Security Directory

H

Hotel Císař Ferdinand

hotelcisarferdinand.cz

48

Hotel Císař Ferdinand is a small hospitality business located in Loket, Czech Republic, offering hotel accommodation, a restaurant, and an on-site brewery. The website presents a professional and well-structured digital presence with clear information about services, local attractions, and contact details. The technical infrastructure is based on WordPress with modern plugins and frameworks such as Elementor and Bootstrap, providing a responsive and SEO-optimized experience. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small hospitality business. Overall, the site is suitable for its target audience of tourists and visitors seeking accommodation and dining in Loket.

Jdi Do Klubu is a Czech non-profit virtual low-threshold club aimed at youth and young adults, providing a safe space for community engagement, advice, and support. Operated by Česká asociace streetwork, z.s., and supported by partners such as Bohemia Energy, the platform offers various services including a content library, competitions, and a chat support system which is currently offline due to financial constraints. The website demonstrates a consistent brand presence and compliance with GDPR regulations, including a visible cookie consent mechanism.

M

MERKUR.com AG

merkur.com

54

MERKUR.com AG operates a comprehensive German-language website focused on gaming, sports betting, and casino entertainment. The company is well-established with a domain age dating back to 1997, indicating a mature market presence. The website offers rich content including articles, news, and links to partner sites, targeting gaming enthusiasts and bettors. Technically, the site uses modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as Dynamic Yield, Matomo, and Google Tag Manager. Privacy compliance is supported by a Usercentrics consent management platform, although no explicit privacy policy or terms of service were found in the provided content. Security posture is generally good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing security policies. Overall, the site is professional, content-rich, and trustworthy, serving a large audience in the gaming sector.

D

Digitain

paydrom.co

49

Paydrom is a payment gateway and service provider specializing in secure and quality payment solutions tailored for the iGaming industry. The company operates under the parent brand Digitain and offers a comprehensive suite of services including cashier integration, business intelligence, transaction management, refunds, risk and fraud management, and payment account management. Their market position is focused on enabling iGaming businesses to optimize payment flows and scale efficiently with a broad range of payment methods and local market coverage. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper Slider, and Font Awesome Pro, providing a responsive and visually appealing user experience. The site includes tracking via Google Tag Manager but lacks visible advanced security headers and privacy compliance mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and displays a PCI certification logo, indicating adherence to payment security standards. However, it lacks a published privacy policy, cookie consent mechanism, and incident response contact details, which are critical for GDPR compliance and overall security posture. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for its business, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

V

Vinařství Pavlica

vinarstvipavlica.cz

38

Vinařství Pavlica is a small family-owned winery based in the Czech Republic, specializing in producing wines from grapes grown on their own vineyards. The business has a local market focus, supplying wines to restaurants, bistros, cafes, wine shops, and direct customers. The website provides detailed business background and product information but lacks critical security and privacy features. Technically, the site uses common frontend libraries such as Bootstrap and Owl Carousel but does not implement HTTPS or security headers, which poses risks to user data and trust. No privacy or cookie policies are present, and no contact information is provided, limiting user engagement and compliance with data protection regulations. Overall, the site is functional and informative but requires significant improvements in security, privacy, and compliance to enhance trust and protect visitors.

The website hitachimorava.cz represents Tepelná čerpadla Mazur s.r.o., a small Czech company specializing in the sale, installation, and servicing of heat pumps and HVAC systems, primarily under the HITACHI brand. The company positions itself as an official distributor in the Czech Republic with over 60 years of experience in the industry. The site targets residential and commercial customers seeking high-quality, energy-efficient heating and cooling solutions. The business model focuses on product sales, professional installation, and after-sales service, supported by a user-friendly website with clear product offerings and contact channels. Technically, the website employs a modern but somewhat dated technology stack including AngularJS 1.6.7, jQuery, Bootstrap, and integrates Google Analytics, Google Tag Manager, and Smartsupp live chat for customer engagement and analytics. The site is hosted likely via WEDOS, a Czech hosting provider, consistent with the domain registrar information. The site is mobile optimized and SEO friendly with proper meta tags and structured navigation. From a security perspective, the website demonstrates good privacy compliance with a comprehensive GDPR policy and cookie consent mechanism. However, no explicit security headers were detected, and the use of an older AngularJS version may pose some security risks. There is no visible incident response or vulnerability disclosure information, which could be improved. The site uses HTTPS for all external resources, but direct SSL configuration details are not available. Overall, the website is professional, trustworthy, and well-aligned with the business goals. The risk level is moderate with recommendations to enhance security headers, update frameworks, and publish incident response contacts. The domain registration data is consistent with the business claims, supporting legitimacy. The site contains no adult or questionable content and is safe for general audiences.

