High-risk security reports

E

Elite | Monday Lovers

esx.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing and advertising solutions and maintains a strong portfolio of multinational and local clients. Their website reflects a professional and consistent brand image with a clear presentation of services and client references. Technically, the site is built on OctoberCMS, uses modern web technologies, and integrates Google Tag Manager and Google Maps API for analytics and location services. The site is mobile optimized and performs moderately well. Security-wise, the website enforces HTTPS, implements a cookie consent mechanism with granular options, and includes basic security headers, though it lacks advanced headers like CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy page with GDPR considerations, but a dedicated privacy policy and terms of service pages are not clearly found. Contact information is comprehensive and includes multiple channels. Overall, the site is trustworthy and professional with room for security and compliance improvements.

S

Statutární město Jihlava

jihlava-city.cz

49

The website jihlava-city.cz serves as the official digital presence of the statutory city of Jihlava in the Czech Republic. It provides comprehensive municipal information, including city news, public documents, event calendars, citizen services, and tourism resources. The site targets residents, local businesses, and visitors, positioning itself as the authoritative source for city-related information and services. The business model is that of a government municipal portal, focusing on transparency, public engagement, and service delivery. Technically, the website is built on the VISMO CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services for translation and search functionality, enhancing accessibility and user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Security headers appear to be missing or not explicitly declared in the provided data, representing an area for improvement. Overall, jihlava-city.cz is a trustworthy and professional municipal website with strong content quality and privacy compliance. Strategic recommendations include implementing security headers, publishing a security policy, and establishing a vulnerability disclosure process to enhance security posture and user trust.

M

město Litvínov se sídlem Městský úřad Litvínov

mulitvinov.cz

47

The website mulitvinov.cz serves as the official online presence of the city of Litvínov, Czech Republic. It provides comprehensive information and services related to municipal administration, public services, local governance, and community events. The site targets residents and visitors seeking official information about the city, including administrative procedures, social services, cultural activities, and local news. The business model is that of a government entity focused on public service delivery and citizen engagement. The website is well-established, with a domain age dating back to 1999, reflecting a mature digital presence for the municipality. Technically, the site employs a modern CMS platform (vismo), uses HTTPS with good SSL configuration, and integrates third-party services such as Google reCAPTCHA for form security, Google Translate for multilingual support, and Facebook SDK for social media integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with privacy and cookie policies present but without active consent mechanisms. The domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing explicit security and incident response policies to improve compliance and trust.

M

Magistrát města Mostu

mesto-most.cz

49

The website www.mesto-most.cz serves as the official online portal for the city of Most in the Czech Republic. It provides comprehensive municipal information, including administrative services, event calendars, news updates, and public resources tailored for residents and visitors. The site is well-branded with official city logos and integrates social media channels to enhance community engagement. Technically, the site uses a modern CMS (vismo), incorporates Google Analytics for traffic insights, and employs Google reCAPTCHA to secure forms against spam. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. Security-wise, the site enforces HTTPS and uses standard security practices but lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is unavailable, which slightly reduces domain registration trust but does not detract from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure with room for improvement in security transparency and technical headers.

F

Freiraum Fichtelgebirge

egronet.de

49

Freiraum Fichtelgebirge operates the EgroNet, a cross-border regional mobility ticket service covering four regions in Germany and Czechia. The website provides comprehensive information about ticketing, routes, and services, targeting public transport users including tourists and commuters. The site is well-structured, multilingual, and optimized for accessibility and SEO. Technically, it is built on WordPress with modern plugins and performance optimizations, hosted on netcup infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Contact information is transparent with named personnel and multiple communication channels. Overall, the website reflects a professional regional public transportation service with good digital maturity and compliance.

P

Plzeňské městské dopravní podniky, a.s.

plzenskakarta.cz

45

Plzeňské městské dopravní podniky, a.s. operates the Plzeňská karta website, providing integrated transportation card services for the Plzeň region in the Czech Republic. The platform offers both virtual and physical cards facilitating payments for public transport, parking, and shopping, supported by a bonus program and e-shop functionalities. The company holds a strong market position as a key regional transportation service provider with clear customer engagement through multiple channels and social media presence. Technically, the website is built on the niCMS platform, utilizing modern web technologies such as Google Tag Manager, Owl Carousel, and Font Awesome. The site is mobile-optimized with good SEO and accessibility features, although some advanced security headers are missing. The site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and manages user consent for tracking and advertising scripts. However, the absence of explicit security policies, incident response contacts, and WHOIS registration data reduces the overall trustworthiness from a domain registration standpoint. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally secure posture. Overall, the website is professional, user-friendly, and compliant with privacy regulations, serving its target audience effectively. The main risk lies in the lack of WHOIS transparency and some missing security headers, which should be addressed to enhance trust and security posture.

