Security Directory

A

APA Polska Sp. z o.o. Sp.K.

apapolska.pl

43

APA Polska Sp. z o.o. Sp.K. is a well-established Polish company specializing in the distribution and sale of high-quality framing products and art supplies. With over 20 years of experience and a domain registered since 2002, the company serves a diverse clientele including framers, galleries, museums, and artists. Their product portfolio includes wooden and aluminum frames, passepartout, museum glass, framing machines, and art materials under the Renesans brand. The website is professionally designed, SEO optimized, and provides comprehensive product information and partner links. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Overall, the company demonstrates strong business credibility and digital maturity, with room for improvement in privacy and security transparency.

The website dxlabs.fr currently serves only a 404 Not Found error page, indicating that the site content is inaccessible or missing. The domain is registered with OVH, a reputable French registrar, and has been active since 2018, suggesting a legitimate registration. However, the lack of accessible content prevents any meaningful analysis of the business, services, or security posture from the website itself. The technical infrastructure appears minimal with no detectable technologies or security features. The absence of privacy, cookie, or security policies and contact information further reduces the site's credibility and compliance posture. Overall, the site presents a high risk due to lack of content and transparency.

P

Pinault Collection

palazzograssi.it

60

The Pinault Collection website for Palazzo Grassi and Punta della Dogana is a professionally designed and content-rich platform showcasing contemporary art exhibitions and cultural events in Venice. It serves as an important cultural institution with a medium-sized presence, targeting art enthusiasts and tourists. The site uses Drupal 9 CMS and modern JavaScript libraries, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published privacy or incident response policies. WHOIS data is missing or unavailable, which slightly reduces trustworthiness despite the site's professional appearance and strong branding. Overall, the website is reliable and well-maintained but could improve transparency and security disclosures.

M

mastodon.energy

mastodon.energy

60

mastodon.energy operates as a specialized Mastodon instance dedicated to professionals and academics involved in energy transition policy, infrastructure, technology, journalism, and science. It serves a niche community within the broader fediverse, providing a platform for discussion and networking in the energy sector. The website presents itself with a clear focus on this audience and offers federated social networking services without commercial advertising or tracking. Technically, the site runs Mastodon version 4.3.9, leveraging modern web technologies including React and WebSocket streaming APIs, hosted likely on DigitalOcean infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service page. WHOIS data is privacy protected, which is common for community servers but limits transparency. Overall, mastodon.energy is a legitimate, well-maintained community platform with moderate security and privacy posture, suitable for its professional audience.

C

Carbon Brief

carbonbrief.org

61

Carbon Brief is a specialized media organization focused on delivering clear, data-driven articles and analysis on climate science, energy, and policy. The website serves a broad audience including the general public, policymakers, researchers, and climate professionals. It maintains a strong market position as an authoritative source for climate-related information, offering a variety of content types such as interviews, explainers, factchecks, and newsletters. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and MailerLite. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates a professional and trustworthy online presence with no indications of malicious activity or content safety concerns.

B

Bridgy

brid.gy

63

Bridgy is a specialized technology service that connects websites to social media platforms, enabling functionalities such as likes, reposts, mentions, and cross-posting. The service targets website owners and social media users seeking to integrate their web presence with social media interactions. The business operates as a small, niche player with an open-source approach, evidenced by its GitHub presence and transparent service offerings. The website is well-branded and consistent, with a clear focus on social media integration technology. Technically, the website employs standard web technologies including HTML5, CSS with Bootstrap for responsive design, and JavaScript. Hosting appears to be managed via Google Cloud DNS infrastructure. The site is mobile-optimized and structured for good SEO, though accessibility features are basic. Performance is moderate, with no major technical issues detected in the provided content. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement. The absence of privacy, cookie, and terms of service policies reduces privacy compliance scores. No contact information or incident response details are provided, limiting transparency. No vulnerabilities or suspicious content were found. Overall, Bridgy presents a trustworthy and professional web service with a solid technical foundation but could enhance its security posture and privacy compliance by adding relevant policies, security headers, and contact information. The risk level is low, but improvements in these areas would strengthen user trust and regulatory compliance.

O

ohai.social team

ohai.social

62

ohai.social is an independent Mastodon server providing a decentralized social networking platform within the fediverse. It offers a cozy, fast, and secure environment for users to participate in social media activities, emphasizing openness and community. The platform is powered by Mastodon 4.5.0-nightly and uses modern web technologies including JavaScript modules and WebSockets for real-time streaming. The website demonstrates good technical maturity with responsive design, accessibility features, and solid security practices such as HTTPS and Content Security Policy with nonce. However, privacy compliance is basic, lacking cookie consent mechanisms and terms of service, which could be improved to meet broader regulatory requirements. Overall, the site is trustworthy and well-positioned within the decentralized social media niche.

