Security Directory

R

Red Paint Multimedia Ltd.

red-paint.com

55

Red Paint Multimedia Ltd. is a Glasgow-based web design and development agency with over 15 years of experience. They offer a range of services including web design, app and website development, graphic design, and white label digital agency services. The company targets businesses and agencies seeking quality digital solutions and has established a reputable market position supported by a portfolio of notable clients. The website reflects a professional and consistent brand image, emphasizing client collaboration and bespoke project delivery. Technically, the site is built on WordPress with modern tools such as Visual Composer, Slider Revolution, and Gravity Forms, indicating a mature digital infrastructure. Security measures include HTTPS and Google reCAPTCHA on forms, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. The domain registration is consistent with the company's history, enhancing trustworthiness. Overall, the website is well-designed, user-friendly, and trustworthy, though privacy compliance could be enhanced with explicit cookie consent mechanisms.

W

WordPress Download Manager

wpdownloadmanager.com

48

WordPress Download Manager is a well-established WordPress plugin provider specializing in file and document management as well as digital product e-commerce solutions. The company, operating under W3 Eden, Inc., offers a comprehensive suite of features including membership management, access control, and multiple payment gateway integrations. With over 10 million downloads, it holds a strong market position within the WordPress ecosystem, targeting site owners and developers who require robust digital asset management and sales capabilities. The website is professionally designed, mobile-optimized, and provides extensive documentation and support channels, enhancing user experience and trust. Technically, the site leverages WordPress CMS with modern technologies such as Bootstrap, jQuery, and CDN hosting via Cloudfront for performance optimization. Integration with Google Analytics and payment APIs like Stripe and PayPal indicates a mature digital infrastructure. Security practices include HTTPS enforcement, password protection, and social lock features, although explicit security headers and incident response policies are not prominently documented. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the lack of WHOIS transparency for the domain raises some concerns about registration legitimacy. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a high level of professionalism and technical maturity, though improvements in domain registration transparency and security policy visibility are recommended. Strategically, the company should focus on enhancing domain registration transparency, formalizing security incident response procedures, and publishing a vulnerability disclosure policy to strengthen trust and compliance. Continuous monitoring of third-party scripts and security headers will further improve the security posture and user confidence.

D

Demänová Rezort

demanovarezort.sk

64

Demänová Rezort is a hospitality resort business based in Slovakia, offering hotel-like services, relaxation, and entertainment to tourists and leisure travelers. The website is professionally designed using WordPress with Elementor and optimized for multiple languages targeting regional visitors. The technical infrastructure includes modern analytics and tracking tools with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. The absence of privacy and terms of service pages, as well as contact information, represents compliance and trust gaps. Overall, the website is functional and credible but would benefit from enhanced transparency and security practices.

A

AUMOVIO SE

aumovio.com

63

AUMOVIO SE is a technology-driven company specializing in future mobility solutions, focusing on software-defined vehicles, electric mobility, vehicle electrical/electronic architectures, safety, driver assistance, user experience, and cybersecurity. The company has a strong market position supported by a diverse portfolio of products and services and is publicly listed on the Frankfurt Stock Exchange since September 2025. The website reflects a mature digital presence with comprehensive corporate governance and investor relations information, targeting automotive industry professionals, investors, and potential employees. Technically, the website employs modern web technologies including Adobe Experience Manager components, Google Tag Manager, and consent management tools, ensuring good performance, mobile optimization, and accessibility. The site uses HTTPS and includes privacy and cookie policies with consent mechanisms, indicating compliance with GDPR and related regulations. From a security perspective, while HTTPS and consent management are in place, the absence of visible security headers and incident response information suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the professional site and corporate disclosures mitigate this risk. Overall, the website presents a professional, trustworthy, and well-maintained digital front for AUMOVIO SE, with recommendations to enhance security headers, publish incident response policies, and clarify domain registration details to strengthen trust and compliance.

