Security Directory

P

Performia

performia.cz

65

Performia is a Czech Republic-based company specializing in recruitment, employee productivity, and HR education services. Established since 2004, it positions itself as a trusted partner for managers and HR professionals to build effective teams. The website showcases a professional digital presence with rich content including podcasts, webinars, conferences, and client references, indicating a mature business model focused on education and consulting in human resources. Technically, the site uses a modern CMS (Solidpixels), integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, and employs a cookie consent mechanism, reflecting a reasonable level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit published security policies. The absence of WHOIS data for the domain reduces trust slightly, though the website content and social media presence support legitimacy. Overall, the site is well-designed, user-friendly, and business-focused, but could improve transparency and security practices.

N

Nový Web s.r.o.

novy-web.cz

42

Nový Web s.r.o. is a Czech technology company specializing in advanced web development, e-commerce solutions, automation, and online marketing services. With over 17 years of experience, the company serves a diverse client base ranging from small and medium-sized enterprises to large corporations. Their key offerings include data integration, process automation, custom web and e-shop development, PPC campaign management, and SEO optimization. The website reflects a professional and consistent brand image with detailed portfolio references and clear contact information. Technically, the website employs modern web technologies including Google Analytics, Microsoft Clarity, Smartlook, and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, it lacks some security headers and a comprehensive privacy policy page, which are areas for improvement. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. No WAF or blocking mechanisms are detected, and the site is fully accessible. The company does not publicly disclose a security policy or incident response contacts, which could be enhanced to improve security posture and compliance. Overall, Nový Web s.r.o. presents a credible and professional online presence with room for improvement in privacy compliance and security best practices. The missing WHOIS data warrants caution but does not currently indicate malicious intent. Strategic recommendations include implementing security headers, publishing a privacy policy with GDPR details, and adding a security.txt file to facilitate vulnerability reporting.

A

AUTO KP PLUS CT, s.r.o.

citroen-business-center.cz

46

AUTO KP PLUS CT, s.r.o. operates as a Citroën Business Center in the Czech Republic, specializing in the sale and leasing of commercial and electric vehicles. The company offers a broad portfolio of Citroën models, including new and used vehicles, operational leasing, and rental services. Their website provides detailed information about their offerings, news updates, and customer engagement through newsletters and social media. The business targets entrepreneurs, fleet operators, and individuals seeking commercial vehicles with a focus on electromobility solutions. Technically, the website is built on a custom PHP platform utilizing jQuery and bxSlider for UI components, with integration of Google Analytics and Piwik/Matomo for visitor tracking. The site is mobile responsive and includes cookie consent mechanisms aligned with GDPR requirements. However, the use of an outdated jQuery version and lack of visible security headers indicate areas for improvement in security posture. Security-wise, the site employs HTTPS for resource loading and has implemented cookie consent with categorized tracking controls. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and consistent branding support the site's credibility. Overall, the website demonstrates a solid business presence with good content quality and privacy compliance, though technical and security enhancements are recommended to strengthen trust and resilience. The domain's WHOIS data absence is a concern and should be investigated further to ensure full legitimacy and compliance.

AUTO KP PLUS HOLDING a.s. operates as an authorized Toyota hybrid vehicle dealer based in Liberec, Czech Republic. The company specializes in the sale, rental, and test driving of Toyota hybrid cars, targeting consumers interested in eco-friendly automotive options. Their website presents a professional and user-friendly interface with clear navigation and relevant content focused on hybrid vehicles. The business maintains a regional market position with a medium-sized operational scale and demonstrates consistent branding and trust signals such as customer testimonials and official company registration details. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.8.2, Slick Slider, Bootstrap, and Google Analytics tools. While the site is mobile-optimized and SEO-friendly, some technical debt is evident due to the use of outdated JavaScript libraries and lack of advanced security headers. Performance is moderate, and accessibility is basic but functional. From a security perspective, the website enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit security policies or incident response contacts are published, and some security best practices such as security headers are missing. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website scores well in content quality, privacy compliance, and security posture but is penalized for missing WHOIS data and outdated libraries. Strategic improvements in domain transparency, security headers, and library updates are recommended to enhance trust and security maturity.

C

Citroën

citroen.cz

60

The website www.citroen.cz serves as the official online presence for Citroën in the Czech Republic, focusing on the sale of new and used vehicles along with after-sales services. It targets consumers in the Czech market interested in automotive products, providing tools such as vehicle configuration and dealer locators. The site is professionally designed with consistent branding aligned with the Citroën brand and Stellantis group ownership. Technically, the site leverages modern technologies including Adobe Experience Manager CMS, Google Analytics, Dynamic Yield for personalization, and Adobe Helix RUM for performance monitoring. Security measures such as HTTPS and standard security headers are implemented, ensuring a secure browsing experience. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce the overall trust and compliance posture. The site includes a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. Overall, the website is a credible and professional digital asset for Citroën in the Czech market.

