Security Directory

O

One World Romania

oneworld.ro

47

One World Romania is a well-established non-profit organization dedicated to promoting documentary films through its flagship One World Romania festival and related cultural activities such as workshops and film tours. The organization targets documentary enthusiasts, educators, and the general public interested in socially relevant cinema. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted on a Romanian hosting provider, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no detailed privacy or incident response policies. Social media integration and newsletter subscription indicate active community engagement. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

A

Appio Digital s.r.o.

dokweb.net

61

Institut dokumentárního filmu operates the DOKweb platform, a well-established non-profit organization founded in 2009, focused on supporting and promoting documentary film talents primarily in Central and Eastern Europe. The website offers a range of services including news articles, events, professional tools, and a podcast, targeting filmmakers and industry professionals. The organization maintains a strong regional presence with partnerships and donor support from cultural and governmental institutions. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cloudflare DNS, with a responsive design and good SEO practices. Security measures include HTTPS, reCAPTCHA v3 integration, and a comprehensive cookie consent mechanism, although some security headers could be improved. The domain is long-standing and consistent with the organization's history, indicating legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policies and direct contact emails.

V

Vimec s.r.l.

vimec.biz

60

Vimec s.r.l. is an established Italian company specializing in accessibility solutions for public and private spaces, with over 45 years of experience. Their product portfolio includes stairlifts, platform lifts, home elevators, and mobile stairlifts, tailored to individual needs. The company emphasizes personalized service, quality Italian manufacturing, and a strong presence across Italy and international markets. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is good with HTTPS enforced, though some security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall credibility given the professional content and structured data. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

Extrema S.r.l. is an Italian company specializing in manufacturing mobility and accessibility solutions such as servoscala, montascale, and piattaforme elevatrici. With over 25 years of experience and a presence in more than 50 countries, Extrema positions itself as a trusted provider focused on improving quality of life through innovative and customizable products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to individuals and organizations seeking barrier-free mobility solutions. Technically, the site leverages modern frameworks like Nuxt.js and Vue.js, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with privacy regulations, including GDPR, supported by clear privacy and cookie policies.

R

RehaKomp

rehakomp.cz

49

RehaKomp is a Czech-based company specializing in the rental and sale of rehabilitation and compensatory medical aids, including motodlahy, rotopeds, wheelchairs, and related equipment. Established as a family business since 1990, it has evolved into a medium-sized enterprise with a strong regional presence and a comprehensive product offering. The website serves both as an e-commerce platform and a rental service portal, targeting individuals requiring home care rehabilitation aids and healthcare providers. Technically, the site is built on the PrestaShop platform, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Smartlook for user behavior insights. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR, though it lacks explicit security policy or incident response contact information. WHOIS data is not publicly available, likely due to privacy protection, but the website content and trust signals indicate a legitimate and professional business. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and header configurations.

I

Internet Society

isoc.org

72

Internet Society is a globally recognized non-profit organization dedicated to advocating for an open, secure, and trustworthy Internet accessible to everyone. The website reflects its mission through comprehensive content focused on closing the digital divide and promoting internet security and openness. The organization maintains a strong market position as a leading advocate in internet governance and digital rights, targeting a broad audience including policymakers, technology communities, and global internet users. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, ensuring good SEO and analytics integration. The site is mobile optimized and employs cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent tools to manage privacy. However, explicit security headers are not clearly present, and some libraries like jQuery are outdated, suggesting areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with recommendations to strengthen security headers, update libraries, and publish a formal security policy to further enhance trust and resilience.

I

Internet Society Foundation

isocfoundation.org

68

The Internet Society Foundation is a reputable non-profit organization dedicated to supporting initiatives that strengthen the Internet's function and reach globally. It operates multiple grant programs aimed at digital inclusion, resiliency, research, and emergency response, positioning itself as a key player in the Internet development ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of non-profits, Internet communities, and global stakeholders. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and CookieYes for consent management. The infrastructure supports good performance and accessibility, with mobile optimization and SEO best practices in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, reflecting GDPR awareness. Contact information is transparent and includes phone, email, and physical address, enhancing business credibility. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the site presents a low-risk profile with strong trust indicators and a professional online presence, suitable for its mission and audience.

