Security Directory

CZI s.r.o is a Czech internet agency with nearly 20 years of experience specializing in modern web development, content creation, and online reputation management. The company serves a B2B market, targeting businesses and organizations seeking professional digital presence and reputation services. Their website demonstrates a solid market position with notable clients and industry awards, reflecting a reputable and established business. Technically, the website is built on WordPress using modern themes and plugins such as Astra, Beaver Builder, Yoast SEO, and Google Analytics integration. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA, but additional security headers and policies are absent. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. WHOIS data is missing, which slightly reduces transparency and trustworthiness. Overall, the website is professional and trustworthy, but improvements in transparency, security headers, and privacy documentation are recommended to enhance compliance and security posture.

eHutník.cz is a regional news website operated by Třinecké Železárny a.s., providing news, sports, culture, and legal advice focused on the Třinecko region in the Czech Republic. The site targets local residents and stakeholders, offering timely regional information and advertising opportunities. The business model centers on content publishing and local advertising, positioning itself as a trusted regional media outlet. Technically, the website runs on WordPress with popular plugins for SEO, advertising, and forms, supported by Google Analytics and Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, with some security headers implied but not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a secure and accessible platform. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve by adding explicit security headers and a security policy. The domain registration data supports the legitimacy and maturity of the business.

Š

Škoda Auto a.s.

skoda-handy.cz

73

Škoda Auto a.s. is a leading automotive manufacturer in the Czech Republic, offering a specialized program called Škoda Handy aimed at enhancing mobility for persons with reduced mobility. The program provides expert consultancy, vehicle purchase assistance with discounts, financing options, insurance, and tailored vehicle modifications. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs modern web technologies including React and Bootstrap, hosted on a CDN infrastructure ensuring moderate to fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, modern security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. The absence of WHOIS data slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site is trustworthy, secure, and well-aligned with the business objectives of Škoda Auto.

N

Nez en herbe

nez-en-herbe.org

42

Nez en herbe is a French non-profit association dedicated to developing olfactory education programs for children starting from kindergarten. The website presents a focused mission to enhance sensory education in schools, positioning itself as a niche educational organization. The digital infrastructure is built on WordPress with the Divi theme and incorporates SEO best practices via Yoast SEO. The site is accessible, mobile-optimized, and uses HTTPS with a good SSL configuration, indicating a reasonable level of technical maturity for a small organization. However, the absence of a privacy policy, terms of service, and explicit contact information limits its privacy compliance and business transparency. Security posture is adequate but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy within its domain but would benefit from enhanced compliance and security documentation.

L

La Bulle Musicale®

bullemusicale.com

56

La Bulle Musicale® is a French educational company specializing in multisensory interactive equipment designed to foster musical awakening and social interaction for children aged 0 to 6 years. Their products are validated by neuroscientific research and target early childhood professionals, medico-social, and cultural sectors. The website reflects a niche market position with a focus on educational innovation and inclusivity. Technically, the site is built on WordPress using Elementor and Astra theme, incorporating modern web technologies and multimedia content. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. WHOIS data is unavailable, which raises concerns about domain transparency and legitimacy. Overall, the site is professional and trustworthy in content but would benefit from enhanced compliance and security disclosures.

O

Orchestre Lamoureux

orchestrelamoureux.com

44

Orchestre Lamoureux is a well-established French orchestra with a domain registered since 2000, offering a variety of classical music concerts, including family-oriented Bébé Concerts and collaborations with notable artists. The organization focuses on cultural enrichment, professional training, and artistic transmission, targeting classical music enthusiasts and families. The website is built on WordPress, leveraging common plugins and frameworks such as Bootstrap and jQuery, hosted by OVH sas. It features a professional design with good navigation and mobile optimization. Security posture is moderate with HTTPS enforced but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is good with visible cookie consent and privacy policy. Contact information and social media presence enhance business credibility. Overall, the website is trustworthy and professionally maintained.

L

Linguise

linguise.com

58

Linguise is a technology company specializing in automatic neural translation services for websites, enabling users to translate content into over 80 languages with instant updates and SEO optimization. The company targets website owners, eCommerce businesses, and international enterprises seeking to expand their global reach efficiently. Their service integrates with major CMS platforms and offers a live front-end editor for convenient translation management. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with Elementor and leverages modern web technologies including Google Analytics, Google Tag Manager, and Tawk.to for live chat support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data reduces domain trustworthiness, but the overall business credibility remains high based on website content and customer testimonials.

