Security Directory

D

DATABOX, s.r.o.

zivegdpr.cz

55

ŽivéGDPR.cz is a Czech Republic based small business operated by DATABOX, s.r.o., specializing in providing comprehensive GDPR compliance documentation and support services. The website offers a complete package of GDPR-related documents, manuals, templates, and expert consultation services targeted at companies seeking to implement GDPR requirements efficiently. The business leverages a professional online presence with clear contact information and a focus on GDPR education and compliance support. Technically, the website uses modern web technologies including Bootstrap and jQuery, with Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and well-structured, providing a good user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers and formal incident response disclosures. Overall, the domain registration aligns well with the business claims, showing legitimacy and consistency. The website is safe, professional, and trustworthy with no signs of malicious or adult content.

D

Databox s.r.o.

skolanadlani.cz

62

ŠkolaNaDlani.cz is an educational communication platform operated by Databox s.r.o., founded in 2013 and based in the Czech Republic. The service facilitates easy and efficient communication between schools and families, targeting teachers, parents, and students. It integrates with popular platforms such as Google Classroom and Microsoft Teams, enhancing its utility in modern educational environments. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience.

M

Muzeum Hlučínska

hlucinske-pamatky.cz

56

The website 'Hlučínské památky' serves as an informational platform dedicated to the cultural and historical monuments of the town of Hlučín in the Czech Republic. It provides detailed listings and descriptions of sacral and secular monuments, targeting a general audience interested in local heritage. The site is managed by 'Muzeum Hlučínska' and features a professional design with good navigation and mobile optimization. Technically, the site uses jQuery libraries, Google Analytics, and Tag Manager, hosted on a CDN provided by arsy.cz. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or terms of service pages. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears trustworthy and professionally maintained. Overall, the site is safe for general audiences and provides valuable cultural information but would benefit from enhanced security and compliance features.

T

TESCOMA s.r.o.

tescoma.com

50

TESCOMA s.r.o. operates a multilingual website offering a comprehensive range of kitchen stainless steel cookware, utensils, and accessories for cooking and table use. The company targets a broad general audience interested in kitchenware products and maintains a consistent brand presence across multiple country-specific domains. The business model is retail-focused, serving customers primarily in the Czech Republic and other European markets. The website content is professionally presented with good design and navigation, although mobile optimization and accessibility are basic. Technically, the website uses standard HTML, CSS, and JavaScript technologies, including an outdated version of jQuery (1.4.4) and Google Analytics for tracking. The site lacks modern security headers and does not provide visible privacy or cookie policies, which impacts compliance and user trust. Performance is moderate, and SEO optimization is good based on meta tags and multilingual support. From a security perspective, the site uses Google Analytics asynchronously but lacks visible HTTPS confirmation and security headers in the provided data. The WHOIS lookup failed to return registrar or registrant information, raising concerns about domain registration legitimacy. No contact information or incident response details are provided, limiting transparency and trust. Overall, the security posture is moderate but requires improvements in SSL configuration, security headers, and compliance documentation. The overall risk assessment indicates a functional and professional retail website with some technical and compliance gaps. Strategic recommendations include updating JavaScript libraries, implementing HTTPS and security headers, publishing privacy and cookie policies, and improving transparency with contact and incident response information to enhance trust and security posture.

H

HELUZ cihlářský průmysl a. s.

heluznamax.sk

41

HELUZ cihlářský průmysl a. s. operates the website heluznamax.sk, which promotes the HELUZ NA MAX partner program offering building materials and unique benefits for construction projects. The company is positioned as a large manufacturer in the building materials sector, targeting construction professionals and home builders primarily in Slovakia. The website provides detailed program benefits, partner links, and resources to support customers in their building projects. Technically, the website uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Typekit fonts. It is served over HTTPS with good SSL configuration and includes multiple external integrations for analytics and advertising. The site is mobile optimized with good design and navigation, though accessibility features are basic. Privacy and cookie policies are present but lack an explicit consent mechanism. From a security perspective, the site enforces HTTPS and uses standard tracking and advertising scripts without visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public security or incident response policies are found. The WHOIS data aligns well with the business identity, indicating a legitimate and trustworthy domain. Overall, the website presents a professional and credible business presence with moderate user tracking and advertising. Strategic improvements in security headers, explicit cookie consent, and public security policies would enhance the security posture and compliance. The risk level is low, with no critical issues detected.