M

Magyar Suzuki Corporation Ltd. branch office Czech Republic, organizační složka

suzuki.cz

57

Magyar Suzuki Corporation Ltd. branch office Czech Republic operates as the official regional representation of Suzuki Motor Corporation, focusing on the sale and servicing of Suzuki automobiles and motorcycles within the Czech market. The website serves as an information portal for current vehicle offerings, dealer networks, after-sales services, and owner events, targeting consumers and Suzuki enthusiasts in the region. The business model centers on automotive retail and customer support, leveraging the global Suzuki brand to maintain a strong market presence in transportation. Technically, the website is built on legacy ASP.NET WebForms technology, enhanced with modern JavaScript libraries and tracking tools. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages present compliance and trust challenges. Security posture is moderate, with cookie consent implemented but missing security headers and no visible incident response contacts. Overall, the site is functional and trustworthy from a branding perspective but would benefit from improved transparency and security hardening.

H

Hotel Schneider GmbH

schneider.at

66

Hotel Schneider GmbH operates a 4-star-superior hotel located in Obertauern, Austria, specializing in ski holidays, wellness, and family-friendly accommodation. The website reflects a strong market position supported by multiple awards and positive guest testimonials. The business model focuses on providing premium lodging, gourmet cuisine, wellness services, and ski-related packages, targeting ski enthusiasts and vacationers seeking relaxation and adventure in the Austrian Alps. The company has a medium-sized operation with a long-standing history dating back to 1967, emphasizing tradition and quality service. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It employs Google Tag Manager, Google Analytics, and Rebell Creative Analytics for tracking and performance monitoring. The site is well-optimized for mobile devices, fast loading, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site uses HTTPS with strong SSL configuration and appropriate security headers. Consent management is implemented for cookies and tracking technologies, ensuring GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact information, which could enhance transparency and trust. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for Hotel Schneider GmbH. The risk profile is low, with strong compliance and security practices. Strategic recommendations include publishing explicit security policies and incident response details to further strengthen the security posture and customer confidence.

R

RENOMIA EUROPEAN PARTNERS

renomia-ep.com

60

RENOMIA EUROPEAN PARTNERS is a large insurance brokerage and risk management network operating across 29 countries primarily in Central and Eastern Europe, Central Asia, and the Caucasus. They provide comprehensive insurance solutions including property & casualty, employee benefits, and reinsurance through a network of 2500 professionals and 81 offices. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses modern web technologies including Google Analytics, Microsoft Clarity, and a proprietary CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. WHOIS data is missing or unavailable, which reduces domain trustworthiness and should be verified externally. Overall, the site is safe, professional, and well-structured, suitable for its target business audience.

T

TKF, spol. s r.o.

tkf.cz

47

TKF, spol. s r.o. is a leading Czech supplier specializing in event equipment sales and rental, including party tents, inflatable advertising products, flags, and furniture. The company offers comprehensive event services and solutions, targeting event organizers and businesses primarily in the Czech Republic. The website reflects a medium-sized enterprise with a professional online presence and a strong focus on customer service and product variety. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various marketing and analytics tools including Google Tag Manager and Tawk.to chat. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks visible advanced security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and consistent with a professional event equipment supplier. Overall, the site scores well in content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security posture and domain registration transparency.

P

PRO-BIO – Svaz ekologických zemědělců, z.s.

pro-bio.cz

48

PRO-BIO is a well-established Czech non-profit association founded in 1999 that supports ecological agriculture, organic food producers, processors, sellers, advisors, schools, and consumers. The website serves as an information hub for members and the public, offering news, project details, membership benefits, and educational resources. The organization maintains a national presence with active social media channels and a clear focus on promoting sustainable farming practices. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for user interaction and security. While HTTPS is enforced, the absence of explicit privacy and cookie policies and missing security headers indicate areas for improvement in compliance and security posture. Overall, the site is professional, content-rich, and trustworthy, but could enhance user trust by publishing comprehensive privacy and security policies.