T

Tecfen Medical

tecfenmedical.com

48

Tecfen Medical is a reputable manufacturer and distributor specializing in ophthalmic surgical disposables and post-operative products, serving over 60 countries worldwide. The company holds ISO 13485:2016 certification, underscoring its commitment to quality in the healthcare sector. Their website reflects a professional and consistent brand image, targeting eye care professionals and healthcare providers with a comprehensive product catalog and active participation in industry events. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and Tag Manager, hosted on HostGator, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong, featuring a comprehensive privacy and cookie policy with consent mechanisms aligned with GDPR. Overall, the website demonstrates high trustworthiness and business credibility, with clear contact information and social media presence.

The website 'MHD Spoje' presents minimal content with only a basic HTML structure containing a title and charset meta tag. There is no substantive business information, contact details, or policy documentation available on the site. The domain is registered since 2000, indicating a long-standing registration, but the lack of registrant details and minimal website content reduce overall trust and credibility. Technically, the site lacks modern web technologies, security headers, and HTTPS, which are critical for secure and professional web presence. No analytics or tracking technologies are detected, and no forms or interactive elements are present. Security posture is weak due to absence of HTTPS and security best practices. Overall, the site appears inactive or underdeveloped, limiting its business and security value.

D

Dopravní podnik města Hradce Králové, a.s.

novesmhd.cz

42

Dopravní podnik města Hradce Králové, a.s. is a medium-sized public transportation company operating in Hradec Králové, Czech Republic. The company provides bus and trolleybus services with a focus on modernizing its ticketing system, including contactless payments and a new tariff structure effective from 2024. The website serves as an information portal for passengers, offering details on ticket types, tariff changes, and contact information. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and Slider Revolution, hosted on a Czech hosting provider. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policy. The company is transparent with contact details, social media presence, and official registration information, enhancing trustworthiness. Overall, the website is professional and functional but could improve privacy compliance and security hardening.

A

Associació de Naturalistes de Girona

naturalistesgirona.org

45

Associació de Naturalistes de Girona (ANG) is a small non-profit environmental organization based in Girona, Spain, focused on promoting environmental protection, ecological education, biodiversity conservation, and social justice related to the environment. The website presents a clear mission statement, multiple projects, and active community engagement through volunteering, membership, and donations. Their market position is local/regional with a strong focus on Catalonia. The organization maintains an active presence on major social media platforms and partners with related environmental projects and initiatives. Technically, the website uses a traditional web stack with jQuery, Swiper.js for galleries, Google Fonts, and Font Awesome icons. The site is mobile-optimized with responsive design and good navigation clarity. However, some technologies like jQuery are outdated, and no advanced CMS or hosting details are evident. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating basic privacy compliance. However, no explicit security headers were detected, and the WHOIS data is unavailable, which reduces domain trustworthiness. There is no visible incident response or security policy documentation. The site appears safe with no adult or questionable content. Overall, ANG's website is professional, content-rich, and trustworthy from a business perspective but could improve its technical security posture and domain transparency. Strategic recommendations include updating libraries, adding security headers, publishing security policies, and improving WHOIS data visibility.

K

Kimsoft Media AB

enson.se

46

Enson Webbhotell, operated by Kimsoft Media AB, is a Swedish web hosting provider offering reliable hosting, email services, VPS, and web design primarily targeting Swedish individuals and businesses. The company emphasizes personal support and security features such as free SSL and daily backups. The website is professionally designed with clear navigation and mobile optimization, leveraging a custom CMS and integrating third-party tools like Facebook Pixel and Tawk.to chat for marketing and customer support. Security posture is moderate with room for improvement, notably in enabling DNSSEC, updating outdated libraries, and implementing security headers. The domain registration is consistent with the business identity, enhancing trustworthiness. Overall, the site presents a credible and professional hosting service with a solid local market position.

F

Fundació ENT

fiscalidadresiduos.org

48

The website 'Observatorio Fiscalidad Residuos - ENT' is operated by Fundació ENT, a small non-profit organization founded in 2018 in Spain. It serves as an observatory focused on fiscal instruments related to waste management, providing updated data, studies, and case references primarily for public administrations and researchers. The site is well-structured, professionally designed, and offers relevant content in Spanish and Catalan, with an English summary available. Technically, it is built on WordPress with modern plugins and uses Google Analytics for user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks published privacy and security policies. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

I

ipartner

ipartner.sk

48

ipartner is a Slovak-based company specializing in creating exceptional products and services through creative design and technology. Their offerings include web design, software development, marketing, SEO, and graphic design, targeting both companies and individuals across various industries. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is hosted on a Slovak hosting provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and GDPR-compliant privacy and cookie policies, though explicit security policies and incident response information are absent. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

S

Smash, s. r. o.

hellosmash.sk

47

Smash, s. r. o. is a Slovak-based small web development agency specializing in creating high-quality custom websites and digital products. Their market position is focused on delivering precision and quality to local businesses and organizations, with a portfolio that includes notable clients such as ESET. The company emphasizes mobile-first design and user experience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate; HTTPS is assumed but security headers are not evident, and no explicit security policies or incident response information are published. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, the website is professional and trustworthy, though WHOIS data is unavailable due to privacy protection, which slightly reduces transparency.

