Security Directory

AIMS (Association of International Marathons and Distance Races) operates as a recognized global organization dedicated to the promotion and coordination of marathon and long-distance running events worldwide. The website serves as a comprehensive hub for race calendars, news, results, directories, and publishes the Distance Running magazine, targeting runners, race organizers, and athletics enthusiasts globally. The organization is registered in Great Britain under MSC Publishing & Design Limited, with a domain age consistent with its operational history since 2016. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.12.4, Cycle2 plugins, Leaflet for mapping, and Google Analytics for user tracking with IP anonymization. The site is mobile responsive with good navigation and content quality, though some technical debt is evident in the use of outdated JavaScript libraries. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks DNSSEC and security headers, and uses an outdated jQuery version with known vulnerabilities. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a physical address with no emails or phone numbers explicitly provided. No incident response or security policy information is available. Overall, the website is professional and trustworthy with a solid business foundation but requires improvements in privacy compliance, security hardening, and transparency to enhance user trust and regulatory adherence.

T

Think Pink Europe

thinkpinkeurope.org

59

Think Pink Europe is a non-profit organization dedicated to raising awareness and funds to combat breast cancer across Europe. The organization runs major campaigns such as Race for the Cure and Pink@Work, engaging the public and corporate sectors to support breast cancer research and patient care. Their website reflects a well-structured, content-rich platform with clear calls to action for donations and participation in events. Technically, the site is built on a mature ASP.NET framework with modern front-end libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response information is published. Overall, the site demonstrates a professional and trustworthy presence suitable for its non-profit mission.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

M

MR.PARKIT

mrparkit.com

71

MR.PARKIT operates an online parking reservation platform focused on the Czech cities of Prague and Brno, offering users the ability to select parking garages on a map and book parking spaces for days or weeks. The business targets drivers seeking convenient, stress-free parking solutions and positions itself as a local service provider with a user-friendly digital presence. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site leverages modern technologies including Google Maps API for location services, Cookiebot for consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Bing Ads, and Facebook Pixel. Hosting is provided by a Czech hosting provider, and the domain is well aged and consistent with the business profile. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNSSEC adoption and security headers. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. However, the site lacks visible contact information, terms of service, and explicit security policies, which could be enhanced to improve trust and compliance. Overall, MR.PARKIT presents a credible and functional online service with moderate technical maturity and good privacy practices.

A

AddTex

addtex.eu

55

AddTex is an EU-funded Erasmus Plus project focused on advancing digital and green innovations in the advanced textile industry through innovative learning and training. The project collaborates with a network of 12 partners across 10 European countries to develop educational resources such as MOOCs and training platforms aimed at students, educators, and industry professionals, particularly SMEs. The website is built on WordPress with Elementor and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are absent. WHOIS data is privacy-protected by EURid, consistent with EU project norms. Overall, the site is professional, content-rich, and trustworthy, supporting its educational mission.

A

Abalon s.r.o.

novorocenky-elektronicky.cz

34

The website www.novorocenky-elektronicky.cz represents a small Czech company, Abalon s.r.o., specializing in electronic New Year greeting cards primarily targeting business customers. The site offers original and customizable electronic PF cards created by multiple artists. The business model is B2B e-commerce with a niche focus on seasonal greeting cards. The website content is minimal and currently displays a placeholder message about the next offer release in August 2025. Technically, the site is built on WordPress with common JavaScript libraries and Google Analytics for tracking. HTTPS is enforced, but no advanced security headers or explicit privacy/cookie policies are present on the main domain. Contact information is limited to a phone number, with no emails or social media links visible. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness.

A

Abalon s.r.o.

pf.cz

37

The website www.pf.cz represents Abalon s.r.o., a small Czech company specializing in the design and sale of original, artistically crafted New Year and Christmas greeting cards. The business targets corporate clients and organizations looking for unique and charitable greeting card options. The site offers customization services, free proofreading, and sample cards, positioning itself as a niche provider in the Czech market. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Video.js, with SEO optimization via Yoast and analytics through Google Analytics. HTTPS is enforced, ensuring secure connections, but the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity with moderate performance and mobile optimization.

