improvement in compliance. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but is common for privacy-protected domains. Overall, the website presents a professional and trustworthy front with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, implementing security headers, and improving WHOIS transparency to strengthen trust and security posture.

R

RehaKomp

rehakomp.cz

49

RehaKomp is a Czech-based company specializing in the rental and sale of rehabilitation and compensatory medical aids, including motodlahy, rotopeds, wheelchairs, and related equipment. Established as a family business since 1990, it has evolved into a medium-sized enterprise with a strong regional presence and a comprehensive product offering. The website serves both as an e-commerce platform and a rental service portal, targeting individuals requiring home care rehabilitation aids and healthcare providers. Technically, the site is built on the PrestaShop platform, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Smartlook for user behavior insights. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR, though it lacks explicit security policy or incident response contact information. WHOIS data is not publicly available, likely due to privacy protection, but the website content and trust signals indicate a legitimate and professional business. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and header configurations.

G

Global Encryption Coalition

globalencryption.org

72

The Global Encryption Coalition is a non-profit organization founded in 2020 that promotes and defends encryption worldwide, particularly in countries and multilateral forums where encryption is under threat. With over 350 members, the coalition supports companies offering encrypted services and organizes events such as Global Encryption Day to raise awareness. The website reflects a mature digital presence with a focus on advocacy, policy, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and accessible, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. WHOIS data is unavailable due to privacy protection, but the site’s professionalism and active content indicate legitimacy. Overall, the site presents a trustworthy and authoritative resource in the encryption advocacy space.

I

Internet Society Foundation

isocfoundation.org

68

The Internet Society Foundation is a reputable non-profit organization dedicated to supporting initiatives that strengthen the Internet's function and reach globally. It operates multiple grant programs aimed at digital inclusion, resiliency, research, and emergency response, positioning itself as a key player in the Internet development ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of non-profits, Internet communities, and global stakeholders. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and CookieYes for consent management. The infrastructure supports good performance and accessibility, with mobile optimization and SEO best practices in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, reflecting GDPR awareness. Contact information is transparent and includes phone, email, and physical address, enhancing business credibility. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the site presents a low-risk profile with strong trust indicators and a professional online presence, suitable for its mission and audience.

R

Radio Screen

radio-screen.com

61

Radio Screen is a specialized media technology company providing an associated data broadcasting platform for DAB+, RadioDNS Hybrid Radio, and Webradios. Their platform enables radio stations to enhance their visual identity by distributing logos, artist images, and metadata to compatible receivers, including vehicle infotainment systems. The company operates primarily in France and targets broadcasters and automotive infotainment providers. The website reflects a professional and consistent brand image with clear business messaging and established partnerships with recognized industry players such as Music Story and WorldDAB. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for analytics. The site is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Cookie consent and privacy policies are implemented with GDPR compliance in mind, using the Complianz plugin for consent management. However, some security headers are missing, and no explicit security policy or incident response information is published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, with no privacy protection and a domain age appropriate for the business maturity. Overall, Radio Screen presents a low-risk profile with a solid business model and good digital maturity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance their security posture and trustworthiness further.

O

Opel CZ

opel-ihned.cz

53

The website www.opel-ihned.cz serves as a comprehensive online platform for listing and filtering Opel brand vehicles available immediately from authorized dealers in the Czech Republic. It aggregates stock and demo vehicles, providing detailed filtering options by model, dealer, engine type, color, equipment, and price. The platform targets consumers seeking to purchase Opel vehicles quickly and conveniently, positioning itself as a trusted intermediary between buyers and authorized dealers. The business model focuses on lead generation and vehicle inventory display, supported by dealer contact information and location mapping. Technically, the site is built on JavaServer Faces with PrimeFaces UI components, enhanced by Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager, Google Analytics, and Adform for marketing and tracking purposes, alongside a live chat service (Smartsupp). The site is mobile-optimized with good SEO practices, including structured data (JSON-LD) and Open Graph metadata, enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and no published security or incident response policies are found. The absence of WHOIS data reduces transparency but does not directly imply malicious intent. Overall, the security posture is moderate with room for improvement in policy publication and header implementation. The overall risk assessment suggests a legitimate, professionally maintained automotive sales platform with moderate technical maturity and privacy compliance. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

B

Benes Consulting Group

spolecnebezpecne.cz

43

The website 'Společně bezpečně' is a safety awareness and educational project primarily focused on increasing road safety and general safety awareness in the Czech Republic. It is a collaborative initiative involving ESSOX and the Hasičský záchranný sbor Jihočeského kraje, targeting children and the general public through educational campaigns and activities. The site presents a professional and consistent brand image with clear navigation and relevant content. Technically, it employs a modern front-end stack including jQuery, Bootstrap, and various plugins, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces transparency and trust somewhat, but partnerships and content quality support legitimacy. Overall, the site is a trustworthy educational resource with room for improvement in privacy compliance and security best practices.