S

Svaz chovatelů ovcí a koz z.s.

schok.cz

60

Svaz chovatelů ovcí a koz z.s. is a Czech non-profit association dedicated to supporting sheep and goat breeders. Established in 2000, it provides legislative information, event calendars, breeding support, and news updates to its members and the broader agricultural community. The website serves as an information hub with clear navigation and relevant content tailored to its niche audience. Technically, the site employs a custom CMS by Intelligent Webs and integrates multiple modern JavaScript libraries and APIs, including Google Maps and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and published incident response policies, indicating room for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though enhancements in security and accessibility would strengthen its position.

Č

Český florbal & eSports.cz, s.r.o.

wfc2025.cz

61

Český florbal is the official governing body for floorball in the Czech Republic, operating a comprehensive website dedicated to the Women's World Floorball Championship 2025 (MS žen 2025). The organization provides event information, ticket sales, news updates, fan engagement, and volunteer opportunities. The website reflects a mature digital presence with modern technologies and strong branding consistency. Despite the absence of WHOIS registration data, the site demonstrates legitimacy through official partnerships, social media presence, and compliance with GDPR and cookie regulations. Technically, the site employs a robust tech stack including Google Tag Manager, Facebook Pixel, reCAPTCHA, and Nette Framework components, ensuring good performance and security posture. Security best practices are observed, though some security headers could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for users across devices.

D

Datlab Institut z.s.

datlabinstitut.cz

52

Datlab Institut is a Czech non-profit organization affiliated with Charles University, specializing in research and analysis to promote transparency and efficiency in public procurement and political finance. The organization operates several projects such as ZINDEX and Politickefinance.cz, targeting public sector stakeholders and the general public interested in governance and public spending. The website reflects a professional and consistent brand image with clear contact information and active external partnerships. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a Vue.js-based cookie consent mechanism. Hosting appears to be managed through WEDOS, consistent with the domain registrar data. The site is mobile-optimized with good navigation and content relevance, though some accessibility and SEO improvements are possible. From a security perspective, the site enforces HTTPS and employs cookie consent defaults denying ad and analytics storage until consent. However, explicit security headers are not detected in the HTML, and no privacy policy or terms of service pages are present, indicating compliance gaps. No vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website presents a low-risk profile with good business credibility and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and trust.

S

ShortPixel

shortpixel.com

67

ShortPixel is a technology company specializing in image optimization services primarily targeting WordPress users and website owners. Their offerings include WordPress plugins for image compression and adaptive image delivery, supporting modern formats like WebP and AVIF to improve website speed and SEO. The company has an established market presence since 2014, supported by positive customer testimonials and a professional website design. Technically, the site uses modern frameworks such as Bootstrap and integrates with major analytics and marketing tools like Google Analytics and ProfitWell. The infrastructure leverages Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in DNSSEC and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

H

Hyperfocus Oy

mikseri.net

64

Mikseri.net is a well-established Finnish music community platform operated by Hyperfocus Oy, founded in 2000. It serves as a hub for Finnish artists and fans to share, listen to, and download free MP3 music, as well as participate in forums and showcases. The platform leverages advertising and community engagement as its primary business model, positioning itself as the largest Finnish music community. Technically, the site uses a custom CMS with a tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and multiple advertising networks. While the site is functional and moderately optimized for mobile, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS and domain protection statuses, but lacks DNSSEC and security headers. Privacy compliance is strong with a consent management platform and clear privacy and cookie policies. Overall, the site is trustworthy and professional, though it could benefit from enhanced security policies and incident response transparency.

S

Suomen Punainen Risti

sprkontti.fi

65

SPR Kontti operates as a secondhand retail chain and online shop affiliated with the Finnish Red Cross, offering consumers an opportunity to recycle and donate various household items while supporting humanitarian work domestically and internationally. The website reflects a well-established non-profit business model with a clear mission and strong brand identity. The digital infrastructure is built on Shopify, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Google Analytics for performance monitoring. Security posture is robust, with HTTPS enforced, hCaptcha protecting forms, and standard security headers implemented. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site presents a trustworthy and professional online presence aligned with its charitable objectives.

M

Meteli

meteli.net

54

Meteli.net is a Finnish online platform specializing in listing concerts and music events across Finland. It provides users with comprehensive event information, including dates, locations, genres, and artists, along with ticketing links. The site targets Finnish music fans and concert-goers, positioning itself as a key media player in the Finnish live music event space. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Prebid.js for advertising, and Google Maps API for location services. It is hosted on AWS Cloudfront CDN, ensuring reasonable performance and availability. The site is mobile-optimized and features good navigation and SEO practices. Security-wise, the site enforces HTTPS and uses several security best practices but lacks some HTTP security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, no explicit security policy or incident response information is publicly available. WHOIS data is unavailable or protected, which slightly reduces transparency but is common for media websites. Overall, Meteli.net presents a professional, trustworthy, and user-friendly platform for Finnish concert information.