R

Radio Screen

radio-screen.com

61

Radio Screen is a specialized media technology company providing an associated data broadcasting platform for DAB+, RadioDNS Hybrid Radio, and Webradios. Their platform enables radio stations to enhance their visual identity by distributing logos, artist images, and metadata to compatible receivers, including vehicle infotainment systems. The company operates primarily in France and targets broadcasters and automotive infotainment providers. The website reflects a professional and consistent brand image with clear business messaging and established partnerships with recognized industry players such as Music Story and WorldDAB. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Tag Manager for analytics. The site is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Cookie consent and privacy policies are implemented with GDPR compliance in mind, using the Complianz plugin for consent management. However, some security headers are missing, and no explicit security policy or incident response information is published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, with no privacy protection and a domain age appropriate for the business maturity. Overall, Radio Screen presents a low-risk profile with a solid business model and good digital maturity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance their security posture and trustworthiness further.

M

Momentum Children's Charity

momentumcharity.org

55

Momentum Children's Charity is a UK-based non-profit organization dedicated to supporting families of seriously ill children, particularly those affected by cancer and other life-challenging conditions. The charity operates through partnerships with NHS hospitals across London, Surrey, and Sussex, providing services such as family support workers, therapies, respite breaks, and bereavement support. Their website reflects a professional and compassionate approach, targeting families in need as well as donors and volunteers. The charity maintains a strong market position within its regional healthcare support sector, leveraging fundraising and community engagement as key business models. Technically, the website is built on WordPress with modern plugins including Yoast SEO, Bootstrap framework, and integrates Google Tag Manager and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via a CDN provider, ensuring reasonable delivery speeds. From a security perspective, the site uses HTTPS with no visible exposed sensitive data and employs email obfuscation to protect contact information. However, security headers are not detected, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a trustworthy and professional front for the charity, with strong content quality and business credibility. The lack of WHOIS data is mitigated by the charity's transparency in other trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and formalizing vulnerability disclosure to further strengthen the security posture and trustworthiness.

M

Magyar Víz- és Szennyvíztechnikai Szövetség

vizertek.hu

38

The website www.vizertek.hu serves as an educational and awareness platform focused on sustainable water supply and wastewater management in Hungary. It is operated by the Magyar Víz- és Szennyvíztechnikai Szövetség in partnership with WWF Hungary and funded under the Széchenyi 2020 program. The site targets the general public to promote knowledge about tap water usage, environmental protection, and water infrastructure. The content is well-structured, informative, and consistent with the organization's mission. Technically, the site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Nivo Slider, and Owl Carousel for interactive elements. Google Tag Manager is implemented for analytics and tracking purposes. The site is mobile-optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available. No forms collecting user data were detected on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is trustworthy and professional but requires enhancements in privacy compliance and security best practices to improve its risk posture and user trust.

The website www.baglik.cz represents ALADIO s.r.o., a Czech-based e-commerce retailer specializing in school bags, backpacks, wallets, and related accessories primarily targeting children, students, and parents in the Czech and Slovak markets. The site offers a broad catalog of products including backpacks for various age groups, school supplies, and travel bags, positioning itself as a specialized retailer in this niche. The business model is focused on direct online sales with a clear emphasis on product variety and brand partnerships. Technically, the website is built on the Upgates e-commerce platform and employs modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and other marketing and tracking tools. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy regulations. However, it lacks visible security headers and explicit privacy and terms of service pages, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registrant data is a minor concern but does not significantly detract from the site's legitimacy given the professional presentation and technical setup. Overall, www.baglik.cz is a legitimate, well-structured e-commerce site with a solid market position in the retail sector for school-related products. Strategic improvements in privacy disclosures, security headers, and registrant transparency would enhance trust and compliance.