M

Mastodon Canada

mstdn.ca

69

Mastodon Canada (mstdn.ca) is an independent Mastodon social networking server focused on serving Canadians, including First Nations, Metis, and Inuit peoples. It provides a federated social platform for community engagement within the fediverse, leveraging the open source Mastodon software. The website offers trending posts, hashtag exploration, and a profiles directory, targeting a niche audience interested in Canadian and Indigenous social networking. Technically, the site uses modern web technologies including React, TypeScript, and Rails, hosted behind Cloudflare DNS and CDN services. The platform is accessible, mobile-optimized, and shows good design and navigation quality. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent or terms of service. Overall, the site is legitimate and trustworthy as a community platform but could improve in privacy and security transparency.

J

Journa.host

journa.host

68

Journa.host is a niche Mastodon social networking server dedicated to serving working journalists, news outlets, and media professionals. It provides a platform for active and retired journalists, media scholars, and related professionals to engage in the fediverse. The website is built on the Mastodon open-source platform, hosted via Cloudflare, and uses modern web technologies including React and JavaScript. The site demonstrates good digital maturity with mobile optimization and a clear user interface. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Business credibility is supported by clear community focus and active user engagement, but lacks direct contact or security incident response information. Overall, the site is trustworthy and professionally maintained, serving a specialized audience effectively.

C

Chinwag

chinwag.org

55

Chinwag is a small community-focused social platform that brands itself as a friendly local pub for communication. Founded in 2017, it offers social chat tools and hosts a Mastodon instance called Chinwag Social. The website is built using the Hugo static site generator and leverages Cloudflare for DNS services. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is safe, professional, and targeted at a general audience interested in social communication.

C

Cyberplace

cyberplace.social

67

Cyberplace.social is an independent Mastodon social media server focused on cybersecurity, fandom, video games, and technology communities. It operates within the fediverse, providing a decentralized platform for users interested in these topics. The site is administered by a known individual, Kevin Beaumont (@GossiTheDog), and maintains an active user base of approximately 937 monthly active users. The platform leverages Mastodon version 4.4.7 and modern web technologies such as React and ES modules, ensuring a contemporary user experience with mobile optimization and good navigation clarity. From a technical perspective, the site demonstrates moderate performance and basic SEO and accessibility features. It uses HTTPS, but no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service pages. No contact emails or phone numbers are publicly listed, which is common for federated social platforms prioritizing user privacy. The security posture is adequate but could be enhanced by implementing recommended security headers, publishing security policies, and improving privacy compliance. The WHOIS data is privacy protected, which is typical for social media platforms, and does not raise immediate legitimacy concerns given the known administrator and active community. Overall, Cyberplace.social presents as a legitimate, niche social media platform with a focus on cybersecurity and related interests, but with opportunities to strengthen its security and privacy posture.

G

Grow Your Own Services

growyourown.services

57

Grow Your Own Services is an educational website dedicated to encouraging non-technical individuals and organizations to create their own online services such as websites, social networks, personal clouds, and messaging platforms. The site positions itself as a niche resource focused on privacy and self-hosting, providing guides and information to empower users to take control of their online presence. The business model is primarily informational, targeting privacy-conscious users and those interested in self-hosting technologies. Technically, the site is built on WordPress 6.8.3 using the Fork theme and includes plugins such as WP Dark Mode. The infrastructure appears modern and mobile-optimized, with good accessibility and SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is privacy protected, which aligns with the site's privacy-focused theme, though it limits transparency. Overall, the site is trustworthy, safe, and professionally presented, but could enhance compliance and security transparency.

R

Redbit s.r.o.

redbit.cz

53

Redbit s.r.o. is a Czech Republic based IT company specializing in the maintenance and support of online invoicing and digital product sales platforms, notably Vyfakturuj.cz and SimpleShop. The company positions itself as a reliable and enthusiastic partner for small businesses, freelancers, and firms seeking efficient online invoicing and digital sales solutions. Their website reflects a professional and consistent brand image, targeting primarily Czech-speaking audiences. Technically, the site is built on WordPress using modern themes and plugins, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for small IT firms. Overall, Redbit demonstrates a mature digital presence with room for improvement in privacy compliance and security disclosures.