C

Continental Aftermarket

continental-aftermarket.com

64

Continental Aftermarket is a division of Continental AG, a leading global automotive supplier. The website serves as a comprehensive portal for their aftermarket products and services, targeting automotive professionals, workshops, and distributors. It offers extensive product categories including batteries, brakes, tires, workshop equipment, and specialized vehicle components, supported by training and service programs. The brand is well-established with multiple subsidiaries and a strong market presence in Germany and internationally. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and a consent management platform to ensure compliance with privacy regulations. The site is mobile-optimized, uses HTTPS with a Content Security Policy, and integrates reCAPTCHA Enterprise for form security. The CMS appears to be TYPO3, a robust enterprise content management system. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSP headers, and consent management. However, DNSSEC is not enabled, and additional security headers could be added to enhance protection. No explicit security policy or incident response contacts are publicly available, and no vulnerability disclosure mechanism was found. Overall, the website is professional, trustworthy, and compliant with GDPR. The domain registration data aligns with the business profile, indicating legitimacy. There are no signs of malicious content or security issues. Strategic improvements could focus on enhancing security headers, publishing security policies, and enabling DNSSEC to further strengthen the security posture.

P

POWERPLAY MANAGER, s.r.o.

skijumpmania3.com

61

POWERPLAY MANAGER, s.r.o. operates Ski Jump Mania 3, an online multiplayer ski jumping game targeting winter sports enthusiasts globally. The platform offers free registration, multiplayer competitions, career modes, and mobile app availability on iOS and Android. The website is professionally designed with consistent branding and clear business information, supported by social media presence and comprehensive privacy and cookie policies. Technically, the site uses modern JavaScript libraries, YouTube API, and Facebook OAuth integration, hosted on a CDN infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers are not detected. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy but does not detract from the apparent business legitimacy. Overall, the site is safe, user-friendly, and compliant with privacy regulations.

P

POWERPLAY MANAGER, s.r.o.

biathlonmania.com

64

POWERPLAY MANAGER, s.r.o. operates Biathlon Mania, a free-to-play online biathlon sports game targeting global sports and gaming enthusiasts. The website offers a multilingual platform with social media integration and competitive gameplay features, positioning itself as the leading online biathlon game with millions of players worldwide. The business model focuses on user engagement through free registration, social login options, and community features such as clubs and tournaments. Technically, the website employs modern web technologies including jQuery, YouTube iframe API, and cookie consent management, hosted on a CDN for performance. The site is mobile optimized with good SEO and accessibility basics, providing a smooth user experience. Security is enforced via HTTPS and cookie consent mechanisms, though some improvements like CSP headers and formal security policies are recommended. Security posture is solid but could be enhanced by publishing incident response information and vulnerability disclosure mechanisms. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. WHOIS data for the subdomain is unavailable, which is typical, but the main domain and company information are consistent and trustworthy. Overall, Biathlon Mania presents a professional, secure, and user-friendly online gaming platform with room for incremental security and compliance enhancements to further strengthen trust and resilience.

P

POWERPLAY MANAGER, s.r.o.

tennismania.com

64

POWERPLAY MANAGER, s.r.o. operates Tennis Mania, a free-to-play online tennis simulation game targeting global tennis enthusiasts and online gamers. The platform offers multilingual support, social login via Facebook, and mobile app availability on major app stores, positioning itself as a niche player in the online sports gaming market. The website is professionally designed with clear navigation and consistent branding, supporting a positive user experience. Technically, the site leverages modern web technologies including jQuery, YouTube iframe API, and cookie consent management plugins. Hosting appears to be supported by a CDN infrastructure, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features. From a security perspective, the website enforces HTTPS and implements cookie consent with category management. Password fields are properly masked, and Facebook OAuth integration is used securely. However, the absence of explicit security headers and published security policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a trustworthy and professional front with good privacy compliance and user protections. The lack of WHOIS data for the subdomain is expected and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture.

The website ipcdoctors.com is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. This prevents extraction of business, contact, or policy information. The domain is registered since 2014 with Tucows Domains Inc. and uses SiteGround hosting. The lack of DNSSEC and security headers indicates a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the site. Overall, the website appears to be either restricted intentionally or misconfigured, limiting its usability and trustworthiness.