H

Huvitz

huvitz.com

49

Huvitz is a well-established global leader in the eye care solutions industry, specializing in advanced ophthalmic technology products and services. Founded in 2002, the company targets eye care professionals and customers worldwide, offering a broad portfolio of ophthalmology and optometry products. The website reflects a professional and consistent brand image with a focus on global reach and technological innovation. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging modern plugins and tools such as Google Tag Manager and Consent Manager for analytics and privacy compliance. The hosting appears to be managed via LG Uplus, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website demonstrates high business credibility and trustworthiness, supported by a long domain age and consistent WHOIS data.

S

Sailent Academy

salientmedicalacademy.com

47

Salient Medical Academy operates as a specialized education provider focusing on medical aesthetics and skincare professional training. The website offers a variety of certification courses including PCA Professional Peel, Microneedling, and other advanced skin science certifications. The target audience primarily consists of medical professionals and clinicians seeking to enhance their expertise through online and in-person courses. The business model centers on delivering professional certification and continuing education in a niche healthcare segment. Technically, the website is built on WordPress using LearnDash LMS for course management, with a modern tech stack including Bootstrap, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and secure login forms but lacks important security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for improvement in security maturity. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is professional and content-rich, serving its educational purpose well. However, the missing WHOIS data and limited privacy/security disclosures suggest a moderate risk profile. Strategic enhancements in security policies, transparency, and domain registration verification are recommended to strengthen trust and compliance.

A

Atiko

atiko.cz

49

Atiko is a Czech company specializing in the design, manufacturing, and installation of custom aluminum pergolas and related outdoor accessories. The company positions itself as a professional and quality-focused provider with over 1500 successful installations, offering free visualization services and a physical showroom for customer consultations. The website is well-structured, visually appealing, and optimized for user experience, targeting homeowners and property owners seeking durable and modern outdoor solutions. Technically, the site employs modern web technologies including Google Tag Manager, reCAPTCHA v3, and Swiper.js, ensuring good performance and security. Security posture is strong with HTTPS enforcement and anti-spam measures, though additional security headers could enhance protection. Privacy compliance is robust with clear GDPR policies and cookie consent mechanisms. Overall, the site reflects a trustworthy and professional business presence, though the lack of WHOIS data limits full domain registration verification.

O

OKNOSTYL group s.r.o. Tišnovská 305, 664 34 Kuřim

oknostyl.cz

47

OKNOSTYL group s.r.o. is a Czech Republic based company specializing in manufacturing and installation of high-quality windows, doors, and portals. With over 25 years of market experience and more than 55,000 completed orders, the company holds a strong position in the regional construction and home improvement sector. Their business model includes direct sales, installation services, and an e-commerce platform for accessories and products. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information, including free price calculations and customer testimonials. Technically, the website uses modern web technologies such as jQuery, Google Tag Manager, and CookieConsent scripts. It is served over HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, some security headers are not explicitly detected and could be improved. The site does not show signs of WAF or content blocking, allowing full content access and analysis. Security posture is solid with encrypted connections and secure login forms, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS data is a notable anomaly, reducing domain trust slightly, but the overall business presence and content quality strongly indicate legitimacy. Privacy and cookie policies are present and comprehensive, supporting compliance with data protection regulations. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices, though improvements in security headers and transparency on security policies would enhance trust further.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.cz

42

Ahifi.cz is a Czech-based e-commerce business specializing in car audio equipment and accessories, including autoradios, speakers, amplifiers, subwoofers, and soundproofing materials. The company operates a multilingual website targeting Central European markets and offers additional services such as installation and wholesale distribution. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, Ahifi.cz presents as a credible and professional business with a good balance of content quality, technical implementation, and security awareness.

H

Hobbytec

hobbytec.cz

49

Hobbytec CZ s.r.o. is a leading Czech manufacturer specializing in high-quality aluminum winter gardens, pergolas, car shelters, and solar photovoltaic solutions. The company emphasizes custom, made-to-measure outdoor constructions supported by a professional team and a strong showroom presence in the Czech Republic and Slovakia. Their business model integrates manufacturing, direct sales, and installation services, targeting residential and commercial customers seeking durable and elegant outdoor solutions. The website reflects a mature digital presence with multilingual support and comprehensive product offerings. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though some security headers could be improved. Privacy compliance is robust, featuring detailed cookie consent mechanisms and GDPR-aligned privacy policies. Security-wise, the site shows good practices but lacks explicit incident response contacts or published security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the business's transparent contact information and professional content support legitimacy. Overall, the site is secure, compliant, and professionally maintained. Strategically, Hobbytec should enhance security headers, publish a security policy, and consider a security.txt file to improve transparency and incident handling. Continued updates to third-party libraries and accessibility improvements will further strengthen their digital maturity and trustworthiness.