P

Panevėžio „Lietkabelis“

kklietkabelis.lt

40

Panevėžio „Lietkabelis“ is a Lithuanian basketball club with a professionally maintained website providing comprehensive information about the team, news, schedules, sponsors, and community projects. The site targets basketball fans and stakeholders, offering ticket and merchandise sales through partner platforms. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and Slick Carousel, and integrates Google Analytics and Klaviyo for marketing and analytics. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and privacy/cookie policies. WHOIS data is unavailable, raising some concerns about domain registration transparency. Overall, the website is professional, content-rich, and safe for general audiences, but could improve privacy compliance and security best practices.

G

Gargždai Basketball

gargzdaibasketball.lt

54

Gargždai Basketball is a professional basketball club based in Lithuania competing in the Lithuanian Basketball League. The website serves as a hub for fans and community members to access team news, schedules, ticket sales, and partnership information. The club positions itself as a regional sports entity with active community engagement and sponsorships. Technically, the website is built on WordPress with a modern tech stack including popular plugins for sports management and e-commerce. The site is mobile optimized and uses HTTPS, ensuring secure communications. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with no obvious vulnerabilities detected, but could be improved with explicit security headers and incident response information. Overall, the website is professional and trustworthy, serving its target audience effectively.

O

OPA Group s.r.o.

obchodproalergiky.cz

54

ObchodProAlergiky.cz is a specialized Czech e-commerce platform operated by OPA Group s.r.o., focusing on allergy-related healthcare products such as nasal rinses, anti-allergics, and eye drops. The company holds exclusive distribution rights for notable brands like Nasaleze, NeilMed, and Oculocin in the Czech and Slovak markets, positioning itself as a trusted niche retailer with a history dating back to 1993. The website offers a professional user experience with clear navigation, product categorization, and customer support features. Technically, the site leverages modern web technologies including Google Analytics 4, Google Ads, and the Upgates e-commerce platform, ensuring a responsive and moderately performant infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and exclusive partnerships.

E

European Federation of Tank Cleaning Organisations

eftco.org

60

The European Federation of Tank Cleaning Organisations (EFTCO) operates as a non-profit federation representing over 630 tank cleaning depots across 25 European countries. It focuses on promoting reliable, trustworthy, and environmentally friendly tank cleaning services through standardization and collaboration with related European federations. The EFTCO Cleaning Document (ECD) is a key service that provides traceable and multilingual documentation of tank cleaning processes, supporting supply chain safety and compliance. The website targets industry professionals, transport companies, and regulatory bodies, positioning EFTCO as a unique and authoritative federation in its niche. Technically, the website employs a traditional tech stack including jQuery 1.8.3, Modernizr, and Bootstrap, with Google Analytics for visitor tracking. While the site is accessible and well-structured with good content quality and navigation, some technical debt is evident due to the use of outdated JavaScript libraries and missing modern security headers. The cookie consent mechanism is implemented, but privacy and terms of service pages are not found, indicating partial privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks visible security headers and uses an outdated jQuery version that may expose it to vulnerabilities. The WHOIS data is malformed and unavailable, limiting trust verification of domain registration details. No incident response or security policies are publicly disclosed. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment suggests the website is legitimate and professional but has gaps in privacy compliance and security best practices. Strategic recommendations include updating technical components, enhancing security headers, publishing privacy and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

A

Agricultural Industries Confederation

agindustries.org.uk

66

The Agricultural Industries Confederation (AIC) is a leading UK trade association representing the agri-supply industry. The organization provides a broad range of services including trade assurance schemes, policy advocacy, member support, and industry events. Their website reflects a mature digital presence with comprehensive content targeting UK agri-supply businesses and stakeholders. The site emphasizes sustainability, regulatory compliance, and industry collaboration. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and implements a robust cookie consent mechanism, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie security best practices, though there is room for improvement in publishing explicit security policies and enhancing security headers. Overall, the website is professional, trustworthy, and well-structured, supporting the organization's market position as a key industry voice.

E

EdMed Institut, s.r.o.

edmedinstitut.cz

56

EdMed Institut, s.r.o. is a Czech-based company specializing in education and consultancy services within the healthcare sector. Their offerings include seminars, lectures, professional courses, conferences, and symposia targeted primarily at healthcare professionals such as doctors and non-medical healthcare workers. The website is professionally designed, consistent in branding, and provides clear contact information, positioning the company as a specialized provider in its niche market. Technically, the site is built on WordPress, utilizing common libraries like jQuery and Bootstrap, and includes Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS but lacks important security headers and cookie consent mechanisms, which are recommended for compliance and protection. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site presents a professional and trustworthy front for its business, with room for security and privacy improvements.