B

BootstrapMade

bootstrapmade.com

68

BootstrapMade is a specialized provider of free and premium Bootstrap templates and themes, catering primarily to web developers, startups, and businesses seeking professional and responsive website designs. Established in 2013, the company has built a strong market presence with over 9 million downloads and a broad portfolio of templates across multiple industries. Their business model revolves around offering both free templates with footer credits and premium templates with advanced features and dedicated support, supplemented by a visual Bootstrap Template Builder for premium users. Technically, the website is built on modern web standards using Bootstrap 5, HTML5, CSS3, and JavaScript, hosted and protected by Cloudflare infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Analytics and tracking are implemented via Google Tag Manager and Cloudflare Insights, reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS and hosting, providing a solid SSL configuration. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not visibly implemented, and no public security policy or incident response contacts are provided. Forms use secure POST methods, and no sensitive data exposure or vulnerabilities were detected in the HTML content. Overall, BootstrapMade presents a trustworthy and professional online presence with high-quality content and technical maturity. The absence of direct contact emails or phone numbers is mitigated by a contact form. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

E

eupolicy.social

eupolicy.social

61

eupolicy.social is a niche Mastodon server dedicated to professionals and enthusiasts involved in EU policy. It operates as a community-driven platform providing a respectful and friendly environment for discussion related to EU policy matters. The server is administered by a small team of volunteers and funded through voluntary contributions, emphasizing its non-commercial and community-oriented nature. The website clearly communicates its purpose, rules, and administrative contacts, fostering trust and transparency within its user base. Technically, the site leverages the Mastodon open-source social networking platform (version 4.4.5) and modern web technologies including React and JavaScript ES modules. The platform supports federated social media participation via the ActivityPub protocol. The website demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers such as Content Security Policy and HSTS, and does not provide a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data due to privacy protection is justified given the community nature of the service, though it slightly reduces trustworthiness from a domain registration perspective. Overall, eupolicy.social presents a trustworthy, well-maintained community platform with a clear focus and good technical foundation. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, publishing a security policy, and improving accessibility to further strengthen its security posture and user trust.

N

WebPortal

napec-portal.com

47

The website napec-portal.com serves as a login portal for NAPEC, presumably the Nigerian Association of Petroleum Explorationists or a related entity. The portal is designed for members or authorized users to access their profiles and services. The site is built using Angular 14 framework and incorporates Usercentrics for cookie consent management, indicating some attention to privacy compliance. However, the public-facing content is minimal, focusing solely on login functionality without detailed business or contact information. The domain is recently registered in April 2023, consistent with a new portal launch. From a technical perspective, the site uses modern web technologies including Angular and Bootstrap for styling. DNS is managed via Google Domains, and the domain registrar is Squarespace Domains II LLC. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or hosting provider details are explicitly found. Cookie consent is implemented via Usercentrics, but Google Analytics is present only in commented form, indicating limited active tracking. Security posture is moderate but could be improved. HTTPS is implied but no explicit security headers such as CSP, HSTS, or X-Frame-Options are detected in the HTML content. The login form lacks visible anti-CSRF tokens or advanced input security measures. No privacy policy, terms of service, or incident response contacts are published, which limits compliance and user trust. The domain registration is consistent and shows no suspicious patterns, but the lack of detailed business information and security policies reduces overall trustworthiness. Overall, the website is functional as a login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy documentation, and contact information publication are recommended to enhance trust and compliance.

C

Chaterimo

chaterimo.com

68

Chaterimo is a technology company offering an AI-powered customer service and sales chatbot platform leveraging advanced language models such as ChatGPT, Anthropic, and Google Gemini. The platform targets e-commerce businesses and websites, providing fast setup, flexible pricing, and deep integration with popular e-commerce platforms like Shopify and Shoptet. The website demonstrates a professional digital presence with clear branding, multilingual support, and interactive chatbot features. Technically, the site uses modern web technologies including Bootstrap, FontAwesome, and analytics tools like Smartlook and Google Tag Manager, hosted on DigitalOcean infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. Strategic recommendations include publishing comprehensive security and privacy policies, adding contact information, and enhancing security headers to improve compliance and trust.

O

OTIDEA vzdělávání, s.r.o.

otideavzdelavani.cz

47

OTIDEA vzdělávání, s.r.o. is a Czech Republic-based educational company specializing in online courses, seminars, and customized training programs primarily targeting professionals and individuals seeking high-quality educational content. The company has an established market presence since 2013 and offers a variety of educational services including rental of teaching spaces. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on a modern Angular framework with integration of multiple analytics and tracking tools, hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit security policies are recommended. Privacy compliance is partially met with presence of privacy and terms pages but lacks a cookie consent mechanism. Overall, the website is trustworthy and well-positioned in the education sector.

D

Děčínská sportovní, příspěvková organizace

aquahoteldecin.cz

59

The website booking.previo.app hosts a direct online booking platform for Aqua Hotel, operated by Děčínská sportovní, a Czech hospitality organization. The platform facilitates hotel reservations with clear business and contact information, supporting multiple languages and currencies. The site includes comprehensive privacy and cookie policies with consent mechanisms, and detailed terms of service including cancellation policies. The business targets general audiences seeking accommodation in Děčín, Czech Republic, positioning itself as a small local hospitality provider with direct booking capabilities. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and analytics tools such as Smartlook and Contentsquare. The design is responsive and user-friendly, with good navigation and content relevance. However, some security best practices like security headers are missing, representing an area for improvement. The SSL configuration is good, and no critical vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site demonstrates good GDPR compliance with clear privacy disclosures and cookie consent. Incident response and security policy details are not explicitly provided, which could be enhanced. No suspicious or adult content is present, making the site safe for general users. The domain registration aligns well with the business entity, supporting legitimacy. Overall, the website is a professionally maintained hospitality booking platform with solid privacy and compliance posture, moderate technical sophistication, and room for security enhancements. Strategic recommendations include implementing security headers, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security and trust.