L

Logrand Entertainment Group

logrand.com

42

Logrand Entertainment Group is a Mexican company specializing in the entertainment and gaming industry since 2005. It operates multiple casino brands across Mexico and offers both physical casino services and an online casino platform. The company emphasizes innovation, service quality, and responsible gaming. The website is professionally designed using WordPress with modern plugins and provides clear contact information and social media presence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy. The site uses HTTPS but lacks some security headers and cookie consent mechanisms, indicating room for security and privacy improvements.

I

InCommon

incommon.org

49

InCommon is a well-established organization founded in 2000, providing integrated identity and access management (IAM) services primarily for the education and research sectors. Their offerings include single sign-on, cloud access, federation services, eduroam wireless access, certificate services, and trusted access software solutions. The website reflects a strong community-driven approach, targeting students, faculty, staff, and researchers globally. The organization maintains a reputable market position as a leader in IAM for research and education communities. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN services. The site is well-optimized for SEO, mobile-friendly, and accessible, with excellent design quality and user experience. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs Google reCAPTCHA v3 for form protection. DNSSEC is not enabled, and no explicit security headers were detected, which are areas for enhancement. The WHOIS data shows privacy protection typical for this sector, with a domain age consistent with the organization's history, supporting legitimacy. Overall, InCommon demonstrates a strong digital presence with professional content and solid security posture, though improvements in privacy compliance and DNS security would further strengthen their risk profile and trustworthiness.

Z

ZWP Anlagenrevision GmbH

zwpar.de

46

ZWP Anlagenrevision GmbH is a German company specializing in non-destructive material testing, primarily serving industrial clients in the energy and manufacturing sectors. Founded in 1975 and operating as a subsidiary of TÜV Saarland, the company offers accredited testing services using advanced ultrasonic technologies and digital documentation platforms such as LIMAtest and CORRfinder. The website reflects a professional and consistent brand presence with clear contact information and partnership endorsements from reputable institutions like the Fraunhofer Institute. Technically, the site uses traditional web technologies including jQuery and CookieFirst for consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response details. Overall, the site is trustworthy, compliant with GDPR, and provides a solid digital presence for the business.

SECTOR Cert is a German-based certification and training provider specializing in nondestructive testing (NDT) and related quality assurance services. The company offers certifications aligned with DIN EN ISO 9712 and ISO 18436 standards, organizes industry events, and provides employer certification services. Their target audience includes professionals and companies within the NDT sector seeking qualification and certification services. The website content is primarily in German and reflects a medium-sized business with a focused niche market position. Technically, the website is built on the TYPO3 CMS platform and uses legacy JavaScript libraries such as jQuery 1.5.2 and MD5 hashing for login authentication, indicating some technical debt and modernization opportunities. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No advanced security headers or modern cryptographic practices are evident, which could expose the site to certain risks. From a security perspective, the site uses HTTPS (implied by base href), but no explicit security headers were detected in the provided HTML. The login form uses MD5 hashing, which is considered weak by modern standards. The WHOIS data for the domain is unavailable, which reduces trustworthiness and raises questions about domain registration transparency. However, the website content and external links to reputable industry organizations support the legitimacy of the business. Overall, the website presents a professional but somewhat outdated technical posture with moderate security and privacy compliance. Strategic improvements in security practices, technical modernization, and enhanced privacy mechanisms would strengthen the company's digital trust and operational resilience.

U

Ubytovanie, ubytovací portál, ubytovacie zariadenia | UbytujSa.sk

ubytujsa.sk

47

UbytujSa.sk is a Slovak online accommodation portal offering a wide range of lodging options including hotels, guesthouses, apartments, chalets, and more across Slovakia. The platform targets tourists and travelers seeking accommodation tailored to various preferences and locations within Slovakia. It provides search functionalities by city, region, thematic stays, and user reviews, positioning itself as a comprehensive regional hospitality service provider. Technically, the website is built on Drupal 7 CMS, enhanced with modern JavaScript libraries such as Vue.js and Axios, and integrates Google Analytics with privacy-conscious settings. The site is mobile-optimized with a clear navigation structure and good content relevance. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit privacy or terms of service documentation. The domain uses privacy protection in WHOIS, which slightly reduces transparency but is common for such portals. Overall, the website is functional, moderately secure, and compliant with basic privacy requirements, serving its business purpose effectively.

