Security Directory

M

Mastodon gGmbH

mastodon.online

75

Mastodon.online is a non-profit operated Mastodon server run by Mastodon gGmbH, providing decentralized social networking services as part of the fediverse. The platform targets general users interested in open, ad-free social media alternatives. The website demonstrates a solid technical infrastructure using modern web technologies such as Ruby on Rails and React, hosted on Exoscale. It offers good mobile optimization and accessibility, with a clean and professional design. Security posture is strong with HTTPS enforcement and appropriate security headers, though DNSSEC is not enabled and privacy policies could be more comprehensive. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

H

Home Credit a.s.

homecredit.cz

64

Home Credit a.s. operates a professional and well-branded website offering flexible consumer loan products and financial services primarily targeting customers in the Czech Republic. The company provides a range of services including flexible loans, loan consolidation, credit cards, installment purchases, and auto financing. The website demonstrates a mature digital presence with modern technologies such as Alpine.js, Keen Slider, and integration of Google Tag Manager and Sentry for analytics and error monitoring. Security best practices are observed with HTTPS enforcement and security headers, contributing to a strong security posture. However, the absence of WHOIS data limits domain trust verification, and the site could improve privacy compliance by implementing a visible cookie consent mechanism and publishing explicit terms of service and incident response policies. Overall, the site is professional, secure, and trustworthy, serving a large financial services entity with a clear market position.

K

Kasyno Polska 2025 ᐉ Polskie Kasyna Online

kasynopolska10.com

57

Kasyno Polska 2025 is a Polish-language online casino affiliate and informational website focused on providing comprehensive reviews, bonus offers, and guides related to online gambling in Poland. The platform targets Polish players interested in legal and reputable online casinos, offering curated selections and expert insights to facilitate informed gaming decisions. The website is built on WordPress and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and OneSignal for user engagement and tracking. While the site is well-structured, mobile-optimized, and content-rich, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security-wise, the site uses HTTPS but does not show evidence of advanced security headers or incident response information. The WHOIS data for the domain is unavailable, indicating either a very recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the site presents a professional front with moderate security and privacy posture, suitable for its niche but with room for improvement in compliance and transparency.

S

SHEAN s.r.o.

shean.cz

67

SHEAN s.r.o. is a Czech-based digital agency specializing in web and e-shop development alongside comprehensive online marketing services. Their market position is that of a trusted partner helping small to medium businesses, including sole proprietors and e-commerce shops, to increase revenue through tailored digital solutions. The company offers a broad range of services from website creation, e-commerce platform integration, to marketing campaigns and SEO optimization. Technically, the website employs modern web technologies such as Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is solid with HTTPS and reCAPTCHA usage, though additional security headers and incident response disclosures could enhance trust. The absence of WHOIS data transparency slightly reduces domain trust but does not detract from the professional presentation and business legitimacy. Overall, the company demonstrates a strong digital presence and compliance with privacy regulations, making it a credible and reliable service provider in its sector.

A

adSYSTEM

onlinekasa.cz

48

Onlinekasa.cz is a Czech Republic-based provider of an online cash register solution supporting electronic evidence of sales (EET). The service targets small business owners and retailers who require a cost-effective, web-based system to issue electronic receipts via email or SMS, compliant with local regulations. The business operates on a subscription model with modular extensions for invoicing and stock management. Technically, the website is built on a custom CMS (adSYSTEM) using jQuery and standard web technologies, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and some security headers, though improvements are recommended in header completeness and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the website content and partner ecosystem indicate a legitimate business. Overall, the site is professional and functional with room for enhanced privacy compliance and security transparency.

B

BS vinařské potřeby s.r.o.

vinarskepotreby.cz

59

BS vinařské potřeby s.r.o. is a well-established Czech company specializing in the supply of winemaking products and services. Their website demonstrates a strong market position as a leading supplier for winemakers, vineyard owners, and sommeliers in the Czech Republic. They offer a broad product range, laboratory analysis services, consulting, and physical retail locations, supporting a comprehensive business model that combines e-commerce with offline presence. The website content is professionally presented, targeting both professional and hobbyist audiences in the wine industry. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google reCAPTCHA, and cookie consent frameworks, ensuring a good level of digital maturity. The site is mobile-optimized with good SEO and accessibility features, although some improvements in accessibility could be made. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration and implements security best practices such as CAPTCHA on forms and cookie consent mechanisms. However, there is room for improvement by adding security headers, publishing security policies, and establishing a vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low risk profile with a high level of professionalism and compliance with privacy regulations. The absence of WHOIS data is a concern for domain trust but does not detract significantly from the business credibility demonstrated by the website content and contact information.