D

Datlab s.r.o.

datlab.eu

59

Datlab s.r.o. is a Czech-based company specializing in data gathering, processing, and analytics with a focus on economic data and public procurement. Their website highlights multiple specialized products aimed at public authorities, businesses, and researchers, including sanctions verification, tender documentation, supplier risk detection, and procurement monitoring. The company serves a diverse client base including government agencies, municipalities, universities, and NGOs, positioning itself as a trusted regional player in the public procurement data sector. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and professional design. Cookie consent is managed via a Vue.js component, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, registered under a reputable Czech registrar, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing a privacy policy and terms of service, adding security headers, and providing vulnerability disclosure information to enhance security posture and compliance.

O

Original Games

spotthedifference.com

55

SpotTheDifference.com is a niche casual gaming website offering over 70 'spot the difference' puzzles and games. The site targets general audiences interested in casual online puzzles and is funded primarily through advertising. The business appears small and focused on providing entertainment through browser-based games with some social media integration. Technically, the site uses a variety of third-party ad networks and tracking services, including Google Analytics, Criteo, and InMobi, indicating a moderate level of digital maturity but with potential privacy concerns. The site lacks visible privacy policies and contact information, which impacts trust and compliance. Security posture is weak due to missing HTTPS enforcement and security headers, and the absence of WHOIS registration data raises legitimacy concerns. Overall, the site functions as a basic casual gaming platform with room for improvement in security, privacy, and business transparency.

E

EIGENSINN | Marketing, Coaching, Management

eigen-sinn.biz

49

EIGENSINN is a small Austrian consultancy specializing in marketing, coaching, transformation design, and corporate identity services. The company leverages nearly two decades of experience in brand communication and leadership to serve businesses seeking innovative and individualized strategies. The website is professionally designed using WordPress with standard plugins and integrates Google Analytics for visitor tracking. It is well-structured, mobile-optimized, and provides clear contact information and social media presence. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a cookie consent banner and privacy information linked in the Impressum page, though no dedicated privacy policy or terms of service pages are found. Overall, the site is trustworthy and suitable for its business purpose.

K

Kratky Garten und Grünflächengestaltung Gesellschaft m.b.H.

kratky.at

46

Kratky Garten und Grünflächengestaltung Gesellschaft m.b.H. is a well-established garden and landscape construction company based in Vienna, Austria. The company offers a range of services including tree care, garden planning, and garden maintenance, catering to both large-scale projects and private gardens. Their website reflects a professional service provider with a clear focus on creating harmonious outdoor spaces for their clients. Technically, the website is built on WordPress with SEO optimization via Yoast and uses Google Analytics and Tag Manager for tracking. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks visible security headers and published security policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

B

Baumit GmbH

baumit.at

57

Baumit GmbH is a well-established Austrian manufacturer and distributor of building materials, specializing in facades, plasters, screeds, and thermal insulation systems. With a presence in 21 countries and a workforce of approximately 3,200 employees, Baumit holds a strong market position in Europe. The company targets construction professionals such as architects, painters, and facade specialists, as well as end consumers seeking high-quality building products. The website reflects a mature digital presence with comprehensive product information, service offerings, and sustainability initiatives. Technically, the website employs modern web technologies including jQuery, Vue.js, Bootstrap, and various JavaScript libraries for enhanced user experience. It features responsive design, SEO optimization, and accessibility considerations. Privacy compliance is robust, with a clear cookie consent mechanism and a detailed privacy policy. Security posture is good with HTTPS enforced and consent mode implemented, though explicit security headers and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. There are no indications of malicious activity or content safety concerns. Recommendations include enhancing security headers, publishing explicit security policies, and providing incident response contacts to further strengthen trust and compliance.

G

Grünwert Garten- und Landschaftsbau GmbH

gruenwert.at

45

Grünwert Garten- und Landschaftsbau GmbH is a medium-sized Austrian company specializing in landscaping, green roofing, tree and green area care, and large tree transplantation services. Established in 2014, it serves primarily the Eastern Austria region, targeting businesses and planners who require expert green environment development. The company positions itself as a reliable and competent partner with a strong focus on sustainability and environmental responsibility. Their website reflects this with professional design, clear service offerings, and comprehensive contact information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and GDPR compliance tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though additional security headers and policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is trustworthy, professional, and well-optimized for its audience.