C

Citadeli

citadeli.com

55

Citadeli is a Georgian-based company specializing in the retail and distribution of high-quality construction and renovation materials, as well as construction equipment. The company operates an e-commerce platform that facilitates easy online purchasing for construction professionals and retail customers. The website is well-structured with a comprehensive product catalog and multi-language support, targeting primarily the Georgian market. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components and integrates marketing and analytics tools like Facebook Pixel and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses domain registration locks to protect the domain, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security policy transparency.

CIKO s.r.o. is a Czech manufacturer specializing in chimney systems, including brick and stainless steel chimneys, safe penetrations, and related accessories. Established in 2004 and operating under the Heluz Group, the company offers a broad product range with a strong emphasis on quality, safety, and customer satisfaction, including a 30-year warranty. The website reflects a mature digital presence with integrated analytics and marketing tools, a cookie consent mechanism, and clear contact information. However, it lacks explicit privacy policy and terms of service pages, as well as formal security policies or incident response contacts. The technical infrastructure is modern and supports good user experience and SEO, though security headers and advanced compliance features could be improved.

The website www.klientskyportal.cz serves as a client login portal primarily for financial services, targeting customers in the Czech Republic. It provides secure access to client accounts and integrates modern technologies such as Material Design, Google Analytics, Microsoft Clarity, and a custom chatbot for customer support. The presence of GDPR-compliant cookie consent mechanisms indicates attention to privacy regulations. However, the absence of WHOIS registration data and lack of explicit business contact information on the login page reduce transparency and business credibility. Technically, the site employs a moderate performance stack with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent, but could be improved by adding explicit security headers and ensuring secure form handling. Overall, the site appears legitimate and professional but would benefit from enhanced business transparency and security hardening.

D

DLC Websites

deadlinkchecker.com

39

DeadLinkChecker.com is a specialized online service offering free and subscription-based tools to detect broken links on websites, targeting webmasters and SEO professionals. The business operates a niche service focused on website quality and SEO enhancement, with a freemium model that includes manual checking and automated scheduled scans. The website content is professional and consistent with its stated purpose, providing clear service descriptions and user testimonials. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Analytics, with basic security measures such as HTTPS and a Content-Security-Policy header. However, the absence of additional security headers and cookie consent mechanisms indicates room for improvement in privacy compliance and security posture. The WHOIS data is notably missing or unregistered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site scores well on content quality and usability but should address privacy and security gaps to enhance trust and compliance.

R

Runto

windson.eu

45

Windson.eu is a specialized e-commerce website focused on the manufacture, distribution, and sale of darts and related accessories, targeting both professional and amateur darts players. The business operates primarily in the retail sector, offering a range of products including steel and soft dart sets, shafts, flights, tips, and electronic targets. The website is built on a modern WordPress platform utilizing WooCommerce for e-commerce functionality and Elementor for page design, supported by plugins such as Rank Math SEO and Site Kit by Google for analytics and SEO optimization. Hosting is provided by INTERNET CZ, a.s., a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses security-related scripts such as reCAPTCHA and password strength meters, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no visible security or incident response policy, which suggests room for improvement in security maturity. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms implemented, which could pose regulatory risks especially under GDPR. Overall, the website presents a professional and trustworthy front for its niche market, with good technical implementation and SEO practices. The absence of critical security issues and malicious content supports a moderate security score. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and establishing clear incident response and vulnerability disclosure channels to improve compliance and trust.

B

Bizzdesign BV

bizzdesign-academy.com

53

Bizzdesign Academy is a professional online training platform specializing in enterprise architecture and related software solutions such as Horizzon, Alfabet, and MEGA HOPEX. The platform offers a variety of free and paid eLearning courses, certifications, and role-based tutorials targeting enterprise users and professionals seeking to enhance their skills in Bizzdesign products. The website is built on the Moodle LMS platform with a modern tech stack including YUI, RequireJS, and jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security measures include HTTPS enforcement and Google reCAPTCHA v3 for bot protection, although explicit security headers and cookie consent mechanisms are not fully implemented. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration legitimacy, but the professional content and consistent branding support the site's credibility. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and security header implementation.

C

CIRCULAR PATH X AMANDA MURRAY

circularpathshoes.com

49

Circular Path X Amanda Murray is a niche luxury footwear brand offering unique and limited edition shoes and accessories crafted in Italy. The brand targets fashion-conscious women inspired by iconic New York City fashion culture. The website is hosted on the AliveShoes platform and integrates modern technologies including Stripe and Adyen for secure payments, Google reCAPTCHA for bot protection, and tracking tools like Google Analytics and Mouseflow. While the site is professionally designed with good mobile optimization and SEO practices, it lacks a visible privacy policy page and explicit security headers, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and secure website presence suggests a legitimate business. Overall, the site demonstrates a moderate security posture and good business credibility but should enhance transparency and security practices to improve trust and compliance.