S

SEVEN SPORT s.r.o.

insportline.cz

58

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.

E

elektra Berry

eberry.cz

61

The website www.eberry.cz represents a Czech Republic based online retail platform specializing in electronics and household goods. The site offers a user-friendly e-commerce experience with a professional design and moderate technical sophistication, including modern JavaScript frameworks and analytics integrations. Despite the lack of publicly available WHOIS data due to privacy protection, the website appears legitimate and well-maintained. However, the absence of explicit privacy and cookie policies and contact information limits full compliance and trust transparency. Security posture is generally good with HTTPS and monitoring tools in place, but could be improved by adding security headers and formal policies. Overall, the site serves its retail audience effectively but should enhance privacy compliance and contact transparency to strengthen trust and regulatory adherence.

CZI s.r.o is a Czech internet agency with nearly 20 years of experience specializing in modern web development, content creation, and online reputation management. The company serves a B2B market, targeting businesses and organizations seeking professional digital presence and reputation services. Their website demonstrates a solid market position with notable clients and industry awards, reflecting a reputable and established business. Technically, the website is built on WordPress using modern themes and plugins such as Astra, Beaver Builder, Yoast SEO, and Google Analytics integration. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA, but additional security headers and policies are absent. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. WHOIS data is missing, which slightly reduces transparency and trustworthiness. Overall, the website is professional and trustworthy, but improvements in transparency, security headers, and privacy documentation are recommended to enhance compliance and security posture.

eHutník.cz is a regional news website operated by Třinecké Železárny a.s., providing news, sports, culture, and legal advice focused on the Třinecko region in the Czech Republic. The site targets local residents and stakeholders, offering timely regional information and advertising opportunities. The business model centers on content publishing and local advertising, positioning itself as a trusted regional media outlet. Technically, the website runs on WordPress with popular plugins for SEO, advertising, and forms, supported by Google Analytics and Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, with some security headers implied but not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a secure and accessible platform. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve by adding explicit security headers and a security policy. The domain registration data supports the legitimacy and maturity of the business.

S

Svět neziskovek, z.ú.

grantovydiar.cz

46

Grantový diář is a Czech Republic-based subscription service focused on providing non-profit organizations with a comprehensive and up-to-date listing of grant opportunities. The website serves as a centralized platform for fundraisers and non-profit managers to find relevant funding calls, with over 1000 grants tracked annually. The business operates under the parent foundation Nadace Neziskovky.cz and has been active since 2014, establishing a credible presence in the Czech non-profit sector. The service offers personalized notifications, advertising options, and a user-friendly online tool to simplify grant searching and management. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Hosting is provided by a reputable Czech registrar and hosting provider, Active24. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional service for its target audience, with room for improvement in privacy and security transparency. Strategic recommendations include publishing privacy and terms documents, enhancing security headers, and formalizing incident response communications to strengthen compliance and trust.

L

Linguise

linguise.com

58

Linguise is a technology company specializing in automatic neural translation services for websites, enabling users to translate content into over 80 languages with instant updates and SEO optimization. The company targets website owners, eCommerce businesses, and international enterprises seeking to expand their global reach efficiently. Their service integrates with major CMS platforms and offers a live front-end editor for convenient translation management. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with Elementor and leverages modern web technologies including Google Analytics, Google Tag Manager, and Tawk.to for live chat support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data reduces domain trustworthiness, but the overall business credibility remains high based on website content and customer testimonials.