D

DataRankr

slotcatalog.com

70

SlotCatalog, operated by DataRankr and registered under Internet Invest, Ltd. dba Imena.ua, is a well-established online platform specializing in comprehensive reviews and rankings of online slot games and casinos. Founded in 2015, the website offers extensive content including game reviews, casino evaluations, bonus offers, and SlotRank popularity metrics, targeting adult gambling enthusiasts globally. The platform maintains a consistent brand presence with active social media channels and structured data markup enhancing SEO and discoverability. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Chart.js and Twitter Typeahead for enhanced user experience. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and HTTPS security. The site is mobile-optimized with good navigation clarity and professional design, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and published security policies. No privacy or cookie policies were detected, indicating potential compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are publicly available, limiting direct communication channels. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, SlotCatalog presents a credible and professional online gambling review service with moderate technical maturity and security posture. To enhance trust and compliance, the site should implement comprehensive privacy and cookie policies, security headers, and publish incident response and vulnerability disclosure information.

D

Datu valsts inspekcija

gov.lv

59

Datu valsts inspekcija is the official Latvian government authority responsible for overseeing personal data protection and GDPR compliance. The website serves as an authoritative source for data protection guidance, regulatory information, and public awareness. It targets Latvian residents, data controllers, and data protection officers with comprehensive resources and services. The site is well-structured, professionally designed, and provides clear contact information, reinforcing its role as a trusted government entity. Technically, the website is built on Drupal CMS, employs modern web technologies, and is optimized for accessibility and mobile use. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

P

PACE.V4

performingartsv4.eu

54

PACE.V4 is a cultural platform dedicated to supporting and promoting performing arts in Central Europe. The website serves as an information hub and networking platform for stakeholders in the performing arts community across the Visegrad countries and neighboring regions. It provides event information, project updates, and links to partner organizations. The business model appears to be non-profit or cultural collaboration focused, with a regional scope and a small organizational size. Technically, the website is built on WordPress using the Enfold theme, with a moderate performance profile and good mobile responsiveness. The presence of a cookie consent banner indicates awareness of privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit contact information for incident response. Overall, the site is professional and trustworthy for its niche audience but could improve in privacy transparency and security best practices.

T

touring artists

touring-artists.info

51

Touring Artists is a specialized non-profit platform providing comprehensive information and free consultation services for internationally mobile artists and creatives working in or moving to Germany. The website is supported by reputable cultural institutions such as the International Theatre Institute Germany, the International Society of Fine Arts, and the German Dance Association, and is funded by German cultural government bodies. It offers detailed resources on visas, contracts, social security, taxes, insurance, copyright, and transport, alongside a funding database and guides to support cross-border cultural work. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. Google Tag Manager is used for analytics, with minimal user tracking. However, some security best practices such as explicit security headers are not evident. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS transparency and missing registrar data slightly reduce trust. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Overall, the website is a trustworthy, well-maintained resource for its niche audience, with strong cultural partnerships and government backing. Strategic improvements in security headers and WHOIS transparency could further enhance trust and security posture.

B

Biograf Kotva

biografkotva.cz

43

Biograf Kotva operates as a local cinema in the Czech Republic, providing a comprehensive film program, online ticket sales, and additional services such as a cafe and venue rental. The website is professionally designed with clear navigation and a focus on cultural and family-friendly content. Technically, the site uses modern JavaScript libraries and asynchronous loading to enhance performance and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding security headers and formal policies. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trustworthiness. Strategic improvements in privacy compliance and domain registration transparency are recommended to enhance business credibility and user trust.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

dotFOX s.r.o. is a Czech digital marketing company specializing in affiliate marketing, lead generation, and performance marketing, with additional proprietary projects in financial comparison and affiliate networks. Established in 2014, the company positions itself as a professional and experienced player in the Czech online marketing sector, targeting businesses seeking effective marketing partnerships. The website is well-structured, professionally designed using modern frontend technologies such as Bootstrap and jQuery, and includes Google Analytics for user tracking. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers and no publicly disclosed security policies or incident response mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a credible business but requires improvements in privacy compliance and security best practices.