E

E4YOU spol. s r.o.

smartweb.cz

61

E4YOU spol. s r.o. is a Czech technology company specializing in developing mobile marketing systems, CRM intranets and extranets, school intranets, web design, SEO, and IT infrastructure services including hosting and technical support. Established since 2000, the company serves a broad B2B audience with a focus on marketing and CRM solutions, supported by a portfolio of notable clients such as Electrolux and Coca-Cola. The website reflects a professional and consistent brand image with detailed service descriptions and comprehensive contact information. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrates Google Analytics for user tracking, and uses Cookiebot for cookie consent management, although the domain is not authorized in the Cookiebot Manager, causing a minor error. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with good SSL configuration but does not publish a privacy policy or terms of service, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms a long-standing domain registration consistent with the company's history, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from improved privacy documentation, enhanced security headers, and formalized incident response information to strengthen compliance and security posture.

S

SANANIM z.ú.

drogy.net

44

The website www.drogy.net is an informational portal focused on legal and illegal drugs, addiction, and prevention, operated by the non-profit organization SANANIM z.ú. It provides news, research, statistics, opinions, and recommendations primarily targeting the general public and professionals interested in drug-related topics in the Czech Republic. The site is well-structured with consistent branding and good content quality, offering valuable resources and external references to reputable news and research organizations. Technically, the site uses a custom CMS with multiple CSS and JavaScript assets, including Google Analytics and Google Tag Manager for user tracking. Hosting is provided by SmartWEB.CZ. The site demonstrates moderate performance and basic mobile optimization. SEO practices are good, but accessibility and privacy compliance need improvement. From a security perspective, HTTPS is implied but no explicit security headers or policies are detected. There is no visible sensitive data exposure or vulnerable libraries. However, the absence of privacy and cookie policies and lack of incident response information are notable gaps. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the website's active status and association with a known non-profit. Overall, the website is a credible and useful resource with moderate security posture and technical maturity. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and compliance.

T

Turistické informační centrum Hlučín

ic-hlucin.cz

47

The website www.ic-hlucin.cz serves as the official online presence of the Turistické informační centrum Hlučín, a local government-affiliated tourism information center in the Czech Republic. It provides visitors with historical, cultural, and tourist information about Hlučín and the surrounding region, including an event calendar and an e-shop for local products. The site targets tourists and local visitors interested in exploring the area. Technically, the site employs a modern JavaScript stack including jQuery, FullCalendar, and Mapy.cz API for interactive maps, along with Google Analytics for visitor tracking. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no critical vulnerabilities detected, but security headers are not explicitly observed. WHOIS data is unavailable, limiting domain legitimacy verification, though the site content and external links suggest a legitimate local government entity. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.

D

Databox s.r.o.

databox.cz

56

Databox s.r.o. is a well-established Czech company operating since 1996, specializing in providing extensive online databases and portals such as Živéfirmy.cz and Živéobce.cz, targeting businesses, municipalities, and educational institutions. Their market position is strong within the Czech Republic, offering verified company data and related services. Technically, the website uses legacy technologies like jQuery 1.9.1 and Bootstrap 3.3.4, with Google Analytics and Tag Manager for tracking, but lacks modern security headers and updated libraries, which poses some security risks. The security posture is moderate with room for improvement, especially in updating libraries and implementing comprehensive privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Nousu Games is a small-scale event organizer specializing in functional fitness competitions held in Vantaa, Finland. The website provides detailed event information, registration links, and partner acknowledgments, targeting fitness athletes and enthusiasts. The technical infrastructure is based on WordPress with Elementor, leveraging modern web technologies and Google Analytics for visitor tracking. While the site is well-structured and visually consistent, it lacks critical privacy and security policy disclosures, which impacts compliance and trust. Security posture is moderate with HTTPS enforced but missing security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

C

CrossFit8000 | CrossFit8000

crossfit8000.com

63

CrossFit8000 is a fitness gym specializing in CrossFit training and related fitness services, targeting fitness enthusiasts primarily in Finland. The website presents a professional and consistent brand image with a focus on service offerings such as memberships and event registrations. The business appears to be a small-sized local fitness provider established in 2012, with a stable domain registration history and no evident discrepancies in ownership or legitimacy. Technically, the website uses a combination of AngularJS, jQuery 1.10.2, Bootstrap CSS, and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Hosting is managed via Google Domains nameservers, and the site uses HTTPS with a clientTransferProhibited domain status, indicating some level of domain security. However, the use of an outdated jQuery version and lack of visible security headers suggest areas for improvement in security hardening. From a security posture perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security policies or incident response information. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR. The site collects user data via forms but does not clearly disclose privacy practices or cookie consent mechanisms. No contact information such as emails or phone numbers was found, limiting direct communication channels. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, updated technical components, and improved security headers. Strategic recommendations include enabling DNSSEC, updating JavaScript libraries, implementing security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