P

PGWay

pgway.com

68

PGWay is a payment solutions provider offering global payment services including bank cards, Apple Pay, Google Pay, and integration features. The website presents a professional and modern design built on the Webflow platform, utilizing Google Tag Manager for analytics. The content targets businesses and consumers seeking secure and efficient payment methods worldwide. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. The website lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which impacts its credibility and compliance posture. Security measures such as HTTPS are in place, but additional security headers and policies are recommended to enhance protection. Overall, the site demonstrates good technical implementation and user experience but requires improvements in transparency and compliance to strengthen trust and security.

Caixa Econômica Federal is a major Brazilian government-owned financial institution providing a wide range of banking and financial services to the Brazilian population. The website serves as a portal for these services, including retail banking and lottery offerings. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Microsoft SharePoint and multiple analytics and advertising platforms. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response information are not published on the site. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent management system in place. Overall, the website reflects a mature digital presence consistent with a large government financial institution.

Laterna Research is a cultural and archival project focused on the multimedia theater project Laterna Magika. The website serves as a repository of research, stories, photos, videos, and media related to this cultural heritage. It targets researchers, historians, and cultural enthusiasts primarily in the Czech Republic. The site is built on WordPress using the Twenty Seventeen theme and incorporates standard web technologies such as jQuery and Google Analytics for tracking. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate with social media presence but lacks direct contact details or formal certifications.

D

Datu valsts inspekcija

gov.lv

59

Datu valsts inspekcija is the official Latvian government authority responsible for overseeing personal data protection and GDPR compliance. The website serves as an authoritative source for data protection guidance, regulatory information, and public awareness. It targets Latvian residents, data controllers, and data protection officers with comprehensive resources and services. The site is well-structured, professionally designed, and provides clear contact information, reinforcing its role as a trusted government entity. Technically, the website is built on Drupal CMS, employs modern web technologies, and is optimized for accessibility and mobile use. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

S

Spribe OÜ

spribe.co

73

Spribe OÜ is a technology company specializing in innovative casino games for the iGaming industry. Founded in 2015 and based in Estonia, Spribe offers a portfolio of next-generation, provably fair games such as Aviator, Turbo Games, Poker, Skill Games, and Slots. The company positions itself as a pioneer in smart casino gaming, targeting online casino operators and players with engaging and transparent gaming experiences. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built using modern Angular framework (version 15), hosted on Amazon Web Services, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security is enforced via HTTPS with a clientTransferProhibited domain status, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. From a security perspective, Spribe demonstrates good practices such as provably fair cryptographic technology and licensing by the UK Gambling Commission, which adds trustworthiness. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, Spribe's website and domain registration data indicate a legitimate and credible business with a strong market position in the iGaming technology sector. Strategic recommendations include enhancing DNS security, publishing detailed security policies, and improving security headers to strengthen the security posture and trust further.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

dotFOX s.r.o. is a Czech digital marketing company specializing in affiliate marketing, lead generation, and performance marketing, with additional proprietary projects in financial comparison and affiliate networks. Established in 2014, the company positions itself as a professional and experienced player in the Czech online marketing sector, targeting businesses seeking effective marketing partnerships. The website is well-structured, professionally designed using modern frontend technologies such as Bootstrap and jQuery, and includes Google Analytics for user tracking. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers and no publicly disclosed security policies or incident response mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a credible business but requires improvements in privacy compliance and security best practices.

K

Kalpe

kalpe.cz

53

Kalpe is a Czech-based company specializing in the manufacture, sale, and rental of rehabilitation and compensatory medical devices, including motodlahy, motomedy, and rotopeds. The company targets both individual customers and institutional clients such as rehabilitation clinics and senior care facilities. Their market position is focused on providing quality rehabilitation equipment with a local Czech market presence. The website is well-structured and provides comprehensive product information, contact details, and service options including repair and rental. Technically, the website is built on WordPress with modern integrations such as Google Analytics, Google Tag Manager, and reCAPTCHA v3 for spam protection. The site is mobile-optimized and uses structured data (JSON-LD) for SEO enhancement. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and protects its contact forms with reCAPTCHA, but lacks visible security headers and cookie consent banners, which are important for GDPR compliance. The absence of WHOIS data reduces trust in domain registration transparency, though the website content and contact information appear legitimate and professional. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from improved security headers, cookie consent implementation, and domain registration transparency to strengthen its security and compliance posture.