I

id-k Kommunikationsdesign AG

id-k.com

52

id-k Kommunikationsdesign AG is a Swiss-based digital-first communications and digital agency located in Bern, specializing in web design, communication strategies, graphic design, corporate design, and digital brand management. Established in 2004, the company serves SMEs, startups, educational institutions, and associations primarily within Switzerland. The website reflects a professional and consistent brand image with a clear focus on digital marketing and communication services. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as WP Rocket and lazy loading. The presence of a comprehensive cookie consent mechanism and GDPR-compliant privacy policy indicates a mature approach to privacy and compliance. Security posture is solid with HTTPS enforced and domain registration secured with clientTransferProhibited status, though DNSSEC is not enabled. Overall, the website is fast, mobile-optimized, and well-structured, supporting a positive user experience and trustworthiness.

P

Peatix Inc.

peatix.com

71

Peatix Inc. operates a well-established online platform specializing in event ticketing and community management, targeting event organizers and attendees globally. Founded in 2010, the company offers tools to promote, manage, and sell tickets for events, emphasizing simplicity, transparency, and customer support. The website reflects a professional and consistent brand image with a clear focus on its core business services. Technically, the website leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager and Facebook SDK for analytics and marketing, and is hosted on Amazon AWS infrastructure. The site is mobile-optimized and employs cookie consent mechanisms compliant with GDPR, enhancing user privacy and regulatory adherence. From a security perspective, Peatix enforces HTTPS, includes anti-clickjacking measures, and provides granular cookie consent options. However, there is room for improvement by enabling DNSSEC, adding explicit security headers, and publishing a formal security policy and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, Peatix presents a secure, compliant, and professionally maintained online presence with moderate to high trustworthiness. Strategic enhancements in security transparency and contact information disclosure would further strengthen its posture and user confidence.

Z

Základní škola a Mateřská škola T. G. Masaryka Zastávka, příspěvková organizace

zszastavka.cz

58

The website represents a small educational institution in the Czech Republic, specifically a basic and nursery school named after T. G. Masaryk. It serves local students and parents, providing primary and nursery education. The site is built on WordPress and hosted by REG-WEBGLOBE, with a domain age consistent with the institution's establishment in 2007. The technical infrastructure is moderate, with basic mobile optimization and SEO, but lacks advanced security headers and privacy compliance features. No privacy or cookie policies are present, and contact information is not explicitly provided on the site, which limits user trust and compliance with regulations. Security posture is basic, with no detected vulnerabilities but also no advanced protections.

Základní umělecká škola Rosice is a small educational institution based in the Czech Republic, providing foundational arts education in music, visual arts, and dance primarily to children and young people in the local community. The school is operated under the Jihomoravský kraj regional authority and offers various programs including student concerts, exhibitions, and competitions. The website reflects a well-structured and professionally designed platform that supports enrollment and provides information about the school's offerings and events. Technically, the site uses common web technologies such as jQuery, Bootstrap, and FontAwesome, with integration of Google Analytics for visitor tracking. Security-wise, the site implements cookie consent mechanisms but lacks visible security headers and detailed privacy or security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and contact details appear legitimate and consistent with a local educational institution. Overall, the site is safe, accessible, and provides a good user experience, though improvements in security posture and privacy transparency are recommended.

A

Australia’s Real-Money

zbysov.info

59

The website www.zbysov.info operates as a niche content platform focused on Australian online casino games, promotions, and no deposit bonus codes. It targets Australian gamblers seeking information on casino bonuses, free spins, and secure login practices. The site positions itself as an informational and affiliate marketing resource within the online gambling sector. Technically, the site is built on WordPress with common plugins such as Yoast SEO and LiteSpeed Cache, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is common in gambling-related domains, but reduces transparency. Overall, the site is moderately trustworthy with room for improvement in security and privacy compliance.

Vlastivědný spolek Rosicko-Oslavanska is a small non-profit organization dedicated to documenting and educating about the history and culture of the Rosicko-Oslavansko region in the Czech Republic. The website serves as a regional cultural portal with event announcements, historical articles, and links to partner sites. The organization appears to have a modest but focused presence, leveraging Facebook for social engagement and promoting local cultural heritage. Technically, the website uses older JavaScript libraries and lacks modern security practices such as HTTPS enforcement and security headers. The presence of PHP notices in the HTML indicates suboptimal error handling and potential information leakage risks. Privacy and cookie policies are absent, which may impact compliance with GDPR regulations. Overall, the site is functional but requires modernization and security improvements to enhance trust and compliance.