B

Boxathletics

boxathletics.store

68

Boxathletics is a Finnish e-commerce business specializing in functional sports equipment, tools, and apparel, targeting fitness enthusiasts and athletes within Finland. The company operates a Shopify-based online store with a professional design and clear navigation, offering a range of products tailored for functional training. The website demonstrates a moderate level of digital maturity, leveraging multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Judge.me for customer engagement and data insights. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in Finnish, reflecting adherence to GDPR requirements. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the business presents a trustworthy and professional online presence with room for enhancement in explicit contact information and security disclosures.

S

Sportingtech

sportingtech.com

70

Sportingtech is a medium-sized technology company founded in 2016 that provides an award-winning iGaming platform offering turnkey solutions for casino and sportsbook operators worldwide. The company positions itself as a customizable and localized platform provider with strategic partnerships and GLI certification, indicating regulatory compliance and market readiness. The website is professionally designed using WordPress and Elementor, hosted on AWS infrastructure, and supports multiple languages. It employs Google Analytics for user tracking and CookieYes for cookie consent management. Security posture is solid with HTTPS enforced and domain registration transparency, though improvements can be made by enabling DNSSEC and adding security headers. No explicit privacy policy or terms of service were found in the provided content, which is a gap in privacy compliance. Overall, the website is trustworthy, professional, and business-focused with no adult or explicit content.

P

PUR-IZOLACE s.r.o.

pur.cz

50

PUR-IZOLACE s.r.o. is a specialized Czech company providing thermal and waterproof insulation solutions using sprayed and cast polyurethane and polyisocyanurate foams. Established in 1991, the company has a strong market presence with over 3 million square meters of insulated surfaces. Their services include technical consulting, project documentation, material selection, and on-site application using advanced Gusmer technology. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the business content and contact information indicate legitimacy.

A

Association of Paint Manufacturers of the Czech Republic

avnh.cz

42

The Association of Paint Manufacturers of the Czech Republic (AVNH) is a voluntary industry association representing manufacturers, research institutes, and organizations involved in the production of paints, varnishes, and related raw materials within the Czech Republic. Established in 2001, the association serves as a national body providing membership services, industry representation, and information dissemination to its members. The website reflects a professional and consistent brand image targeting industry stakeholders and members. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for user tracking and analytics. The site is mobile optimized and provides a clear navigation structure.

S

SANANIM z.ú.

drogovaporadna.cz

50

The website drogovaporadna.cz is operated by SANANIM z.ú., a Czech non-profit organization focused on drug prevention and treatment. The site provides an anonymous online drug advisory service, educational content about various drugs, and a telephone counseling line. It targets individuals affected by drug issues, their families, and professionals seeking information. The domain has been registered since 2000, indicating a well-established presence in the Czech Republic's drug prevention sector. Technically, the website uses a custom or unknown CMS with standard web technologies including JavaScript, CSS, and HTML. It integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by SmartWEB.CZ. The site shows basic mobile optimization and accessibility but lacks advanced SEO and modern security headers. Performance is moderate. From a security perspective, the site uses HTTPS and employs POST methods for forms, but lacks visible security headers such as CSP or HSTS. The charset is iso-8859-2 instead of UTF-8, which is outdated. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is found. The domain WHOIS data is consistent with the organization, supporting legitimacy. Overall, the site is a credible, safe, and educational resource with moderate technical and security maturity. Improvements in privacy compliance, security headers, and modern technical standards are recommended to enhance trust and protection.

K

Kankaanpään kaupunki

kankaanpaa.fi

67

Kankaanpään kaupunki operates as the official municipal government website for the city of Kankaanpää, Finland. It provides comprehensive information and services related to city administration, social and health services, education, culture, environment, and public participation. The website targets residents, visitors, and stakeholders interested in municipal services and local governance. As a public sector entity, it maintains a professional and consistent online presence with clear navigation and relevant content.

