Security Directory

P

Plava Laguna

plavalaguna.com

76

Plava Laguna is a hospitality company specializing in providing accommodation services including hotels, villas, and apartments primarily in the Istria region of Croatia, focusing on destinations such as Porec and Umag. The company targets tourists seeking quality lodging options in this popular travel area. The website demonstrates a solid digital presence with a modern technical infrastructure built on Next.js and React, integrating advanced analytics and marketing tools such as Google Tag Manager and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. The website is well-optimized for SEO and mobile devices, providing a good user experience. However, the WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the site appears professional and trustworthy, with room for improvement in publishing security and compliance documentation.

A

Aminess d.d.

aminess.com

73

Aminess d.d. operates a professional hospitality website offering hotels, resorts, campsites, and holiday homes primarily located along the Croatian Adriatic coast. The company targets tourists seeking quality accommodation and leisure experiences, supported by a loyalty program and themed holiday types. The website is built on modern JavaScript frameworks (Nuxt.js and Vue.js) and integrates analytics and advertising tools such as Google Tag Manager and Bing Ads. It demonstrates good digital maturity with responsive design, SEO optimization, and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a published security policy and incident response information is noted. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of WHOIS data for the domain is a concern but does not detract significantly from the overall legitimacy given the professional presentation and contact transparency. Strategic recommendations include publishing security and incident response policies and considering a vulnerability disclosure program to enhance trust.

P

PWN

pwn.nl

69

PWN is a well-established regional utility company based in the Netherlands, specializing in sustainable drinking water supply and nature management in the Noord-Holland region. The website reflects a professional and consistent brand presence, targeting residents and businesses in the area with services such as water supply and water meter reading. The digital infrastructure leverages modern web technologies including Angular, Cookiebot for consent management, and analytics platforms like Piwik PRO and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy and terms of service, which are critical for full GDPR compliance. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

R

RIKA Innovative Ofentechnik GmbH

rika.es

59

RIKA Innovative Ofentechnik GmbH is a reputable Austrian manufacturer specializing in high-quality wood, pellet, and combined stoves for residential heating. The company holds a strong market position as a leader in pellet stoves within German-speaking countries and maintains a broad international presence through multiple localized websites. Their business model focuses on manufacturing, direct sales, and a network of distributors, supported by digital tools such as an online stove configurator. Technically, the website employs modern JavaScript libraries and is hosted on a reliable CDN infrastructure, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although some advanced security headers and incident response disclosures are absent. Overall, the site demonstrates a professional and trustworthy online presence with comprehensive privacy compliance and clear contact information.

M

MČ Praha 5

praha5.cz

63

The website www.praha5.cz serves as the official online presence for the Municipal District Prague 5, providing residents and visitors with information about local government services, community events, and administrative resources. The site targets the local population of Prague 5 and operates as a government/public service entity. Technically, the site is built on WordPress 6.4.1, utilizing common plugins such as Events Manager and Cookiebot for event management and cookie consent respectively. The infrastructure shows moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, which are positive indicators. However, no explicit security headers were detected, and the WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is partial, with a cookie policy present but no clear privacy policy or terms of service pages identified. Overall, the website is a legitimate municipal government portal with good content quality and user experience. The absence of WHOIS data and some missing compliance documents suggest areas for improvement. Strategic recommendations include implementing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

M

MEDIA FACTORY Group

mfgroup.cz

60

MEDIA FACTORY Group is a Czech-based digital services company specializing in web development, system development, and tailored promotional strategies to help businesses innovate and grow online. The company positions itself as an expert in digital innovation, marketing, and analytics, targeting business clients seeking advanced digital solutions. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Webflow CMS, Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforced and security headers present, although no explicit security policy or incident response information is published. The absence of WHOIS registration data is a concern for domain legitimacy, but the website's professional presentation and privacy compliance mitigate some risk. Overall, the site demonstrates a mature digital infrastructure suitable for its business model.

W

Waltti Solutions

waltti.fi

66

Waltti Solutions Oy is a Finnish company specializing in digital ticketing and payment solutions for public transportation. Their offerings include a mobile ticketing app, travel card management, and contactless payment integration, serving multiple Finnish cities. The company holds a strong market position as a leading provider in this niche, with a business model targeting both end-users and municipal transport authorities. The website reflects a mature digital presence with good content quality and user experience, supporting their business objectives effectively. Technically, the site is built on WordPress with modern libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent compliance, though some security headers could be improved. Overall, the domain registration data aligns well with the business, indicating high legitimacy and trust. The site is free from blocking or WAF challenges, allowing full content access and analysis.