Dům dětí a mládeže Zastávka, příspěvková organizace is a local non-profit educational organization based in Zastávka, Czech Republic, focused on providing extracurricular activities, camps, and events for children and youth. The website presents a clear and professional digital presence with detailed program offerings and community partnerships. Technically, the site leverages modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data limits domain legitimacy verification, and the lack of security headers indicates room for improvement in security posture. The site implements a cookie consent mechanism but lacks a dedicated privacy policy page, which is critical for GDPR compliance. Overall, the website is safe, trustworthy, and well-suited for its target audience, but enhancing security and compliance documentation would strengthen its risk profile.

G

Gymnázium T. G. Masaryka Zastávka, příspěvková organizace

gzastavka.cz

41

Gymnázium T. G. Masaryka Zastávka is a public secondary educational institution in the Czech Republic offering four-year and six-year study programs. The website serves as an informational portal for students, parents, and the local community. The institution appears to be a small-sized educational entity focused on providing general secondary education. Technically, the website is built on WordPress using the Divi theme, with external resources such as Google Fonts and a cookie consent script from CookieYes. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of WHOIS data and lack of privacy and terms of service policies indicate gaps in transparency and compliance. Security posture is basic, with no detected security headers and unknown SSL configuration. Overall, the website is functional and relevant but requires improvements in security and compliance documentation.

M

Mighty Shake

mighty-shake.com

45

Mighty Shake is a well-established dance group and educational organization based in the Czech Republic, with a history dating back to 1995. The organization focuses on street dance and offers training and choreography services to a broad age range, from children to adults. Their market position is that of a respected local community group with a strong cultural presence and partnerships with local authorities and sports agencies. Technically, the website is built on WordPress with a variety of plugins and external libraries, providing a moderate performance and good mobile optimization. However, the site lacks modern security headers and privacy compliance documentation, which are areas for improvement. The security posture is adequate with HTTPS enforced but could be enhanced with additional headers and incident response information. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and business information appear genuine. Overall, the website is functional and informative but requires improvements in privacy, security, and domain transparency to increase trust and compliance.

K

Klub absolventů Gymnázia v Zastávce

gzklub.cz

30

Klub absolventů Gymnázia v Zastávce is a small non-profit alumni association dedicated to organizing events and activities for former students of Gymnázium v Zastávce in the Czech Republic. The website serves as a community hub providing announcements about social events, cultural exhibitions, and sports activities. The organization appears well-established since 2015 and maintains consistent branding aligned with the school's identity. Technically, the site is built on WordPress with common plugins and libraries, offering moderate performance and good mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The site uses HTTPS properly, and no malicious content or vulnerabilities were detected. Overall, the website is trustworthy and professional but could improve its compliance and security posture.

C

Chachar catering s.r.o.

chachar.cz

46

Chachar catering s.r.o. operates a regional pizza delivery and catering service in the Czech Republic, established since 2006. The company offers fast delivery of pizza, wings, and other fresh food items through an online ordering platform and telephone. With multiple branch locations across various Czech cities, the business targets general consumers seeking convenient food delivery. The website is professionally designed with consistent branding and good content quality, supporting a medium-sized enterprise model focused on retail and hospitality sectors. Technically, the website is built on WordPress 4.9.8 with a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA for security. Hosting is consistent with Czech providers, and the site uses HTTPS with no detected blocking or WAF interference. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequate with proper meta tags and structured navigation. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms in place. However, explicit security headers and a formal security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is evident with GDPR-related pages and cookie consent, though no dedicated data protection officer contact was identified. Overall, the website and business present a trustworthy and professional front with low risk. Strategic improvements include enhancing security headers, updating WordPress to the latest version, and publishing explicit security and incident response policies to further strengthen trust and compliance.

O

One by Allegro

onedelivery.cz

63

One by Allegro is a logistics and parcel delivery service operating primarily in the Czech Republic and internationally, affiliated with the Allegro brand. The company offers multiple delivery methods including courier delivery, self-service parcel boxes (One Box), and pickup points (One Point), targeting e-shops, businesses, and individual recipients. The website is professionally designed, mobile-optimized, and provides shipment tracking capabilities. Technically, the site uses modern web technologies and Allegro's proprietary frameworks, with good SSL and basic security headers. However, it lacks explicit privacy and cookie policies, and no incident response or security contact information is provided, which are areas for improvement. The domain registration is recent but consistent with the business launch, and the WHOIS data aligns with the website's claims, supporting legitimacy. Overall, the site demonstrates a moderate to good security posture and business credibility but should enhance privacy compliance and transparency.