T

TorneoPal

torneopal.net

49

TorneoPal is a Finnish company providing a browser-based tournament and league management software solution. Their platform facilitates all aspects of tournament organization including registration, scheduling, referee assignments, and real-time result publishing. The service targets tournament organizers and sports associations, offering mobile-optimized result pages and custom mobile apps for larger events. The website is professionally designed, consistent in branding, and includes positive trust signals such as 5-star Facebook reviews. Technically, the site runs on WordPress with modern plugins and analytics tools, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

Webaula Oy

webaula.fi

58

Webaula Oy is a Finnish technology company specializing in WordPress website development, digital marketing, and analytics services. Established in 2012 and based in Vaasa, Finland, the company has completed over 450 projects, positioning itself as a reputable local service provider. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored WordPress solutions and digital marketing expertise. The company leverages modern web technologies and popular analytics tools to deliver optimized digital experiences. Technically, the website is built on WordPress using the Understrap theme and Elementor page builder, integrating multiple third-party services such as Google Analytics, Facebook Pixel, Hotjar, and Crisp Chat. Hosting appears to be managed by Cloud City Oy, consistent with the domain registrar and nameservers. The site demonstrates good mobile optimization, SEO practices, and moderate performance, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly present, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is transparent and consistent with the business information, supporting the legitimacy of the domain. Overall, Webaula Oy presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic enhancements in security headers, privacy policy visibility, and accessibility would further strengthen their digital maturity and risk management.

BacanaPlay is an online casino platform offering a wide range of gambling games, promotions, and a VIP club targeting adult users primarily in Finland and other European markets. The website presents a professional and modern design with good mobile optimization and SEO practices. It leverages modern web technologies including Nuxt.js, Tailwind CSS, and integrates major advertising and analytics services such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and service workers implemented, though explicit security headers and policies are not publicly disclosed. The absence of WHOIS registration data raises concerns about domain legitimacy and requires further verification. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

Betsul.bet.br is an online gambling platform focused on sports betting and casino games, targeting the Brazilian market. The site claims government authorization and highlights its credibility with a Reclame Aqui RA 1000 seal. The platform offers a variety of betting options including sports, e-sports, and live casino games, catering to adult users interested in regulated online gambling. Technically, the site uses modern web technologies including Cloudflare DNS, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is served over HTTPS and uses Cloudflare for DNS and likely CDN services, providing a solid security foundation. However, the site lacks visible privacy policies, cookie consent mechanisms, and terms of service pages, which are critical for compliance with privacy regulations such as GDPR. No direct contact information or incident response contacts are found, which may impact user trust and compliance. Overall, the site is professionally designed with good content quality and moderate SEO and accessibility features. The WHOIS data is consistent with the business claims, showing a domain registered with Cloudflare nameservers and an expiry date in 2025, aligning with the recent regulatory environment for gambling in Brazil.

I

Insinööritoimisto Karttatiimi

karttatiimi.fi

42

Karttatiimi Oy is a Finnish geospatial technology company established in 1993, specializing in providing mapping and location-based services primarily to municipalities, cities, and businesses across Finland. With over 25 years of experience and a client base exceeding 200 municipalities, the company holds a strong niche position in the Finnish geospatial services market. Their website clearly outlines key services such as map services, land reservation systems, feedback services, and open data interfaces, targeting public sector and corporate clients. Technically, the website is built on WordPress with modern plugins like Yoast SEO and integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small-sized technology company.

P

Petr Chára

evidence-praci.cz

60

Evidence-praci.cz is a Czech Republic based small technology business offering an online SaaS application for work tracking, project management, and client invoicing. The platform targets small to medium businesses requiring efficient work evidence and billing solutions. The website is professionally designed with clear navigation, responsive layout, and detailed product descriptions. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and Google Fonts, with analytics and retargeting scripts from Google and Seznam. Security posture is adequate with HTTPS enforced and OWASP recommendations mentioned, but lacks explicit security headers and published privacy policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the website presents a credible business with moderate risk due to missing WHOIS and privacy documentation.

C

Choice.cz

choice.cz

56

Choice.cz is a small creative agency based in the Czech Republic offering a broad range of services including web design, architectural design, digital marketing, storytelling, and technology integration such as VR web solutions. The company targets businesses and professionals seeking multidisciplinary creative and technological services. Their website showcases a professional portfolio with team member profiles and client references, positioning them as a niche player in the creative and real estate development sectors. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Google Maps API, with a responsive design optimized for mobile devices. However, the absence of explicit privacy and cookie policies and lack of security headers indicate room for improvement in compliance and security posture. The WHOIS data is unavailable, suggesting privacy protection, which is common for small agencies but reduces transparency. Overall, the website is professional and safe, but enhancing privacy compliance and security measures would strengthen trust and risk posture.