L

Luxembourgticket GIE

luxembourgticket-gie.lu

53

Luxembourgticket GIE operates a website focused on ticketing services in Luxembourg, targeting both the general public and businesses. The site is built on WordPress and incorporates modern tracking and consent tools such as Google Tag Manager and Cookiebot, reflecting a moderate level of digital maturity. However, the absence of key compliance documents like a privacy policy and terms of service, as well as missing contact information, limits the site's transparency and trustworthiness. The security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site presents a basic but functional online presence with room for improvement in compliance and security documentation.

S

Straight Arrow News

san.com

69

Straight Arrow News (SAN) is an established media company focused on delivering unbiased, factual journalism and political commentary. Founded in 1998, it operates a professional news website featuring video content and written articles targeting a general audience interested in fair news coverage. The company maintains a consistent brand presence with active social media channels and uses modern web technologies including WordPress CMS and React for frontend components. The website integrates advertising and analytics services from major providers such as Google and Amazon, with cookie consent managed by Cookiebot to comply with privacy regulations. Technically, the site is hosted under a reputable registrar and uses HTTPS with standard domain protections, though DNSSEC is not enabled. Security posture is moderate with room for improvement in security headers and published policies. Privacy compliance is basic, lacking explicit privacy and terms of service pages. Overall, SAN presents a credible and professional media presence with good technical infrastructure but could enhance transparency and security documentation.

I

Istria Tourist Board

istra.hr

54

The website www.istra.hr serves as the official tourist website for the Istria Tourist Board, promoting the Istria region in Croatia. It provides comprehensive tourism information including accommodation, events, heritage, and nature activities targeting tourists and visitors interested in the Mediterranean region. The business operates as a regional tourism board with a medium-sized presence and has been established since 2012, consistent with the domain registration data. The website demonstrates a good level of digital maturity with modern web technologies, accessibility features, and SEO optimization. It uses a Laravel-based CMS inferred from session cookies and integrates multiple third-party services such as Facebook SDK, Google Tag Manager, Cookiebot for cookie consent, and MailerLite for marketing automation. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot's consent management and links to a comprehensive privacy policy. However, no explicit terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

1

100Shoppers

100shoppers.com

50

100Shoppers is a technology company specializing in B2B2C solutions designed to convert website visitors into shoppers through their 'Where To Buy' widget and sales analysis tools. The company operates a professional WordPress-based website with a focus on marketing and analytics integration, targeting brands and retailers seeking to enhance sales conversion. The technical infrastructure includes modern marketing and analytics technologies such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for cookie consent management. Hosting is provided by OVH sas, a reputable provider, and the domain is registered since 2018, consistent with the company's business timeline. Security posture is moderate with HTTPS enabled and domain protection statuses set, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service policies. Overall, the website is professionally designed and functional but would benefit from enhanced security practices and clearer compliance documentation.

ELY-keskus is a Finnish government agency focused on regional development, business support, transport, and environmental services. The website serves as an official portal providing information and services to Finnish residents and businesses. The site is built on a modern technical infrastructure using Liferay CMS and React, with integrated analytics via Matomo and cookie consent managed by Cookiebot. The digital maturity is moderate to high, with good mobile optimization and SEO practices. Security posture is strong, with HTTPS enforced and security headers implied by the CMS configuration. Privacy compliance is robust, featuring comprehensive GDPR-aligned privacy and cookie policies. Overall, the website reflects a professional and trustworthy government entity with no critical security or content issues detected.