A

AREON s.r.o.

kamenynaburni.cz

66

The website www.kamenynaburni.cz represents a professional real estate development project named 'Kameny Na Burni' located in Slezská Ostrava, Czech Republic. The business behind the project is AREON s.r.o., a small-sized real estate developer under the parent company ALUMONT HOLDING a.s. The site offers detailed information about new apartments for sale, including visualizations, construction updates, and contact options. The target audience is potential home buyers seeking premium residential properties in a quiet urban setting. Technically, the website employs modern web technologies such as Svelte, JavaScript ES modules, and integrates Google Analytics and CookieScript for tracking and consent management. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms and contact forms with explicit consent checkboxes. However, explicit security headers and detailed security policies are absent, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced transparency in domain registration and security disclosures.

A

AL Pergoly s.r.o.

al-pergoly.cz

76

AL Pergoly s.r.o. is a Czech manufacturer specializing in high-quality aluminum bioclimatic pergolas, offering free measurement and installation services across the Czech Republic. The company positions itself as a local expert in custom pergola manufacturing with a focus on quality and customer service. The website reflects a professional and consistent brand image, targeting residential and commercial customers interested in durable outdoor structures. Technically, the website leverages modern web technologies including AWS hosting, JavaScript frameworks, and cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS and Content-Security-Policy headers implemented, though additional headers could enhance protection. Privacy compliance is addressed through a comprehensive cookie consent mechanism, aligning with GDPR requirements. Overall, the website is well-structured, user-friendly, and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing more explicit business contact details to improve transparency and compliance.

J

Jamujam

jamujam.com

63

Jamujam is an online music-focused social network platform that offers users the ability to compose, share, and record music through an integrated online creative studio. The platform targets music creators and enthusiasts, positioning itself as a niche media service. The website employs modern web technologies including Angular, AWS backend services, and integrates social login options such as Apple Sign-In and Google Identity Services. Analytics and marketing tools like Google Analytics and Facebook Pixel are used for user tracking and advertising purposes. Security posture is moderate with HTTPS enforced and use of OAuth2, but lacks visible security headers and published privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting overall trustworthiness. Strategic improvements in privacy compliance and security best practices are recommended to enhance credibility and user trust.

T

Tymbe.cz — Brigády po celé ČR, Vše vyřídíš online | Tymbe

tymbe.cz

59

Tymbe.cz is an established online platform and mobile application that connects job seekers with temporary work opportunities (brigades) across the Czech Republic. Founded in 2017, it serves a medium-sized market with over 110 companies and 500 daily job offers, providing a streamlined process for registration, job selection, shift management, and payout. The platform targets primarily Czech residents seeking flexible work options. Technically, the website leverages modern frameworks such as Next.js, uses Cloudflare for DNS, and hosts media on AWS S3. It integrates analytics and tracking tools including Google Analytics, Google Tag Manager, and Smartlook, alongside Cookiebot for cookie consent management. The site is mobile-optimized and performs well with good SEO and accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, Tymbe.cz presents a professional and trustworthy digital presence with room for improvement in privacy and security disclosures.

S

SINEKO Engineering s.r.o.

sineko.cz

10

SINEKO Engineering s.r.o. is a traditional Czech manufacturer specializing in septic tanks, wastewater treatment plants, plastic cesspools, and water storage tanks. The company offers turnkey solutions including installation and project management, targeting customers across the Czech Republic. Their market position is strengthened by innovative technologies such as the Steelplast concept and a commitment to quality and customer support. Technically, the website employs modern web technologies including React, AWS AppSync, and integrates multiple analytics and marketing tools with proper cookie consent mechanisms. Security posture is strong with HTTPS enforcement and content security policies, though additional headers and a security.txt file could enhance it further. The absence of WHOIS data is a concern for domain legitimacy but the website content and business information are professional and consistent. Overall, the site is well-designed, user-friendly, and compliant with GDPR, supporting a positive business credibility profile.

F

Fastest Solution s.r.o.

kvetinkatrinec.cz

10

Květinka Třinec is a local Czech Republic-based e-commerce business specializing in flower delivery services across Třinec and surrounding areas. The website offers a variety of fresh flowers, bouquets, flower boxes, and seasonal arrangements with convenient online ordering and timely delivery. The business targets consumers seeking fresh floral gifts and arrangements with a focus on regional delivery. Technically, the website is hosted likely on AWS infrastructure, uses modern JavaScript libraries, and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and some security headers present, though the Content-Security-Policy header is commented out and no explicit security or incident response policies are published. Privacy compliance is well addressed with GDPR documentation and cookie consent mechanisms. However, the WHOIS data for the domain is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy but could improve transparency on security policies and domain registration details.