D

DAMI development s.r.o.

damidev.com

67

DAMI development s.r.o. is a Czech Republic based software development company specializing in mobile and web application development with over 13 years of market presence. They serve businesses and startups by delivering software solutions that enhance internal processes and cost efficiency. Their key services include development for multiple mobile platforms (Android, iOS, TV, wearables), web applications, third-party hardware/software integration, and innovative technologies such as IoT, augmented reality, and machine learning. The company showcases a professional website with clear navigation, client references, and modern technology usage, indicating a mature digital presence. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified.

K

Online Kasino Česko ⚡️ Nejlepší Kasina v České Republice

kasinoczech10.com

49

The website kasinoczech10.cz is a Czech-language online casino affiliate and review platform focused on providing detailed information about online casinos available to Czech players. It offers curated casino reviews, bonus offers, payment method guides, and game type information to help users make informed decisions. The site targets adult Czech players interested in online gambling and operates primarily through affiliate marketing partnerships with various casinos. Technically, the site is built on WordPress, uses Cloudflare DNS, and integrates Google Analytics, Google Tag Manager, and OneSignal for analytics and notifications. The site is mobile-optimized with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formal privacy or cookie policies. The domain is relatively new (created in 2023) but consistent with the business age and model. Overall, the site is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and security policy disclosures.

N

Národní technické muzeum

muzeum-plasy.cz

48

Muzeum Plasy operates as a specialized cultural and educational institution under the National Technical Museum of the Czech Republic, focusing on the preservation and exhibition of building heritage and historical construction techniques. The website provides detailed information about exhibitions, events, educational programs, and visitor information, targeting cultural tourists, students, and researchers interested in architectural history. The business model is non-profit and government-affiliated, emphasizing education and cultural preservation. Technically, the website is built on WordPress 6.2.6 with modern web technologies including jQuery, Google Analytics, and lazy loading for images. The site is mobile-optimized and features good navigation and content structure. However, there is room for improvement in security headers and privacy compliance. The site uses HTTPS with a good SSL configuration but lacks explicit privacy and cookie policies, which are important for GDPR compliance. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of security headers and vulnerability disclosure policies are notable gaps. The WHOIS data is unavailable, which limits domain trust verification, but the association with the National Technical Museum and professional content suggests legitimacy. Overall, the website is well-designed and professional, serving its educational and cultural mission effectively. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security posture, supporting long-term sustainability and compliance with evolving regulations.

Kavárna MUZEUM is a small café business located within the National Technical Museum in Prague, focusing on coffee culture, bakery, and gastronomy. The website presents a clear business description targeting museum visitors and coffee enthusiasts, offering lunch menus, bakery products, and catering services. The site uses concrete5 CMS with jQuery and Google Analytics for tracking visitor data. While the website content is well structured and visually appealing, it lacks critical privacy and cookie policies, explicit contact information, and security headers. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the business appears legitimate and niche-focused, but the digital maturity and security posture require improvement to enhance trust and compliance.

J

JMP s.r.o.

valty.cz

42

VALTY.cz is a Czech Republic based retailer specializing in custom mattress systems combining flexible slatted frames and thinner mattresses tailored to individual needs. The company has a strong market presence with over 30 years of experience and multiple physical store locations. Their business model focuses on quality materials, expert advice, and made-to-measure products, targeting consumers seeking ergonomic and hygienic sleep solutions. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic with a cookie consent banner but no explicit privacy or terms pages. Overall, the site is professional and trustworthy with clear contact information and partner ecosystem.