S

SIA 1k.lv

1k.lv

60

1k.lv is a Latvian technology-driven real estate marketplace and agency offering a full spectrum of property sales services including valuation, marketing, legal support, and transaction closure. The company positions itself as a professional and licensed agent with 15 years of experience, targeting property sellers and buyers in Latvia. The website is well-structured with clear business information and contact details, supported by structured data for SEO. Technically, the site uses modern React-based infrastructure with module scripts, Google Fonts, and integrates with services like Supabase and Google Analytics. Security posture is good with HTTPS and a strict Content Security Policy, though the use of 'unsafe-inline' and 'unsafe-eval' in CSP reduces security effectiveness. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or Terms of Service page. Overall, the site is professional, trustworthy, and well-optimized for its market, but could improve security and compliance aspects.

A

ALSENTA s.r.o.

irekrut.cz

41

irekrut.cz is an established Czech job portal operated by ALSENTA s.r.o., founded in 2013. The platform offers job listings, career advice, and services for both job seekers and employers, focusing on regional job markets within the Czech Republic. The website is professionally designed with clear navigation and good mobile optimization, targeting primarily Czech-speaking users seeking employment opportunities. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, but lacks advanced CMS or structured data implementations. Security posture is moderate with HTTPS usage implied but missing explicit security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, with contact likely via forms. Overall, the domain registration and business information are consistent and credible, supporting a trustworthy online presence.

F

FC Slovan Liberec

slovanliberec.cz

45

FC Slovan Liberec operates as a professional football club based in the Czech Republic, providing comprehensive information about its teams, matches, fan engagement, and merchandising through its official website. The site targets football fans and local community members, offering news, schedules, player statistics, and multimedia content. The club holds a notable position in Czech football with historical league and cup victories, supported by multiple commercial partners and sponsors. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and social media connectivity. The site is mobile-optimized and features a cookie consent mechanism indicating awareness of privacy regulations. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response contacts. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

C

Chance Liga

chance-liga.cz

47

Chance Liga is the official online platform for the Czech First Football League, providing comprehensive information including match schedules, league tables, player and team statistics, news, and multimedia content. The website targets Czech football fans and sports enthusiasts, serving as a central hub for league-related information. Technically, the site employs modern web technologies such as Bootstrap, Owl Carousel, Google Analytics, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and uses HTTPS to secure communications. Security posture is solid with encrypted connections and CAPTCHA protection on login forms, though explicit security headers and policies are not fully implemented. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, but the website's official branding and content quality suggest a legitimate operation. Strategic recommendations include publishing clear privacy and security policies, implementing additional security headers, and verifying domain registration details to enhance trust.

S

SURA s.r.o.

sura-reklama.cz

41

SURA s.r.o. is a small Czech company specializing in printing, graphic design, advertising production, and web design services. The company offers a broad range of services including offset, digital, and large-format printing, textile printing, advertising signage, professional photography, copy center services, and computer sales. Their website is professionally designed using Joomla CMS and integrates common web technologies such as jQuery, Bootstrap, and UIkit, along with Google Analytics for visitor tracking. The site is accessible, mobile-optimized, and provides clear navigation and contact information, although it lacks formal privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing important security headers. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in compliance documentation and security headers are recommended to enhance trust and regulatory adherence.

Z

Založtesro.cz

zaloztesro.cz

56

Zaloztesro.cz is a Czech Republic based online platform specializing in facilitating the formation of limited liability companies (s.r.o.) directly through notaries, bypassing intermediaries. The website positions itself as the fastest and most cost-effective solution for entrepreneurs seeking to establish their business entities. It provides step-by-step guidance, notary selection tools, and direct links to relevant legal and governmental resources, targeting local entrepreneurs and startups. The platform leverages WordPress with the Divi theme, integrating modern web technologies such as Google Analytics, Google Tag Manager, and Google Maps API to enhance user experience and operational insights. Accessibility features and GDPR-compliant cookie consent mechanisms are implemented, reflecting a mature approach to privacy and user inclusivity. Security posture is solid with HTTPS enforced, though some security headers could be improved. Overall, the site demonstrates a professional and trustworthy digital presence with clear business focus and compliance adherence.

E

Energistics Consortium

energistics.org

65

Energistics Consortium is a well-established organization founded in 2006, specializing in developing and promoting data interoperability standards for the global energy industry. Their website reflects a professional and consistent brand presence, targeting energy sector professionals including operators, service companies, software developers, and regulators. The consortium offers key services such as standards development, certification, developer resources, and educational programs, positioning itself as a critical enabler of digital transformation in upstream energy operations. Technically, the website is built on Drupal 10 with modern libraries like jQuery and Bootstrap, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and credible with a strong market position in the energy standards domain.