Philly Bike Ride operates an official e-commerce store for American Bike Ride events in Washington DC, Philadelphia, and Dallas, offering branded cycling apparel and merchandise. The website is built on the Shopify platform using the Dawn theme, leveraging modern JavaScript and Shopify's integrated payment and analytics services. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content for cycling enthusiasts. Security posture is solid with HTTPS and form protection via hCaptcha, though improvements can be made by enabling DNSSEC and publishing explicit privacy and cookie policies. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy small business e-commerce operation.

Serco Comercial S.A. de C.V. operates a professional blog and distribution platform focused on hygiene control, microbiological testing, and filtration products primarily serving the Mexican market. The website provides educational content, product news, and industry updates targeting professionals interested in food safety and microbiological analysis. The business model centers on B2B distribution and knowledge sharing through blog articles authored by industry experts. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and FontAwesome, delivering a responsive and user-friendly experience with moderate performance. However, the site lacks advanced analytics and comprehensive privacy or cookie policies, which limits its compliance posture. Security-wise, the site appears to use HTTPS but lacks visible security headers and formal vulnerability disclosure mechanisms, indicating room for improvement in security maturity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to better protect users and improve trust.

P

Proventa/ Serco Comercial S.A. de C.V.

proventa.com.mx

55

Proventa/ Serco Comercial S.A. de C.V. operates an e-commerce platform specializing in filtration, microbiology, and disinfection products primarily targeting the Mexican market. The website is built on PrestaShop and offers a range of industrial and laboratory supplies. The company presents clear contact information including a physical address, phone number, and email, enhancing business credibility. The site uses structured data and Open Graph metadata to improve SEO and brand visibility. Technically, the site employs modern web technologies such as jQuery and responsive design elements, providing a good user experience across devices. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit security or privacy policies. Privacy compliance is limited, with no cookie consent mechanism or GDPR indicators visible. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

altMBA LLC operates a niche online leadership workshop aimed at professionals and leaders seeking transformative development experiences. The website presents a clean, focused message emphasizing its 9 years of operation and global alumni network. The business model centers on delivering leadership education and fostering an alumni community, positioning itself as a specialized provider in the education sector. The site is simple and static, with minimal interactive features and no evident e-commerce or complex platform integrations. Technically, the website uses basic HTML5, CSS, and JavaScript with embedded video content. There is no evidence of a CMS or advanced frameworks, and hosting details are limited to DNS provider information. Performance and mobile optimization are basic but adequate for the site's scope. SEO and accessibility features are minimal, and no analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks critical security headers and does not indicate HTTPS usage, which is a significant concern. The absence of privacy, cookie, and terms of service policies suggests compliance gaps with GDPR and other privacy regulations. Contact information is limited to a single email address, with no phone or physical address provided. The domain registration is stable and consistent with the business history, supporting legitimacy. Overall, the security posture is weak and requires improvements to protect user data and enhance trust. The overall risk assessment highlights the need for immediate implementation of HTTPS, security headers, and privacy policies to meet modern security and compliance standards. Strategic recommendations include enhancing security configurations, adding comprehensive privacy and cookie policies, and improving transparency with users. These steps will strengthen the website's trustworthiness and align it with best practices in security and privacy.

C

COLLINS

wearecollins.com

54

COLLINS is a recognized transformation consultancy specializing in design and business transformation services for enterprises at critical inflection points. The company holds prestigious industry awards including Ad Age’s Transformation Firm of the Year and Design Firm of the Year for multiple years, positioning it as a leader in its sector. The website showcases extensive case studies, press coverage, and a strong brand presence targeting businesses seeking strategic transformation and design expertise. Technically, the website is built on Jekyll, uses modern JavaScript libraries like Flickity for UI components, and leverages Imgix for image delivery, indicating a modern and performant infrastructure. Analytics tools such as Microsoft Clarity and Google Analytics are employed for user behavior insights. Security posture is generally good with HTTPS enforced and secure form handling; however, the absence of security headers and published privacy or cookie policies indicates room for improvement in compliance and security transparency. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, though the website content and branding suggest a professional and trustworthy business. Overall, the site is well-designed, user-friendly, and content-rich, but would benefit from enhanced privacy disclosures and security policies to improve trust and compliance.

C

Controladoria-Geral da União

portaltransparencia.gov.br

69

The Portal da Transparência do Governo Federal is an official Brazilian federal government transparency portal managed by the Controladoria-Geral da União. It provides comprehensive public access to government spending data, contracts, social benefits, employee remuneration, bidding processes, sanctions, and other fiscal information. The portal targets Brazilian citizens and stakeholders interested in government transparency and social control. It operates as an enterprise-level government service, offering open data downloads and APIs to facilitate public analysis and oversight. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and AWS hosting infrastructure. It uses the govbr design system ensuring consistent branding and accessibility. The site is mobile optimized and includes accessibility features, with good SEO and performance characteristics. The use of AWS WAF scripts indicates a security-aware hosting environment. From a security perspective, the portal enforces HTTPS with excellent SSL configuration and manages cookie consent in compliance with LGPD (Brazilian data protection law). While explicit security headers are not fully visible in the HTML, best practices are implied. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy, incident response contacts, and a security.txt file, which are recommended for enhanced transparency and vulnerability management. Overall, the portal demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It serves as a critical tool for public accountability in Brazil. Strategic recommendations include formalizing security policies, publishing incident response contacts, enhancing security headers, and expanding transparency on data retention and privacy practices.