A

AkeVino.sk

akevino.sk

46

AkeVino.sk is a Slovak online wine retailer established in 2009, offering a curated selection of wines directly sourced from winemakers. The business emphasizes fast delivery within 24 hours, free shipping, and exclusive promotional packages, targeting mature wine consumers primarily in Slovakia. The website is built on a modern Drupal 10 platform with commerce capabilities, ensuring a robust e-commerce experience. The technical infrastructure includes popular libraries and frameworks such as jQuery and Bootstrap, hosted likely by Active24, a known hosting provider in the region. Security posture is solid with HTTPS and DNSSEC enabled, complemented by GDPR-compliant cookie consent mechanisms and privacy policies. However, explicit security headers and incident response information are not published, representing areas for improvement. Overall, the site presents a professional and trustworthy e-commerce platform with moderate user tracking and good privacy compliance.

P

PPI Adhesive Products Ltd.

ppiadhesiveproducts.com

44

PPI Adhesive Products Ltd. is a well-established manufacturer specializing in technical adhesive tapes, laminates, and die-cut products serving a broad range of industrial sectors globally. The company positions itself as a leading EU manufacturer with a diverse product portfolio and a strong emphasis on bespoke manufacturing and research and development. Their website reflects a professional and comprehensive digital presence with multi-language support and detailed product and industry information. Technically, the site is built on Drupal 7 with modern front-end libraries such as Bootstrap and jQuery, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security headers and use of an older CMS version present areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the lack of publicly available WHOIS data for the domain raises concerns about domain registration transparency, slightly impacting trust. Overall, the website is professional, secure, and business credible, serving its industrial audience effectively.

S

Sportclinic

sportclinic.sk

38

Sportclinic is a specialized private orthopedic clinic based in Bratislava, Slovakia, offering advanced sports medicine and orthopedic surgical services including arthroscopic procedures and one-day surgeries. The clinic targets both professional athletes and the general population recovering from musculoskeletal injuries, leveraging modern diagnostic technologies such as MRI and CT scans. It operates as part of the Nemocnica Medissimo hospital group, enhancing its market position and service capabilities. Technically, the website employs modern web technologies including Bootstrap 5, Google Tag Manager, and Facebook SDK, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, though improvements in privacy documentation and security transparency are recommended.

The website dsoft.company is a minimal WordPress-based blog with very limited content and no clear business description or services. It appears to be a personal or small-scale site with a single blog post and basic navigation. The technical infrastructure is standard for WordPress, hosted by BigRock Solutions Ltd, with HTTPS enabled but lacking advanced security headers or DNSSEC. There are no privacy, cookie, or terms of service policies present, and no contact or business information is provided, which limits trust and compliance. The WHOIS data shows the domain was registered in 2022 in the United Arab Emirates with no organization name, which aligns with the minimal business presence on the site. Overall, the site has a low security posture and limited business credibility.

Observatoř Kleť is a well-established astronomical observatory located in the Czech Republic, focused on scientific research, public education, and outreach related to near-earth asteroids, comets, and astronomy. The website serves as an information portal for visitors, researchers, and astronomy enthusiasts, offering details about excursions, research programs, and historical data. The domain age and WHOIS data confirm a long-standing presence and legitimacy. Technically, the site uses standard web technologies including jQuery and Lightbox, with a moderate performance and good mobile optimization. Security posture is adequate with cookie consent and GDPR compliance, but lacks advanced security headers and explicit incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

R

Rload

rload.es

43

Rload is a small digital creative agency based in Madrid, Spain, specializing in web design, ecommerce stores, app development, and user experience (UX) design. The company targets businesses and individuals seeking professional digital creative services locally. The website presents a professional image with good content quality and consistent branding, supported by structured data confirming business contact details and operating hours. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for visitor tracking. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate but lacks visible security headers and explicit policies. WHOIS data is inaccessible due to Red.es restrictions, limiting domain trust assessment. No privacy or cookie policies were found, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

B

Bells Design

bellsdesign.com

45

Bells Design is a small creative studio based in Granville, Ohio, specializing in branding, marketing strategy, technology advisory, and artistic collaborations. The company targets businesses seeking to enhance their brand identity and market presence through creative and strategic services. The website reflects a professional and consistent brand image with a focus on creativity and client success. Technically, the site uses modern JavaScript libraries such as GSAP, ScrollMagic, and Three.js to deliver an engaging user experience, hosted on DreamHost with custom-built infrastructure. However, mobile optimization and accessibility are basic, and SEO practices are moderate. Security posture is average; HTTPS is implied but no security headers or privacy policies are present, which reduces compliance and trust levels. Analytics are implemented via Google Analytics and Tag Manager, but no cookie consent or GDPR compliance mechanisms are evident. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and compliance features.

M

Najrýchlejčí optický internet a televízia ZADARMO - M.S. Profi

msprofi.sk

46

MS Profi is a Slovakian professional services website established in 2005, offering services targeted primarily at local Slovak audiences. The website is built on WordPress CMS with modern JavaScript frameworks such as React, indicating a moderate level of digital maturity. Hosting is provided by Forpsi, a known Slovak hosting provider, which aligns with the domain registration data. The website implements HTTPS and cookie consent mechanisms but lacks visible privacy policies and terms of service, which are critical for compliance and user trust. Security headers are not detected, suggesting room for improvement in security posture. No contact emails or phone numbers are explicitly provided, which may impact user trust and business credibility.