K

Kyberjoukot Oy

kyberjoukot.fi

57

Kyberjoukot Oy is a Finnish IT service provider specializing in outsourced IT support, server and cloud services, and IT equipment provisioning for small to medium-sized enterprises. The company positions itself as a flexible and reliable IT partner, enabling clients to focus on their core business while Kyberjoukot manages their IT infrastructure and support needs. The website reflects a professional and consistent brand image, with clear service offerings and contact channels. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is solid with HTTPS and basic best practices, though some enhancements in security headers and incident response transparency are recommended. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Plzeňský Prazdroj, a. s.

gambrinuscup.cz

51

Gambrinus Cup is a Czech darts tournament organized by Plzeňský Prazdroj, a major brewery company. The website promotes the event, providing registration for teams and pubs, with prizes totaling 250,000 Kč. The site targets mature audiences interested in darts and pub culture in the Czech Republic. Technically, the site uses modern web technologies including Bootstrap and Leaflet.js for interactive maps, and integrates Google Tag Manager and Analytics for tracking. Security posture is solid with HTTPS and age verification, though explicit security policies and headers could be improved. Privacy compliance is supported by cookie consent and links to privacy terms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

D

Delavie Sciences

delaviesciences.com

68

Delavie Sciences operates as a niche e-commerce skincare brand specializing in premium anti-aging and skin health products. The company leverages Shopify as its platform and integrates multiple marketing and analytics tools to enhance customer engagement and sales performance. The website is professionally designed with good navigation and mobile optimization, reflecting a solid digital maturity level. Security posture is adequate with HTTPS enforced and reputable third-party services used, though explicit security headers and policies are not fully evident. Privacy compliance is limited due to missing explicit privacy and cookie policies, which should be addressed to meet regulatory standards. The absence of WHOIS registration data raises questions about domain legitimacy and warrants further investigation. Overall, the site presents a trustworthy and professional front for its business but would benefit from enhanced transparency and security documentation.

Circular Path USA is a newly established e-commerce retailer specializing in fashion apparel and accessories, operating on the Shopify platform. The website offers a variety of clothing collections including seasonal wear and collaborations, targeting fashion-conscious consumers primarily in the United States. The business model is direct-to-consumer online retail with integrated customer review and support tools. Technically, the site leverages modern web technologies and Shopify's ecosystem, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though there is room for improvement in DNS security and formal security policies. Overall, the site presents a professional and trustworthy front for a small retail business with a strong foundation for growth.

B

BAL SLOVAKIA, s.r.o.

bal.sk

55

BAL SLOVAKIA, s.r.o. operates the largest network of paint, varnish, and drugstore retail outlets in Slovakia and the Czech Republic, offering over 10,000 product types across more than 200 stores. The company provides both retail and wholesale services, including color tinting centers and customer advisory support. The website is professionally designed, localized in Slovak, and targets retail customers and wholesale clients in the region. Technically, the site employs modern JavaScript libraries, Google Analytics, and Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, though security headers and explicit security policies are absent. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

P

PragueBest s.r.o.

upsearch.cz

59

PragueBest s.r.o. is a Czech Republic-based digital agency specializing in custom web and e-commerce development, serving a broad range of B2B clients. Established in 2002, the company has a solid market position supported by numerous client references and industry awards. Their services include detailed data analysis, web design focused on user experience, and e-shop development with ERP integrations. Technically, the website employs modern JavaScript and PHP technologies, integrates Google Analytics, Microsoft Clarity, and Google reCAPTCHA v3 for security and analytics. The site is well-optimized for mobile devices and accessibility, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and security headers, though no explicit security or incident response policies are publicly available. The absence of WHOIS data reduces domain trust but does not detract from the professional presentation and operational maturity of the business.

The website nlfnorm.cz serves as an official information system for the introduction of products to the market in the Czech Republic. It is operated by the Institut pro testování a certifikaci, a.s., Zlín, a recognized testing and certification institute. The site provides access to harmonized standards databases, terminological dictionaries, and legislative updates relevant to product compliance and market entry. Its target audience includes regulatory bodies, manufacturers, certification authorities, and professionals involved in product compliance. The business model is primarily informational, supporting regulatory compliance and market transparency. From a technical perspective, the website employs a traditional technology stack including jQuery, jQuery UI, and Google Analytics for tracking. The site appears to be custom-built or uses an unknown CMS, with moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses HTTPS and includes a cookie consent banner, indicating some level of privacy compliance. Security posture is moderate; while HTTPS is used and cookie consent is implemented, no explicit security headers were detected in the provided data. There are no visible forms or input fields that might expose vulnerabilities, but the absence of privacy and security policies and contact information for incident response reduces overall security maturity. No WAF or blocking mechanisms were detected, and the domain registration is consistent with the business history, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its informational purpose well. However, improvements in privacy policy publication, security headers implementation, and contact information transparency would enhance compliance and security posture. The site is safe for general audiences with no adult or questionable content.