O

OSTRA GROUP a.s.

ostragroup.cz

47

OSTRA GROUP a.s. is a large multi-sector strategic group based in the Czech Republic, primarily focused on transportation services including sales and servicing of transport technology, logistics, modular construction, real estate rental, and R&D of vehicle chassis components. The group also supports a professional motorsport racing team and offers diverse career opportunities. The website is professionally designed, mobile optimized, and provides clear navigation and comprehensive business information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and retargeting services. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and incident response policies could be improved. The domain registration data is consistent with the business claims and founding year, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and professionals in transportation and related sectors.

A

ALTECH, spol. s r.o.

altech.cz

48

ALTECH, spol. s r.o. is a Czech company specializing in manufacturing and providing tailored barrier-free accessibility solutions such as stair lifts, vertical and inclined platforms, and lifting systems for immobile persons. Established in 1992, the company holds a strong market position in the Czech Republic and exports globally. Their website reflects a mature digital presence with comprehensive product information, customer testimonials, and clear contact channels. Technically, the site is built on WordPress with modern frameworks and includes robust SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although no explicit security policy or incident response information is published. WHOIS data is missing, which slightly impacts domain trust but does not detract from the professional business presentation. Overall, ALTECH demonstrates a credible and trustworthy online presence aligned with its business operations.

O

Opel CZ

opel-ihned.cz

53

The website www.opel-ihned.cz serves as a comprehensive online platform for listing and filtering Opel brand vehicles available immediately from authorized dealers in the Czech Republic. It aggregates stock and demo vehicles, providing detailed filtering options by model, dealer, engine type, color, equipment, and price. The platform targets consumers seeking to purchase Opel vehicles quickly and conveniently, positioning itself as a trusted intermediary between buyers and authorized dealers. The business model focuses on lead generation and vehicle inventory display, supported by dealer contact information and location mapping. Technically, the site is built on JavaServer Faces with PrimeFaces UI components, enhanced by Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager, Google Analytics, and Adform for marketing and tracking purposes, alongside a live chat service (Smartsupp). The site is mobile-optimized with good SEO practices, including structured data (JSON-LD) and Open Graph metadata, enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and no published security or incident response policies are found. The absence of WHOIS data reduces transparency but does not directly imply malicious intent. Overall, the security posture is moderate with room for improvement in policy publication and header implementation. The overall risk assessment suggests a legitimate, professionally maintained automotive sales platform with moderate technical maturity and privacy compliance. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

S

SOVA NET, s.r.o.

sovanet.cz

46

SOVA NET, s.r.o. is a well-established Czech digital agency specializing in comprehensive IT business solutions, online marketing, and custom web development, including e-shops and internal communication portals. With over 20 years of experience, the company holds a strong market position in Brno and serves notable clients such as Hyundai and ESSOX. The website reflects a mature digital presence with professional design, clear navigation, and extensive client references. Technically, the site uses modern tools like Google Tag Manager, Google Maps API, and Nette Framework for form validation, ensuring a solid digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces domain trustworthiness.

P

Programia s.r.o.

nejlevnejsinabytek.cz

58

Nejlevnejsinabytek.cz is a Czech Republic based e-commerce platform specializing in furniture and home accessories. The website offers a large inventory of furniture products, including private label items under the NEJBY brand, and targets general consumers seeking affordable and quality home furnishings. The business is positioned as one of the largest furniture e-shops in the Czech market, providing extensive stock and a loyalty club for customers. Technically, the site uses modern JavaScript libraries, CDNs, and tracking tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policy pages. The absence of WHOIS domain registration data is a notable concern, reducing domain trustworthiness, though the website content and business presence indicate legitimacy. Overall, the site is professional and trustworthy for its market segment.

S

SEVEN SPORT s.r.o.

insportline.cz

58

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.