C

CondorNet, s.r.o.

condornet.sk

46

CondorNet, s.r.o. is a Slovak telecommunications company specializing in high-speed optical and radio internet connections and television services primarily serving the Prešov region. The company positions itself as a reliable and longstanding local ISP with a focus on both residential and business customers. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, with a responsive design and good SEO practices. Security-wise, the site uses HTTPS and implements cookie consent with IP anonymization for analytics, but lacks explicit security policies or incident response information. Overall, the site is trustworthy and compliant with GDPR, though improvements in security transparency and headers could enhance their posture.

C

COMP-SHOP

comp-shop.sk

49

COMP-SHOP is a Slovak telecommunications provider specializing in high-speed optical internet, digital television, and telephony services under the NUO brand. The company targets residential customers seeking reliable and fast internet and TV solutions, offering bundled packages to enhance customer value. The website reflects a small but established business with a domain age dating back to 2004, indicating a stable market presence. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the site presents a professional and trustworthy digital presence with room for enhanced security policies and incident response transparency.

ARTOS, a.s. is a Slovakian telecommunications company that unites regional telecom operators to collaborate on joint projects and develop better products for customers. Established in 2006, the company offers services including internet, IP transport, television, telephony, camera systems, and shared software solutions. The website reflects a small-sized business with a focus on regional collaboration and a platform for cooperation with larger operators. Technically, the website uses older JavaScript libraries such as jQuery 1.9.0 and Modernizr 2.6.2, hosted on a provider associated with the registrar GAYA, with DNSSEC enabled indicating some security awareness. However, the site lacks modern security headers, visible HTTPS enforcement, and updated libraries, which poses security risks. No privacy or cookie policies are present, indicating low privacy compliance. Contact information is limited to an email and physical address, with no phone numbers or social media presence. Overall, the website is functional but basic, with moderate trustworthiness and room for improvement in security and privacy compliance.

H

Health Links

healthlinkscertified.org

46

Health Links is a program affiliated with the Colorado School of Public Health that provides workplace health and safety certification and advisory services. The website presents a professional and consistent brand image focused on promoting healthier workplaces through assessments, advising, and certification. The technical infrastructure uses modern front-end frameworks such as Foundation and jQuery, with embedded multimedia content to engage users. The site is mobile optimized and offers a moderate performance experience. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. Privacy policy is present but could be improved with clearer GDPR compliance and cookie management. WHOIS data is unavailable, likely due to privacy protection, but the domain's affiliation with a reputable academic institution and CDC funding supports legitimacy. Overall, the website is trustworthy and serves its target audience effectively.

F

Fundació ENT

elvalordelsaliments.cat

42

Fundació ENT operates the website elvalordelsaliments.cat as a non-profit platform dedicated to raising awareness and providing educational resources on food waste and its environmental, cultural, and economic impacts. The organization targets the general public, particularly those interested in sustainability and responsible consumption. The website offers tools such as a food value calculator, culinary recipes, and campaign materials to support its mission. Technically, the site is built on WordPress using the Salient theme and integrates common plugins like Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a generally good user experience with clear content and navigation. Security-wise, the site uses HTTPS and a cookie consent banner but lacks advanced security headers and a visible security policy or incident response contact. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy, although the website content and contact information align with a known foundation in Spain. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer privacy documentation.

F

Fundació ENT

fiscalitatresidus.org

48

Observatori Fiscalitat Residus is a specialized initiative by Fundació ENT, established in 2018, focusing on monitoring and promoting fiscal instruments related to waste management in Spain. The website serves as a resource hub providing updated data, reports, and scientific publications to support public administrations and stakeholders in adopting effective fiscal policies. The organization operates as a non-profit entity with a clear mission to improve waste management financing and incentives through taxation and pay-per-generation systems. Technically, the website is built on WordPress using the Salient theme and several plugins including Yoast SEO and WPBakery Page Builder. It employs modern web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements a cookie consent banner, indicating some level of privacy compliance. However, it lacks important security headers and does not publish a privacy policy or terms of service, which are gaps in compliance and user trust. The WHOIS data is incomplete, limiting domain trust analysis, but the presence of official contact information and active social media profiles supports legitimacy. Overall, the website presents a professional and trustworthy front for a niche non-profit focused on environmental fiscal policy. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance its security posture and compliance standing.

E

Ecología Política

ecologiapolitica.info

45

Ecología Política is a Spanish-language academic journal specializing in international environmental political debates, publishing semestrally. The website presents a professional and consistent brand image with good content quality and SEO optimization, targeting readers interested in environmental conflicts and political discourse. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data due to privacy protection limits domain trust assessment but the site content and social media presence support legitimacy. Overall, the site is functional and credible for its niche audience but would benefit from enhanced privacy compliance and security practices.