B

Boehringer Ingelheim

boehringer-ingelheim.cz

64

Boehringer Ingelheim is a large multinational pharmaceutical company focused on improving health for humans and animals. The Czech localized website presents professional branding and content consistent with a global healthcare provider. The technical infrastructure uses Drupal CMS and modern web technologies, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and published privacy or cookie policies. WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective but the website content and branding strongly indicate legitimacy. Overall, the site is professional and trustworthy but could improve transparency and security practices.

Č

Český statistický úřad (ČSÚ)

czso.cz

68

Český statistický úřad (ČSÚ) is the official statistical authority of the Czech Republic, providing extensive statistical data and analysis across demographics, economy, society, and regional statistics. The website serves government officials, researchers, media, and the general public with a broad range of databases, publications, and methodological resources. It holds a strong market position as the primary source of official statistics in the country. Technically, the website employs modern JavaScript modules, a custom government UI framework, and Matomo analytics configured to respect user privacy by disabling cookies. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS exclusively and avoids exposing sensitive data. However, it lacks explicit HTTP security headers and a published security or incident response policy. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and security posture. Overall, the site is professional, trustworthy, and compliant with GDPR, with comprehensive privacy and cookie policies. The absence of WHOIS data is noted but likely due to registry policies for government domains. The risk level is low, but recommendations include enhancing security headers and publishing security policies to further strengthen trust and compliance.

E

eBay Inc.

ebay-deine-stadt.de

76

eBay Deine Stadt is a localized e-commerce platform initiative by eBay Inc. targeting German cities and regions to support local retailers by integrating them into eBay's broader marketplace. The platform offers buyers access to local products online, enhancing visibility and sales for small and medium-sized local businesses. The website demonstrates a strong market position leveraging eBay's established brand and infrastructure. Technically, the website uses modern web technologies including Marko.js for rendering, SVG icons, and CDN-hosted static assets, ensuring fast performance and mobile optimization. The site is well-structured with good SEO and accessibility features, providing a professional user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact points for sellers and city participation. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

M

MVKM s.r.o.

mvkm.cz

53

MVKM s.r.o. is a Czech Republic based marketing agency specializing in performance marketing, PPC campaigns, SEO, social media management, and video production. The company targets businesses seeking measurable marketing results and ROI, positioning itself as a small but professional agency with over 20 satisfied clients and a high client satisfaction rate. The website is modern, well-designed, and mobile-optimized, reflecting a mature digital presence. Technically, the site uses modern frameworks like Next.js and React, with service workers for enhanced performance. Security posture is good with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is limited, with no dedicated privacy policy page found, though a cookie consent banner is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

D

Danske Bank

danskebank.co.uk

75

Danske Bank's UK personal banking website offers a comprehensive range of financial products including current accounts, mortgages, savings, and loans. The site targets personal banking customers in the UK and presents a professional, well-structured digital presence consistent with a large, established financial institution. The domain has been registered since 1998, reinforcing its legitimacy and market presence. Technically, the website employs modern web technologies such as JavaScript and SVG icons, with good mobile optimization and accessibility features. Security is enforced through HTTPS and secure login portals, although explicit security headers and privacy policies are not clearly visible in the provided content. Analytics usage is moderate, primarily via eGain services. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and security transparency.

D

Danske Bank

danskebank.se

72

Danske Bank Sweden operates a professional and comprehensive banking website targeting private customers with a broad range of financial products including mortgages, savings, loans, insurance, and pension services. The site reflects a mature digital presence with clear navigation, professional design, and integration of Swedish digital authentication standards such as BankID. The bank is part of the larger Danske Bank Group, with a domain registered since 2000, indicating a well-established market presence in Sweden. Technically, the website uses modern web technologies and integrates third-party analytics and advertising services, though some security enhancements like DNSSEC and explicit security headers could be improved. Privacy and cookie policies are not explicitly found in the provided content, which may impact compliance and user trust. Overall, the site is trustworthy and professionally maintained, serving a large customer base with a focus on digital banking convenience.