J

JMP s.r.o.

toppery.cz

43

Toppery.cz is a Czech-based retailer and manufacturer specializing in mattress toppers, mattress protectors, travel mattresses, and mattress covers. The company operates both an e-commerce platform and four physical stores across major Czech cities, targeting consumers seeking enhanced sleep comfort and hygiene solutions. The website is professionally designed, localized in Czech, and provides detailed product information and contact details, supporting a medium-sized retail business model with a strong local presence. Technically, the website is built on WordPress 6.4.3 with Bootstrap and jQuery frameworks, integrating SEO best practices via Yoast SEO and leveraging Google Analytics and Tawk.to for analytics and customer engagement. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and does not publish a privacy policy or incident response information. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the security posture is adequate but could be enhanced with additional headers and compliance documentation. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance and security headers would strengthen trust and regulatory adherence, supporting continued growth and customer confidence.

J

JMP s.r.o.

rajpolstaru.cz

40

Ráj polštářů is a Czech Republic based retail and e-commerce business specializing in high-quality pillows and bedding products. The company operates an online shop complemented by four physical stores across major Czech cities, offering anatomical, classic, and children's pillows. Their business model focuses on providing quality materials, expert consultation, and custom bedding solutions, positioning them as a trusted local retailer with a solid market presence since 2015. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Yoast SEO, ensuring good SEO and mobile responsiveness. The site uses HTTPS and integrates Google Analytics and Tawk.to for analytics and customer support, respectively. Security posture is good with SSL and no visible vulnerabilities, though security headers and explicit policies are missing. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy with room for improvement in privacy and security policy transparency.

J

JMP s.r.o.

rozkladacipostele.cz

53

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

M

MUDr. Marie Součková

ortopediesouckova.com

61

Lékařské podiatrické centrum, led by MUDr. Marie Součková, is a specialized private healthcare provider in Prague focusing on orthopedics and podiatry services for children and adults. The center offers a comprehensive range of treatments including podiatry, orthopedic care, pedicure services, diabetic footwear (SHAPER), and educational courses. The business holds a reputable market position as a pioneer in private comprehensive care for the musculoskeletal system in the Czech Republic. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, supported by jQuery and Google Analytics for tracking. Hosting is provided by WEDOS Internet, a reputable Czech provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a specialized healthcare provider, with room for improvement in security hardening and formal policy disclosures.

A

Autosalon Klokočka

klokocka.cz

53

Autosalon Klokočka is a medium-sized authorized automotive dealership and service provider based in the Czech Republic, specializing in brands such as Volkswagen, Audi, ŠKODA, Kia, and SEAT. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financing, leasing, and vehicle buyback. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at automotive customers in the region. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Hotjar, and Ecomail, alongside live chat and reCAPTCHA for user interaction and security. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility remains high due to the professional presentation and authorized brand partnerships. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and compliance.

R

ROSSMANN

rossmann.cz

69

ROSSMANN.cz is the online presence of ROSSMANN, a large retail chain specializing in drugstore products in the Czech Republic. The website offers a broad assortment of quality goods at competitive prices, including current promotions, flyers, and customer contests. The site targets retail consumers in the Czech market and positions itself as a well-established player in the retail sector. Technically, the website employs modern JavaScript frameworks and libraries, including React components, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses preloading techniques for fonts and images to enhance performance. Security-wise, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers or privacy policy pages were detected in the provided content. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and branding suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in security and privacy transparency.

R

RSJ

rsj.com

56

RSJ is a financial group operating primarily in the Czech Republic with a strong presence in global derivative markets including London, Chicago, New York, Frankfurt, and Tokyo. The company manages a diversified portfolio of investments spanning financial derivatives trading, real estate development, private equity, and emerging sectors such as biotechnology and healthy food production. The website clearly communicates its business scope and warns investors about fraudulent schemes misusing its brand. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with a cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced, but lacks published security policies or incident response contacts. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, RSJ presents as a credible financial entity with room for improvement in transparency and security disclosures.