Glia Media is a specialized medical marketing and communications agency with a focus on neuroscience and healthcare sectors. Established in 2012 and operating as a division of Mayfield Brain & Spine, the company offers a range of services including medical marketing, illustration, writing, academic publication support, event planning, and patient education. Their website reflects a professional and consistent brand presence targeting healthcare professionals and organizations seeking expert communications support. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, and Google Analytics. It is hosted by Bluehost Inc., a reputable hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, supporting trustworthiness. Overall, the website is professional and functional with moderate security and privacy posture. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

Mayfield Spine Surgery Center is a specialized outpatient healthcare provider focusing on minimally invasive spine surgery and pain management. The center is physician-owned, AAAHC Accredited, and Medicare Certified, positioning itself as a trusted provider with a patient-centric approach and high satisfaction ratings. The website reflects a mature business with detailed service descriptions, patient testimonials, and a professional digital presence. Technically, the site is built on WordPress with Elementor and uses modern web technologies, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements in security headers and DNSSEC are recommended. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its healthcare business objectives.

M

Mayfield Education & Research Foundation

mayfieldfoundation.org

52

The Mayfield Education & Research Foundation is a specialized non-profit organization focused on advancing care for patients with brain and spine disorders through education and research. Established in 2011 and based in Cincinnati, Ohio, the foundation offers educational programs, supports research initiatives, and engages donors to further its mission. The website reflects a professional and consistent brand presence targeting patients, medical professionals, researchers, and donors. Technically, the website employs a modern tech stack including Bootstrap 4.3.1, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Hosting details are not explicit but DNS is managed via Register.com. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and Google Tag Manager but lacks DNSSEC and visible security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or data collection fields are detected on the main page, reducing immediate risk exposure. WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, DNSSEC implementation, and explicit privacy and cookie policies to improve compliance and user trust.

comm4u s.r.o. is a Czech-based marketing and localization agency specializing in social media management, marketing communication, video production, online and print advertising, graphic design, translation, and public relations. The company serves brands and products primarily in the Czech and Slovak markets, with notable long-term clients such as Microsoft Xbox and EA Sports. Their website reflects a professional service provider with clear contact information and a focus on comprehensive marketing solutions. Technically, the website employs common web technologies including jQuery, Google reCAPTCHA, Google Analytics, and Google Maps API. The site is mobile-optimized with good design quality and navigation clarity. However, some technical improvements are recommended, such as adding security headers and resolving Google Maps API loading errors. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, which are positive indicators. However, the absence of security headers and lack of published privacy or cookie policies indicate room for improvement in compliance and security posture. No critical vulnerabilities or adult content were detected. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

R

Restaurace Stará Pošta

staraposta.cz

40

Restaurace Stará Pošta is a small hospitality business based in the Czech Republic, specializing in restaurant dining, event hosting including weddings and corporate events, catering, and accommodation services. The venue emphasizes a historical ambiance and family-friendly environment, with additional attractions such as baroque stables. The website reflects a local market position with a focus on personalized event services. Technically, the site is built on WordPress using modern libraries like Bootstrap and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

R

RCS Brno - radiostanice.cz, a.s.

radiostanice.cz

56

RCS Brno - radiostanice.cz, a.s. is a Czech-based company specializing in the sale, installation, and servicing of radiocommunication devices such as professional and citizen band radios, accessories, and related equipment. With over 25 years of experience, the company serves individuals, businesses, and organizations, offering tailored communication solutions to improve operational efficiency. The website reflects a mature e-commerce platform with a professional design and comprehensive product offerings. Technically, the site uses modern tracking and analytics tools, including Google Analytics 4, Microsoft Clarity, and Smartsupp Live Chat, integrated via Google Tag Manager. Privacy and cookie policies are well implemented with user consent mechanisms, indicating good compliance with GDPR requirements. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy. Security posture is solid with HTTPS and form validation but could benefit from enhanced security headers and published security policies. Overall, the site is trustworthy, professional, and well-positioned in the Czech telecommunications retail market.

V

Vildenberg

vildenberg.cz

42

Vildenberg is a small hospitality business operating a brewery and restaurant in Šumice, Czech Republic. The website provides information about their beer products, brewery tours, and restaurant menu, targeting local customers and visitors interested in regional beer experiences. The site is built on WordPress with common web technologies and includes tracking via Google Analytics and Google Tag Manager. However, it lacks critical privacy and cookie policies, contact information, and WHOIS transparency, which impacts trust and compliance. The website is accessible without WAF or security challenges and uses HTTPS, but security headers are missing, and no incident response or security policies are disclosed. Overall, the site is functional but basic in content quality and technical implementation.