D

Dirtbikes.cz

dirtbikes.cz

53

Dirtbikes.cz operates as a specialized e-commerce and physical retail business focused on motorcycles, ATVs, scooters, and related accessories primarily serving the Czech Republic market. The company offers a wide range of products from well-known brands such as Kawasaki, CFMOTO, and Vespa, complemented by professional servicing and rental services. The website is well-structured, professionally designed, and provides clear navigation and product information, targeting motorsport enthusiasts and vehicle buyers. Technically, the site employs modern tracking and analytics tools including Google Tag Manager, Matomo, and Facebook Pixel, alongside a custom e-commerce platform. Security posture is solid with HTTPS enforced and consent management for tracking, though explicit security headers and policies are not fully implemented. The absence of public WHOIS data suggests privacy protection, which is common but slightly reduces transparency. Overall, the site is trustworthy, safe, and professionally maintained, with room for improvement in security disclosures and WHOIS transparency.

E

elektra Berry

eberry.cz

61

The website www.eberry.cz represents a Czech Republic based online retail platform specializing in electronics and household goods. The site offers a user-friendly e-commerce experience with a professional design and moderate technical sophistication, including modern JavaScript frameworks and analytics integrations. Despite the lack of publicly available WHOIS data due to privacy protection, the website appears legitimate and well-maintained. However, the absence of explicit privacy and cookie policies and contact information limits full compliance and trust transparency. Security posture is generally good with HTTPS and monitoring tools in place, but could be improved by adding security headers and formal policies. Overall, the site serves its retail audience effectively but should enhance privacy compliance and contact transparency to strengthen trust and regulatory adherence.

eHutník.cz is a regional news website operated by Třinecké Železárny a.s., providing news, sports, culture, and legal advice focused on the Třinecko region in the Czech Republic. The site targets local residents and stakeholders, offering timely regional information and advertising opportunities. The business model centers on content publishing and local advertising, positioning itself as a trusted regional media outlet. Technically, the website runs on WordPress with popular plugins for SEO, advertising, and forms, supported by Google Analytics and Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, with some security headers implied but not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a secure and accessible platform. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could improve by adding explicit security headers and a security policy. The domain registration data supports the legitimacy and maturity of the business.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

S

Svět neziskovek, z.ú.

grantovydiar.cz

46

Grantový diář is a Czech Republic-based subscription service focused on providing non-profit organizations with a comprehensive and up-to-date listing of grant opportunities. The website serves as a centralized platform for fundraisers and non-profit managers to find relevant funding calls, with over 1000 grants tracked annually. The business operates under the parent foundation Nadace Neziskovky.cz and has been active since 2014, establishing a credible presence in the Czech non-profit sector. The service offers personalized notifications, advertising options, and a user-friendly online tool to simplify grant searching and management. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Hosting is provided by a reputable Czech registrar and hosting provider, Active24. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional service for its target audience, with room for improvement in privacy and security transparency. Strategic recommendations include publishing privacy and terms documents, enhancing security headers, and formalizing incident response communications to strengthen compliance and trust.

O

Orchestre à l'École

orchestre-ecole.com

66

Orchestre à l'École is a French non-profit association dedicated to enriching young people's lives through collective instrumental music education in schools. It has a significant presence across France with over 184,000 beneficiaries and partnerships with notable foundations and cultural institutions. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content supporting its mission. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Consent Framework for analytics and privacy compliance, and is hosted on a reliable CDN. Security posture is strong with HTTPS and security headers, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a concern for domain legitimacy but is mitigated by the professional and transparent nature of the website content and contact information. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

L

Linguise

linguise.com

58

Linguise is a technology company specializing in automatic neural translation services for websites, enabling users to translate content into over 80 languages with instant updates and SEO optimization. The company targets website owners, eCommerce businesses, and international enterprises seeking to expand their global reach efficiently. Their service integrates with major CMS platforms and offers a live front-end editor for convenient translation management. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with Elementor and leverages modern web technologies including Google Analytics, Google Tag Manager, and Tawk.to for live chat support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data reduces domain trustworthiness, but the overall business credibility remains high based on website content and customer testimonials.