Alfasilver.cz is the official website for Alfasilver HA+, a medical device product designed for wound care, including treatment of abrasions, minor burns, and skin injuries. The product is distributed by Glenmark Pharmaceuticals Distribution, s. r. o., based in Prague, Czech Republic. The website targets consumers seeking effective and easy-to-use wound care solutions, offering sprays and creams with antimicrobial properties and tissue hydration support. The site also provides educational content and retail partner links for product purchase. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. Cookie consent is managed via CookieScript, ensuring GDPR compliance with granular user consent options. The site is mobile-optimized and features clear navigation and professional design, though no CMS or backend platform is explicitly detected. Hosting and domain registration are consistent with the business location and history. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with a registration date in 2016 and no privacy protection, aligning with the business profile. Contact information is clearly provided, including company address, phone, and official emails, with a dedicated channel for reporting adverse effects. Overall, Alfasilver.cz presents a trustworthy, professional, and compliant online presence for a niche healthcare product. Strategic improvements could include enhanced security headers and explicit security policies to further strengthen trust and compliance.

O

OnlyU - Web s články o vztazích, společnosti a zdraví.

onlyu.cz

55

OnlyU is a Czech-language media website focused on publishing articles related to relationships, society, and health. The site targets Czech-speaking users interested in these topics and monetizes primarily through advertising networks such as Google Adsense and Taboola. The website is built on WordPress CMS and integrates multiple third-party analytics and marketing tools, including Google Analytics, Gemius, and ShareThis, indicating a mature digital marketing infrastructure. However, the absence of publicly available WHOIS data limits the ability to fully verify domain ownership and legitimacy. The site implements a cookie consent banner, showing some compliance with GDPR requirements, but lacks an explicit privacy policy or terms of service in the analyzed content. Technically, the site shows moderate performance and good mobile optimization but has minor backend issues such as visible PHP warnings. Security posture is moderate with HTTPS enabled but missing security headers and some code hygiene issues. Overall, the website is functional and professionally presented but would benefit from improved transparency, security hardening, and compliance documentation.

P

PlastisolTransfer24.com

plastisoltransfer24.com

63

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

N

Národní technické muzeum

ntm.cz

54

Národní technické muzeum is a prominent national museum in the Czech Republic dedicated to preserving and showcasing technical history and innovation. The museum offers a wide range of exhibitions, educational programs, and cultural events targeting diverse audiences including families, schools, adults, and professionals. It maintains a strong market position as a leading cultural institution with multiple exhibition sites and partnerships with governmental and corporate entities. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, with good mobile optimization and accessibility features. The site is well-structured, professionally designed, and provides a rich user experience with clear navigation and relevant content. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and explicit security or incident response policies, which could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and external trust signals strongly support its authenticity. Overall, the website presents a low risk profile but would benefit from enhanced transparency in security policies and domain registration information to strengthen trust and compliance posture.

Z

Zasedáme.cz, s.r.o.

zasedame.cz

46

Zasedáme.cz, s.r.o. operates a premium event and conference space rental business located in the heart of Prague, offering multiple room sizes with modern technical equipment and comprehensive event services. The company targets corporate clients and individuals seeking well-equipped, centrally located venues with flexible scheduling options. The website is professionally designed, mobile-optimized, and provides clear pricing, contact information, and customer testimonials, supporting a strong market position in the hospitality and real estate sectors. Technically, the website employs a modern tech stack including Bootstrap, Swiper.js, and Usercentrics for cookie consent management, alongside analytics tools like Google Analytics and Hotjar. The site is served over HTTPS with no visible security vulnerabilities in the content, though security headers are not explicitly detected. The presence of a consent management platform indicates good privacy compliance practices. Security posture is solid with HTTPS and no exposed sensitive data, but the absence of explicit security policies or incident response contacts is a gap. The missing WHOIS data reduces domain trustworthiness and should be investigated further. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing a security policy, adding incident response contacts, auditing third-party scripts, and considering a vulnerability disclosure policy to enhance trust and compliance.