SIGNEX, spol. s r.o. is a Czech Republic based small business specializing in comprehensive traffic signage services including project design, approval, installation, rental, and maintenance primarily serving Brno and the South Moravian Region. The company has a long-established presence since 1999, reflected in its domain age and consistent WHOIS data. The website presents a professional and well-structured digital presence with clear contact information and service descriptions tailored to businesses and entities requiring traffic safety solutions. Technically, the site uses legacy JavaScript libraries and common web technologies such as jQuery, Bootstrap, and Google Maps API, with moderate performance and good mobile optimization. Security posture is moderate with room for improvement, notably updating outdated libraries and implementing security headers. Privacy compliance is basic, with a cookie consent banner but no privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

B

Moravská banka vín

bankavin.cz

43

The website bankavin.cz appears to represent a financial or banking-related entity based in the Czech Republic, with domain registration dating back to 2001, indicating a well-established presence. However, the website content provided is minimal and primarily technical, with no visible business descriptions, contact information, or privacy-related policies. The technical infrastructure is based on WordPress CMS with Elementor page builder and jQuery, suggesting a standard modern web platform but lacking advanced security or privacy features. Security posture is weak due to absence of HTTPS confirmation, security headers, and incident response contacts. Overall, the site lacks transparency and compliance indicators, which may impact user trust and regulatory adherence.

T

Tomza

tomza.cz

41

Tomza is a Czech-based packaging service provider established in 2012, offering comprehensive packaging production, design, assembly, and logistics services. The company positions itself as a reliable partner with social enterprise characteristics, targeting businesses requiring packaging solutions. The website is built on WordPress using the Divi theme and includes modern SEO and performance optimizations. Security posture is solid with HTTPS, security headers, and reCAPTCHA on forms, though explicit security policies and incident response information are absent. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the site is professional, well-branded, and trustworthy, with moderate technical performance and good mobile optimization.

C

CAIRO CZ, spol. s r.o.

cairocz.cz

48

CAIRO CZ, spol. s r.o. is a Czech Republic based firearms distributor and retailer specializing in a wide range of firearms, ammunition, and shooting accessories. The company holds exclusive distribution rights for several prominent brands such as Glock, Daniel Defense, and Barrett, positioning itself as a leading player in the Czech firearms retail market. Their product offerings cater primarily to sport shooters, hunters, and firearms enthusiasts. The website demonstrates a professional digital presence with active social media channels and a modern e-commerce platform built on WordPress and WooCommerce. Technically, the site is well-optimized for performance and mobile responsiveness, though some improvements in security headers and privacy compliance are recommended. The security posture is strong with HTTPS and reCAPTCHA usage, but explicit privacy and cookie policies are missing, which could impact GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable given the business sector. Overall, the site is trustworthy, professional, and well-positioned in its niche.

E

Explosia a.s.

explosia.cz

54

Explosia a.s. is a well-established Czech manufacturer specializing in explosives, smokeless powders, and specialized products with over a century of tradition. The company serves industrial and military sectors, offering a broad portfolio including ammunition, explosives, large-caliber munitions, and related services such as accredited testing and consulting. Their market position is strong and supported by a long operational history and consistent branding. Technically, the website is built on WordPress with modern libraries like jQuery and Flickity, hosted behind Cloudflare DNS, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and obfuscated contact details, though lacking advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

W

web by iW

webbyiw.cz

43

The website 'web by iW' is a small-scale web design and development service operated by Ing. Iveta Štyndlová, targeting clients seeking new websites or redesigns. The business appears to be locally focused in the Czech Republic, with contact primarily via phone and Facebook. Technically, the site is built on WordPress using the Elementor page builder, indicating a modern but basic digital infrastructure. The site is HTTPS enabled, but lacks advanced security headers and privacy policies, which are important for compliance and trust. No WHOIS data is available, which limits domain legitimacy assessment but the site content and contact details suggest a legitimate small business presence. Overall, the site is functional but could improve in privacy compliance and security posture.

A

American Heart Association

heart-veterans.jobs

71

The American Heart Association website dedicated to veterans careers provides a comprehensive platform for employment opportunities, veteran resources, and organizational information. The site targets military veterans seeking to transition into civilian healthcare and non-profit roles, emphasizing support and inclusion. The organization holds a strong market position as a leading non-profit in cardiovascular health advocacy, supported by multiple certifications and awards. Technically, the site employs modern frameworks such as Nuxt.js, integrates Google Tag Manager for analytics, and uses responsive design to ensure accessibility across devices. Security posture is solid with HTTPS enforcement and user privacy respected through clear policies and cookie consent mechanisms, though explicit security headers and incident response details are absent. Overall, the site is professional, trustworthy, and well-aligned with its mission, offering a safe and informative user experience.