D

Danske Bank

danskebank.no

71

Danske Bank's Norwegian corporate banking website presents a comprehensive suite of financial services tailored for businesses of all sizes across Norway and the Nordic region. The bank positions itself as a leading Nordic corporate bank offering daily banking, financing, advisory, and international trade solutions. The website is professionally designed with clear navigation, responsive layouts, and rich content that supports business customers in various growth stages. The presence of sustainability certification (Miljøfyrtårn) and detailed customer service information enhances trust and credibility. Technically, the site employs modern web technologies including JavaScript, SVG icons, and a CSS framework (Foundation), ensuring good performance and accessibility. The site is mobile-optimized and includes SEO best practices. Security posture is strong with HTTPS enforced, security headers present, and secure login portals. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. No critical security vulnerabilities or blocking mechanisms were detected, indicating a mature security posture. However, explicit security policies and incident response details are not publicly available, suggesting room for improvement in transparency. Overall, the site reflects a stable, trustworthy, and professional banking institution with a solid digital presence.

D

Danske Bank A/S

danskebank.fi

66

Danske Bank A/S operates a comprehensive Finnish banking website targeting retail and private banking customers. The site offers a wide range of financial services including loans, savings, investments, and digital banking solutions. The bank holds a strong market position as a major Nordic financial institution with a long-established presence since 1997. The website demonstrates a mature digital infrastructure with modern technologies and good mobile optimization. Security posture is strong with HTTPS, DNSSEC, and secure login portals, although explicit security policies and incident response information are limited publicly. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

U

Univerzita Hradec Králové

uhk.cz

68

Univerzita Hradec Králové is a public university based in the Czech Republic, offering a wide range of higher education programs, lifelong learning courses, and active research initiatives. The institution targets students, academic staff, researchers, and international partners, positioning itself as a regional educational leader with multiple faculties and comprehensive academic services. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the website employs modern web technologies including Google Tag Manager, Google reCAPTCHA, and Turbolinks, ensuring a responsive and accessible user experience. The site is optimized for mobile devices and incorporates SEO best practices, although some improvements in hosting transparency and CMS identification could be made. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response information are not present, suggesting room for enhancement in security posture and transparency. Overall, the website presents a trustworthy and professional front for the university, though the absence of WHOIS data limits full domain legitimacy verification. Strategic recommendations include improving security headers, publishing a security policy, and providing clear security incident contacts to bolster trust and compliance.

E

European Lotteries

european-lotteries.org

61

European Lotteries (EL) is a prominent umbrella organization representing national lotteries across 39 European countries, including all EU member states. The organization promotes a sustainable lottery model that benefits society, emphasizing values such as forward-thinking, sustainability, and integrity. EL supports its members by organizing events, providing research, and advocating for responsible gaming and societal contributions. The website reflects a professional and well-structured digital presence, built on Drupal 10, with modern features such as cookie consent and social media integration. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data limits domain trust analysis but the overall site and business credibility remain high.

W

Woluweb

woluweb.be

56

Woluweb is a Brussels-based web agency specializing in Joomla CMS and YOOtheme, offering comprehensive web services including creation, optimization, security, hosting, maintenance, and training. The company positions itself as a trusted expert with official certifications and a strong client portfolio in cultural, associative, institutional, and private sectors. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and mobile optimization. Technically, the site leverages modern frameworks such as UIkit and employs best practices including HTTPS and spam-protected contact details. Privacy compliance is robust, with clear policies and no third-party tracking. However, WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but is mitigated by the strong on-site trust signals.

D

Danske Bank

danskebank.dk

70

Danske Bank is a leading Danish financial institution offering a comprehensive range of retail banking services including housing loans, investment products, pensions, insurance, and daily banking. The website targets private customers in Denmark and presents a professional, well-structured digital presence with clear navigation and modern design. The technical infrastructure employs standard web technologies such as JavaScript, SVG, and CSS, with secure HTTPS connections and multiple secure login portals for various banking services. Security posture is solid with no critical vulnerabilities detected, though minor improvements such as enabling DNSSEC and adding security headers are recommended. Privacy and cookie policies are not explicitly found in the provided content, indicating an area for compliance enhancement. Overall, the website reflects a mature enterprise-grade digital platform with high business credibility and trustworthiness.

M

MONECO, spol. s r. o.

fondshop.cz

54

FOND SHOP is a Czech Republic-based independent online platform specializing in investment and financial planning content. Operated by MONECO, spol. s r. o., the website offers in-depth financial analyses, market news, and educational resources targeted at both individual investors and professionals. The business model centers on subscription-based access to premium content, including articles and an investment academy. The site maintains a professional and consistent brand presence with clear contact and legal information, positioning itself as a trusted source in the Czech financial media landscape. Technically, the website employs modern JavaScript libraries such as Swiper.js and Nette Forms, uses SVG icons for UI elements, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good accessibility and SEO practices, delivering a smooth user experience. However, some security best practices like HTTP security headers are not visibly implemented, and no cookie consent mechanism was detected, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration and secure form handling. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details appear authentic. No published security or incident response policies were found, indicating room for enhancement in transparency and preparedness. Overall, FOND SHOP presents a high-quality, professional financial information service with moderate technical maturity and a solid security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would further strengthen trust and compliance.