D

Dopravní podnik města Olomouce, a.s.

dpmo.cz

48

Dopravní podnik města Olomouce, a.s. (DPMO) is a well-established public transportation company operating in Olomouc, Czech Republic, providing urban bus and tram services including electronic ticketing and vehicle rental. The company is a medium-sized entity, part of the statutory city of Olomouc's group, with a domain registered since 1999, reflecting its long-standing presence in the market. The website offers comprehensive information for passengers, including schedules, ticketing options, and service updates, targeting local commuters and residents. Technically, the site uses a modern JavaScript stack with jQuery and related plugins, Google Tag Manager, and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. Privacy compliance is strong with a detailed privacy policy and cookie banner. Overall, the site is professional, trustworthy, and aligned with the company's business model and market position.

D

DOPRAVNÍ PODNIK měst Mostu a Litvínova, a.s.

dpmost.cz

46

DOPRAVNÍ PODNIK měst Mostu a Litvínova, a.s. is a regional public transportation company serving the cities of Most and Litvínov in the Czech Republic. The company operates urban and charter bus services, medical transport, and specialized senior taxi services. Their website provides comprehensive information about their services, schedules, tariffs, and news updates, targeting local residents and visitors. The business is well-established, with a domain age dating back to 2000, reflecting a stable market presence. Technically, the website is built on Drupal 7 with jQuery and other common libraries. While functional and moderately optimized for performance and mobile use, the platform is outdated and may pose security risks if not properly maintained. The site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and modern security standards. From a security perspective, the site uses HTTPS and includes some sanitization libraries, but no explicit security policies or incident response contacts are published. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the website is professional, trustworthy, and content-rich, but improvements in security posture and privacy compliance are recommended to enhance protection and regulatory adherence.

M

MDML s.r.o.

mdml.cz

42

MDML s.r.o. operates the public transportation system in Mariánské Lázně, Czech Republic, providing trolleybus and bus services with integrated electronic ticketing solutions including the Mariánka chip card and contactless payment options. The company positions itself as a local essential transportation provider with a focus on customer convenience and regional integration. Technically, the website is built on a traditional stack including jQuery, Bootstrap, and a proprietary CMS (ADENT CMS), offering a responsive and accessible user experience with clear navigation and relevant content. Security posture is moderate, with HTTPS assumed but lacking visible security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy document. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner integrations support its authenticity. Overall, the site is professional and trustworthy for its intended audience.

D

Dopravní podnik města Jihlavy, a.s.

dpmj.cz

45

Dopravní podnik města Jihlavy, a.s. operates as the primary public transportation provider in Jihlava, Czech Republic, offering bus and trolleybus services along with related offerings such as ticket sales, vehicle maintenance, and advertising opportunities. The company maintains a professional web presence with clear navigation and relevant content targeting local residents and visitors. The website is built on the vismo CMS platform and incorporates modern web technologies including responsive design and accessibility features. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy policies are present and GDPR compliance appears addressed, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and contact information. Overall, the website demonstrates a solid digital infrastructure suitable for its public service role.

D

Dopravní podnik Karlovy Vary, a. s.

dpkv.cz

49

Dopravní podnik Karlovy Vary, a. s. is a traditional and established public transportation operator in Karlovy Vary, Czech Republic. The company provides a wide range of services including city and regional bus lines, cable cars, and additional transport-related services such as advertising, vehicle repair, fuel sales, and towing. The website reflects a medium-sized enterprise with a clear focus on serving both residents and tourists in the region. The company maintains a professional online presence with comprehensive service information and user-friendly navigation.

Dopravní podnik města Hradce Králové, a.s. is the primary public transportation operator serving the city of Hradec Králové in the Czech Republic. The company provides urban mass transit services including buses and trolleybuses, complemented by additional offerings such as a driving school, vehicle servicing, advertising opportunities, and tourist train services. The website is well-structured and targets residents and visitors seeking transit information and services. It maintains a consistent brand presence and demonstrates trustworthiness through certifications and official contact details. Technically, the website employs a custom CMS with a mix of legacy and modern JavaScript libraries, including jQuery 1.10.2, Chosen, Select2, and integrations with Google Maps and Mapy.cz APIs. The site is mobile-optimized and provides interactive features such as timetable searches and route maps. While the site uses HTTPS and cookie consent mechanisms, it lacks some advanced security headers and uses outdated JavaScript libraries, which could pose security risks. From a security and compliance perspective, the company holds ISO certifications (9001, 14001, 45001) indicating mature management and operational processes. The website includes comprehensive privacy and cookie policies compliant with GDPR, and a designated Data Protection Officer is referenced. No visible vulnerabilities or incident response contacts are publicly disclosed, suggesting room for improvement in transparency. Overall, the website and business demonstrate a solid security posture and digital maturity appropriate for a medium-sized public transportation company. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing vulnerability disclosure and incident response information to further strengthen trust and compliance.