GEMOS CZ spol s r.o. is a Czech company specializing in smart traffic monitoring and management systems, offering a range of products including dynamic traffic lights, speed indicators, red light violation detection, and navigation solutions. The company targets municipalities and transportation authorities, positioning itself as a niche technology provider within the Czech Republic. The website reflects a professional business model focused on B2B technology solutions in the transportation and energy sectors. Technically, the website employs standard web technologies such as Bootstrap and jQuery, with integration of Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, though accessibility and SEO features are basic. No CMS or hosting provider details were identified. The website is fully accessible with no blocking or WAF detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and verification of domain registration details to strengthen trust and compliance posture.

A

ARICOMA

aricoma.cz

70

ARICOMA is a leading enterprise IT services provider based in the Czech Republic, offering a broad range of end-to-end IT solutions to commercial firms and public sector entities across Europe. Their market position is strong, branding themselves as the #1 in enterprise IT, with key services including business applications, digital solutions for modern states, IT infrastructure, cybersecurity, cloud services, and comprehensive IT support. The company is part of the KKCG group, indicating a solid corporate backing. Technically, the website is built on Kentico CMS and leverages modern web technologies and marketing tools such as Google Tag Manager, Microsoft Clarity, and various social media pixels, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit incident response contacts are provided. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanisms. Overall, the website is professional, well-designed, and trustworthy, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

AVE CZ odpadové hospodářství s.r.o. is a leading Czech company specializing in waste management, municipal services, environmental remediation, demolition, road maintenance, and facility management. The company positions itself as a market leader with a strong focus on ecological responsibility and community engagement. Their website reflects a professional and comprehensive digital presence, featuring detailed service descriptions, press releases, and CSR initiatives. Technically, the site is built on modern frameworks such as Next.js and React, hosted on DigitalOcean, and incorporates standard marketing and analytics tools like Google Tag Manager and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers are not confirmed. The absence of WHOIS data limits domain trust assessment, but the website content and business operations appear legitimate and well-established. Overall, the site demonstrates a mature digital infrastructure with good content quality and user experience, supporting the company's market position and business credibility.

M

Ministerstvo obrany ČR a Charity Česká republika

digimak.cz

59

DiGiMÁK.cz is a government and charity-backed campaign website launched in 2024 to honor war veterans in the Czech Republic through a virtual poppy initiative. The site serves as an informational platform for the campaign organized by the Ministry of Defence of the Czech Republic and Charity Czech Republic. It targets Czech citizens and supporters of veterans, providing campaign details and links to the Military Solidarity Fund for donation results. The website is professionally designed with consistent branding and clear messaging but lacks privacy and cookie policies as well as contact information. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, hosted under a recently registered domain consistent with the campaign launch. Security posture is basic with no detected security headers or explicit policies, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is trustworthy and safe, but improvements in privacy compliance and security best practices are recommended.

B

BriberyMatters

briberymatters.com

57

BriberyMatters is a website focused on the topic of bribery, likely aiming to provide information or advocacy related to anti-bribery issues. The site is built on the Wix platform, indicating a small to medium scale digital presence with basic technical infrastructure. The website content is accessible and safe, with no adult or explicit material detected. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. The site lacks critical compliance elements such as privacy and cookie policies, contact information, and security policies, which impacts its trustworthiness and business credibility. Technically, the site uses standard Wix technologies and scripts, with moderate performance and basic SEO and accessibility features. Security posture is basic with HTTPS enabled but missing advanced security headers and policies.

E

ELEKTRO Skalka s.r.o

e-elektro.cz

49

ELEKTRO Skalka s.r.o operates the e-commerce website www.e-elektro.cz, specializing in the sale of vacuum cleaner bags, HEPA filters, and related household electronic accessories primarily targeting customers in the Czech Republic. The company positions itself as a niche retailer with a focus on vacuum cleaner parts and small electrical appliances, offering a broad catalog of products with clear pricing and availability. The website is professionally designed with good navigation and mobile optimization, supporting customer engagement through contact forms, phone, and email. Privacy and cookie policies are implemented with GDPR compliance in mind, including consent mechanisms.