P

PGWay

pgway.com

68

PGWay is a payment solutions provider offering global payment services including bank cards, Apple Pay, Google Pay, and integration features. The website presents a professional and modern design built on the Webflow platform, utilizing Google Tag Manager for analytics. The content targets businesses and consumers seeking secure and efficient payment methods worldwide. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. The website lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which impacts its credibility and compliance posture. Security measures such as HTTPS are in place, but additional security headers and policies are recommended to enhance protection. Overall, the site demonstrates good technical implementation and user experience but requires improvements in transparency and compliance to strengthen trust and security.

Caixa Econômica Federal is a major Brazilian government-owned financial institution providing a wide range of banking and financial services to the Brazilian population. The website serves as a portal for these services, including retail banking and lottery offerings. The site is professionally designed, mobile-optimized, and uses a modern technology stack including Microsoft SharePoint and multiple analytics and advertising platforms. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response information are not published on the site. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent management system in place. Overall, the website reflects a mature digital presence consistent with a large government financial institution.

Laterna Research is a cultural and archival project focused on the multimedia theater project Laterna Magika. The website serves as a repository of research, stories, photos, videos, and media related to this cultural heritage. It targets researchers, historians, and cultural enthusiasts primarily in the Czech Republic. The site is built on WordPress using the Twenty Seventeen theme and incorporates standard web technologies such as jQuery and Google Analytics for tracking. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate with social media presence but lacks direct contact details or formal certifications.

T

touring artists

touring-artists.info

51

Touring Artists is a specialized non-profit platform providing comprehensive information and free consultation services for internationally mobile artists and creatives working in or moving to Germany. The website is supported by reputable cultural institutions such as the International Theatre Institute Germany, the International Society of Fine Arts, and the German Dance Association, and is funded by German cultural government bodies. It offers detailed resources on visas, contracts, social security, taxes, insurance, copyright, and transport, alongside a funding database and guides to support cross-border cultural work. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and includes a cookie consent mechanism compliant with GDPR. Google Tag Manager is used for analytics, with minimal user tracking. However, some security best practices such as explicit security headers are not evident. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS transparency and missing registrar data slightly reduce trust. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Overall, the website is a trustworthy, well-maintained resource for its niche audience, with strong cultural partnerships and government backing. Strategic improvements in security headers and WHOIS transparency could further enhance trust and security posture.

O

On-the-Move.org AISBL

on-the-move.org

52

On the Move is a well-established non-profit organization founded in 2002, providing comprehensive resources and information on cultural mobility for artists and cultural professionals seeking international opportunities. The website serves as a trusted platform offering funding guides, open calls, mentoring, research, and events, positioning itself as a key player in the cultural mobility sector. The organization's Belgian registration and domain age align with its long-standing presence and mission. Technically, the site is built on Drupal 9, employs modern web technologies, and is optimized for mobile and accessibility, although performance is moderate. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

B

Biograf Kotva

biografkotva.cz

43

Biograf Kotva operates as a local cinema in the Czech Republic, providing a comprehensive film program, online ticket sales, and additional services such as a cafe and venue rental. The website is professionally designed with clear navigation and a focus on cultural and family-friendly content. Technically, the site uses modern JavaScript libraries and asynchronous loading to enhance performance and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding security headers and formal policies. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trustworthiness. Strategic improvements in privacy compliance and domain registration transparency are recommended to enhance business credibility and user trust.