V

VZP ČR

klubpevnehozdravi.cz

43

The website klubpevnehozdravi.cz represents the Klub pevného zdraví, a health benefit club operated by VZP ČR, the largest public health insurance provider in the Czech Republic. It offers registered members various health-related benefits and discounts through partner companies. The site is well-branded with official VZP logos and provides comprehensive information about the club, its partners, and events. The target audience is primarily VZP insured persons and their families. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site implements GDPR-compliant cookie consent mechanisms and uses HTTPS, but lacks visible advanced security headers. WHOIS data is unavailable, which slightly reduces domain trust, but the official branding and contact details strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a trustworthy resource for its audience.

Bezpecnostpersonalu.cz is a Czech informational website dedicated to the safety of healthcare personnel, operated by CZECH MULTIMEDIA INTERACTIVE s.r.o. The site serves as an educational platform targeting healthcare professionals such as nurses and doctors, focusing on topics like injury prevention, hygiene, and professional infection risks. The website is positioned as a niche resource within the Czech healthcare sector, providing relevant and timely content to its audience. Technically, the site is built on WordPress, leveraging popular technologies such as Bootstrap for responsive design, Yoast SEO for search optimization, and Cookiebot for GDPR-compliant cookie management. Integration with Google Analytics and Tag Manager indicates a moderate level of digital maturity and analytics usage. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks explicit security policies or incident response information. No critical vulnerabilities or suspicious patterns were detected, and the domain registration data aligns well with the website's claims, supporting its legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, making it a trustworthy resource for its intended audience.

C

Centrum vedecko-technických informácií SR

cointt.sk

57

The website cointt.sk represents the Cooperation Innovation Technology Transfer (COINTT) conference, a major Slovak event focused on technology transfer, innovation, and collaboration between academia and industry. It is organized by the Centrum vedecko-technických informácií SR, a Slovak government scientific information center, with support from EU funds and national institutions. The site serves as an informational and promotional platform for the conference, providing program details, speaker information, archives, and news updates. The target audience includes researchers, technology transfer professionals, government officials, and industry stakeholders interested in innovation ecosystems in Slovakia and internationally. Technically, the website is built on WordPress using Elementor and several plugins for enhanced functionality, including CookieYes for cookie consent management and Matomo for privacy-conscious analytics. The site is mobile-optimized and uses HTTPS with a good SSL configuration. The content is primarily in Slovak with an English version available. The site demonstrates moderate performance and good SEO practices, with structured data and Open Graph metadata implemented. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and obfuscates email addresses to reduce spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is good, with GDPR-related policies and cookie management clearly presented. Overall, the website is a credible, professionally maintained government-supported platform with a clear business purpose and good technical and privacy practices. Strategic recommendations include enhancing security headers, adding a vulnerability disclosure policy, and improving accessibility features to further strengthen the security posture and compliance.

D

DigiDay Czech s.r.o.

digiday.cz

48

DigiDay Czech s.r.o. is a Czech-based digital solutions company specializing in electronic notice boards, digital panels, LED screens, web development, content creation, and online marketing. The company targets businesses, municipalities, and cities, offering tailored digital products and services. With over 8 years of market presence and more than 830 satisfied clients, DigiDay holds a solid position in the Czech digital technology sector. The website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials. Technically, the site is built on WordPress with modern libraries and plugins, including GDPR-compliant cookie management and Google reCAPTCHA for security. Security posture is good with HTTPS and some best practices, though explicit security policies and incident response contacts are absent. Overall, the site is well-optimized for SEO, mobile-friendly, and provides clear contact information, supporting trust and credibility.

P

Pears Health Cyber Europe, s.r.o.

euni.cz

63

EUNI.cz is a well-established Czech e-learning platform specializing in accredited continuous education for healthcare professionals including physicians, pharmacists, and non-medical healthcare workers. Operated by Pears Health Cyber Europe, s.r.o., the platform offers a broad range of courses, congress lectures, and professional articles, positioning itself as a key player in the Czech healthcare education market. The website demonstrates a high level of professionalism, with consistent branding, comprehensive content, and strong partnerships with reputable medical organizations. Technically, the site employs modern web technologies such as Google Tag Manager, reCAPTCHA, Sentry for error monitoring, and Hotjar for user behavior analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent-based cookie management, though improvements could be made by adding security headers and a vulnerability disclosure policy. Overall, the site is safe, GDPR compliant, and trustworthy, though the absence of WHOIS registrant data slightly reduces transparency. Strategic recommendations include enhancing security headers, publishing a security.txt file, and maintaining up-to-date third-party libraries to further strengthen security and compliance.