E

EPGM LLC

estherperel.com

63

Esther Perel's website serves as a comprehensive platform for relationship education, offering a variety of resources including podcasts, courses, books, and professional training. The brand is well-established with a strong multimedia presence and a clear focus on relational intelligence and eroticism. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and rich content. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools, ensuring robust tracking and user engagement capabilities. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy could enhance trust further. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms in place. The lack of publicly available WHOIS data slightly reduces trust but is likely due to privacy protection. Overall, the site is trustworthy, professional, and well-positioned in its niche.

A

Aheadworks

langshop.io

66

Langshop.io is a SaaS provider specializing in multilingual translation solutions for e-commerce platforms, specifically Shopify and Magento 2. The company offers applications and extensions that enable store owners to translate their stores effortlessly, import translations, and improve SEO for multilingual reach. The business is positioned as a niche player in the e-commerce translation market, targeting merchants who require seamless multilingual capabilities. Technically, the website is built on Magento 2 with integrations of modern JavaScript libraries such as jQuery, RequireJS, and KnockoutJS, alongside marketing and analytics tools including Google Analytics, Facebook Pixel, and Klaviyo. The domain is relatively new, registered in 2021, and uses privacy protection services, which is typical for SaaS startups. Security posture is good with HTTPS enforced and domain locks in place, but lacks advanced DNS security features like DNSSEC and does not publish explicit security or incident response policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages. Overall, the website is professional and functional but could improve transparency and compliance documentation.

I

Ing. Radek Balon

it-balon.cz

52

Ing. Radek Balon operates a small-scale IT and multimedia service business based in Velká Bystřice, Czech Republic, with a domain registered since 2015. The company offers a range of services including web design, e-shop creation, IT infrastructure setup, graphic design, and video production such as wedding filming. The website is professionally designed using WordPress with modern plugins and technologies, providing a good user experience and clear navigation. Contact information and social media links are prominently displayed, enhancing business credibility. The site includes GDPR-compliant cookie consent mechanisms but lacks a dedicated privacy policy and terms of service pages. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some improvements are recommended such as adding security headers and fixing minor PHP warnings. Overall, the website reflects a trustworthy and professional small business with a solid technical foundation and moderate privacy compliance.

C

Czech Society for Mass Spectrometry

czechms.org

44

The Czech Society for Mass Spectrometry is a professional scientific association based in Olomouc, Czech Republic, affiliated with Palacký University. It serves research scientists and professionals in the field of mass spectrometry by organizing events, seminars, and providing informational resources. The website reflects a niche, well-established organization focused on advancing mass spectrometry techniques within the Czech scientific community. The site content is professional and consistent with the organization's mission, featuring event announcements and partner collaborations with reputable scientific and commercial entities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and accessibility but lacks advanced frameworks or CMS detection. Mobile optimization is basic, and SEO practices are adequately implemented through meta tags and structured navigation. However, there is no evidence of modern security headers or comprehensive privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS as indicated by secure links, but no explicit security headers were detected in the provided data. The login form for members lacks visible advanced protections such as CAPTCHA. The absence of privacy, cookie, and terms of service policies, as well as incident response and vulnerability disclosure information, indicates gaps in compliance and security transparency. WHOIS data is unavailable due to a malformed request, limiting domain registration trust verification. Overall, the website presents a professional and trustworthy front for a small scientific association but would benefit from enhanced security practices, privacy compliance, and WHOIS transparency to improve trustworthiness and regulatory adherence.

P

Pixman

pixman.cz

74

Pixman.cz is a Czech digital agency specializing in web development, e-commerce solutions, and digital marketing services. The company offers a range of services including website and e-shop development, integration with Microsoft Dynamics 365 Business Central, online marketing strategies, creative visuals, and content management with Sitecore CMS. Their market position is that of a specialized small agency targeting businesses seeking modern digital solutions with a focus on fair play and digital innovation. Technically, the website employs a modern technology stack including PHP, JavaScript, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Visual Website Optimizer. The site uses Sitecore CMS and promotes integration with Microsoft Business Central, indicating a mature digital infrastructure. The website is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, but the website content and business information appear legitimate and professional. Overall, Pixman.cz presents a trustworthy and professional digital presence with good privacy compliance and a solid technical foundation. Strategic improvements in security header implementation and public security policies would enhance their security posture further.