T

Teatro La Fenice

teatrolafenice.it

59

Teatro La Fenice di Venezia is a renowned cultural institution offering theatrical performances and cultural events. The website serves as an official portal providing information and ticketing services to a general audience interested in the arts and theatre. The business model focuses on cultural hospitality and event management within Italy. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and third-party integrations such as YouTube and Cookiebot for enhanced user experience and compliance. The site demonstrates good SEO practices and mobile optimization, although accessibility could be improved. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

The website www.drmaxlekynapredpis.cz is a Czech-language e-commerce platform focused on providing prescription medicines through an electronic prescription (eRecept) service. It targets Czech customers seeking convenient access to prescription drugs online. The site demonstrates a moderate level of digital maturity, utilizing common analytics tools such as Microsoft Clarity and Google Tag Manager, along with a cookie consent mechanism via Cookiebot. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service policies reduce its overall trustworthiness. Security posture is limited, with no detected security headers and unknown SSL configuration, suggesting room for improvement in protecting user data and ensuring compliance. Overall, the site is functional and professionally designed but requires enhancements in transparency and security to improve credibility and compliance.

R

Rieker Holding AG

remonte.com

67

Rieker Holding AG operates the remonte brand, a traditional women's footwear brand established in 1876, known for combining fashionable style with comfort. The website showcases the brand's commitment to quality, design, and comfort technologies, targeting fashion-conscious women. The digital infrastructure is built on TYPO3 CMS with modern web technologies and integrates comprehensive analytics and advertising tools. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers could be enhanced. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the business. Overall, the website reflects a mature, professional retail brand with good privacy compliance and user experience.

L

LOUDA Alform, výrobní družstvo

alform.cz

63

LOUDA Alform, výrobní družstvo is a Czech manufacturing cooperative specializing in precision machining, tooling, and assembly services for various industrial sectors including automotive, glass, ceramic, and rubber industries. The website presents a professional and well-structured digital presence with clear navigation and relevant content targeting industrial clients and educational institutions. The company leverages modern web technologies such as ASP.NET WebForms, jQuery, and Bootstrap, complemented by Google services for analytics and bot protection. Cookie consent is implemented comprehensively, reflecting GDPR compliance. However, the absence of WHOIS data and security headers slightly detracts from the overall trustworthiness and security posture. The site is accessible without WAF or security challenges, indicating stable hosting and infrastructure.

C

CAR4WAY a.s.

car4way.cz

58

CAR4WAY a.s. operates a Czech Republic-based carsharing and vehicle leasing service, targeting individuals and businesses interested in flexible vehicle access solutions. The website presents a professional and consistent brand image with a clear focus on transportation services such as carsharing, operational leasing, and car rental. The business model is centered on providing smart mobility solutions to a general audience within the Czech market. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, complemented by analytics and marketing tools such as Google Tag Manager, Hotjar, and Adform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

L

Louda Auto

autolouda.cz

68

Louda Auto is a large, well-established automotive dealership and service provider in the Czech Republic, founded in 2004. It operates as the largest certified dealer for 12 automotive brands with 18 branches nationwide, offering new and used vehicle sales, leasing, carsharing, and servicing. The website reflects a mature digital presence with modern technologies such as Blazor Server, Bootstrap, and multiple analytics and tracking tools. Privacy and cookie policies are implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-optimized for users and search engines.

B

Bauer CZ

bauerhockey.cz

36

Bauer CZ operates a professional e-commerce website specializing in hockey equipment and apparel targeted primarily at hockey players and enthusiasts in the Czech Republic. The company offers a wide range of products including hockey sticks, skates, helmets, gloves, protective gear, training equipment, and clothing. The website demonstrates a consistent brand presence and good content quality, supporting its position as a recognized retailer in the hockey sports sector. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Cookiebot for cookie consent, and Facebook SDK for social media integration. The site is HTTPS secured and uses structured data (JSON-LD) to enhance SEO and provide clear business information. Mobile optimization and user experience are good, with a clear navigation structure and search autocomplete features. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages in the provided content. Overall, Bauer CZ presents a trustworthy and professional online retail platform with moderate to good security posture and technical implementation. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.

C

CCM Hockey

ccmhockey.com

70

CCM Hockey is a well-established brand specializing in the retail of ice hockey equipment, targeting the Finnish market through this localized e-commerce website. The site offers a comprehensive range of hockey gear including skates, sticks, protective equipment, and apparel, supported by a 30-day free return and satisfaction guarantee. The business operates on a medium scale with a clear focus on hockey enthusiasts and players in Finland, leveraging the global CCM brand's reputation. Technically, the website is built on Salesforce Commerce Cloud, integrating modern marketing and analytics tools such as Cookiebot for consent management, Signifyd for fraud protection, and Yotpo for customer reviews, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference, making it accessible and user-friendly.