I

International Committee Road Transport (ICRT)

icrt-idtf.com

58

The International Database Transport (for) Feed (IDTF) website is a specialized platform created by the International Committee Road Transport (ICRT) to provide a comprehensive database for bulk transport of animal feed products, primarily by road and inland waterways. The site is supported by several recognized partner organizations, indicating a collaborative industry effort. The business model centers on providing classification and procedural information to stakeholders in the animal feed transport sector. The website demonstrates a good level of professionalism, with clear navigation, multilingual support, and regularly updated news content. However, the absence of visible privacy and cookie policies and the lack of direct contact information reduce transparency and user trust to some extent. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Select2. It employs Google Analytics for visitor tracking but lacks advanced security headers and explicit GDPR compliance indicators. The security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but improvements are recommended in security header implementation and incident response transparency. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and lowers the domain legitimacy score. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced privacy, security, and transparency measures.

M

Multibeton CZ, s.r.o.

multibeton.cz

45

Multibeton CZ, s.r.o. is a Czech company specializing in modern floor heating and cooling systems, leveraging a modular system called MULTIBETON®. The company targets residential, commercial, and industrial property owners and builders, offering installation, training, and partnership programs. The website reflects a well-established business with a history linked to the parent company MULTIBETON® GmbH dating back to 1963, while the domain itself was registered in 2013. Technically, the website uses a custom CMS with modern frontend technologies including jQuery, Bootstrap, and Google reCAPTCHA for security. The site is mobile responsive and SEO optimized with good content quality and clear navigation. Security posture is solid with HTTPS and form protections, though some security headers and explicit policies could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a detailed privacy policy. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

M

Montanregion Krušné hory

montanregion.cz

42

Montanregion Krušné hory is a cultural heritage organization managing a UNESCO World Heritage mining region in the Czech Republic. The website serves as an informational and tourism portal, offering details about the mining landscape, component parts, associated objects, and tour bookings. The site targets tourists, researchers, and cultural enthusiasts interested in mining history and heritage. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but lacks published privacy and cookie policies and security headers, which are areas for improvement. Overall, the website is professional, trustworthy, and well-branded, though it could enhance compliance and security transparency.

T

trendtours Touristik GmbH

trendtours.de

58

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

Hirebridge LLC operates a professional recruitment management platform specializing in applicant tracking and recruiting software solutions. The company targets organizations ranging from high volume hourly recruiting to corporate recruiting, offering a cloud-based SaaS model that streamlines hiring processes. The website presents a consistent and professional brand image with comprehensive service descriptions and customer testimonials, positioning Hirebridge as a reliable mid-sized technology provider in the recruitment software market. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with a mobile-responsive design and moderate performance. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, though the website content and business presence suggest legitimate operation. Overall, Hirebridge demonstrates a solid digital presence with room for enhanced security and privacy compliance.

C

COOP MORAVA, s.r.o.

coopmorava.cz

46

COOP MORAVA, s.r.o. operates the largest retail cooperative network in the Moravia region of the Czech Republic, with over 800 stores under the COOP brand. The company focuses on providing grocery and household products to general consumers, supported by promotional campaigns, a mobile application, and recipe content to engage customers. The website reflects a mature digital presence with a professional design and consistent branding, targeting a broad consumer base in the region. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent mechanisms. The absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were found in the content. The tracking and analytics usage is extensive, which may raise privacy considerations. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced transparency in privacy and security policies, improved security headers, and WHOIS data availability to strengthen its compliance and trust posture.

Softsolutions, s.r.o. is a Slovakian small technology company specializing in custom software applications, responsive web design, and mobile app development. The company positions itself as a professional, flexible, and reliable partner for clients seeking tailored software solutions. Their website reflects a modern design using Bootstrap and jQuery, optimized for mobile devices and integrating Google Analytics for visitor tracking. However, the site lacks critical privacy and cookie policies, and no terms of service or security policies are published, which may impact user trust and compliance with GDPR regulations. The contact information is clearly provided, including phone, email, and social media links, supporting business credibility. The domain is well-established since 2014 with DNSSEC enabled, indicating a legitimate and consistent registration.