G

Grandwin

grandwin.com

66

Grandwin is an established online gambling platform founded in 2012, offering a comprehensive suite of services including online casino games, live casino, virtual sports, sports betting, and esports betting. The platform targets adult users interested in gambling and betting, primarily in European markets such as Finland. The business operates under Ardevar Ltd, which is referenced in the website footer, indicating a parent or technology partner relationship. The website is professionally designed with multi-language support and clear navigation, providing a good user experience and trust signals such as responsible gaming information and live chat support. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Cloudflare DNS/CDN services. It employs various third-party services for analytics, real user monitoring, and customer support chat, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. The site uses CAPTCHA and offers two-factor authentication, but the latter is off by default. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligned with GDPR requirements. Overall, Grandwin presents a low to moderate risk profile with a solid business and technical foundation. Strategic improvements in DNS security, explicit security policies, and vulnerability disclosure programs would enhance trust and compliance further.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

The website www.luxusni-bydleni-praha.com presents a professional online presence focused on luxury real estate sales, design, and development in Prague. It targets affluent buyers and investors interested in premium properties in prime locations. The site is built on Drupal 7 CMS and integrates modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The site implements cookie consent mechanisms but lacks explicit privacy policy and terms of service pages, indicating partial privacy compliance. Security posture is moderate with HTTPS usage but no visible security headers or advanced protections. Overall, the website is functional and well-designed but would benefit from improved security practices and clearer compliance documentation.

S

Scaler Marketing

scalermarketing.com

61

Scaler Marketing is a specialized branding and web design agency focused on helping uniquely positioned clients differentiate themselves through compelling web experiences. The company offers a broad range of services including branding, web design, marketing strategy, UI/UX, digital marketing, and more, targeting businesses seeking to scale their online presence. The website demonstrates a professional and modern digital infrastructure leveraging Webflow CMS, Google Tag Manager, Microsoft Clarity, Facebook Pixel, and other contemporary web technologies, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and bot protection on forms, though the absence of security headers and published privacy or cookie policies suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, though the professional website content and clear contact information mitigate some risk. Overall, the site is well-designed, user-friendly, and business-focused, but would benefit from enhanced transparency and compliance documentation.

K

Kalpe

kalpe.cz

53

Kalpe is a Czech-based company specializing in the manufacture, sale, and rental of rehabilitation and compensatory medical devices, including motodlahy, motomedy, and rotopeds. The company targets both individual customers and institutional clients such as rehabilitation clinics and senior care facilities. Their market position is focused on providing quality rehabilitation equipment with a local Czech market presence. The website is well-structured and provides comprehensive product information, contact details, and service options including repair and rental. Technically, the website is built on WordPress with modern integrations such as Google Analytics, Google Tag Manager, and reCAPTCHA v3 for spam protection. The site is mobile-optimized and uses structured data (JSON-LD) for SEO enhancement. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and protects its contact forms with reCAPTCHA, but lacks visible security headers and cookie consent banners, which are important for GDPR compliance. The absence of WHOIS data reduces trust in domain registration transparency, though the website content and contact information appear legitimate and professional. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from improved security headers, cookie consent implementation, and domain registration transparency to strengthen its security and compliance posture.

V

VIDIA-DESIGN s.r.o.

zijushandicapem.cz

43

Žiju s handicapem is a Czech Republic-based non-profit portal dedicated to supporting people with disabilities (OZP) by providing informational articles, job offers, community blogs, and sponsorship opportunities. The website is operated by VIDIA-DESIGN s.r.o., which appears as the author and creator of the site. The portal targets disabled individuals and their families, aiming to improve quality of life and social inclusion through content and community engagement. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and NetteForms, with integration of Google Tag Manager and Facebook SDK for analytics and social media. The site is served over HTTPS and includes a cookie consent mechanism compliant with GDPR principles, offering granular cookie control in multiple languages. However, the site lacks advanced security headers such as CSP and HSTS, which could improve security posture. Security-wise, the site shows basic good practices like HTTPS and secure login forms but misses important headers and explicit privacy and terms of service pages. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness from a domain registration perspective. Despite this, the site links to reputable partners and sponsors, and no suspicious or adult content is present. Overall, the site is a well-structured, content-rich portal serving a niche community with moderate technical maturity and security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