MAXPROGRES, s.r.o. is a Czech Republic based company founded in 1996 specializing in technical security systems and system integration services. The company holds multiple ISO certifications and a national security certification (NBÚ T-level), positioning itself as a leader in the Czech security technology market. Their services include comprehensive security system design, installation, proactive monitoring, and 24/7 maintenance support. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Leaflet for mapping, and integrates Google Analytics and reCAPTCHA for analytics and security respectively. Security posture is moderate with HTTPS and CAPTCHA implemented, but lacks advanced security headers and a formal incident response or vulnerability disclosure mechanism. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's market position and business credibility.

P

Praha 3

praha3.cz

68

The website www.praha3.cz serves as the official portal for the municipal district Praha 3 in the Czech Republic. It provides comprehensive information about local government services, news, events, and contact details for residents and visitors. The portal supports multiple languages via Google Translate links and offers online services such as appointment booking and downloadable forms. The site is well-branded and maintains consistent messaging aligned with its government entity status. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap components. It is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data (JSON-LD). The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, it lacks explicit security headers and a published security.txt or incident response contact, which are recommended for transparency and vulnerability management. No WAF or blocking mechanisms were detected, and no obvious vulnerabilities were found in the content or scripts. Overall, the site presents a trustworthy and professional government portal with good content quality and technical implementation. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature and consistent branding. Strategic improvements in security headers and incident response disclosures would enhance the security posture and trustworthiness further.

M

Magistrát města Karlovy Vary

mmkv.cz

53

The website mmkv.cz is the official online presence of the City Hall of Karlovy Vary, Czech Republic. It serves as a comprehensive portal for municipal services, citizen information, news, and administrative resources. The site targets residents and visitors, providing access to various public services such as permits, registrations, and local government information. The business model is that of a government public service portal, with a medium-sized organizational footprint and a well-established domain since 2002. Technically, the site is built on Drupal 10 CMS, leveraging Bootstrap for responsive design, Leaflet.js for mapping, and Google Analytics for visitor tracking. The infrastructure is hosted by a Czech registrar and hosting provider, REG-ZONER, ensuring regional consistency. The website demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The site integrates third-party scripts responsibly but could improve by adding security headers and a vulnerability disclosure policy. Overall, mmkv.cz presents a trustworthy, professional, and user-friendly government portal with solid technical foundations and privacy compliance. Strategic enhancements in security transparency and incident readiness would further strengthen its posture.

O

OBRAZ – Obránci zvířat, z. s.

albertovakrutost.cz

54

The website albertovakrutost.cz is a campaign platform run by the non-profit organization OBRAZ – Obránci zvířat, z. s., focused on raising awareness and advocating against animal cruelty in supermarket Albert's chicken supply chain in the Czech Republic. The site provides detailed information about the campaign, including calls to action such as signing petitions. The organization positions itself as an animal welfare advocate with a clear mission and target audience of concerned consumers and animal rights supporters. Technically, the site uses modern frontend technologies including Vue.js, Alpine.js, and SwiperJS, supported by analytics and tracking tools like Google Analytics, Microsoft Clarity, and Ecomail. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies presented in Czech language. Contact information is transparent, including emails, phone number, and physical address. No terms of service or vulnerability disclosure policies were found. The domain is newly registered but consistent with the campaign's recent launch. Overall, the website is professional, trustworthy, and well-structured for its advocacy purpose.

G

GUN PRODUCTIONS

gutterdammerung.com

54

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

F

Fosbury & Sons

fosburyandsons.com

50

Fosbury & Sons operates as a premium coworking and office space provider primarily serving the Brussels and Groot-Bijgaarden regions, with additional presence in Amsterdam. The company targets a broad audience including startups, entrepreneurs, and established companies seeking flexible workspaces, meeting rooms, and event spaces. Their market position is that of a high-quality, human-centric workspace provider emphasizing community and collaboration. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, hosted with Cloudflare DNS services, and is optimized for mobile and SEO. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and additional security headers could be implemented. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and terms policies. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and well maintained, with room for improvement in security transparency and DNS security.