M

Matosoft

matosoft.cz

40

Matosoft is a small Czech Republic-based web development company specializing in custom WordPress websites, e-commerce solutions, and PHP/Nette framework programming. The company has been operating since 2011 and serves primarily local businesses and individuals seeking professional web presence and digital marketing services. The website demonstrates a solid portfolio and client testimonials, indicating a reputable market position within its niche. Technically, the site uses modern technologies including WordPress, PHP, and various analytics and tracking tools, hosted likely with Wedos, a Czech hosting provider. The site is mobile responsive and SEO optimized, providing a good user experience. However, the security posture is moderate with no advanced security headers or published security policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

M

Marathon Studio

marathonstudio.cz

53

Marathon Studio is a Czech creative agency specializing in visual communication, brand strategy, web design, and consulting services. The company emphasizes long-term brand identity development and strategic design processes, targeting businesses seeking to enhance their brand presence. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted small-sized agency in their market segment. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Tag Manager, and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the website content and social media presence support its credibility. Overall, the site scores well in content quality and privacy compliance but could improve in security posture and business contact transparency.

1

Galerie 100 dřevostaveb, které se vám líbí

100drevostaveb.cz

43

The website www.100drevostaveb.cz serves as an interactive catalog showcasing wooden houses favored by Czech users. It allows visitors to view various wooden house projects, vote on them, and engage with the content via social media plugins. The business model revolves around community engagement and providing inspiration for wooden house construction enthusiasts in the Czech Republic. The site targets a general audience interested in architecture and wooden homes. Technically, the site employs a range of JavaScript libraries including jQuery, Facebook SDK, Google Analytics, and advertising scripts from Google Adsense and Gemius. The site is served over HTTPS with no visible SSL issues, but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional, moderately optimized for mobile, and provides a good user experience, but would benefit from improved privacy compliance and security transparency.

E

EUROBEN, s.r.o.

happydog.cz

54

HappyDog.cz is an established Czech e-commerce retailer specializing in high-quality natural pet food for dogs, cats, and fish under the Happy Dog and Happy Cat brands. The company emphasizes tradition and quality, serving pet owners primarily in the Czech Republic and Slovakia. Their business model focuses on direct online sales complemented by a physical store in Teplice and a comprehensive customer support system. The website demonstrates a consistent brand presence with active social media engagement and detailed product offerings.

HIT OFFICE, s.r.o. is a Czech-based company specializing in office supplies and food packaging products, offering both standard and custom manufacturing solutions. The company operates a multilingual website with an integrated e-shop, targeting business customers in need of office and food packaging materials. The website demonstrates a solid market position supported by multiple certifications such as FSC, ISO, and BRC, and showcases awards that emphasize quality and sustainability. The company was founded in 1994, indicating a mature presence in its sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Select2, Swiper, and Google services such as reCAPTCHA and Analytics. The site is mobile-optimized with good navigation and content quality, although some accessibility and SEO aspects could be improved. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data is a notable gap, reducing transparency and trustworthiness from a domain registration perspective. However, the website content, certifications, and business information support the legitimacy of the company. No critical security vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, HIT OFFICE's website is professional and functional, with room for improvement in privacy compliance and security best practices. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response policies, and providing clearer contact information for data protection officers.

Malfini.com is a website associated with Pro-idea s.r.o., likely operating in the fashion or apparel sector given the brand name and styling cues. The domain is well-established, created in 2010, and shows consistent registration data. The website employs modern front-end technologies including Bootstrap, Swiper, and AOS, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Sales Manago. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies.

R

ROKA komíny s.r.o.

roka-kominy.cz

46

ROKA komíny s.r.o. is a Czech-based manufacturer specializing in chimney systems with over 30 years of industry experience. The company offers a wide range of chimney parts, including over 7000 items in stock, and provides custom manufacturing services. Their business model combines manufacturing with retail through an integrated e-shop, targeting construction professionals and end customers in the Czech Republic. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring good mobile optimization and user experience. Security measures include HTTPS enforcement and reCAPTCHA integration, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. However, the absence of WHOIS data reduces transparency and trustworthiness somewhat. Overall, the site is professional, secure, and business-focused, with room for improvement in security headers and WHOIS transparency.