S

SackyVysavace.cz

sackyvysavace.cz

56

SackyVysavace.cz is a Czech Republic based specialized e-commerce retailer focused on vacuum cleaner bags, filters, and accessories. The website offers a broad catalog of products with clear categorization and supports online ordering with options for delivery and 24/7 personal pickup at a physical location in Prague. The business targets consumers and small businesses needing vacuum cleaner supplies. Technically, the website uses a mix of modern JavaScript libraries and tracking tools, including Google Analytics and Tag Manager, with a proprietary or custom e-commerce platform (Shopion.cz). The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective, but the website content and contact details appear legitimate and professional. Overall, the site is safe, compliant with GDPR, and suitable for general audiences.

B

Úvodní stránka | BEST

bestvisio.cz

65

BESTVISIO.cz is a Czech Republic based small business specializing in providing innovative digital tools for customers to select and visualize paving and fencing products. Their offerings include online configurators for paving and fences and a virtual reality application that allows users to preview fencing options in real environments using mobile devices. The website is professionally designed with good content quality and consistent branding, targeting homeowners and customers interested in outdoor home improvement products. Technically, the site uses modern web technologies including lazy loading images, responsive CSS, and integrates Google Analytics and CookieHub for tracking and cookie consent management. Security posture is moderate with cookie consent and Google reCaptcha usage but lacks visible security headers and published privacy policies. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is not uncommon for small businesses. Overall, the site is safe, user-friendly, and provides useful tools for its niche market.

B

BEST, a.s.

best.cz

65

BEST, a.s. is a well-established Czech manufacturer and retailer specializing in concrete products for terraces, gardens, and outdoor construction. With over 30 years in the market and a broad product portfolio exceeding 4,000 variants, BEST holds a leading position in its industry. The company offers a comprehensive range of products including paving stones, fences, palisades, drainage systems, and construction blocks, supported by physical showrooms and digital tools like BEST VISIO for product visualization. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to both professional contractors and end consumers. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, and various JavaScript libraries to enhance user experience and security. The site is mobile-optimized and implements cookie consent mechanisms compliant with GDPR. Security measures include HTTPS enforcement and spam protection on forms, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data for the domain is unavailable from the CZ NIC WHOIS server, which limits verification of domain registration details. Despite this, the website's professional appearance, certifications, and business information support its legitimacy. No signs of malicious activity or content blocking were detected, and the site maintains a high level of trustworthiness. Overall, BEST, a.s. demonstrates a strong business and digital maturity with good security posture and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

W

Webglobe, s.r.o.

one-two.eu

45

The website one-two.eu is a Czech Republic based small business specializing in offering original escape room games in the cities of Plzeň and Liberec. The business focuses on entertainment services with key offerings including themed escape games such as Paleontolog and Útěk z ponorky. The site is built on WordPress and leverages multiple plugins to support multilingual content, GDPR compliance, and user interaction features such as contact forms and popups. The technical infrastructure is modern and includes Google Analytics and reCAPTCHA for analytics and security respectively. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not provided. Overall, the site is professional, user-friendly, and compliant with privacy regulations, targeting a general audience interested in local entertainment activities.

W

WEST MEDIA, s.r.o.

dinopark.cz

65

DinoPark operates a network of dinosaur-themed amusement parks across several European countries, providing family-friendly entertainment and educational experiences. The company is positioned as a regional leader in themed attractions with multiple locations and a strong brand presence. The website is professionally designed, mobile-optimized, and rich in content, supporting the business model effectively. Technically, the site uses modern frameworks like Next.js and React, with good SEO and performance characteristics. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and public incident response information. The absence of WHOIS data reduces domain trust from a registration perspective, but the business information and online presence indicate legitimacy. Overall, the site is safe, compliant with GDPR, and targets families and educational groups.