T

Telefónica México

telefonica.com.mx

51

Telefónica México is a major telecommunications company providing innovative connectivity and telecom solutions to businesses and consumers in Mexico. The website reflects a strong market position with clear branding and comprehensive content tailored to its audience. The company leverages WordPress CMS with modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

Y

YouGov

yougov.co.uk

66

YouGov is a well-established UK-based market research and data analytics company founded in 2000. It provides public opinion polling, market research, and data analytics services to a broad audience including businesses, media, and political organizations. The company holds a strong market position with a large user base and international presence. The website reflects a mature digital infrastructure with modern technologies such as Angular, AWS Cloudfront CDN, and multiple analytics and marketing tools integrated for performance and user insights. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented via OneTrust. Security posture is strong, leveraging HTTPS, security headers, and monitoring tools like New Relic, though a dedicated security policy and incident response contact are not publicly found. Overall, the website is professional, trustworthy, and technically sound, supporting the company's credibility and business operations.

R

Redwall OÜ

redwall.ee

58

Redwall OÜ is a well-established Estonian web agency with over 13 years of experience, specializing in full-service web solutions including design, development, maintenance, and consulting. The company targets businesses and organizations seeking professional and user-centric digital presence. Their market position is solid within the local Estonian market, supported by a consistent brand and a comprehensive portfolio of services. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket, lazy loading, and deferred scripts. The site is mobile-optimized and accessible, integrating advanced analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforced, CAPTCHA on forms, and no visible vulnerabilities, though explicit security policies and incident response documentation are absent. Overall, the website reflects a professional, trustworthy, and technically mature digital presence.

L

Lumi Capital OÜ

lumikodud.ee

45

Lumi Kodud is a small Estonian real estate company specializing in rental apartments in Tallinn, offering 1-, 2-, and 3-room modern apartments managed reliably. The website is professionally designed using Joomla CMS with modern frameworks like Bootstrap and includes multi-language support. It integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, and employs Google reCAPTCHA for form security. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the site is trustworthy and well-positioned for its local rental market niche.

I

Itera BI

bi365.ee

42

BCS Itera, operating under the brand Itera BI, is a specialized provider of business intelligence and data analytics solutions primarily leveraging Microsoft technologies such as Power BI, BI4Dynamics, and Azure. Founded in 2019 and based in Estonia, the company offers a comprehensive portfolio of services including BI strategy development, data warehouse architecture, BI implementation, cloud BI solutions, version upgrades, and advanced forecasting models. The website demonstrates a mature digital presence with rich content, client case studies, and educational resources, positioning the company as a trusted expert in the BI domain within its regional market. Technically, the site is built on WordPress with modern plugins and analytics integrations, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and privacy compliance are recommended. Overall, the company presents a credible and professional image with clear contact channels and certifications, though it should enhance its privacy and cookie policies to meet compliance standards.

B

BCS itera

crmlahendused.ee

42

BCS itera is an Estonian technology company specializing in providing modern CRM and ERP solutions, including Microsoft Business Central and customer insights services. The company targets businesses seeking to manage customer journeys and sales processes effectively. The website reflects a professional B2B service provider with a clear focus on CRM-related offerings and digital transformation. The presence of a Finnish language partner site indicates regional market expansion. Technically, the website is built on WordPress with Elementor, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and MonsterInsights. The site is served over HTTPS with a good SSL configuration, but lacks some security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the website demonstrates moderate digital maturity with room for improvement in privacy compliance and security best practices.

V

Vejle Idrætshøjskole

vih.dk

67

Vejle Idrætshøjskole is a Danish educational institution specializing in sports-focused high school courses, targeting young people in sabbatical years or summer courses. The website presents a professional and modern digital presence built on React and Next.js, with good mobile optimization and SEO practices. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy awareness. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. WHOIS data is unavailable, which is typical for Danish domains, but no suspicious indicators are found. Overall, the site reflects a trustworthy and well-managed educational service with moderate to good digital maturity.