W

Webovky123, s.r.o.

webovky123.cz

38

Webovky123, s.r.o. is a Czech Republic-based small technology company specializing in custom web development and internet marketing services. The company offers bespoke websites, e-shops, and digital marketing solutions including SEO and PPC management, targeting businesses seeking professional online presence. Their website demonstrates a professional design with clear navigation and client testimonials, indicating a solid market position within their niche. Technically, the site uses a proprietary CMS built on the Nette Framework, enhanced with jQuery and standard tracking tools like Google Analytics and Facebook SDK. While the site is accessible and functional, it lacks visible privacy and cookie policies, which impacts compliance posture. Security-wise, the site uses HTTPS and avoids exposed sensitive data but lacks advanced security headers and formal incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve overall credibility.

WhatAreCookies.com is an educational website focused on providing detailed information about computer cookies, their usage, security implications, and browser cookie management. The site targets general internet users seeking to understand cookies and offers tools such as cookie checkers and guides on enabling, deleting, and viewing cookies. The business model appears to be advertising-supported, primarily through Google Adsense, with additional marketing tools like AddThis for social sharing. The website has been operational since at least 2002, as indicated by copyright notices, but domain registration data is missing or unavailable, which raises concerns about domain legitimacy. Technically, the website uses standard web technologies including HTML, CSS, and JavaScript, with integrations for Google Adsense, Google Analytics, and AddThis. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. However, there is no evidence of a CMS or modern frameworks, and performance is moderate. Accessibility features are basic. From a security perspective, the site lacks visible security headers and there is no confirmation of HTTPS usage from the provided data. The cookie consent banner is implemented, requesting user consent for cookies and non-personalized advertising, which is a positive privacy compliance indicator. However, the absence of privacy policy and terms of service pages, as well as missing WHOIS registration data, reduce the overall trustworthiness and security posture. No incident response or vulnerability disclosure information is provided. Overall, the website is a useful educational resource with moderate technical maturity and basic privacy compliance. The main risk lies in the unclear domain registration status, which should be investigated further. Strategic recommendations include securing the domain registration, implementing HTTPS and security headers, publishing privacy and terms policies, and enhancing accessibility and security practices.

S

SVÚM a. s.

svum.cz

47

SVÚM a.s. is a Czech research and testing organization specializing in materials science, including metals, plastics, and composites. It operates accredited laboratories and provides services such as research, testing, welding certification, and technology development. The company holds certifications like ČSN EN ISO/EC 17025 and a General Electric certificate, positioning itself as a leading applied materials research institution in the Czech Republic. The website is professionally designed with clear navigation and good mobile optimization, utilizing modern JavaScript libraries and Google Analytics for user tracking. Security posture is solid with HTTPS enabled and secure forms, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Contact information is comprehensive, including email, phone, physical address, and social media presence. Overall, the website reflects a credible and professional organization with a moderate to high security and privacy compliance level.

A

API – The Business and Innovation Agency

agentura-api.org

55

The Business and Innovation Agency (API) is a Czech government agency focused on supporting business innovation and energy efficiency programs. The website provides detailed information on various funding programs, open calls, and methodologies aimed at fostering cooperation, renewable energy, and technology infrastructure development. The agency targets businesses, innovators, and government stakeholders, positioning itself as a key facilitator of innovation and economic growth in the Czech Republic. Technically, the website is built on WordPress with modern web technologies including Google Analytics and reCAPTCHA for security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and form protections, though it lacks some advanced security headers and explicit privacy and security policies. The absence of WHOIS data is typical for Czech government domains but limits external verification. Overall, the site is professional, trustworthy, and serves its business and government audience effectively.

M

Ministry of Industry and Trade

ris3.cz

48

The RIS3 website is an official government platform managed by the Ministry of Industry and Trade of the Czech Republic, focusing on the national smart specialisation strategy for research and innovation. It serves as a comprehensive resource for stakeholders interested in regional and national innovation priorities, providing strategy documents, news, events, and partner information. The site targets researchers, policymakers, and innovation communities within the Czech Republic and the EU. Technically, the website is built on Drupal 10 with modern JavaScript libraries for calendar and UI components, and it integrates Google Analytics for user tracking. The site is mobile-optimized, accessible, and follows good SEO practices. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and secures user login forms, though it lacks explicit published security policies or incident response contacts. WHOIS data is unavailable, likely due to CZ NIC policies, but the domain's .gov.cz TLD and content strongly indicate legitimacy. Overall, the website demonstrates a mature digital presence with good security and privacy compliance, suitable for its governmental function.