Aramco is a globally recognized leader in the energy sector, specializing in integrated oil, gas, and chemicals production and supply. The company operates at an enterprise scale with a strong market position and a comprehensive portfolio of services that support global energy demands. Their website reflects a mature digital presence with professional branding, extensive content, and a focus on corporate values and sustainability. Technically, the site employs modern web technologies including React, Google Tag Manager, and multiple analytics and tracking tools, hosted likely on Akamai's infrastructure, ensuring fast performance and mobile optimization. Security-wise, Aramco demonstrates a strong posture with HTTPS enforcement, comprehensive security headers, and adherence to best practices, although the absence of a security.txt file suggests room for improvement in vulnerability disclosure transparency. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, supporting a positive risk profile for users and partners.

M

Marketin.no

marketin.no

66

Marketin.no is a Norwegian digital marketing and web development agency founded in 2018. The company specializes in creating digital concepts, SEO optimization, and managing measurable advertising campaigns such as Google Ads and Facebook Ads. Their market position is that of a results-driven agency targeting Norwegian businesses seeking to improve their online presence. The website is built on a modern tech stack including Next.js and integrates popular analytics and marketing tools like Google Tag Manager, Facebook Pixel, and Hotjar. While the website is professional and well-structured, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is good with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and provides clear contact information and customer testimonials, supporting business credibility.

C

CLAGE VANNVARMERE

clage.no

51

CLAGE VANNVARMERE is a Norwegian company specializing in energy-efficient water heating solutions, primarily through-flow water heaters for showers, kitchens, and hand wash applications. The website presents a professional e-commerce platform built on WordPress with WooCommerce and Elementor, offering detailed product information and a catalog targeting consumers and businesses interested in sustainable water heating. The company holds the SINTEF GODKJENT certification, enhancing its trustworthiness in the energy sector. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and incident response contact information. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is functional and professional but could improve in privacy and security transparency.

B

Bauer Media AS

hvordanlytte.no

46

Bauer Media AS operates hvordanlytte.no, a Norwegian digital radio information portal focused on providing listeners with comprehensive details about digital radio platforms including DAB+, streaming apps, and digital TV channels. The website serves as a hub for multiple branded radio channels under Bauer Media, targeting Norwegian radio audiences interested in modern digital listening options. The business model centers on media broadcasting and digital streaming services, leveraging partnerships with major digital TV and streaming platforms to maximize reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring good mobile optimization and user experience. However, some areas such as security headers and privacy compliance require improvement. Security posture is moderate with no critical vulnerabilities detected but lacks visible security policies and headers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures to align with best practices and regulatory requirements.

B

Bauer Media

bauermedia.fi

62

Bauer Media is a leading Finnish media company specializing in audio business and commercial radio, holding a market leader position in Finland. Their website reflects a professional and comprehensive presentation of their services, including Total Audio, Radiomainonta, and digital audio solutions. The company is part of the Bauer Media Group, indicating a strong parent company backing. Technically, the website is built on WordPress with modern analytics and marketing integrations, showing a mature digital infrastructure. Security posture is good with HTTPS and reputable third-party scripts, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and provides clear contact information, supporting its credibility.

B

Bauer Media Oy

radioplay.fi

65

RadioPlay.fi is a Finnish online radio and podcast streaming platform operated by Bauer Media Oy, a well-established media company in Finland. The website offers a wide range of radio stations and podcasts, including premium subscription options for ad-free listening. The platform targets Finnish-speaking audiences interested in diverse audio content. Technically, the site is built on modern web technologies including React and Next.js, hosted likely on AWS infrastructure, and integrates advertising and analytics tools such as Google Analytics and AdsWizz. Security measures include HTTPS enforcement and standard security headers, with a GDPR-compliant privacy and cookie consent framework in place. Overall, RadioPlay.fi demonstrates a mature digital presence with strong business credibility and a good security posture.