E

Estonian Defence and Aerospace Industry Association

defence.ee

42

The Estonian Defence and Aerospace Industry Association is a medium-sized, essential government-related entity representing over 130 companies in Estonia's defence, aerospace, and security sectors. The association focuses on creating market opportunities, advocacy, and fostering cooperation among its members. The website is built on WordPress and uses standard analytics and marketing tools such as Google Analytics and Mailchimp. The technical infrastructure is modern but shows some server-side PHP warnings that could impact stability and security. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is available but limited to email and physical address, with no phone numbers or incident response contacts published. The website is professionally designed with good navigation and mobile optimization, supporting the association's credibility and trustworthiness.

21CC Triatloniklubi is a local Estonian triathlon club offering training and competition services primarily targeting adults and youth interested in triathlon sports. The website serves as an informational portal with basic navigation and content focused on club activities, training schedules, and competitions. The technical infrastructure is based on older JavaScript libraries such as MooTools and Slimbox, with a custom CMS platform inferred from URL structures. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating limited privacy compliance. Security posture is basic with HTTPS enabled but lacking important security headers and policies. Overall, the site is functional but lacks modern security and privacy best practices.

Q

QATestLab

qatestlab.com

65

QATestLab is an independent software testing and QA services provider established in 2010, targeting software development companies and businesses seeking reliable quality assurance solutions. The company offers a variety of software testing types and solutions aimed at improving software quality. The website reflects a professional B2B service model with a consistent brand presence and clear business description. The technical infrastructure includes multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing and performance measurement approach. Hosting and domain registration are stable and consistent with the business profile. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is limited due to absence of explicit privacy and cookie policies, though a cookie consent mechanism is present. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve transparency and security practices to align with best industry standards.

H

Hutten

hutten.eu

68

Hutten is a well-established Dutch catering and hospitality company with a history dating back to 1929. The company provides culinary services including business catering, event catering, and healthcare catering across the Netherlands. Their business model focuses on delivering high-quality, sustainable food and hospitality experiences with a strong emphasis on guest satisfaction and social impact. The website reflects a professional and consistent brand image targeting corporate clients, event organizers, and healthcare institutions. Technically, the website employs modern web technologies such as jQuery, Magnific Popup, Google Tag Manager, and Cookiebot for cookie consent management. Hosting assets on DigitalOcean CDN suggests a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented. However, the absence of security headers and visible privacy policy or terms of service pages indicates room for improvement in compliance and security best practices. No WHOIS registrant data is publicly available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the company's Dutch origin. Overall, Hutten's digital presence is professional and trustworthy, but enhancing transparency around privacy, security policies, and incident response would strengthen their compliance and security posture.

Avatud Lahendused OÜ is a medium-sized Estonian company founded in 2015, specializing in Odoo ERP implementations primarily for manufacturing companies. They hold a strong market position as one of the largest Odoo partners in the Baltic region, employing about 20 specialists and serving a diverse client base. Their website reflects a professional and consistent brand image with clear service offerings including ERP implementation, training, and consulting. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with CSRF protections and secure forms but lacks some security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

Sporditurg.ee operates as a localized Estonian online marketplace specializing in sports equipment and related goods. It provides a platform for both private individuals and legal entities to post free classified ads, targeting sports enthusiasts across Estonia. The website offers categorized listings by sport type, size, condition, and location, facilitating easy navigation for users. The business model is focused on community-driven listings with monetization likely through featured ads and advertising partnerships. The market position is niche and local, serving a specific segment within the retail industry.