B

Barclays

barclays.com

71

Barclays is a leading British universal bank offering a broad range of financial services including consumer banking, corporate and investment banking, wealth management, and private banking. The website reflects a mature, enterprise-level financial institution with a strong market position and comprehensive service offerings. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and hosted via Akamai CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and domain registration consistency, although DNSSEC is not enabled. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

N

Nadační fond Modrý Hroch

bezurazu.cz

46

The website bezurazu.cz represents the Nadační fond Modrý Hroch, a Czech non-profit foundation dedicated to helping children after serious injuries and supporting injury prevention education. The site promotes educational puppet shows and prevention programs targeting children, parents, and educators. The foundation supports hospital departments and focuses on child safety. The website is well-structured, professionally designed, and mobile-optimized, providing clear navigation and relevant content in Czech. It uses modern web technologies including cPilot CMS, Google Analytics, and Google Tag Manager, with a service worker for enhanced performance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response information is provided. The domain registration data is consistent and trustworthy, with no privacy protection masking ownership, and the domain age aligns with the foundation's founding year. Overall, the site is safe, compliant with GDPR, and trustworthy, serving a clear non-profit educational mission.

3

365.invest

365invest.sk

65

365.invest is a well-established Slovak asset management company specializing in investment funds including real estate, bond, mixed, and equity funds. The company targets retail investors in Slovakia, offering accessible investment options starting from 20 euros, supported by a modern online and mobile app platform. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site uses Angular framework, integrates Google Tag Manager and LuigisBox for analytics, and is hosted on Websupport with DNSSEC and HTTPS enabled, indicating a secure and modern infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response details are not published. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism and trustworthiness with a strong market position in Slovak finance and real estate investment sectors.

J

J&T INVESTIČNÍ SPOLEČNOST, a.s.

jtarchinvestments.cz

47

J&T ARCH INVESTMENTS is a Czech-based qualified investor fund managed under the supervision of the Czech National Bank. The fund focuses on co-investing alongside the founding families of J&T and leading Czech-Slovak business figures, targeting sectors such as energy, banking, e-commerce, media, real estate, hospitality, and professional sports. The website is built on a modern Nuxt.js framework, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly implemented, though privacy and cookie policies are absent, which is a compliance gap. WHOIS data is missing, which slightly reduces domain trustworthiness but the business content and partner references support legitimacy. Overall, the site is professional and trustworthy for its target audience of qualified investors.

K

Královéhradecký kraj, Město Jičín, Vodohospodářská a obchodní společnost a.s.

podebradova-ruska.cz

43

The website represents a Czech regional government infrastructure project focused on the reconstruction of road II/502 in Jičín, specifically the streets Ruská and Poděbradova. It serves as an official communication platform providing detailed project data, construction phases, traffic measures, and contact information for involved stakeholders including Královéhradecký kraj, Město Jičín, and Vodohospodářská a obchodní společnost a.s. The site targets local residents, government officials, and contractors interested in the project progress. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme, with standard web technologies such as jQuery and Google Fonts. The site is mobile optimized with good navigation and content relevance. Hosting appears to be managed by a Czech registrar and hosting provider, REG-INTERNET-CZ, with nameservers indicating Forpsi services. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers. No analytics or tracking scripts are present, indicating minimal user tracking. Privacy and cookie policies are absent, which is a compliance gap. WHOIS data shows an unusual future domain creation date, which reduces trust in domain registration data but does not directly impact site content credibility. Overall, the website is professional and trustworthy for its intended purpose but would benefit from improved privacy compliance, security headers, and clearer domain registration data. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and clarifying WHOIS information to enhance trust and compliance.

F

Fullres Inc.

fullres.com

53

Fullres Inc. operates a comprehensive SaaS platform designed to empower online creators by providing integrated tools for monetization, analytics, web performance monitoring, and link management. The company positions itself as a privacy-first alternative to traditional analytics platforms, emphasizing GDPR compliance and user privacy by avoiding cookies and cross-site tracking. The website reflects a mature, well-established business with a clear market focus on digital content creators including websites, newsletters, and podcasts. The platform's key services include monetization management, fast and privacy-friendly analytics, core web vitals monitoring, and recently added features like custom events and short links.