R

RSI Testsysteme GmbH & Co. KG

korrosion24.de

64

Korrosion24 is an e-commerce platform operated by RSI Testsysteme GmbH & Co. KG, specializing in corrosion testing supplies such as salts, test plates, measuring devices, and consumables. The website targets professionals and companies involved in corrosion testing, offering a niche product range with clear business positioning in the manufacturing and testing sector in Germany. The site is well-branded, consistent, and provides comprehensive product information and customer support channels. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and market presence.

S

Scaler Marketing

scalermarketing.com

61

Scaler Marketing is a specialized branding and web design agency focused on helping uniquely positioned clients differentiate themselves through compelling web experiences. The company offers a broad range of services including branding, web design, marketing strategy, UI/UX, digital marketing, and more, targeting businesses seeking to scale their online presence. The website demonstrates a professional and modern digital infrastructure leveraging Webflow CMS, Google Tag Manager, Microsoft Clarity, Facebook Pixel, and other contemporary web technologies, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and bot protection on forms, though the absence of security headers and published privacy or cookie policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, though the professional website content and clear contact information mitigate some risk. Overall, the site is well-designed, user-friendly, and business-focused, but would benefit from enhanced transparency and compliance documentation.

K

Kalpe

kalpe.cz

53

Kalpe is a Czech-based company specializing in the manufacture, sale, and rental of rehabilitation and compensatory medical devices, including motodlahy, motomedy, and rotopeds. The company targets both individual customers and institutional clients such as rehabilitation clinics and senior care facilities. Their market position is focused on providing quality rehabilitation equipment with a local Czech market presence. The website is well-structured and provides comprehensive product information, contact details, and service options including repair and rental. Technically, the website is built on WordPress with modern integrations such as Google Analytics, Google Tag Manager, and reCAPTCHA v3 for spam protection. The site is mobile-optimized and uses structured data (JSON-LD) for SEO enhancement. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and protects its contact forms with reCAPTCHA, but lacks visible security headers and cookie consent banners, which are important for GDPR compliance. The absence of WHOIS data reduces trust in domain registration transparency, though the website content and contact information appear legitimate and professional. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from improved security headers, cookie consent implementation, and domain registration transparency to strengthen its security and compliance posture.

V

VIDIA-DESIGN s.r.o.

zijushandicapem.cz

43

Žiju s handicapem is a Czech Republic-based non-profit portal dedicated to supporting people with disabilities (OZP) by providing informational articles, job offers, community blogs, and sponsorship opportunities. The website is operated by VIDIA-DESIGN s.r.o., which appears as the author and creator of the site. The portal targets disabled individuals and their families, aiming to improve quality of life and social inclusion through content and community engagement. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and NetteForms, with integration of Google Tag Manager and Facebook SDK for analytics and social media. The site is served over HTTPS and includes a cookie consent mechanism compliant with GDPR principles, offering granular cookie control in multiple languages. However, the site lacks advanced security headers such as CSP and HSTS, which could improve security posture. Security-wise, the site shows basic good practices like HTTPS and secure login forms but misses important headers and explicit privacy and terms of service pages. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness from a domain registration perspective. Despite this, the site links to reputable partners and sponsors, and no suspicious or adult content is present. Overall, the site is a well-structured, content-rich portal serving a niche community with moderate technical maturity and security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

P

Plaine Commune Grand Paris

plainecommune.fr

56

Plaine Commune Grand Paris is a public territorial establishment serving a large population in the northern Paris region. The website provides comprehensive information about the institution's services, projects, and community engagement. It targets residents, local businesses, and public stakeholders with a focus on urban development, culture, mobility, and environmental initiatives. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries, ensuring a responsive and user-friendly experience. Security measures include HTTPS, RSA encryption for login forms, and a GDPR-compliant cookie consent mechanism. However, formal security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong commitment to transparency, accessibility, and user engagement, positioning it as a trustworthy government portal.

V

Ville d’Aubervilliers

aubervilliers.fr

43

The website aubervilliers.fr serves as the official digital portal for the City of Aubervilliers, France, providing residents and visitors with municipal news, administrative services, event information, and community resources. It is positioned as a trusted government source with a clear focus on local engagement and public service. The site leverages the SPIP CMS platform and integrates common web technologies such as jQuery and Nivo Slider to deliver a functional and navigable user experience. While the design and content quality are good, mobile optimization and accessibility are basic, indicating room for improvement in user experience across devices. Security posture is moderate; the site uses cookie consent mechanisms but lacks explicit security headers and detailed security policies. WHOIS data confirms the domain's legitimacy and long-term registration consistent with an official municipal entity. Overall, the site is credible and serves its purpose effectively but would benefit from enhanced security and privacy compliance measures.