C

Cleevio

cleevio.ai

66

Cleevio.ai is a technology company specializing in AI integration and software solutions tailored to business growth. The company positions itself as a trusted provider with a strong market presence, supported by multiple industry awards and certifications such as Clutch and Deloitte Fast 50. Their services include AI Agents, product building, and Web3 development, targeting businesses seeking advanced technology solutions. The website is professionally designed using Webflow, featuring modern UI/UX, mobile optimization, and clear navigation. The technical infrastructure includes Google Tag Manager for analytics and Finsweet Cookie Consent for privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is privacy protected, which is common and justified for this sector. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

O

Okta, Inc.

oktane.com

82

Okta, Inc. is a leading identity and access management company hosting the Oktane conference, a major industry event focused on identity solutions, product leadership, and customer engagement. The website provides comprehensive event details, registration portals, certifications, and educational labs, targeting IT professionals and Okta customers. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, advanced analytics, marketing automation, and user engagement tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, cookie consent, and secure login flows, though explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, the site reflects a mature digital presence aligned with enterprise standards.

E

EPGM LLC

estherperel.com

63

Esther Perel's website serves as a comprehensive platform for relationship education, offering a variety of resources including podcasts, courses, books, and professional training. The brand is well-established with a strong multimedia presence and a clear focus on relational intelligence and eroticism. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and rich content. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools, ensuring robust tracking and user engagement capabilities. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy could enhance trust further. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms in place. The lack of publicly available WHOIS data slightly reduces trust but is likely due to privacy protection. Overall, the site is trustworthy, professional, and well-positioned in its niche.

K

Kreativní Česko – Novinky, Akce a Podpora Kreativních Odvětví

kreativnicesko.cz

67

Kreativní Česko is a Czech national portal dedicated to the cultural and creative industries, providing news, events, funding opportunities, and resources for artists, designers, and innovators. The website serves as an information hub and support platform for stakeholders in the creative sector within the Czech Republic. It positions itself as a key resource for cultural professionals and creative entrepreneurs, fostering innovation and collaboration in the industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with a good SSL configuration, ensuring secure communication. The design is responsive and optimized for mobile devices, with a clear navigation structure and good SEO practices. However, no specific CMS or hosting provider information was identified. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. Security headers like HSTS and X-Content-Type-Options are present, though the implementation of Content-Security-Policy and Subresource Integrity could further enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy front for its intended audience. The lack of publicly available WHOIS data limits transparency regarding domain registration, but the site content and technical setup support its legitimacy. Strategic recommendations include enhancing security headers, improving accessibility features, and publishing terms of service and incident response policies to strengthen trust and compliance.

1

1win-casino.md

1win-oficial.md

56

1Win Moldova operates as an online gambling platform licensed in Curaçao, offering a comprehensive range of betting and casino games to primarily Moldovan players. The website is professionally designed, mobile-optimized, and provides detailed information about games, bonuses, and betting options. Technically, the site uses WordPress CMS, Cloudflare for DNS and CDN, and integrates analytics tools such as Google Tag Manager and Yandex Metrika. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. The domain WHOIS data shows a future creation date inconsistent with the business's stated history, which slightly impacts trust. Overall, the platform appears legitimate and well-positioned in the Moldovan gambling market but would benefit from enhanced privacy compliance and transparency.

M

Marathon Studio

marathonstudio.cz

53

Marathon Studio is a Czech creative agency specializing in visual communication, brand strategy, web design, and consulting services. The company emphasizes long-term brand identity development and strategic design processes, targeting businesses seeking to enhance their brand presence. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted small-sized agency in their market segment. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Tag Manager, and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the website content and social media presence support its credibility. Overall, the site scores well in content quality and privacy compliance but could improve in security posture and business contact transparency.