I

ifTECH s.r.o.

iftech.cz

45

ifTECH s.r.o. operates as a specialized wholesale distributor focusing on solar energy products including solar panels, inverters, optimizers, battery storage systems, and related infrastructure such as wallboxes and solar power plant constructions. The company targets B2B customers such as installers and businesses within the Czech Republic and neighboring markets. The website presents a professional and consistent brand image with clear navigation and relevant product offerings. Technically, the site is built on Angular 10, uses modern web technologies, and includes standard SEO and mobile optimization features. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data is missing, which impacts domain trustworthiness and should be investigated further. Overall, the site is functional and professional but could improve transparency and security documentation.

K

KRAJICZECH s.r.o.

krajiczech.cz

56

KRAJICZECH s.r.o. is a Czech-based company specializing in the supply and manufacturing of construction components for solar power plants, including aluminum profiles, roof hooks, and flat roof mounting systems. The company targets professional installers and businesses in the photovoltaic energy sector, offering technical consulting and training services alongside their product portfolio. Their market position appears solid within the Czech Republic and EU regions, supported by a professional website and warranty offerings. Technically, the website is built on Angular 10 with modern frontend technologies such as Swiper.js and Google Fonts, providing a responsive and user-friendly experience. However, the site lacks explicit privacy and terms of service pages, and no advanced security headers were detected, indicating room for improvement in security posture and compliance. Security-wise, the site uses HTTPS and does not expose sensitive data in the HTML. The absence of WHOIS data reduces trust slightly but is likely due to privacy protection. No signs of malware or phishing were found. Cookie consent is implemented, but privacy compliance could be enhanced. Overall, the website is professional and business-focused with good content quality and user experience. Strategic improvements in privacy policy publication, security headers, and WHOIS transparency would enhance trust and compliance.

M

mBank S.A.

mbank.pl

71

mBank S.A. is a major Polish retail bank offering a comprehensive range of financial products including personal accounts, loans, deposits, insurance, and investment services. The website targets individual customers in Poland and presents a professional, well-structured digital presence with strong branding and consistent messaging. The bank leverages modern web technologies such as React and Next.js to deliver a fast, mobile-optimized experience. Security is robust with HTTPS, security headers, and privacy policies in place, although WHOIS data is unavailable which is unusual but likely due to registry policies. Overall, the site reflects a mature digital infrastructure and a strong market position in the Polish banking sector.

L

Luděk Vašek

bike-sport-shop.cz

58

Bike Sport Shop is a Czech Republic-based retail business specializing in cycling, running, cross-country skiing, and outdoor equipment. With over 25 years of experience, the company operates both a well-stocked physical store in Chrudim and an e-commerce platform offering a wide range of bicycles, e-bikes, sportswear, and accessories. The business emphasizes customer service, professional advice, and after-sales support including servicing and repairs. Their market position is that of a trusted local specialist with a loyal customer base and positive reputation as evidenced by external review platforms like Heureka.cz. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and responsive design frameworks such as Foundation. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Payment processing is handled securely via GoPay with multiple payment options displayed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. From a security perspective, the site uses HTTPS and enforces cookie consent but lacks visible security headers such as CSP or HSTS, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces the trust score somewhat, but the website content and business information appear legitimate and professional. Overall, the website is a solid e-commerce platform with good content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

Ajax Search Lite is a WordPress plugin offering a free live search solution with support for custom post types and configurable filters. The business operates a freemium model with a PRO version upsell, targeting WordPress site owners and developers. The website is professionally designed, mobile-optimized, and integrates standard technologies such as WordPress, AJAX, and Google Fonts. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, reducing compliance maturity. No direct contact information or security policies are published, limiting transparency. Overall, the site is functional and trustworthy but could improve privacy and security disclosures.

J

JIP Východočeská a.s.

jip-potraviny.cz

54

JIP Východočeská a.s. operates a comprehensive food supply business serving both gastronomy professionals and the general public across the Czech Republic. The company maintains a strong nationwide presence with wholesale and retail outlets, supported by its own distribution network. Their website reflects a professional and well-branded digital presence, offering clear navigation and relevant content tailored to their target audiences including B2B partners and retail customers. The business model focuses on wholesale supply, retail sales, and customer loyalty programs, positioning JIP as a key player in the Czech food retail and hospitality sectors. Technically, the website is built on WordPress with modern SEO practices via the Yoast plugin. It demonstrates good mobile optimization and accessibility, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data limits full trust verification, but the site’s content and business information appear legitimate and consistent. Security-wise, the site shows good baseline practices but could improve by adding security headers and publishing a vulnerability disclosure policy. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the site is trustworthy and professional, though domain registration transparency should be verified to enhance legitimacy. Strategically, JIP should focus on enhancing security transparency and verifying domain registration details to strengthen trust. Continued investment in digital maturity and compliance will support their market position and customer confidence.