P

Penzion Na Lukách

penzion-na-lukach.cz

57

Penzion Na Lukách is a small hospitality business offering accommodation and event hosting services in the Slavkovský les region of the Czech Republic. The website presents a professional and well-structured digital presence with clear information about their comfortable rooms, stylish restaurant, private parking, and wedding celebration services. The target audience primarily includes tourists and visitors seeking lodging in a natural and tranquil environment. The business appears locally focused with a consistent brand image and partner relationships. Technically, the website is built on WordPress using modern libraries such as Bootstrap, jQuery, and Owl Carousel. It is mobile optimized and performs moderately well, with good SEO practices evident in meta tags and structured data. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site enforces HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of incident response and vulnerability disclosure information indicates a gap in security maturity. The missing WHOIS data reduces transparency and slightly impacts trustworthiness, although the professional website and clear contact details mitigate this concern. Overall, the site is safe for general audiences with no adult or explicit content. Strategically, the business should prioritize implementing privacy and cookie policies, enhancing security headers, and improving WHOIS transparency to strengthen compliance and trust. Regular updates and security audits are recommended to maintain a robust security posture.

P

Penzion Rossini

rossini.cz

47

Penzion Rossini is a small hospitality business located in Františkovy Lázně, Czech Republic, offering accommodation and wellness services including massages and cosmetics. The website is professionally designed with good content quality and clear navigation, targeting tourists and visitors seeking comfortable lodging near the spa colonnade. The business holds a Hotel.cz quality certificate and has positive customer reviews, indicating a strong local market position. Technically, the site uses modern web technologies such as Bootstrap, Google Analytics, and Smartlook for analytics and user experience enhancement. The cookie consent mechanism is implemented with granular user controls, reflecting basic privacy compliance. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement. Overall, the website is trustworthy and safe with no adult or questionable content detected.

H

Hotel Marttel

hotelmarttel.cz

57

Hotel Marttel is a small hospitality business located in Karlovy Vary, Czech Republic, offering accommodation, dining, conference facilities, and wellness services. The website presents a professional and user-friendly interface with clear information about room types, services, and booking options. The business is well-positioned locally with a focus on comfort, parking convenience, and event hosting. Technically, the site is built on WordPress with modern front-end libraries and frameworks, hosted likely by Websupport, and optimized for SEO and mobile devices. Security posture is good with HTTPS and some best practices, though it lacks explicit security headers and a cookie consent mechanism. The domain registration data is consistent with the business claims, showing legitimacy and stability since 2012. Overall, the website is trustworthy, safe, and suitable for general audiences.

M

Městské divadlo Děčín, příspěvková organizace

divadlodecin.cz

44

Městské divadlo Děčín is a municipal theater organization based in the Czech Republic, providing a diverse program of theatrical performances, concerts, and cultural events. The website serves as a platform for event promotion and ticket sales, integrating a dedicated ticket reservation service. The institution maintains a strong local presence with multiple partnerships and sponsors, reflecting its role as a key cultural venue in the region. The website content is well-structured, visually consistent, and targets a general audience interested in culture and theater.

G

GMP+ International

gmpplus.org

68

GMP+ International is a globally recognized non-profit organization providing the world’s largest certification scheme for safe and sustainable animal feed. With over 19,000 certified companies across 90 countries, it plays a pivotal role in ensuring feed safety through its comprehensive certification standards, risk management tools, and training programs. The organization targets companies in the feed chain, certification bodies, and partners, fostering a collaborative approach to feed safety and sustainability. Technically, the website is built on the Umbraco CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and Hotjar for user behavior insights. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices, supported by clear navigation and rich content. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating a commitment to privacy compliance. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the WHOIS data, while limited, does not raise concerns. Overall, GMP+ International’s website reflects a mature digital presence aligned with its mission and market position. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

S

Salespanel

salespanel.io

71

Salespanel is a technology company founded in 2018, providing SaaS solutions focused on lead intelligence, lead scoring, and customer journey analytics to sales and marketing teams. Their platform helps businesses track and qualify leads, enhancing sales effectiveness through data-driven insights. The website is professionally designed with modern technologies such as Bootstrap, Font Awesome, and Google Fonts, and is hosted behind Cloudflare DNS services. The technical infrastructure supports good mobile optimization and SEO practices, although some advanced security headers are missing. Security posture is solid with HTTPS enforced and domain registration protections in place, but there is room for improvement in publishing security policies and vulnerability disclosures. Overall, the website is trustworthy and targets B2B audiences effectively.

G

Greentube GmbH

greentube.com

61

Greentube GmbH, a division of NOVOMATIC, is a leading full-service provider in the online and mobile gaming sector, delivering secure and innovative casino entertainment solutions globally. The company targets B2B clients, offering a broad portfolio including slot games, table games, video poker, and server-based gaming platforms. Their market position is strong, supported by a comprehensive product suite and certifications such as ISO 27001. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, optimized for mobile and SEO, and integrates analytics and consent management tools. Security posture is robust with HTTPS, security headers, and cookie consent, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data slightly impacts domain trust. Strategic recommendations include publishing security policies, vulnerability disclosure, and providing direct security contacts to enhance trust and compliance.