W

WEX Inc.

wexdrive.com

11

WEX Inc. operates as a global fintech company specializing in fuel cards, fleet management, employee benefits administration, and business payment solutions. The company targets businesses of various sizes seeking to optimize fuel expenses, streamline employee benefits, and digitize payment processes. WEX holds a strong market position as a leader in these sectors, supported by a comprehensive product portfolio and global reach. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Tag Manager and Sentry for analytics and error tracking. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks a publicly accessible security policy and incident response information, which are recommended for enterprise trust and compliance. The absence of WHOIS registration data is a notable anomaly, warranting further investigation to confirm domain legitimacy. Overall, WEX presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and domain registration would enhance trust and compliance posture.

The website capline.org is a French digital platform dedicated to the registration of nautical races. It centralizes race registrations and allows participants to upload and reuse necessary documents for their participation. The platform targets participants and organizers of nautical races, positioning itself as a niche service within the transportation sector. The domain was registered in April 2023, consistent with the business's recent establishment. Technically, the website uses modern web technologies including JavaScript and Bootstrap for responsive design. It is hosted by Gandi SAS and served over HTTPS, ensuring basic security. However, the site lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. The website is moderately optimized for mobile devices and performance is average. From a security perspective, the site has a basic security posture with HTTPS enabled but missing important security headers and no DNSSEC. There are no privacy or cookie policies present, which is a compliance gap especially under GDPR. No contact information or incident response details are provided, limiting transparency and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is functional and serves its business purpose but requires improvements in privacy compliance, security best practices, and contact transparency to increase trustworthiness and regulatory compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response information.

S

Pospiech – Special Delivery

special-delivery.cz

54

The website 'Pospiech – Special Delivery' appears to be a small business site likely related to delivery or logistics services, primarily targeting a Czech-speaking audience. The site is built on WordPress using Elementor and Ecwid, indicating a moderate level of digital maturity with e-commerce capabilities. However, the absence of detailed business descriptions, contact information, and privacy or cookie policies suggests limited transparency and professionalism. Technically, the site uses modern web technologies but lacks advanced security headers and explicit compliance features. The security posture is basic, with no visible vulnerabilities but also no strong security practices or incident response information. Overall, the risk assessment indicates moderate risk due to missing WHOIS data and lack of compliance documentation. Strategic recommendations include improving transparency with clear contact and policy pages, enhancing security headers, and ensuring GDPR compliance.

V

VertiFlex

vertiflex.eu

74

VertiFlex is a specialized integrator and supplier of modern intralogistics solutions, focusing on the distribution and integration of advanced warehouse automation technologies including vertical storage lifts, robots, cranes, and AI-driven warehouse control software (VertiNode). The company positions itself as a leading player in the intralogistics sector, serving a B2B audience such as e-commerce, manufacturing, and distribution centers. Their website demonstrates a high level of digital maturity with modern technologies, responsive design, and rich content including case studies and partner collaborations. Security posture is strong with HTTPS and security best practices, though explicit privacy and cookie policies are missing, which impacts privacy compliance. Overall, the website and business presence indicate a credible and professional operation with room for improvement in privacy transparency and contact information availability.

O

OX Point - Homepage

oxpoint.cz

68

OX Point operates a network of modern smart lockers designed for municipalities, companies, and households primarily in the Czech Republic. Their services include parcel delivery boxes, luggage storage, municipal smart boxes, corporate logistics solutions, and residential parcel boxes. The website presents a professional and consistent brand image with clear contact information and a focus on accessibility and user experience. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools, including Google Analytics, Hotjar, and Facebook Pixel, with a cookie consent mechanism in place. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers are not explicitly detected and privacy policy documentation is missing. WHOIS data is unavailable, which limits domain trust verification, but the website content and technical setup suggest a legitimate business. Overall, the site is well-positioned in its niche with room for improvement in privacy compliance and security transparency.

A

Aukro

aukro.cz

65

Aukro.cz is the largest Czech online marketplace specializing in auctions and classified ads, offering over 2 million items ranging from electronics to collectibles. Founded in 2003, it has established a strong market position as a trusted platform for buying and selling new and used goods. The website employs modern web technologies including Angular and Cloudflare services, ensuring a responsive and performant user experience. Privacy compliance is robust, featuring GDPR-aligned policies and a consent management platform. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Aukro.cz presents a professional, secure, and user-friendly platform with a solid reputation in the Czech e-commerce sector.