A

Aheadworks

langshop.io

66

Langshop.io is a SaaS provider specializing in multilingual translation solutions for e-commerce platforms, specifically Shopify and Magento 2. The company offers applications and extensions that enable store owners to translate their stores effortlessly, import translations, and improve SEO for multilingual reach. The business is positioned as a niche player in the e-commerce translation market, targeting merchants who require seamless multilingual capabilities. Technically, the website is built on Magento 2 with integrations of modern JavaScript libraries such as jQuery, RequireJS, and KnockoutJS, alongside marketing and analytics tools including Google Analytics, Facebook Pixel, and Klaviyo. The domain is relatively new, registered in 2021, and uses privacy protection services, which is typical for SaaS startups. Security posture is good with HTTPS enforced and domain locks in place, but lacks advanced DNS security features like DNSSEC and does not publish explicit security or incident response policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages. Overall, the website is professional and functional but could improve transparency and compliance documentation.

I

Ing. Radek Balon

it-balon.cz

52

Ing. Radek Balon operates a small-scale IT and multimedia service business based in Velká Bystřice, Czech Republic, with a domain registered since 2015. The company offers a range of services including web design, e-shop creation, IT infrastructure setup, graphic design, and video production such as wedding filming. The website is professionally designed using WordPress with modern plugins and technologies, providing a good user experience and clear navigation. Contact information and social media links are prominently displayed, enhancing business credibility. The site includes GDPR-compliant cookie consent mechanisms but lacks a dedicated privacy policy and terms of service pages. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some improvements are recommended such as adding security headers and fixing minor PHP warnings. Overall, the website reflects a trustworthy and professional small business with a solid technical foundation and moderate privacy compliance.

M

Marathon Studio

marathonstudio.cz

53

Marathon Studio is a Czech creative agency specializing in visual communication, brand strategy, web design, and consulting services. The company emphasizes long-term brand identity development and strategic design processes, targeting businesses seeking to enhance their brand presence. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted small-sized agency in their market segment. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Tag Manager, and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the website content and social media presence support its credibility. Overall, the site scores well in content quality and privacy compliance but could improve in security posture and business contact transparency.

1

Galerie 100 dřevostaveb, které se vám líbí

100drevostaveb.cz

43

The website www.100drevostaveb.cz serves as an interactive catalog showcasing wooden houses favored by Czech users. It allows visitors to view various wooden house projects, vote on them, and engage with the content via social media plugins. The business model revolves around community engagement and providing inspiration for wooden house construction enthusiasts in the Czech Republic. The site targets a general audience interested in architecture and wooden homes. Technically, the site employs a range of JavaScript libraries including jQuery, Facebook SDK, Google Analytics, and advertising scripts from Google Adsense and Gemius. The site is served over HTTPS with no visible SSL issues, but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional, moderately optimized for mobile, and provides a good user experience, but would benefit from improved privacy compliance and security transparency.

E

EUROBEN, s.r.o.

happydog.cz

54

HappyDog.cz is an established Czech e-commerce retailer specializing in high-quality natural pet food for dogs, cats, and fish under the Happy Dog and Happy Cat brands. The company emphasizes tradition and quality, serving pet owners primarily in the Czech Republic and Slovakia. Their business model focuses on direct online sales complemented by a physical store in Teplice and a comprehensive customer support system. The website demonstrates a consistent brand presence with active social media engagement and detailed product offerings.

S

S - STAV s.r.o.

s-stav.cz

48

S - STAV s.r.o. is a Czech Republic-based construction company specializing in building family and apartment houses, renovations, and machine-applied plasters and coatings. The company positions itself as a reliable partner with long-term experience and trusted suppliers, targeting individuals and businesses seeking quality construction and renovation services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technical infrastructure includes modern libraries such as Bootstrap, jQuery, and Swiper.js, with HTTPS enforced and cookie consent implemented, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and company registration details. Security posture is adequate with HTTPS but lacks advanced security headers and incident response information. Privacy compliance is supported by visible privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security practices and transparency in domain registration.