B

BWmedien GmbH

bwmedien.biz

52

BWmedien GmbH is a German-based full-service IT and media provider established in 2001, specializing in web development, digital marketing, hosting, and proprietary software solutions including CMS, CRM, and ERP systems. The company positions itself as a regional pioneer with a strong focus on delivering tailored digital solutions to businesses and organizations. Their website reflects a professional and comprehensive service offering with clear navigation, modern design, and mobile optimization. Technically, the site uses a proprietary CMS (BWcms), modern JavaScript libraries like Swiper.js, and HTML5 video, hosted on infrastructure with DNS servers under net-build.net and domain registration via RegistryGate GmbH. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is strong with visible GDPR-aligned privacy and cookie policies and consent mechanisms. Contact information is clearly provided including phone and social media channels. Overall, BWmedien GmbH demonstrates a mature digital presence with high trustworthiness and professional credibility.

B

BWmedien GmbH

bwcms.eu

34

BWmedien GmbH operates BWcms, a cloud-based content management system designed to combine the simplicity of a homepage builder with the complex needs of businesses. The company targets professional users and enterprises seeking an easy-to-use yet powerful CMS solution. Their market position is that of a niche provider focusing on cloud CMS with integrated hosting and support services. The website reflects a mature digital presence with good content quality, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries such as Swiper.js and a proprietary CMS framework, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with GDPR, supported by comprehensive privacy and cookie policies. The lack of WHOIS registrant data is due to EURid privacy policies, but the domain and business information are consistent and legitimate.

I

innogy Česká republika a.s.

innosvet.cz

67

Innogy Česká republika a.s. operates a professional energy supply and customer management portal branded as 'innosvět'. The website targets Czech energy consumers, offering services such as electricity and gas supply, consumption monitoring, and online account management. The company is positioned as a major energy provider in the Czech Republic with a large customer base. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Mluvii chat widgets, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's branding, structured data, and contact information strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving as a reliable digital platform for energy customers.

D

DIAsource ImmunoAssays

diasource-diagnostics.com

73

DIAsource ImmunoAssays is a well-established Belgian company specializing in the development, manufacturing, and marketing of clinical diagnostic products focused on immunoassays such as RIA and ELISA, antibodies, and instruments for endocrinology, autoimmunity, and infectious diseases. The company operates as part of the BioVendor Group, enhancing its market position and credibility. Their website reflects a professional and comprehensive digital presence targeting healthcare professionals and clinical laboratories worldwide. Technically, the website uses modern web technologies, is hosted by OVH sas, and includes essential privacy and cookie compliance mechanisms. Security posture is good with HTTPS and CSRF protections, though improvements are possible in DNSSEC and security headers. Overall, the site is trustworthy, well-branded, and provides clear contact and business information.

Technologické centrum Praha is a Czech innovation and business development center providing a broad range of services including innovation potential analysis, mentoring, acceleration programs, consulting on grants and intellectual property, and technology transfer. The organization has been a key player in the Enterprise Europe Network services in the Czech Republic for 18 years and is transitioning its role to a new consortium of regional partners. The website reflects a professional government-affiliated entity targeting entrepreneurs and SMEs in the Czech Republic. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and SVG icons, but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with HTTPS enabled but missing some best practices. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and partner references support legitimacy. Overall, the site is well-structured and informative but could improve privacy compliance and security transparency.

Č

Česká spořitelna

csas.cz

67

Česká spořitelna is a leading Czech banking institution offering a comprehensive range of financial services including accounts, loans, mortgages, savings, investments, and insurance. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to both individual and corporate clients. The technical infrastructure leverages modern web technologies, including a proprietary CMS framework (GEM), Google Tag Manager, and advanced analytics tools, ensuring a responsive and accessible user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high business credibility and trustworthiness, consistent with a major financial institution.