T

Themedox

themedox.com

54

Themedox is a small digital agency specializing in web design, product design, web development, and branding services. Founded in 2010 and based in the United Kingdom, the company positions itself as an award-winning, client-focused agency with international projects. Their website showcases a professional design with a portfolio of featured projects and client testimonials, targeting professionals and businesses seeking digital agency services. Technically, the website uses modern front-end libraries such as Bootstrap, Swiper, and Font Awesome Pro, hosted via NameCheap with DNS parking. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration is transparent and consistent with the business, though the domain age is younger than the founding year, suggesting recent domain acquisition or rebranding.

M

MERKUR GROUP

gauselmann.com

63

The MERKUR GROUP website represents a well-established international company specializing in the development and provision of slot machines, gaming machines, casinos, sports betting, and related financial services. With a history dating back to 1957, the company positions itself as a leader in the gaming industry with a large workforce and multiple subsidiaries. The website content is professionally presented, targeting industry partners, customers, and potential employees. Technically, the site employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is common for corporate domains, but limits transparency. Overall, the site is trustworthy and professionally maintained, with moderate room for security and compliance enhancements.

M

MERKUR GROUP

merkur.group

64

MERKUR GROUP is a well-established German company with over 65 years of experience in the gaming industry, specializing in the development and provision of slot machines, casino operations, sports betting, and related financial and eSolutions services. The company positions itself as a major player in the hospitality and gaming sectors with a large workforce and a diversified product portfolio. Their website reflects a professional and consistent brand image, targeting a general audience interested in gaming and career opportunities within the group. Technically, the website employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent mechanisms but lacks explicit security headers and incident response information, suggesting room for improvement in security transparency. Overall, the domain WHOIS data is unavailable due to TLD restrictions or privacy protection, but the website content and external references strongly support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing clear security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

FBJ Corporation is a manufacturing company specializing in ball and roller bearings for automotive, industrial, and agricultural sectors. With over 50 years of industry experience, the company positions itself as a reliable OEM supplier with a global distribution network spanning Asia Pacific, Africa, and the Americas. The website reflects a professional business presence with clear product offerings and certifications such as ISO 9001 and TÜV SÜD PSB ISO Quality Certificate 2016, reinforcing its commitment to quality. Technically, the website employs modern frameworks like Bootstrap and jQuery, providing a responsive and user-friendly experience, though performance is moderate and accessibility is basic. Security posture is average, with HTTPS assumed but lacking important security headers and advanced protections. Privacy compliance is minimal, with no cookie consent mechanisms detected and only a basic privacy policy present. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy features to align with modern standards.

V

Vaše pekárna a.s.

mojesklizeno.cz

43

MojeSklizeno.cz is a Czech franchise business website offering franchising opportunities for the Sklizeno brand, which focuses on healthy lifestyle retail stores selling farm and bio foods, delicacies, and alternative diets. The company positions itself as a market leader with over ten years of experience and targets entrepreneurs interested in healthy food retail franchising in the Czech Republic. The website provides detailed business model information, franchise concepts, financial models, and contact forms for prospective franchisees. Technically, the site uses Bootstrap and Google Analytics, hosted on Czech-based servers, with moderate performance and good mobile optimization. Security posture is basic with HTTPS implied but lacks explicit security headers and privacy/cookie policies, representing compliance gaps. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

M

Mars, Incorporated

marspromo.cz

51

Mars Czech promotional website serves as a regional marketing platform for Mars, Incorporated, focusing on brand promotions, initiatives, and consumer engagement within the Czech Republic. The site features official Mars branding and links to global Mars social media channels, reinforcing its legitimacy and corporate alignment. The business model centers on consumer goods promotion and marketing campaigns tailored to the local market. Technically, the site employs modern JavaScript modules and the Vue.js framework, with Bootstrap and FontAwesome for styling and icons, indicating a contemporary front-end approach. However, no CMS or hosting provider details are evident, and performance is moderate with basic SEO and accessibility features. Security posture is moderate; HTTPS is assumed but no security headers or incident response information are present. Privacy compliance is strong with clear links to comprehensive privacy, cookie, and legal policies hosted on mars.com, though no cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in security and contact transparency.