B

Bon Group Oy

bongroup.fi

43

Bon Group Oy is a Finnish hospitality group operating in growth centers and popular tourist destinations, focusing on beverage, entertainment, and food restaurant services. The company is growing and committed to sustainable development of its venues and operations. Their market position is that of a passionate and expanding hospitality operator aiming to become a leading experience hospitality company in Finland. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Tag Manager, Analytics, and reCAPTCHA for security and analytics. Cookie consent mechanisms are implemented with granular user controls, reflecting good privacy compliance. Security posture is strong with HTTPS and reCAPTCHA, though some security headers and explicit security policies are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

P

Paul Bauder AG

lebensraumdach.ch

45

Paul Bauder AG operates a professional website focused on green roofing systems and photovoltaic integration for industrial and commercial buildings in Switzerland. The company is positioned as a specialized provider in the energy sector, offering ecological and sustainable roofing solutions that enhance biodiversity and water retention. The website is well-structured, multilingual, and targets architects, planners, and building owners interested in green infrastructure. Technically, the site uses TYPO3 CMS with modern frontend libraries such as jQuery and Bootstrap, ensuring a responsive and user-friendly experience. Google Analytics is implemented with IP anonymization, and cookie consent mechanisms are in place, reflecting good privacy practices. Security posture is solid with HTTPS enforced, though additional security headers and explicit security policies could improve the overall security maturity. Contact information is clearly presented, and social media channels are actively linked, enhancing trust and engagement. Overall, the website demonstrates a good balance of business professionalism, technical implementation, and privacy compliance.

R

Ratina

ratina.fi

61

Ratina is a well-established shopping center in Finland, operated under the parent company Sponda Oyj. The website provides comprehensive information about retail stores, services, cafes, restaurants, and customer loyalty programs, targeting a broad audience including families and students. The site is built on WordPress CMS with modern plugins and integrates Google Analytics and Tag Manager for visitor tracking. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy in Finnish. Security posture is solid with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not published. Overall, the website presents a professional and trustworthy digital presence consistent with its business operations.

I

ICANIWILL AB

icaniwill.se

55

ICANIWILL AB operates a professional e-commerce platform specializing in high-quality training and gym clothes targeted primarily at fitness enthusiasts and athletes in Sweden and other Nordic countries. The website demonstrates a strong market position with a broad product range, localized content, and a clear focus on customer satisfaction, including secure payments and a 30-day return policy. Technically, the site is built on modern frameworks such as Next.js and Material-UI, ensuring good performance, mobile optimization, and accessibility. The security posture is solid with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. Overall, the website is trustworthy and well-maintained, with no signs of blocking or WAF interference.

E

Exekutorská komora České republiky

ceecr.cz

64

The website www.ceecr.cz serves as the official Central Evidence of Executions for the Czech Republic, operated by the Exekutorská komora České republiky. It provides a public registry of legally enforceable execution proceedings, offering both basic and detailed reports for a fee. The platform targets Czech citizens and legal entities seeking authoritative information on execution cases. The business model is a government-affiliated public service with monetized access to detailed data. Technically, the site employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and user-friendly experience. Google Analytics is used for visitor tracking, and HTTPS with CSRF protection is implemented, indicating a reasonable security posture. However, some security headers are missing, and no explicit cookie consent mechanism was detected, which could be improved for better privacy compliance. The absence of WHOIS data limits domain registration transparency, but the official nature and content quality support legitimacy. Overall, the site is professionally designed, trustworthy, and functional, serving an essential government function.

E

Eventim B2B

eventimb2b.no

58

Eventim B2B operates a professional ticketing platform business in Norway, part of the larger CTS Eventim group, Europe's leading live entertainment and ticketing company. The website presents multiple ticketing solutions tailored for event organizers, festivals, and venues, emphasizing robust technology and dedicated support. Their market position is strong, serving over 700,000 events annually across 26 countries. Technically, the site is built on WordPress with Elementor, optimized for SEO and mobile devices, and integrates modern analytics and marketing tools. Security posture is solid with HTTPS and security headers, though explicit security and incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site reflects a mature, trustworthy B2B service provider with room for enhanced security transparency.

D

DERIVA solutions s.r.o.

deriva.cz

59

DERIVA solutions s.r.o. is a Czech Republic-based small technology company specializing in custom development of web and mobile applications, including e-commerce systems, tailored websites, and native Android/iOS apps. Their market position is that of a specialized service provider focusing on bespoke software solutions for businesses seeking to digitize or enhance their online presence. The website presents a professional image with clear service offerings and a project showcase, targeting business clients primarily in the Czech market. Technically, the website employs a traditional web stack including jQuery, Bootstrap, and Modernizr, supplemented by Google Analytics and SpeedCurve for performance monitoring. The site is mobile optimized and has good SEO fundamentals, though accessibility is basic. No CMS or hosting provider details are evident. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing accessibility. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. The site includes a cookie consent banner, indicating some privacy awareness, but lacks visible privacy policies, terms of service, or vulnerability disclosure information. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is functional and professional but would benefit from improved transparency in domain registration, enhanced security headers, and comprehensive privacy and security policies to strengthen trust and compliance.