S

Search Ready

searchready.cz

65

Search Ready is a specialized SaaS provider offering intelligent search solutions tailored for e-commerce websites and online shops, primarily targeting the Czech Republic and Central European markets. Their platform enhances user experience and conversion rates through advanced features such as faceted filtering, real-time search, and intelligent language processing. The company is positioned as a niche player with a strong focus on delivering relevant and fast search results, supported by client testimonials and case studies from reputable brands like KIA and Kärcher-Satter. The business operates under the MEDIA FACTORY GROUP umbrella, indicating a stable corporate backing. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, with Cloudflare providing security and performance enhancements. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a smooth user experience. Security measures include HTTPS enforcement, CAPTCHA protection on forms, and cookie consent mechanisms, although some security headers could be more explicitly implemented. From a security perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a formal security policy or incident response contact, which could be improved to enhance trust and compliance. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. Strategically, Search Ready should focus on publishing explicit security policies, enhancing security header implementation, and considering a vulnerability disclosure program to further strengthen its security culture and customer trust. Continuous monitoring of third-party scripts and maintaining GDPR compliance will be essential as the business scales.

R

renault

renault.cz

69

Renault Česká republika operates as the official local website for Renault in the Czech Republic, offering a comprehensive range of new, used, and commercial vehicles. The site targets consumers interested in Renault's automotive products, including electric and hybrid models. The business is positioned as a major automotive brand with a strong market presence supported by the global Renault Group. The website provides detailed vehicle information, configuration options, and promotional content tailored to the Czech market. Technically, the website employs a modern React framework with optimized images and responsive design, ensuring excellent mobile usability and good SEO practices. Integration with Google Analytics and Tag Manager indicates a mature digital marketing and analytics setup. Cookie consent is managed via OneTrust, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and official branding strongly indicate legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security header implementation. The overall risk is low, with recommendations to enhance security headers, publish security policies, and provide clear contact information for security incidents to further strengthen trust and compliance.

P

PERI, spol. s r.o.

peri.cz

33

PERI, spol. s r.o. is a leading Czech supplier of construction equipment specializing in formwork, scaffolding, and engineering services. With over 50 years of experience, the company offers innovative and efficient solutions tailored to meet diverse project requirements. The website reflects a mature digital presence with comprehensive product portfolios, customer portals, and active communication channels. Technically, the site employs modern web technologies, including JavaScript frameworks, SVG icons, and consent management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, common for enterprises of this scale. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

Statutární město Brno

damenavas.cz

67

Dáme na vás is an official civic engagement platform operated by the Statutární město Brno (City of Brno), enabling residents to participate in city development through participatory budgeting, civic proposals, and surveys. The platform targets local citizens, students, and businesses, providing tools to influence municipal decision-making. The website is well-branded, consistent with official city identity, and offers multiple engagement channels including social media and newsletter subscription with GDPR-compliant consent. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries such as React and jQuery, and integrates Matomo analytics configured for privacy. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and incident response policies are not visibly published. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or suspicious content. The domain registration aligns with the municipal nature and age of the platform, supporting legitimacy. Recommendations include publishing security and incident response policies, enhancing security headers, and adding a vulnerability disclosure mechanism.

D

Destinační společnost Hradecko, z. s.

poznejhradecko.cz

37

Poznej Hradecko is a regional tourism information platform operated by Destinační společnost Hradecko, z. s., a non-profit association focused on promoting cultural heritage and attractions in the Hradecko region of the Czech Republic. The website offers an interactive map with categorized points of interest including castles, museums, folk architecture, entertainment venues, accommodation, and dining options. It supports multiple languages, enhancing accessibility for international visitors. Technically, the site is built on Angular 8 with OpenLayers for mapping and integrates Google Tag Manager for analytics. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy and cookie policies are present, indicating basic GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, but no suspicious indicators were found. Overall, the site is a credible and useful resource for tourists, though improvements in security and contact transparency are recommended.

D

Die Bundesregierung

bundesregierung.de

61

The website www.bundesregierung.de is the official online presence of the German federal government, providing political information, news, livestreams, and public service offerings. It serves a broad audience including citizens, media, and political stakeholders. The site is well-branded, consistent, and professionally designed, reflecting its authoritative government status. Technically, it uses CoreMedia CMS and Piwik analytics, with a moderate performance profile and good mobile and accessibility features. Security-wise, the site enforces HTTPS, respects user consent for tracking, and employs nonce-based script loading, indicating a mature security posture. However, explicit privacy and cookie policies are not clearly linked in the provided content, and no incident response contacts are visible, which are areas for improvement. Overall, the domain registration and DNS setup align with a legitimate government entity, supporting high trustworthiness.