S

Svaz výrobců skla a bižuterie

krehkakrasa.cz

44

The website www.krehkakrasa.cz represents the annual event 'Křehká Krása', a sales exhibition focused on Czech glass and bijouterie products held in Jablonec nad Nisou. The event is organized by the Svaz výrobců skla a bižuterie and enjoys partnerships with local government and cultural institutions, positioning it as a reputable regional event attracting over 10,000 visitors. The site provides detailed event information, schedules, exhibitor lists, and contact details, targeting a general audience including families and enthusiasts of Czech craftsmanship. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Fancybox, and Slick Carousel, with Google Fonts for typography. The site is mobile-optimized and well-structured for SEO, though no CMS or hosting provider details are evident. Performance is moderate with good navigation and content relevance. However, no analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain is a concern, limiting the ability to verify domain legitimacy and age. Contact information is clearly provided, but no incident response or security policy information is available. Overall, the security posture is basic and could be improved with standard best practices. The overall risk assessment suggests the site is legitimate and safe for general users but would benefit from enhanced transparency and security measures. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, verifying domain registration details, and adding incident response contacts to improve trust and compliance.

K

Krátoška Chemin, spol. s r.o.

kratoska.cz

57

Krátoška Chemin, spol. s r.o. is a Czech Republic-based distributor of chemical raw materials and specialties serving various industrial sectors since 1991. The company operates modern warehouses and uses its own transport fleet to provide flexible Just-in-Time deliveries. Their website reflects a professional business presence with clear information about certifications and company background. Technically, the website uses modern frontend technologies such as Bootstrap and WebFont Loader, is mobile optimized, and performs moderately well. Security posture is adequate with HTTPS enabled but lacks important security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis but the business information and certifications support legitimacy. Overall, the website is professional and trustworthy with room for security and privacy improvements.

K

KDPW_CCP S.A.

kdpwccp.pl

52

KDPW_CCP S.A. operates as a central counterparty clearing house in Poland, providing clearing, risk management, collateral management, and reporting services primarily for organized and non-organized financial and commodity markets. The website presents a professional and comprehensive overview of its services, targeting financial market participants and counterparties. The company holds a significant market position within Poland's financial infrastructure, supported by regulatory compliance and transparent communication. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integration of Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and offers good navigation and content relevance, although accessibility features could be improved. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some HTTP security headers and does not publish explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain trust verification. Strategic improvements in security headers and incident response transparency would further strengthen its security and compliance stance.

BNP Paribas is a major international banking and financial services institution headquartered in France. The website analyzed is a subdomain (mediahub.bnpparibas) currently under maintenance, providing corporate and brand information in multiple languages. The business model focuses on banking and financial services with a strong market position. The site uses common web technologies such as jQuery and Bootstrap but lacks advanced CMS or frameworks. Security posture is moderate with domain registration locks but missing DNSSEC and visible HTTPS configuration. No privacy or cookie policies are present, and no contact information is provided on the maintenance page. Social media presence is strong with official accounts linked. Overall, the site is professional but currently limited in content due to maintenance.

V

Vladimír Večeřa

ardumet.cz

42

Ardumet.cz is a small Czech technology company specializing in the manufacture of wifi-enabled meteorological stations based on a powerful 32-bit microprocessor. Their product supports multiple sensor modules and offers a responsive web administration interface for device management, firmware updates, and data monitoring. The company targets technical users and businesses requiring precise weather data collection solutions. The website is professionally designed with clear navigation and detailed product descriptions, reflecting a focused niche market position. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, and various UI libraries. Hosting is provided by WEDOS, consistent with WHOIS data. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced analytics tools are detected, indicating a lightweight infrastructure. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are compliance gaps. No forms or user input fields reduce attack surface, but SSL configuration details are unknown and should be verified. WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the nature of the business and content, but strategic improvements in privacy compliance, security headers, and SSL configuration are recommended to enhance trust and regulatory adherence.

E

Evidsoft s.r.o.

evidsoft.cz

56

Evidsoft s.r.o. is a Czech-based technology company specializing in custom development of e-shops, websites, and CRM systems. With over 10 years of market presence, the company targets businesses seeking tailored digital solutions to enhance their online presence and e-commerce capabilities. Their service portfolio includes web development, SEO and PPC management, graphic design, device servicing, and website audits. The company positions itself as a reliable partner with a focus on individualized projects and strong client relationships. Technically, Evidsoft employs a modern web technology stack including Bootstrap, jQuery, Font Awesome, Google Fonts, Owl Carousel, and Google reCAPTCHA v3 for security. The website is mobile-optimized, uses HTTPS with good SSL configuration, and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. Cookie consent and GDPR compliance mechanisms are well implemented, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which are recommended to enhance security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of a security policy or incident response information suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The main risk factor is the lack of WHOIS data, which limits domain registration trust verification. The business appears legitimate based on content, client references, and contact information. Strategic recommendations include improving security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