Mobirise Ltd operates the Mobirise AI Website Generator, a technology platform that enables users to create professional websites easily using AI and drag-and-drop tools. The company targets a broad audience including small businesses, freelancers, bloggers, and e-commerce startups, positioning itself as a flexible and user-friendly alternative to other AI website builders. Technically, the website is built on modern frameworks like Bootstrap 5 and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and domain protections, though some headers and explicit security policies could be improved. Privacy compliance is adequate with clear privacy and terms pages, but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

M

Mairie de Megève

megeve-booking.com

61

The website megeve-booking.com serves as the official online booking platform for the Megève tourism office, specializing in accommodation and activity reservations in the Megève ski resort area in Haute-Savoie, France. It targets tourists and visitors seeking a seamless booking experience for hotels, chalets, and local activities. The platform is positioned as a trusted and official channel supported by the local municipality (Mairie de Megève), enhancing its credibility and market presence. Technically, the site employs modern web technologies including JavaScript frameworks, lazy loading for images, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The platform is hosted under a stable domain registered in 2021 with a 5-year validity period. The website is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC and explicit security headers, and no dedicated security policy or incident response contact is published. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the security posture is solid but could be improved with additional security best practices. The overall risk assessment is low, with no signs of malicious activity or suspicious content. The site complies with GDPR requirements, providing privacy and cookie policies, and offers clear contact information. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a security.txt file to enhance transparency and trust.

B

Beetween

beetween.fr

41

Beetween is a French-based company founded in 2007 that provides a customizable online recruitment software solution (ATS) targeting recruiters and HR professionals. The website presents a professional and user-friendly platform with a clear focus on recruitment process optimization and collaboration. The company positions itself as a flexible and adaptable solution across various sectors and company sizes. Technically, the website is built on WordPress and integrates multiple marketing and analytics tools such as HubSpot, Microsoft Clarity, and Google Tag Manager, hosted by OVH. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks some security headers and published security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

T

tolk.ai - Generative AI powered Chatbot and Livechat solutions

thechatbotfactory.com

65

tolk.ai is a French technology company specializing in generative AI-powered chatbots and livechat solutions designed to enhance customer relations. Their SaaS platform offers no-code deployment of AI virtual assistants, livechat agents, and analytics tools to improve customer service efficiency and business insights. The company targets businesses seeking advanced conversational AI to automate pre- and post-sales customer interactions. The website demonstrates a professional digital presence with partnerships such as Microsoft France and availability on Azure Marketplace, indicating a credible market position. Technically, the site is built on WordPress with modern plugins and analytics integrations, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies are recommended. Privacy compliance is partial, lacking visible privacy and cookie policies on the main page. Overall, tolk.ai presents a trustworthy and professional business with room for enhanced transparency and security documentation.

L

LISIO

numanis.net

44

LISIO is a French technology company specializing in digital inclusion and responsible web solutions. Their offerings include SaaS products and consulting services aimed at making websites accessible, inclusive, and environmentally sustainable. The company targets website owners and organizations committed to responsible digital communication. The website is professionally designed, mobile-optimized, and rich in relevant content, demonstrating a strong market position within its niche. Technically, the site leverages modern JavaScript frameworks, Matomo analytics with privacy-conscious configurations, and cookie consent management via Axeptio. Hosting is provided by OVH, a reputable provider. Security posture is solid with HTTPS and privacy-respecting analytics, though the site lacks a published security policy and incident response details. Overall, the website is trustworthy, well-branded, and compliant with GDPR requirements.

S

Spin On

spin-on.fr

61

Spin On is a small, professional web agency based in Besançon, France, specializing in the creation of websites, e-commerce platforms, mobile applications, and custom software development. The company has been operating since 2013 and serves primarily local and regional businesses. Their website demonstrates a solid digital presence with a focus on GDPR compliance and user privacy, evidenced by the integration of Cookiebot for cookie consent management. The agency leverages modern web technologies and frameworks such as WordPress, Drupal, Prestashop, and Laravel to deliver tailored solutions to clients. Technically, the website employs a modern tech stack including JavaScript libraries like jQuery, TweenMax, and Rellax for enhanced user experience and performance optimizations such as lazy loading. Hosting is provided via DigitalOcean, a reputable cloud provider, ensuring reliable infrastructure. The site is mobile-optimized and SEO-friendly, although accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The use of Facebook Pixel and Google Analytics indicates moderate user tracking, balanced with GDPR compliance. Overall, Spin On presents a trustworthy and professional digital footprint with room for improvement in security hardening and accessibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and compliance posture.