HIT OFFICE, s.r.o. is a Czech-based company specializing in office supplies and food packaging products, offering both standard and custom manufacturing solutions. The company operates a multilingual website with an integrated e-shop, targeting business customers in need of office and food packaging materials. The website demonstrates a solid market position supported by multiple certifications such as FSC, ISO, and BRC, and showcases awards that emphasize quality and sustainability. The company was founded in 1994, indicating a mature presence in its sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Select2, Swiper, and Google services such as reCAPTCHA and Analytics. The site is mobile-optimized with good navigation and content quality, although some accessibility and SEO aspects could be improved. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data is a notable gap, reducing transparency and trustworthiness from a domain registration perspective. However, the website content, certifications, and business information support the legitimacy of the company. No critical security vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, HIT OFFICE's website is professional and functional, with room for improvement in privacy compliance and security best practices. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response policies, and providing clearer contact information for data protection officers.

Snatch.cz is a Czech-based company specializing in the production and sale of nicotine pouches, marketed as the first Czech brand in this category. The company, DanCzek a.s., founded in 2020, targets adult consumers seeking tobacco alternatives, offering products with various nicotine strengths and flavors. The brand has established a strong market presence domestically and internationally, including a leading position in Finland. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Fonts, with a responsive design and good SEO practices. Security measures include HTTPS enforcement, age verification modal, and comprehensive cookie consent mechanisms. However, the absence of WHOIS data and missing explicit security headers slightly reduce trustworthiness. Overall, the site is professional, user-friendly, and compliant with GDPR requirements, though it lacks some legal and security policy pages.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

Bedope.cz is a Czech retail website specializing in the sale of nicotine pouches branded as Dope. The company, DanCzek a.s., positions itself as a local manufacturer offering competitively priced nicotine products with a focus on adult consumers. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates modern frontend technologies such as jQuery, Bootstrap, and Swiper.js, and uses the Nette framework on the backend. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data and security headers slightly reduces trustworthiness. No critical security vulnerabilities were detected, but improvements in security headers and incident response information are recommended.

H

Hithit s.r.o.

hithit.com

59

Hithit s.r.o. operates a Czech crowdfunding platform that connects creative individuals such as artists, designers, developers, and sportspeople with their supporters. The platform facilitates reward-based crowdfunding campaigns, enabling project creators to raise funds and offer exclusive rewards to backers. Established since 2012, Hithit holds a solid position in the Czech market with a medium-sized business footprint and a consistent brand presence. Technically, the website leverages modern JavaScript libraries and integrates multiple third-party services including Google Analytics, Facebook SDK, and Twitter widgets. Hosting is supported by Amazon CloudFront CDN, ensuring moderate performance and good mobile optimization. The site implements cookie consent mechanisms and uses HTTPS, but lacks some advanced security headers and explicit security policies. From a security perspective, the platform enforces HTTPS and cookie consent but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces trust slightly, but the overall business credibility remains high based on website content and contact transparency. Overall, Hithit presents a professional and trustworthy crowdfunding service with room for improvement in security policy transparency and WHOIS data availability. Strategic enhancements in security headers and incident response disclosures would strengthen its security posture and user trust.

Y

Yotpo

smsbump.com

70

Yotpo is a technology company specializing in marketing automation solutions for ecommerce businesses, with a strong focus on SMS marketing. The company offers a comprehensive platform that integrates SMS marketing with other retention marketing tools such as reviews, loyalty programs, and email marketing. The website demonstrates a mature digital infrastructure, leveraging advanced analytics and marketing technologies including Segment, Amplitude, Marketo, and Google Tag Manager. The site is well-optimized for SEO and mobile devices, providing an excellent user experience. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data slightly reduces trust but the overall professional presentation and consistent branding indicate a legitimate and established business.

O

Kasyno Online W Polsce 2025 | Polskie Kasyna Internetowe

onlinecasinopolski.pl

64

onlinecasinopolski.pl is a Polish-language online platform specializing in providing curated lists, reviews, and bonus offers for licensed online casinos accessible to Polish players in 2025. The site targets adult Polish gamblers seeking legal and reliable online gambling options, offering detailed casino ratings, payment method information, and game categories. Technically, the website employs modern web technologies including JavaScript, CSS3, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and uses HTTPS, ensuring secure connections. However, it lacks explicit privacy and cookie policies, which is a compliance gap under GDPR. Security-wise, the site has a good SSL configuration but lacks DNSSEC and security.txt disclosures, which could improve trust and security posture. Overall, the domain registration is consistent with the business claims, enhancing legitimacy. Strategic improvements in privacy compliance and security disclosures are recommended to enhance trust and regulatory adherence.