S

Stredná priemyselná škola elektrotechnická Prešov

spse-po.sk

56

Stredná priemyselná škola elektrotechnická Prešov is a well-established secondary technical school in Slovakia, specializing in electrical engineering and information technology education. The institution has a strong regional presence and is actively engaged in international projects such as Erasmus+, robotics competitions, and startup innovation programs. The website reflects a vibrant educational environment with frequent updates on student achievements, events, and collaborations with industry and innovation centers. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics for user insights. Security posture is solid with HTTPS and DNSSEC enabled, though improvements could be made in cookie consent and explicit security policies. Overall, the school demonstrates a credible and professional online presence aligned with its educational mission.

T

Tatra banka, a.s.

tatrabanka.sk

54

Tatra banka, a.s. is a leading Slovak financial institution specializing in personal banking services including accounts, loans, payment cards, savings, investments, and insurance. The website reflects a mature digital presence with a strong emphasis on innovation and customer-centric services. It targets Slovak personal banking customers with a comprehensive product portfolio and digital banking capabilities. The bank is part of the Raiffeisen Bank International group, indicating a strong market position and backing. The technical infrastructure is modern, leveraging popular JavaScript libraries, Bootstrap framework, and advanced marketing and analytics tools such as Google Tag Manager and Exponea. The site is mobile optimized and uses secure HTTPS connections with CSRF protections and reCAPTCHA on forms, demonstrating a good security posture. However, explicit security policies and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It integrates multiple contact channels and social media platforms, enhancing customer engagement. No critical vulnerabilities or suspicious patterns were detected, making it a low-risk digital asset for the bank.

V

VUKI a.s.

vuki.sk

41

VUKI a.s. is a Slovak manufacturing and trading company specializing in the production and sale of standard and special cables, electroinsulating varnishes, resins, and winding conductors. The company targets industrial clients requiring high-quality cable products and electroinsulation materials. Their website reflects a professional presence with clear navigation, client zone access, and multilingual support, indicating a mature digital infrastructure. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and Revolution Slider, and is likely powered by Laravel on the backend. Security-wise, the site employs HTTPS and CSRF tokens but lacks visible security headers and formal privacy or security policies, representing areas for improvement. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

D

Datalogic SpA

datalogic.com

65

Datalogic SpA operates a comprehensive website showcasing its leadership in automatic data capture and industrial automation technologies. The company offers a broad portfolio including barcode readers, mobile computers, sensors, vision systems, and laser marking solutions, targeting industrial, retail, manufacturing, and logistics sectors. The website reflects a mature digital presence with extensive product catalogs, media content, and investor relations information, positioning Datalogic as a large, established technology enterprise. Technically, the site employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and analytics tools including Google Analytics, Yandex Metrica, and Hotjar. The site is well-optimized for mobile and SEO, with good navigation and professional design. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are not explicitly detected and no public security policy or incident response contacts are found. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the website content and external references strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional corporate website.

The Maharashtra State Board of Nursing and Paramedical Education (MSBNPE) operates as a government educational regulatory body focused on nursing and paramedical education within Maharashtra, India. The website serves as the official portal for examination notifications, affiliation registrations, student services including digital certificates, and dissemination of official documents. It targets students, educational institutions, and affiliated colleges, providing critical academic and administrative information. The business model is that of a state-level government authority with a medium-sized operational scope. Technically, the website is built on WordPress 6.8.3 with common plugins such as Tabs Responsive and MaxButtons, styled with the Avada theme and Bootstrap framework. The site is mobile-optimized and provides a moderate performance experience. SEO and accessibility are adequately addressed, though some improvements are possible. The hosting provider is not explicitly identified. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks important security headers and explicit privacy and cookie policies, which are compliance gaps. No vulnerability disclosure or incident response information is provided. The WHOIS data is malformed and incomplete, limiting domain trust verification, though the site content and domain suggest a legitimate government entity. Overall, the website is functional, informative, and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security header implementation, and improved WHOIS transparency to strengthen its security posture and user trust.

D

Doruk Vize

dorukvize.com

43

Doruk Vize is a Turkish visa consultancy and application service provider based in Ankara, established in 2024. The company offers professional assistance for various visa types including tourist, business, student, and residence visas. Their website is well-structured, professionally designed, and optimized for SEO, targeting individuals seeking visa services in Turkey. The technical infrastructure is based on WordPress with Elementor and common web libraries, hosted by a Turkish registrar and hosting provider. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the website presents a trustworthy and professional image suitable for its niche market.