H

Hithit s.r.o.

hithit.com

59

Hithit s.r.o. operates a Czech crowdfunding platform that connects creative individuals such as artists, designers, developers, and sportspeople with their supporters. The platform facilitates reward-based crowdfunding campaigns, enabling project creators to raise funds and offer exclusive rewards to backers. Established since 2012, Hithit holds a solid position in the Czech market with a medium-sized business footprint and a consistent brand presence. Technically, the website leverages modern JavaScript libraries and integrates multiple third-party services including Google Analytics, Facebook SDK, and Twitter widgets. Hosting is supported by Amazon CloudFront CDN, ensuring moderate performance and good mobile optimization. The site implements cookie consent mechanisms and uses HTTPS, but lacks some advanced security headers and explicit security policies. From a security perspective, the platform enforces HTTPS and cookie consent but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces trust slightly, but the overall business credibility remains high based on website content and contact transparency. Overall, Hithit presents a professional and trustworthy crowdfunding service with room for improvement in security policy transparency and WHOIS data availability. Strategic enhancements in security headers and incident response disclosures would strengthen its security posture and user trust.

N

Národní filmový archiv

nfa.cz

65

Národní filmový archiv is a Czech national institution dedicated to the preservation, research, and public access of Czech and Czechoslovak film heritage dating back to the late 19th century. The organization operates a professional website offering extensive information about its collections, services, and educational programs, including a cinema (Kino Ponrepo) and digital resources. The website is well-branded, consistent, and targets a broad audience including film enthusiasts, researchers, and educational institutions. Technically, the site employs modern web technologies, integrates Google Analytics and Tag Manager for performance and usage tracking, and is hosted under a reputable registrar with a domain age consistent with the institution's history. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance.

O

Kasyno Online W Polsce 2025 | Polskie Kasyna Internetowe

onlinecasinopolski.pl

64

onlinecasinopolski.pl is a Polish-language online platform specializing in providing curated lists, reviews, and bonus offers for licensed online casinos accessible to Polish players in 2025. The site targets adult Polish gamblers seeking legal and reliable online gambling options, offering detailed casino ratings, payment method information, and game categories. Technically, the website employs modern web technologies including JavaScript, CSS3, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and uses HTTPS, ensuring secure connections. However, it lacks explicit privacy and cookie policies, which is a compliance gap under GDPR. Security-wise, the site has a good SSL configuration but lacks DNSSEC and security.txt disclosures, which could improve trust and security posture. Overall, the domain registration is consistent with the business claims, enhancing legitimacy. Strategic improvements in privacy compliance and security disclosures are recommended to enhance trust and regulatory adherence.

Z

Zdeněk Šmejkal

zdesmejkal.cz

47

Zdeněk Šmejkal operates a professional website offering web development and graphic design services primarily targeting businesses and individuals in the Czech Republic. The site showcases custom web solutions including order systems for restaurants and simple e-commerce platforms, alongside corporate identity and print material design. The business is positioned as a small independent service provider with a clear focus on technology and creative services. Technically, the website is built on Drupal 7 with jQuery and Lightbox2 libraries, and integrates Google Analytics via Google Tag Manager for visitor tracking. While the site is functional and well-structured, it shows signs of aging technology and lacks modern security headers and privacy compliance features. Mobile optimization and accessibility are basic but adequate for general use. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and suitable for its business purpose but would benefit from enhanced security practices, updated technology, and improved privacy compliance to strengthen trust and reduce risk.

I

IWA

iwa-let.org

43

The IWA-LET website represents the International Water Association's Leading Edge Conference on Water and Wastewater Technologies, a well-established international event focused on advancing water management through science and innovation. The site targets professionals, researchers, and stakeholders in the water sector, providing detailed information about conference programs, sponsors, organizing committees, and partner organizations. The business model centers on event organization and knowledge dissemination within the water industry, supported by reputable sponsors and partners. Technically, the website is built on WordPress with modern plugins and tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy linked on the parent IWA domain but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its organizational identity.

Helpnet.cz is a Czech non-profit informational portal dedicated to persons with specific needs, including disabilities and seniors. The website provides news, grant information, event calendars, and media monitoring related to social services and disability support. It is operated by CZI, s.r.o., a Czech company, and targets a specialized audience within the Czech Republic. The site uses Drupal 7 CMS and integrates common web technologies such as jQuery and Google Analytics. The design and content quality are good, with clear navigation and mobile optimization. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Security posture is generally good with HTTPS and CAPTCHA protections, but security headers are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.