I

Initiative D21

initiatived21.de

54

Initiative D21 is a well-established German non-profit network focused on advancing the digital society and accompanying the digital transformation for over 25 years. The organization provides research, events, and working groups targeting government, industry, and the public to foster digital competencies and digital governance. Their website reflects a professional and consistent brand with comprehensive content relevant to their mission. Technically, the website uses modern web technologies including JavaScript ES modules, SVG icons, and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, fast-loading, and accessible, though no explicit CMS or framework is identified. Hosting is likely via a professional provider associated with domaincontrol.com. Security posture is solid with HTTPS enforced and privacy-aware analytics, but lacks some advanced security headers and a visible security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission. Recommendations include adding cookie consent, security headers, and publishing a security policy to enhance compliance and security posture.

H

High Five GmbH

iamstudent.at

65

iamstudent.at is an online platform operated by High Five GmbH that provides students in Austria with access to exclusive discounts, vouchers, and contests. The website is well-positioned in the regional market with sister sites in Germany and Switzerland, targeting the student demographic with relevant offers and content. The platform leverages modern web technologies including AngularJS, Matomo analytics, and a consent management system to ensure compliance with privacy regulations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the site presents a professional and trustworthy interface for its users.

B

Bochum Marketing GmbH

bochum-tourismus.de

52

Bochum Marketing GmbH operates the official tourism website for the city of Bochum, Germany, providing comprehensive information on local attractions, events, accommodations, and cultural highlights. The website serves as a key digital platform to promote tourism and local engagement, targeting visitors and residents interested in exploring Bochum's offerings. The site is built on TYPO3 CMS and employs modern web technologies, including responsive design and accessibility features, ensuring a positive user experience across devices. While the site is well-branded and professionally maintained, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal incident response contacts. Overall, the website is a reliable and authoritative source for tourism information in Bochum, with room for enhancement in privacy and security transparency.

B

booklooker.de: antiquarische und gebrauchte Bücher kaufen und verkaufen, Hörbücher, CDs, Filme und Spiele

booklooker.de

67

Booklooker.de operates as a specialized online marketplace focused on the buying and selling of used and antiquarian books, audiobooks, music, films, and games. Established since 1999, it serves a large customer base exceeding 4.1 million users, offering a secure shopping experience with buyer protection and personalized customer service. The platform provides extensive search and filtering capabilities, user account management, and a seller depot system, positioning itself as a trusted intermediary in the German retail media sector. Technically, the website employs modern web technologies including jQuery and jQuery UI for dynamic user interface elements, and integrates a consent management platform to ensure compliance with privacy regulations. The site is served over HTTPS with no detected blocking or WAF interference, indicating good accessibility and security practices. However, some security headers are missing, which could be improved to enhance protection against common web threats. From a security perspective, the site demonstrates a mature posture with encrypted communications, secure login forms, and no visible exposure of sensitive data. Privacy policies and cookie consent mechanisms are clearly implemented, supporting GDPR compliance. The absence of direct contact emails or phone numbers is mitigated by a contact form, though adding verified contact details could improve trust. The domain registration is consistent with the website branding, though WHOIS data is limited due to DENIC privacy restrictions. Overall, booklooker.de presents a professional, secure, and user-friendly platform with a strong market position in the German used media retail sector. Strategic improvements in security headers and enhanced transparency in contact information could further strengthen its trustworthiness and compliance posture.

A

AION CS, s.r.o.

zakonyprolidi.cz

54

Zákony pro lidi is a Czech legal information portal operated by AION CS, s.r.o., providing free and premium access to the consolidated collection of Czech laws, regulations, international treaties, EU law, and court decisions. The platform targets legal professionals, students, and the general public seeking reliable legal texts and tools. It operates a freemium business model with a paid subscription offering advanced features and ad-free experience. The website is well-established, with a professional design and consistent branding, positioning itself as a leading resource in the Czech legal information market. Technically, the website uses ASP.NET Web Forms with modern JavaScript libraries such as jQuery 3.5.1, and employs responsive design techniques for good mobile optimization. The site includes SEO best practices and accessibility features, although some security headers are not explicitly detected in the HTML content. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and published incident response contacts. No vulnerabilities or malware indicators were found. The absence of WHOIS data reduces trust slightly but does not indicate illegitimacy given the professional nature of the site and its clear business information. Overall, the website presents a low risk profile with strong content quality and business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to improve security posture and trust.

T

Tristano Vacondio

tristanovacondio.com

47

Tristano Vacondio's website serves as a professional portfolio showcasing expertise in marketing, digital media, photography, video production, graphic design, UI/UX, and web design. The site targets a general audience interested in these creative services and positions itself as a niche freelance professional portfolio. The business is small-scale, founded in 2010, and presents a consistent and professional brand image. Technically, the website is built on WordPress with Jetpack integration, hosted by DreamHost, and employs modern web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy but could enhance compliance and security practices to improve credibility and user trust.