M

MarketingON

marketingon.cz

51

MarketingON is a well-established digital marketing conference based in Ostrava, Czech Republic, targeting professionals and enthusiasts in the online marketing and e-commerce sectors. The event offers a platform for knowledge sharing, networking, and industry insights, featuring prominent speakers and partners. The business model revolves around event ticket sales and offering recorded content for purchase, supported by a professional and content-rich website. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a concern but is mitigated by transparent business information and partner affiliations. Overall, the site presents a trustworthy and professional digital presence with room for enhanced security and compliance documentation.

C

CEMEX

cemex.cz

66

CEMEX CZ is a leading manufacturer and supplier of construction materials in the Czech Republic, offering products such as concrete, cement, aggregates, and flooring solutions. The website reflects a mature digital presence with comprehensive product and service information, supported by a modern CMS platform (Liferay) and integration of analytics and cookie consent tools. The site is well-structured, mobile-optimized, and provides clear contact channels including phone and forms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The absence of WHOIS data reduces domain registration trust signals but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its target audience effectively.

M

Mountfield

mountfield.cz

76

Mountfield.cz is a leading Czech retailer specializing in garden technology, furniture, and pools, operating both online and through over 50 physical stores. The website is professionally designed with a clear focus on consumer garden products and services, offering a comprehensive shopping experience including customer support and after-sales services. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be explicitly verified or enhanced. The absence of WHOIS data is likely due to privacy protection, which is justified for a large retail business. Overall, the website is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for a general audience.

The World Lottery Association (WLA) operates a professional website serving as a global industry association for state-authorized lotteries and gaming organizations. The site offers resources including industry standards, knowledge sharing, events, and publications targeted at lottery operators and regulators worldwide. The organization is well-established with a domain registered since 1999 and headquartered in Switzerland. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Cookiebot for cookie consent management, hosted behind Cloudflare DNS services. The site is mobile-optimized with a moderate performance profile and uses Google Analytics and Tag Manager for tracking and marketing purposes. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism. From a security perspective, the website uses HTTPS and enforces domain transfer restrictions. However, DNSSEC is not enabled, and security headers are not explicitly detected in the provided data. No critical vulnerabilities or exposed sensitive data were found. The site demonstrates good security hygiene but could improve by enabling DNSSEC and implementing additional security headers. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It lacks explicit contact information and terms of service pages in the scanned content, which could be areas for improvement. The content is safe for general audiences with no adult or questionable material detected.

D

DronPro

dronpro.cz

73

DronPro is the largest drone specialty retailer in the Czech Republic, established in 2015. The company focuses on selling drones, providing education on drone usage, and offering consultancy on drone legislation. Their market position is strong within the Czech drone community, supported by a high customer rating and a physical store in Prague. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and Cookiebot for GDPR compliance, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

T

Textilshop.at

textilshop.at

59

Textilshop.at is an Austrian-based e-commerce retailer specializing in high-quality textiles including carpets, tablecloths, bedding, and custom-sized textile products. The company positions itself as a regional provider of premium textile goods, targeting general consumers seeking quality home textiles. The website demonstrates a consistent brand presence with active social media channels and a cookie consent mechanism, indicating awareness of privacy regulations. Technically, the site is built on a Laravel framework and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Mailchimp, and Smartsupp Live Chat, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and published privacy policies suggests room for improvement. Overall, the site is functional and professional but would benefit from enhanced transparency and security best practices.

E

E-GO, s.r.o.

webhouse.family

61

WebHouse, operated by E-GO, s.r.o., is a reputable Slovakian hosting and domain registration provider managing over 56,000 domains. The company offers a range of hosting plans, including shared hosting, virtual and dedicated servers, and business email services, targeting both individual and business customers. Their market position is solid within the regional technology sector, emphasizing reliability and customer care with a 100% uptime guarantee. Technically, the website employs a mature technology stack including Bootstrap, jQuery, Google reCAPTCHA, and Cookiebot for consent management. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be improved. Performance is moderate, with external dependencies on Google and Facebook services for analytics and social media integration. Security posture is good with HTTPS enforced and use of reCAPTCHA to protect forms. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and could be enhanced. No critical vulnerabilities or exposed sensitive data were found. Overall, WebHouse presents a trustworthy and professional online presence with strong privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining up-to-date third-party libraries to further strengthen security and compliance.