Z

Zdeněk Šmejkal

zdesmejkal.cz

47

Zdeněk Šmejkal operates a professional website offering web development and graphic design services primarily targeting businesses and individuals in the Czech Republic. The site showcases custom web solutions including order systems for restaurants and simple e-commerce platforms, alongside corporate identity and print material design. The business is positioned as a small independent service provider with a clear focus on technology and creative services. Technically, the website is built on Drupal 7 with jQuery and Lightbox2 libraries, and integrates Google Analytics via Google Tag Manager for visitor tracking. While the site is functional and well-structured, it shows signs of aging technology and lacks modern security headers and privacy compliance features. Mobile optimization and accessibility are basic but adequate for general use. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and suitable for its business purpose but would benefit from enhanced security practices, updated technology, and improved privacy compliance to strengthen trust and reduce risk.

I

IWA

iwa-let.org

43

The IWA-LET website represents the International Water Association's Leading Edge Conference on Water and Wastewater Technologies, a well-established international event focused on advancing water management through science and innovation. The site targets professionals, researchers, and stakeholders in the water sector, providing detailed information about conference programs, sponsors, organizing committees, and partner organizations. The business model centers on event organization and knowledge dissemination within the water industry, supported by reputable sponsors and partners. Technically, the website is built on WordPress with modern plugins and tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy linked on the parent IWA domain but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its organizational identity.

Helpnet.cz is a Czech non-profit informational portal dedicated to persons with specific needs, including disabilities and seniors. The website provides news, grant information, event calendars, and media monitoring related to social services and disability support. It is operated by CZI, s.r.o., a Czech company, and targets a specialized audience within the Czech Republic. The site uses Drupal 7 CMS and integrates common web technologies such as jQuery and Google Analytics. The design and content quality are good, with clear navigation and mobile optimization. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Security posture is generally good with HTTPS and CAPTCHA protections, but security headers are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

N

Nadační fond Kateřiny Klasnové a Jaroslava Petrouše

klapeto.eu

53

Nadační fond KlaPeto is a Czech non-profit foundation dedicated to providing financial support to severely disabled children up to 18 years old. Founded in 2011 by Kateřina Klasnová and Jaroslav Petrouš, the foundation has raised over 15 million CZK and helped hundreds of children. The website serves as an information and fundraising platform, featuring detailed project descriptions, news updates, and donation options including an e-shop. The foundation emphasizes transparency and direct aid, ensuring all funds go to the intended beneficiaries without administrative overhead. The site is well-structured, professionally designed, and optimized for search engines with comprehensive privacy and cookie policies compliant with GDPR.

5

5 senses for kids Foundation

5senses4kids.org

56

5 senses for kids Foundation is a small non-profit organization dedicated to supporting educational, cultural, social, and scientific actions aimed at the harmonious development of children through multisensoriality. The foundation provides educational resources, supports scientific research, and engages parents and researchers with relevant content and activities. The website is professionally designed, bilingual (French and English), and features partnerships with recognized scientific and cultural organizations, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress with Bootstrap 4 and jQuery, leveraging modern libraries such as Swiper.js and Tippy.js for UI components. It uses Google Analytics and Google Tag Manager for analytics and tracking, and employs Google reCAPTCHA v3 for form security. Hosting is provided by o2switch, a reputable French hosting provider. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled, and some recommended security headers are missing. There is no visible security policy or incident response contact information, and no cookie consent mechanism is implemented, which could be a compliance gap under GDPR. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, implementing a cookie consent banner, and publishing a security.txt file to improve security posture and compliance.

D

DELONG INSTRUMENTS a.s.

delong.cz

55

Delong Instruments a.s. is a Czech-based company specializing in the design and manufacture of compact transmission electron microscopes (TEMs), targeting laboratories and scientific research institutions. Their product portfolio includes small, affordable, and customizable TEMs, Schottky electron guns (DIGUN), and custom electron optic solutions. The company positions itself as a niche leader in compact TEM technology, emphasizing ease of installation and high imaging contrast. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on Webflow with integration of Google Analytics and Tag Manager, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and headers. WHOIS data is unavailable, limiting domain trust assessment, but the overall business credibility is high based on website content and contact details.