I

Icareus Media Services Ltd

icareus.video

53

Icareus Media Services Ltd operates the website icareus.video, providing a comprehensive video cloud platform for creating, managing, and monetising video content including webinars and live streaming. The company targets business customers and developers seeking an all-in-one video solution. The website is professionally designed using WordPress with Elementor and Astra theme, featuring clear navigation and product offerings. The technical infrastructure includes modern web technologies and Google Analytics for user tracking. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and consistent with the company's Finnish registration and recent founding in 2024.

P

PETA Latino

petalatino.com

60

PETA Latino is a Spanish-language branch of the global animal rights organization PETA, focused on advocacy, education, and campaigns to protect animals within the Latino community. The website offers rich content including news, campaigns, donation forms, and educational resources. It is professionally designed using WordPress with modern SEO and tracking technologies, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers, though the absence of a cookie consent banner and lack of visible WHOIS data are notable gaps. Overall, the site is trustworthy and serves a large non-profit audience effectively.

P

PETA Shopping Guide

petashoppingguide.com

64

The PETA Shopping Guide website serves as a comprehensive platform promoting vegan and cruelty-free companies, offering exclusive coupons and fostering partnerships to support animal welfare. Affiliated with the reputable non-profit organization PETA, the site targets consumers seeking ethical shopping options. The business model focuses on listing and endorsing companies that contribute financially to PETA, enhancing their market position as a trusted ethical shopping resource. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Swiper.js, ensuring good SEO optimization, mobile responsiveness, and user experience. The site employs HTTPS and integrates Google Analytics and Tag Manager for tracking, reflecting a mature digital infrastructure. However, some security headers are missing, and cookie consent mechanisms are absent, indicating areas for compliance improvement. From a security perspective, the site demonstrates good practices with secure forms and no visible vulnerabilities. The absence of WHOIS data raises transparency concerns but does not detract significantly from the site's trustworthiness due to strong branding and affiliation. Overall, the site is professional, secure, and user-friendly, though enhancements in privacy compliance and domain transparency are recommended. Strategically, the site should focus on implementing security headers, cookie consent banners, and publishing security and incident response policies to strengthen compliance and user trust. These improvements will align the site with best practices and regulatory requirements, ensuring sustained credibility and security.

P

PETA Literature

petaliterature.com

66

PETA Literature operates as a non-profit e-commerce platform dedicated to providing educational and activism materials such as stickers, leaflets, and posters to support animal rights. The website is closely affiliated with the well-known PETA organization, enhancing its credibility and market position within the animal rights advocacy sector. Its target audience includes activists, educators, students, and supporters of animal welfare. The business model focuses on suggested donations for materials, supporting activism and education efforts.

T

Tilava Oy LKV

tilava.fi

42

Tilava Oy LKV is a Finnish real estate brokerage company established in 2005, offering high-quality property brokerage services. The company targets Finnish real estate clients and partners, positioning itself as an experienced and reliable player in the local market. The website reflects a professional business with clear branding and relevant content focused on real estate services. Technically, the website uses Joomla CMS with common libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or incident response contacts are present, which limits the security posture. Overall, the domain registration data is consistent with the business claims, showing a long-established domain without privacy protection, which supports legitimacy. The website is safe with no adult or questionable content detected.

L

LTS-palvelu Prosentti

muistojenhml.fi

46

Muistojen Hämeenlinna is a culturally focused website dedicated to preserving and sharing the history of Hämeenlinna's wooden town from the late 19th and early 20th centuries. The site is based on extensive archival work by a local historian and is maintained by LTS-palvelu Prosentti. It serves a niche audience interested in local heritage and historical documentation. Technically, the site is built on Joomla CMS with Yootheme templates and UIkit framework, providing a modern and responsive user experience. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating compliance gaps. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosures. WHOIS data is transparent and consistent with the website's claims, supporting legitimacy. Overall, the site is a well-maintained cultural resource with room for improvement in privacy compliance and security best practices.

B

Brio

brionz.com

61

Brio is a New Zealand-based manufacturer specializing in sliding and folding door hardware, screen solutions, and related accessories for both residential and commercial applications. The company operates under the Allegion family of brands, indicating strong corporate backing and market presence. Their website provides comprehensive product information, warranty details, and downloadable resources, targeting architects, builders, and consumers seeking quality door hardware solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though improvements such as DNSSEC and security headers could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with a medium-sized market footprint.