W

WebHouse

setup.sk

64

The website setup.sk is a domain and web hosting control panel operated by WebHouse, a Slovak hosting provider established since 2003. The platform offers domain management, web hosting, DNS, email, SSL, FTP, and SSH services primarily targeting Slovak-speaking customers. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, it uses modern libraries such as jQuery and Bootstrap, integrates Cookiebot for cookie consent, and employs Google Analytics for traffic analysis. Security posture is solid with HTTPS and DNSSEC enabled, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is safe for general audiences and shows no signs of malicious content or blocking by WAFs.

T

TUkas a.s.

tukas.cz

47

TUkas a.s. is a large, authorized automotive dealership and service provider operating in Prague, Czech Republic. The company represents seven major automotive brands including Kia, Dacia, Renault, Opel, Volvo, ŠKODA, Volkswagen, and Audi. Their business model focuses on new and used car sales, authorized servicing, and operational leasing, targeting both individual consumers and business clients. The website reflects a professional presence with clear branding and multiple partner brand logos, indicating a strong market position within the automotive retail and service sector in the region. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and includes structured data for SEO enhancement. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and branding suggest a legitimate and established business. Security posture is moderate with good SSL configuration and use of anti-bot measures, but lacks explicit security policies or incident response information. Privacy compliance is good with visible privacy and cookie policies and GDPR indicators. Overall, the website is safe for general audiences, with no adult or explicit content detected. The site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, though improvements in security headers and WHOIS transparency are recommended. Strategic recommendations include enhancing security headers, maintaining up-to-date software, improving accessibility, and publishing clear security and incident response policies to strengthen trust and compliance.

K

Sportovní oblečení | Kappa

kappa-sport.cz

52

The website www.kappa-sport.cz is an e-commerce platform specializing in sports clothing and accessories, targeting general consumers interested in sportswear. The site presents a professional design with good content relevance and clear navigation, optimized for mobile devices. The technical infrastructure leverages modern frontend technologies including Bootstrap, jQuery, and several third-party marketing and analytics tools such as Cookiebot, Microsoft Clarity, and Google Tag Manager. Security posture is solid with HTTPS enforced and CSRF protection cookies in place, although some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service pages were not found in the provided content. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for retail e-commerce sites and does not raise immediate concerns. Overall, the website demonstrates a moderate to good security and privacy posture with room for improvement in transparency and security best practices.

A

AAA Grafika

aaagrafika.sk

68

AAA Grafika is a small Slovakian business specializing in graphic design and promotional services. Established in 2011, the company maintains a professional online presence with a WordPress-based website optimized for SEO and mobile devices. The site uses modern technologies including WooCommerce for e-commerce capabilities and Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. The business targets general audiences seeking graphic and promotional design services within Slovakia. Technically, the website is hosted by Websupport and employs standard security practices such as HTTPS and DNSSEC, ensuring secure communications. However, explicit contact details like emails and phone numbers are not directly visible, with contact likely facilitated through forms.

A

Agency for regional development support Košice, n.o

arr.sk

57

The Agency for regional development support Košice, n.o is a Slovak non-profit organization dedicated to supporting regional development through various international projects focused on climate change, environmental protection, cultural heritage, education, social entrepreneurship, and sustainable mobility. The agency maintains a professional online presence with detailed project news and active engagement through social media channels. Their target audience includes regional stakeholders, educational institutions, and environmental organizations. The business model revolves around project management, capacity building, and fostering sustainable development in the Košice region. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Cookiebot for cookie consent, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms, but lacks published security policies and incident response information. Overall, the website is trustworthy and professionally maintained, with clear contact information and active communication channels. However, it would benefit from publishing explicit privacy policies, terms of service, and security policies to enhance compliance and user trust. No security vulnerabilities or suspicious content were detected during analysis.