R

Renishaw plc

renishaw.net

77

Renishaw plc is a globally recognized engineering and scientific technology company specializing in precision measurement, motion control, healthcare technologies, spectroscopy, and additive manufacturing. Their product portfolio includes advanced metrology probes, encoders, Raman spectroscopy systems, dental scanners, and neurosurgical robots, serving diverse industries such as manufacturing, healthcare, and scientific research. The company maintains a strong market position with a comprehensive digital presence and global offices in 36 countries. Technically, the website is built on a proprietary CMS platform (Renishaw IDT's Snowball) and utilizes modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for privacy and cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing which could be improved. From a security perspective, the site enforces HTTPS and integrates a robust cookie consent mechanism, reflecting good privacy compliance including GDPR adherence. However, explicit incident response contacts and vulnerability disclosure policies are not evident, representing an area for enhancement. The absence of WHOIS data is noted but likely due to privacy protection or registry policies, not detracting significantly from the site's legitimacy. Overall, Renishaw's website reflects a mature, professional digital asset with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining vigilance on third-party scripts to sustain security posture.

M

Magyar Víz- és Szennyvíztechnikai Szövetség

maszesz.hu

45

Magyar Víz- és Szennyvíztechnikai Szövetség (MASZESZ) is a Hungarian professional association dedicated to water and wastewater technology. The organization provides a platform for companies, educational institutions, municipalities, and authorities to collaborate, share knowledge, and participate in sector-specific events. The website serves as a hub for news, events, membership information, and a webshop, positioning MASZESZ as an active and engaged sector leader in Hungary. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tools such as Smart Slider 3 and MailerLite for marketing and user engagement. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

RedShift BioAnalytics, Inc.

redshiftbio.com

66

RedShift BioAnalytics, Inc. is a specialized technology company focused on providing advanced analytical instrumentation for protein and biomolecule analysis, primarily serving the biopharmaceutical industry. Their innovative solutions, including Microfluidic Modulation Spectroscopy (MMS) and the HaLCon platform, enable rapid, precise structural insights critical for drug discovery, development, and manufacturing. Positioned as an innovative and trusted provider, RedShiftBio targets biopharma companies and life science researchers with a medium-sized business footprint based in the United States. The company's digital infrastructure is built on a modern Webflow CMS platform, leveraging a suite of contemporary web technologies such as Google Tag Manager, Pardot marketing automation, and Cloudflare Turnstile captcha for security. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Integration of multiple analytics and marketing tools indicates a moderate level of user tracking aligned with business growth objectives. From a security perspective, the website enforces HTTPS, employs bot protection mechanisms, and secures user input forms with captchas. However, it lacks explicit published security policies, incident response procedures, and vulnerability disclosure information, which are recommended to enhance trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional website content and business information mitigate some risk. Overall, RedShiftBio presents a professional and trustworthy online presence with strong technical implementation and business credibility. Strategic improvements in transparency around security policies and domain registration verification would further strengthen their security posture and stakeholder confidence.

H

Hitachi High-Tech Corporation

hitachi-hightech.com

58

Hitachi High-Tech Corporation operates a global multilingual website serving as a portal for its diverse technology and industrial product offerings. The company is positioned as a major player in scientific instruments, industrial machinery, information systems, electronic components, and materials sectors. The website reflects a professional corporate presence with consistent branding and regional language support, targeting global B2B customers and partners. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Adobe DTM for analytics and marketing, hosted likely on Akamai infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content and branding strongly indicate legitimacy. Overall, the site scores well on business credibility and technical implementation but should improve privacy compliance and security best practices.

Gesellschaft zur Förderung der Abwassertechnik e.V. (GFA) operates a professional German-language website providing specialized news, journals, and services focused on water, wastewater, and environmental technology sectors. The site targets professionals and stakeholders in these industries, offering news updates, quality mark testing services, newsletters, and advertising opportunities. The business model centers on information dissemination and industry service provision, positioning GFA as a niche media and service provider within the German water technology market. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern frontend technologies such as Tiny Slider and jQuery. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data markup. Performance is moderate, with a well-structured navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent with Matomo analytics disabled by default, reflecting good privacy compliance. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published. Security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration appears consistent with the business focus, and no blocking or WAF challenges were detected, allowing full content accessibility. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and adding vulnerability disclosure information to strengthen the security posture and trustworthiness further.