D

Dopravní společnost Zlín-Otrokovice, s.r.o.

dszo.cz

46

Dopravní společnost Zlín-Otrokovice, s.r.o. operates as a regional public transportation provider in the Zlín and Otrokovice areas of the Czech Republic, offering trolleybus and bus services along with ticketing options including electronic and SMS tickets. The company maintains a professional online presence with a well-structured website built on WordPress, featuring modern plugins for enhanced user experience such as sliders and responsive design. The website is accessible, mobile-optimized, and provides relevant information for commuters and travelers in the region. From a technical perspective, the site employs standard web technologies including PHP, jQuery, and WordPress CMS with popular page builders and slider plugins. Security measures include HTTPS with good SSL configuration and security headers, although explicit security policies and incident response information are not publicly available. Privacy and cookie policies are present and include consent mechanisms, indicating a basic level of GDPR compliance. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but there is room for improvement by publishing formal security policies and vulnerability disclosure channels. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the website content and structure suggest a legitimate and established business. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture. Strategic recommendations include enhancing transparency around security policies, improving accessibility features, and maintaining up-to-date software to mitigate risks.

P

Plzeňské městské dopravní podniky, a.s.

pmdp.cz

48

Plzeňské městské dopravní podniky, a.s. (PMDP) operates as the primary public transportation provider in Plzeň, Czech Republic, offering a wide range of services including tram, trolleybus, and bus transport, ticketing solutions, vehicle rentals, and advertising services. The company has a long-standing history dating back to 1899 and maintains a strong market position as a trusted municipal transport operator. The website reflects a professional and user-friendly digital presence with clear navigation and relevant content targeted at the general public and transport users. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and niCMS, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes essential privacy and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security best practices like security headers and vulnerability disclosure mechanisms are not evident, suggesting room for improvement in security posture. From a security perspective, the site uses HTTPS and enforces cookie consent with granular controls, but lacks visible security headers and published incident response or security policies. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and business information appear legitimate and consistent. Overall, the site presents a moderate to good security posture with recommendations to enhance domain transparency and security controls. Strategically, PMDP should focus on improving domain registration transparency, implementing comprehensive security headers, and publishing formal security and incident response policies to strengthen trust and compliance. Enhancing these areas will support the company’s reputation as a reliable public transport provider and ensure continued regulatory compliance and user confidence.

A

Alcyon

alcyoneurope.com

41

Alcyon is a European leader in the distribution of veterinary medicines, pet food, and veterinary equipment, operating primarily in France, Belgium, and Italy. The company is structured with subsidiaries in these countries and governed by a board largely composed of practicing veterinarians, emphasizing its close ties to the veterinary profession. The website presents a professional and multilingual platform that highlights the company's history, organizational structure, and key business metrics, targeting veterinary professionals across Europe. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPML for multilingual support. It uses jQuery and is optimized for mobile devices with good SEO practices. The site is served over HTTPS with no visible security vulnerabilities in the provided HTML content. However, it lacks some security headers and visible privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a solid baseline with HTTPS and no exposed sensitive data. The absence of privacy and cookie policies, as well as missing incident response and vulnerability disclosure information, indicates areas for improvement in compliance and transparency. The WHOIS data is notably missing or unavailable, which raises some concerns about domain registration transparency despite the professional appearance and content of the website. Overall, Alcyon’s website is a well-structured and professional digital presence for a veterinary distribution group, but it would benefit from enhanced privacy compliance, security headers, and clearer domain registration information to improve trust and regulatory adherence.

O

OCULUS Optikgeräte GmbH

oculus.de

46

OCULUS Optikgeräte GmbH is a German manufacturer specializing in high-quality medical devices for ophthalmologists, optometrists, and opticians. The company maintains a professional online presence with a multilingual website targeting international markets including Europe, USA, Canada, South America, and Asia. Their business model focuses on manufacturing and distributing optical medical equipment, positioning them as an established player in the healthcare sector. The website content is relevant and well-structured, supporting their market position and target audience effectively. Technically, the website is built on WordPress using the Avada theme and incorporates modern JavaScript libraries such as jQuery. Hosting utilizes Cloudflare DNS services, ensuring reliable domain resolution and security benefits. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks several security headers that could enhance protection. No sensitive data exposure or vulnerable libraries were detected. However, the absence of a cookie consent mechanism and visible security or incident response policies indicates room for improvement in compliance and transparency. The site uses third-party tracking via ccm19 but does not appear to engage in extensive user tracking. Overall, the website is trustworthy and professional with a solid business foundation. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, and publishing security and incident response policies to strengthen user trust and regulatory adherence.