B

BDA Consulting OÜ

bda.ee

49

BDA Consulting OÜ is an Estonian network-based training and consulting company specializing in delivering training, development, consulting projects, service design, and strategic consulting. The company leverages a network of over 200 recognized experts to serve its clients, positioning itself uniquely in the Estonian market. The website is professionally designed using the Wix platform, featuring structured data that enhances SEO and business information visibility. The technical infrastructure is modern and includes common analytics and tracking tools such as Google Analytics, Facebook Pixel, and Inspectlet, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some JavaScript hardening, but lacks explicit security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the website presents a trustworthy business presence with room to enhance privacy compliance and security transparency.

C

Coursy.io LMS

coursy.io

54

Coursy.io is a technology company specializing in providing a Learning Management System (LMS) tailored for mid-sized and large enterprises. Their platform focuses on digitizing training processes to improve business outcomes through systematic training management. The company also offers an e-learning course marketplace called Coursy Academy, targeting training professionals and organizations seeking efficient onboarding, compliance, and skills development solutions. The website presents a professional and modern digital presence, emphasizing ease of use, administrative efficiency, and integration capabilities. The business is positioned as a leading LMS provider in its regional market with a solid client base including notable organizations.

O

Oreon OÜ

bestcredit.ee

52

BestCredit.ee is an established Estonian financial services company operating since 2011 under Oreon OÜ. The company offers a variety of loan products including small consumer loans, business loans, mortgage loans, guarantee loans, and construction loans. Their business model focuses on online lending with self-service features and loan calculators to facilitate customer engagement. The website targets both private individuals and businesses within Estonia, positioning itself as a reliable and professional lender with a clear regulatory license from the Estonian Financial Supervision Authority.

L

Laomaailm

laomaailm.ee

43

Laomaailm is an established Estonian company specializing in warehouse and industrial storage solutions with over 30 years of market presence. The company offers a broad range of products including shelving, lifting equipment, industrial stairs, and rental services, targeting B2B customers in manufacturing and logistics sectors. The website reflects a mature business with consistent branding and multilingual support, indicating a focus on regional and international clients. Technically, the site is built on WordPress with WooCommerce and enhanced by popular plugins such as Yoast SEO and WPML for multilingual capabilities. The infrastructure includes Google Tag Manager and Analytics for tracking, and the site is secured with HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is solid but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's market position and business credibility.

L

Luna Park Sydney

lunaparksydney.com

65

Luna Park Sydney is a well-established amusement and theme park located in Sydney, Australia, with a domain registered since 1999. The website offers comprehensive information about rides, ticketing options, immersive experiences, group bookings, and events, targeting families, tourists, and educational groups. The technical infrastructure is built on Adobe Experience Manager with integration of multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers and cookie consent mechanisms are lacking, which could be improved for better compliance and security. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

A

AMIT Baltic

amit.lv

44

AMIT Baltic operates as a software provider specializing in dealer management systems (DMS) for the automotive industry, primarily targeting auto dealers and related businesses in the Baltic region. Their flagship product, AutoMaster, is positioned as a trusted solution recommended by auto manufacturers and importers, serving a medium-sized market with a focus on resource management and process optimization. The website reflects a professional presence with clear branding and client endorsements from major automotive brands, indicating a solid market position. Technically, the website employs legacy technologies such as jQuery 1.8.2 and bxSlider, alongside Google Analytics for user tracking. While the site is accessible and moderately optimized for performance and SEO, mobile optimization and accessibility are basic. The absence of modern frameworks or CMS suggests a relatively simple technical infrastructure. Hosting and domain registration appear consistent and legitimate, with no blocking or WAF interference detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library, which could expose it to vulnerabilities. There is no evidence of HTTPS enforcement or advanced security policies. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms for tracking, which poses regulatory risks under GDPR. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website scores moderately well but requires improvements in privacy compliance, security hardening, and modernization of its technical stack to reduce risks and enhance trustworthiness. Strategic recommendations include implementing privacy and cookie policies, upgrading JavaScript libraries, adding security headers, and enforcing HTTPS to strengthen the security posture and regulatory compliance.