The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e. V. (DWA) operates as a professional association in Germany specializing in water management, wastewater, and waste. The organization provides a comprehensive suite of services including memberships, access to technical standards, e-learning platforms, certifications, publications, and event management. Their market position is strong within the German environmental and water sectors, serving professionals and organizations with authoritative resources and training. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and tiny-slider. The hosting is managed via vistec.net, with a moderate performance profile and good mobile optimization. The site employs HTTPS with secure session management and a cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF protection, and privacy-conscious analytics via Matomo. However, explicit security policies and incident response information are not present, representing an area for improvement. The cookie consent and privacy policies are comprehensive and GDPR compliant, supporting strong privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. The risk profile is low, with no detected vulnerabilities or suspicious activity. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the security posture and user experience.

KZEI is the Department of Sanitary and Environmental Engineering at the Slovak University of Technology in Bratislava, Faculty of Civil Engineering. The department provides academic education, research projects, and certification services related to water supply and sewage systems. It targets students, researchers, and professionals in the environmental engineering sector. The website reflects a small academic entity with consistent branding and professional content. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Elementor. It uses HTTPS with Google reCAPTCHA for form security and Jetpack for analytics. The site is moderately performant and mobile-optimized, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but should improve privacy compliance and security headers to enhance its security posture and regulatory adherence.

A

Asociácia vodárenských spoločností

avssr.sk

42

Asociácia vodárenských spoločností (AVS) is a Slovak association representing business entities active in water management services. Founded in 2004, it serves as a collaborative platform for water supply companies, providing industry representation, legislative cooperation, and event organization. The website is professionally designed, primarily in Slovak with an English language option, and targets industry professionals and stakeholders in Slovakia's water sector. The business model focuses on association services rather than direct commercial offerings, positioning AVS as a key industry body in the Slovak energy/water sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Ultimate Member, and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, with a responsive design optimized for mobile devices. Performance is moderate with good SEO and basic accessibility features. The site uses HTTPS with DNSSEC enabled, indicating a secure hosting environment. Cookie consent mechanisms are implemented to comply with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and DNSSEC, but lacks explicit security headers and published security policies or incident response plans. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age matching the business history. Overall, AVS's website is a trustworthy, professional platform serving its niche audience effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen compliance and user trust.

A

Art Carbon

art-carbon.cz

45

Art Carbon is a Czech company specializing in innovative water filtration and purification technologies based on carbon nanotubes. Their unique technology targets various water types including industrial wastewater, pool water recycling, and potable water treatment. Supported by government grants and recognized in startup competitions, Art Carbon positions itself as a technology innovator in the water treatment sector. The website reflects a professional digital presence built on WordPress with Elementor, featuring clear navigation and comprehensive business information. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. The absence of WHOIS data limits domain trust analysis, but the visible business credentials and partnerships support legitimacy. Strategic recommendations include improving privacy compliance, adding security headers, and publishing a formal security policy to strengthen trust and security culture.

S

SHIMADZU CORPORATION

shimadzu.com

64

Shimadzu Corporation is a long-established enterprise specializing in analytical and measuring instruments, medical systems, and industrial equipment. The company has a strong global presence and a history dating back to 1875, positioning itself as a leader in technology and healthcare sectors. The website reflects a mature digital presence with comprehensive business information, investor relations, and sustainability initiatives. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes multilingual support and cookie consent mechanisms, indicating a good level of digital maturity. Security posture is solid with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable anomaly but does not detract from the professional presentation and trustworthiness of the site. Overall, the site is well-designed, content-rich, and suitable for its target audience of researchers, medical professionals, and industrial clients.

I

International Water Association

waterdevelopmentcongress.org

45

The International Water Association operates the Water and Development Congress & Exhibition website, promoting a major global event focused on water, sanitation, and innovation scheduled for December 2025 in Bangkok. The organization is well-established with a domain registered since 2017 and a consistent brand presence. The website serves as an information and registration portal, targeting water sector professionals and stakeholders worldwide, with a particular focus on Asia. Technically, the site is built on WordPress using popular plugins for SEO and page building, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its business purpose effectively.