D

Dick Johnson

dickjohnson.fi

63

Dick Johnson is a Finnish e-commerce business specializing in men's cosmetics and apparel, targeting men who seek quality grooming products and stylish clothing. The company operates a Shopify-based online store with a clear market niche in men's grooming and fashion in Finland. The website is professionally designed with good content quality and consistent branding, supporting a positive user experience and trustworthiness. Technically, the site leverages modern e-commerce technologies and integrates multiple marketing and analytics tools, ensuring robust digital infrastructure and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trust. Strategic recommendations include enhancing security transparency and contact information to further improve trust and compliance.

Fachvereinigung Betriebs- und Regenwassernutzung e.V. (fbr) is a German non-profit association dedicated to promoting the use and management of operational and rainwater. The website serves as an information hub offering publications, campaigns, and advocacy aimed at professionals such as builders, municipal employees, planners, and experts in water sustainability. The organization holds a recognized position within Germany's environmental and water management sector, providing valuable resources and membership benefits. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs common web technologies including jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with a clear navigation structure and professional design. Privacy and cookie policies are present with consent mechanisms, reflecting basic GDPR compliance. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose, showing consistent and transparent domain registration without privacy protection, appropriate for a non-profit entity. Overall, the website is trustworthy, professionally maintained, and provides valuable content to its target audience. However, improvements in security headers, incident response documentation, and enhanced accessibility could further strengthen its posture.

D

Deutscher Stahlbau-Verband DSTV e.V.

deutscherstahlbau.de

56

The Deutscher Stahlbau-Verband DSTV is a prominent German industry association representing approximately 350 medium-sized steel construction companies, suppliers, engineering firms, and academic institutions. The organization focuses on advocacy, certification, knowledge sharing, and event organization within the steel construction sector. The website is built on TYPO3 CMS with a modern Bootstrap-based design, offering good mobile optimization and accessibility. It features comprehensive content relevant to its target audience of industry professionals and stakeholders. Security-wise, the site enforces HTTPS, employs a GDPR-compliant cookie consent mechanism, and uses Google Analytics with IP anonymization. However, it lacks explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Płyty warstwowe ARPANEL

arpanel.pl

48

ARPANEL is a Polish manufacturing company specializing in the production of high-quality sandwich panels for walls and roofs, including PIR and mineral wool core panels. Established in 2013, the company has positioned itself as a medium-sized player in the construction materials sector, targeting construction firms, architects, and industrial clients. Their website reflects a professional digital presence with multilingual support and comprehensive product offerings. Technically, the site is built on WordPress with modern SEO and analytics tools, including Google Analytics and Tag Manager, and employs cookie consent mechanisms compliant with GDPR. Security measures include HTTPS with DNSSEC and Google reCaptcha to mitigate bot traffic. However, there is room for improvement in HTTP security headers and publishing explicit security policies. Overall, ARPANEL demonstrates a solid business and technical foundation with good privacy compliance and trustworthy domain registration.

P

Płyty warstwowe ARPANEL

arpanel.lt

46

ARPANEL is a medium-sized manufacturing company specializing in multilayer insulation panels for walls and roofs, targeting construction professionals and architects primarily in Lithuania and neighboring European markets. The company operates a multilingual WordPress-based website with good SEO and user experience, supported by modern analytics and marketing tools such as Google Analytics and Google Ads. The website demonstrates compliance with GDPR through a comprehensive privacy and cookie policy, including a consent mechanism. Security posture is solid with HTTPS and reCaptcha integration, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business profile, indicating legitimacy. Overall, ARPANEL presents a professional and trustworthy digital presence suitable for its industry and audience.

P

Płyty warstwowe ARPANEL

arpanel.lv

47

ARPANEL is a medium-sized manufacturing company specializing in the production of sandwich panels with PIR and mineral wool cores, along with metal finishing materials and assembly accessories. The company targets construction professionals, architects, and industrial clients primarily in Latvia and neighboring regions, supported by a multilingual web presence. Their website demonstrates a solid technical infrastructure built on WordPress, enhanced with SEO and performance optimizations, and integrates modern tools such as Google Analytics, Google Ads, and CookieHub for compliance and marketing. From a security perspective, the site enforces HTTPS, uses Google reCaptcha for form protection, and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security headers are not explicitly detected and could be improved. No critical vulnerabilities or blocking mechanisms were found, indicating a stable and secure posture for typical business operations. Overall, ARPANEL's digital presence reflects a professional and trustworthy business with good compliance and marketing practices. The domain registration data aligns well with the company's claims, supporting legitimacy. Strategic improvements in security headers and incident response disclosures could further enhance their security maturity and trustworthiness.