P

Promon

promon.io

76

Promon is a specialized mobile and desktop application security company with nearly two decades of experience, offering no-code solutions that protect apps, APIs, and SDKs across multiple industries including finance, healthcare, gaming, and government. Their product suite includes runtime protection, code obfuscation, app attestation, and asset protection, supported by recognized certifications such as EMVCO and ISO 27001. The website is professionally designed, mobile-optimized, and built on HubSpot CMS with modern analytics and consent management tools. Security posture is strong with HTTPS and privacy mechanisms, though explicit security headers and incident response contacts are not publicly visible. WHOIS data shows privacy protection typical for tech firms, with no suspicious indicators. Overall, Promon presents a credible, trustworthy, and technically mature digital presence.

P

PREVIO s.r.o.

previo.cz

65

PREVIO s.r.o. operates a Czech-language online hotel reservation and reception system targeting hospitality businesses such as hotels, pensions, and campsites. The company offers a SaaS platform that facilitates reservation management, document printing, and statistical reporting, positioning itself as a key player in the Czech hospitality software market. The website is professionally designed, well-structured, and optimized for desktop and mobile users, reflecting a mature digital presence. Technically, the site employs modern analytics and tracking tools including Google Analytics, Facebook Pixel, Microsoft Clarity, and Smartlook, all managed with a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced, security headers present, and reCAPTCHA protecting forms, though the absence of a public security policy and incident response contacts suggests room for improvement. Overall, the website is trustworthy and business credible, though the lack of WHOIS transparency slightly reduces domain trust. Strategic recommendations include publishing security policies, vulnerability disclosure, and incident response information to enhance trust and compliance.

P

Promon

promon.co

76

Promon is a specialized mobile app security company offering a comprehensive suite of products designed to protect mobile, desktop, and SDK applications from tampering, reverse engineering, and fraud. With nearly two decades of experience, Promon serves a diverse set of industries including finance, healthcare, gaming, and government. Their solutions emphasize no-code integration, operational efficiency, and multi-layered protection. The website reflects a mature digital presence with strong branding, rich content, and a focus on enterprise customers. Technically, the site uses modern technologies such as HubSpot CMS, Google Tag Manager, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policies and terms of service pages are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, Promon demonstrates a high level of professionalism and trustworthiness in the mobile app security market.

M

Marek Ztracený – Oficiální web: Tour, hudba, novinky, merch

marekztraceny.cz

68

The website www.marekztraceny.cz serves as the official online presence for the Czech music artist Marek Ztracený. It provides visitors with access to his music, tour dates, news updates, videos, blog content, and merchandise offerings. The site targets fans and followers of the artist, primarily within the Czech Republic. The business model centers around artist promotion and direct merchandising, leveraging digital channels to engage the audience. Technically, the site is built on the Webflow platform, utilizing modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The hosting is provided via Webflow's CDN, ensuring moderate performance and good mobile optimization. The site implements HTTPS with a strong SSL configuration, though lacks some recommended security headers which could enhance its security posture. From a security perspective, the site demonstrates good practices such as encrypted connections and a comprehensive cookie consent mechanism with granular user controls. However, the absence of visible privacy policy and terms of service pages, as well as missing security headers, represent areas for improvement. No vulnerabilities or malicious content were detected, and the site does not contain adult or questionable content. Overall, the website is a professionally designed and trustworthy platform for the artist's digital presence. The lack of WHOIS data limits the ability to fully verify domain registration legitimacy, but the content and technical setup support a positive risk assessment. Strategic recommendations include adding explicit privacy and terms of service pages, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

P

Polskie Górnictwo Naftowe i Gazownictwo S.A.

pgnig.pl

70

Polskie Górnictwo Naftowe i Gazownictwo S.A. (PGNiG) operates the website pgnig.pl, providing energy services such as gas and electricity supply primarily targeting residential customers in Poland. The website is professionally designed, consistent with the company's branding, and offers comprehensive privacy and cookie policies compliant with GDPR. The site uses modern technologies including Liferay CMS, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security and incident response policies are not publicly available. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

A

Agencja Reklamowa ROXart - kompleksowa obsługa firm.

roxart.pl

62

Agencja Reklamowa ROXart is a modern, Poland-based advertising agency specializing in comprehensive marketing services including Google ADS, social media campaigns, website creation, and graphic design. The company positions itself as a full-service agency with an international reach, targeting businesses seeking to enhance their brand presence and digital marketing effectiveness. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and integrations such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy and well-structured, supporting the agency's business credibility.