I

Institute of Documentary Film

kinedok.net

67

KineDok is a cultural media project operated by the Institute of Documentary Film, specializing in the distribution and screening of documentary films from Central and Eastern Europe in alternative venues such as cafes, galleries, and open-air cinemas. The project also offers online streaming and educational programs, targeting documentary enthusiasts and cultural communities across multiple European countries. The website is well designed, mobile optimized, and uses modern web technologies including React and Next.js, hosted on Websupport.cz. Privacy and cookie policies are present and GDPR compliant, with active social media engagement. Security posture is good with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. WHOIS data shows a stable domain registration since 2014, consistent with the project's history and legitimacy. Overall, the website demonstrates a mature digital presence with strong content quality and business credibility.

V

veleton.cz

veleton.cz

50

The website www.veleton.cz serves as the online platform for the largest Czech festival focused on construction, housing, and heating, scheduled for January 2026. It offers free registrations, expert lectures, recorded presentations, and consultations, targeting Czech-speaking individuals interested in building and energy-saving technologies. The platform is well-positioned in the Czech market as a leading online event for the construction sector, supported by numerous industry partners and sponsors. Technically, the site employs modern web technologies including jQuery, FancyBox, Slick Carousel, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with responsive design and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and dedicated security policy pages. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional appearance and trust signals indicate legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and accessibility could enhance its posture further.

1

Galerie 100 dřevostaveb, které se vám líbí

100drevostaveb.cz

43

The website www.100drevostaveb.cz serves as an interactive catalog showcasing wooden houses favored by Czech users. It allows visitors to view various wooden house projects, vote on them, and engage with the content via social media plugins. The business model revolves around community engagement and providing inspiration for wooden house construction enthusiasts in the Czech Republic. The site targets a general audience interested in architecture and wooden homes. Technically, the site employs a range of JavaScript libraries including jQuery, Facebook SDK, Google Analytics, and advertising scripts from Google Adsense and Gemius. The site is served over HTTPS with no visible SSL issues, but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional, moderately optimized for mobile, and provides a good user experience, but would benefit from improved privacy compliance and security transparency.

E

EUROBEN, s.r.o.

happydog.cz

54

HappyDog.cz is an established Czech e-commerce retailer specializing in high-quality natural pet food for dogs, cats, and fish under the Happy Dog and Happy Cat brands. The company emphasizes tradition and quality, serving pet owners primarily in the Czech Republic and Slovakia. Their business model focuses on direct online sales complemented by a physical store in Teplice and a comprehensive customer support system. The website demonstrates a consistent brand presence with active social media engagement and detailed product offerings.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

Malfini.com is a website associated with Pro-idea s.r.o., likely operating in the fashion or apparel sector given the brand name and styling cues. The domain is well-established, created in 2010, and shows consistent registration data. The website employs modern front-end technologies including Bootstrap, Swiper, and AOS, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Sales Manago. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies.

C

Cricket

cricketlighters.com

68

Cricket is a well-established brand specializing in the manufacture and retail of premium disposable and kitchen lighters, with a history dating back to 1961. The company positions itself as a leader in safety and quality standards, offering innovative products including custom-designed lighters and sustainable options made from recycled materials. The website reflects a mature digital presence with multi-language support and a focus on user experience and brand storytelling. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager for analytics, Weglot for translations, and OneTrust for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with fast loading times and secure HTTPS connections. From a security perspective, the site employs strong SSL configurations and security headers, and incorporates privacy compliance mechanisms such as GDPR cookie consent and a comprehensive privacy policy. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website presents a professional and trustworthy front for Cricket's business, though the absence of WHOIS data and direct contact details slightly reduces the business credibility score. Strategic improvements in transparency and security documentation would further strengthen the company's digital trustworthiness.

S

SAXOPRINT GmbH

saxoprint.de

62

SAXOPRINT GmbH is a well-established German online printing company founded in 1999 and operating under the parent company CEWE Stiftung & Co. KGaA. The company offers a broad range of printing services including flyers, brochures, business stationery, packaging, and advertising materials, targeting businesses and organizations primarily in Germany and Europe. The website reflects a mature digital presence with comprehensive service offerings, strong trust signals such as Trusted Shops certification, and clear customer support channels.