M

Milano Unica

milanounica.it

66

Milano Unica is a prominent Italian trade fair specializing in high-end textiles and accessories for women's and men's fashion. The website clearly positions itself as a leading industry event organizer, with upcoming editions scheduled at Fiera Milano Rho and Shanghai. The business model revolves around organizing exhibitions, showcasing trends, and facilitating networking within the textile manufacturing sector. The site targets professionals and companies in the textile and fashion industries, offering them a platform for exposure and business development. Technically, the website is built on the concrete5 CMS platform and employs modern web technologies including HTML5, CSS3, JavaScript, and integrates privacy-focused tools such as Cookiebot for cookie consent management and Matomo for analytics. The site is HTTPS secured with a strong SSL configuration and uses Google reCAPTCHA to protect forms from abuse. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, managing cookie consent transparently, and using anti-bot measures. However, it lacks explicit security policies, incident response contacts, and a security.txt file, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Milano Unica's website is a trustworthy and professionally maintained platform that aligns well with its business purpose. It complies with GDPR requirements, provides comprehensive privacy and cookie policies, and maintains a moderate to high security posture. Strategic improvements could include publishing detailed security policies and enhancing accessibility features to further strengthen compliance and user trust.

Engine is a Poland-based technology company specializing in custom web solutions aimed at facilitating business change and digital transformation. With over 24 years of experience and more than 500 projects completed, the company positions itself as a reliable service provider for businesses seeking tailored web development services. The website showcases a professional design with clear navigation, client logos, and testimonials, indicating a strong market presence and trustworthiness. Technically, the website is built using modern technologies including Framer as the CMS, integrated with Google Tag Manager, Google Analytics, and Cookiebot for analytics and cookie consent management. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security is robust with HTTPS enforced and multiple security headers present, reflecting a mature security posture. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact emails or phone numbers are provided, which could impact user trust and compliance. There is no evidence of vulnerability disclosure or incident response information, suggesting areas for improvement in transparency and security readiness. Overall, Engine's website demonstrates a solid business and technical foundation with good security practices but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

P

Profitroom

profitroom.pl

75

Profitroom is a technology company specializing in providing direct booking solutions for hotels, resorts, and hotel groups, primarily targeting the hospitality industry in Poland. Their platform offers advanced booking engines and reservation management tools designed to enhance hotel direct sales and reduce reliance on third-party channels. The website reflects a professional and modern digital presence, leveraging HubSpot CMS and integrating multiple marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Structured data and SEO optimizations are implemented to improve search visibility and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and privacy policy pages indicates areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not significantly impact the overall legitimacy given the professional website content and technology usage. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve transparency and compliance.

D

Deutscher Hotel- und Gaststättenverband e.V. (DEHOGA Bundesverband)

dehoga-bundesverband.de

52

The Deutscher Hotel- und Gaststättenverband e.V. (DEHOGA Bundesverband) is a prominent German industry association representing the hospitality sector. The website serves as an information and advocacy platform for hospitality businesses, providing resources, news, and policy updates relevant to the industry. It holds a strong market position as a national association with a large membership base and influence in Germany's hospitality market. The site targets hospitality professionals, policymakers, and stakeholders seeking industry insights and support. Technically, the website is built on TYPO3 CMS, a robust and professional content management system, complemented by Bootstrap for responsive design and modern frontend technologies. The hosting is managed by Schlund Technologies, a reputable provider. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent is implemented via Cookiebot, ensuring GDPR compliance and transparent user tracking. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business purpose effectively. Strategic improvements in security headers and incident response transparency would enhance its security posture further.

C

Caravaning Informations GmbH

caravaning-info.de

57

Caravaning Informations GmbH operates the website caravaning.info, a German-language online portal dedicated to caravaning enthusiasts and newcomers. The site offers a variety of content including travel reports, vehicle presentations, dealer and rental searches, checklists, and contests, positioning itself as a niche information and service provider in the transportation sector focused on caravaning. The business targets a specialized audience interested in caravan travel and related services within Germany. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, jQuery, Flickity carousel, and Select2 for enhanced UI components. The site is served over HTTPS with a valid SSL certificate and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. Security best practices are partially implemented, with room for improvement in HTTP security headers and HSTS enforcement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected or unavailable, which is typical for small businesses, but the website's content and technical setup indicate a legitimate and trustworthy operation. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, making it a reliable resource for its target audience.

S

Sabiedrība ar ierobežotu atbildību “Veselības centrs 4”

vc4.lv

67

Veselības centrs 4 is a well-established healthcare provider in Latvia, operating for approximately 30 years and offering a wide range of multi-profile medical services. The website reflects a professional presence with clear branding and comprehensive information about services and privacy practices. The target audience primarily consists of Latvian patients seeking medical treatment and diagnostics. Technically, the site leverages modern JavaScript modules, Cloudflare hosting, and integrates Google services such as Analytics and reCAPTCHA, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, CSRF tokens, and a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a strong security posture and good privacy compliance, though explicit terms of service and security policy pages are absent.

F

Dětský festival Fesťáček – Nejzábavnější dětský festival

festacekfestival.cz

66

The website festacekfestival.cz represents a children's festival event based in the Czech Republic, focusing on providing entertaining activities for children and families. The site is relatively new, with domain registration dating back to 2022, aligning with the event's likely recent establishment. The business model centers on event organization and promotion within the local/regional market. The website uses WordPress CMS with Elementor page builder and integrates Cookiebot for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations. Technically, the site employs modern web technologies and is mobile optimized, though some security headers could be enhanced to improve security posture. The security setup includes HTTPS and cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages in the analyzed content. Overall, the site demonstrates a good balance of usability, compliance, and security for a small event-focused business.

M

Maspex

maspex.ro

54

Maspex is a large food manufacturing and distribution company operating in Central and Eastern Europe, with a strong market position and a broad portfolio of food products. The website reflects a professional corporate presence with clear branding and relevant business content. The technical infrastructure is based on WordPress CMS with common web technologies such as jQuery and Google Tag Manager, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. Overall, the website is compliant with GDPR and provides a good user experience with moderate performance and mobile optimization.

V

Вода Велинград

velingradvoda.bg

53

The website velingradvoda.bg represents a small Bulgarian business specializing in the production and sale of natural mineral water sourced from the Velinrad region. The site emphasizes the purity, alkalinity, and deep origin of the water, targeting health-conscious consumers and general mineral water buyers. The company maintains a local/regional market position with a clear focus on product quality and natural origin. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie consent, and YouTube embedded videos for rich media content. Hosting is provided by a Bulgarian hosting provider, ensuring regional relevance and performance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot integration, though explicit privacy and security policies on the domain are limited. Overall, the website is professional, trustworthy, and well-optimized for its purpose.

The website wszystkoociasteczkach.pl serves as an educational platform focused on explaining cookies, their usage, and related privacy concerns. It targets a general audience interested in understanding web cookies and compliance with privacy regulations. The site operates on WordPress using the Divi theme and integrates Cookiebot for cookie consent management, alongside Google Analytics for minimal user tracking with consent. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though it lacks advanced security headers and explicit privacy or terms of service documentation. Overall, the site is legitimate, safe, and provides valuable niche content but could improve in privacy policy transparency and security hardening.

C

Czater

chater.app

62

Chater is a Polish-based technology company offering a comprehensive SaaS platform that integrates multiple customer communication and marketing automation tools such as live chat, callback, video chat, chatbot, e-assistant, and e-calendar. The platform targets businesses seeking to streamline customer engagement and improve sales and service efficiency. With over 25,000 customers, Chater positions itself as a trusted all-in-one solution provider in the customer service technology market. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress and modern web technologies. Security posture is solid with HTTPS, cookie consent, and spam protection on forms, though explicit security and privacy policies are not found in the provided content. WHOIS data confirms legitimacy with consistent registrant information matching the business location and branding.

MedDiamonds is a specialized medical aesthetic training and treatment center based in Warsaw, Poland, with over eight years of experience. The company offers professional courses and practical training for cosmetologists and medical aesthetic practitioners, emphasizing natural beauty enhancement and skin rejuvenation. Their market position is that of a trusted local provider with a clear focus on quality education and aesthetic services. Technically, the website employs modern web technologies including Laravel Livewire, Google Tag Manager, and Cookiebot for consent management, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent implemented, though explicit privacy and security policies are absent, representing a compliance gap. Overall, the website is professional, trustworthy, and well-optimized for its target audience, but could improve privacy transparency and security disclosures.