Elisath is a French leader specializing in ticketing and access control systems with over 25 years of industry experience. The company offers tailored, integrated solutions for a wide range of public and leisure facilities including swimming pools, water parks, stadiums, gyms, cultural centers, and public transport systems. Their market position is strong with over 900 references in France and internationally, targeting facility managers and operators. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern plugins and SEO optimizations. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though explicit security headers and incident response policies are not visible. Overall, the site demonstrates a good security posture and compliance with privacy regulations, supported by comprehensive privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. The absence of WHOIS data limits transparency but is likely due to privacy protection, which is common for commercial entities. Strategic recommendations include enhancing security headers, publishing incident response details, and improving accessibility features.

A

Apidae Tourisme

apidae-tourisme.com

50

Apidae Tourisme operates a leading national platform for tourism data management in France, serving over 900 clients and 30,000 professional users. The company provides a cooperative SaaS platform enabling territories to collect, enrich, and distribute tourism-related data, supporting both institutional stakeholders and digital service providers. Their market position is strong as a key enabler of digital transformation in the tourism sector. Technically, the website is built on WordPress with modern JavaScript libraries and plugins, offering good performance and mobile optimization. Security measures include HTTPS, anti-spam protection, and GDPR-compliant cookie management, though additional security headers could enhance posture. The absence of WHOIS data is a concern but does not detract from the professional and trustworthy presentation of the business. Overall, Apidae Tourisme demonstrates a mature digital presence with solid business credibility and compliance.

A

Alibaba Cloud Computing (Beijing) Co., Ltd.

alidns.com

59

Alibaba Cloud Computing (Beijing) Co., Ltd. operates the alidns.com website, providing global public recursive DNS services as part of Alibaba Cloud's internet infrastructure offerings. The website positions itself as a reliable, fast, and secure DNS service provider, targeting both general internet users and enterprise customers. The business is well-established, with a domain age of over 15 years and strong brand association with Alibaba Group. Key services include public DNS resolution, cloud DNS authoritative services, and support for modern DNS security protocols such as DoH and DoT. Technically, the website employs modern JavaScript frameworks and Alibaba's proprietary analytics tools, ensuring good performance and mobile optimization. The hosting is managed by Alibaba Cloud, ensuring robust infrastructure and fast content delivery. However, the site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS and modern tracking scripts but does not disclose security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and consistency with the business entity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security disclosures to improve user trust and regulatory adherence.

The website brightlandsretreat.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. As a result, no business-specific content, contact information, or policies are visible. The domain is registered with GoDaddy.com, LLC since 2021 and uses Cloudflare DNS services, indicating a standard setup for small to medium websites. However, the lack of accessible content and absence of privacy or cookie policies limit the ability to assess the business or security posture comprehensively. The technical infrastructure includes Cloudflare's security mechanisms, which provide protection but also restrict content visibility. Overall, the website's security posture is moderate due to Cloudflare protection, but the business credibility and privacy compliance cannot be verified due to content blocking.

F

FC Zlín

fczlin.com

47

FC Zlín operates an official football club website serving the Czech Republic's regional sports community. The site provides comprehensive information about the club, including team rosters, match schedules, news updates, ticket sales, and fan merchandise. The business model centers on engaging fans and partners through digital channels, supporting ticketing and merchandising revenue streams. The website demonstrates consistent branding and a professional design tailored to sports enthusiasts and local supporters. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, OwlCarousel, and Font Awesome, ensuring a responsive and user-friendly experience. Hosting and domain registration are managed transparently with Tucows Domains Inc. as registrar and DNS servers located in the Czech Republic. Performance is moderate with good mobile optimization, though SEO and accessibility features are basic. From a security perspective, the site uses HTTPS with domain transfer protections enabled but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial; while a terms of service and basic privacy policy exist, no cookie consent mechanism or GDPR-specific disclosures are evident. Incident response and security policy information are absent, representing a compliance gap. Overall, the website is functional and trustworthy for its audience but would benefit from improved security hardening and privacy compliance measures. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

SK Slavia Praha

slavia.cz

46

SK Slavia Praha is a prominent Czech football club with a well-established online presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match schedules, ticket sales, team information, and fan engagement content. The business model revolves around sports media, merchandising, and ticketing services, targeting football enthusiasts primarily in the Czech Republic. The website reflects a professional brand image consistent with the club's reputation and partnerships.

M

MFK Karviná a.s.

mfkkarvina.cz

40

MFK Karviná a.s. operates an official website for their football club, primarily targeting local football fans and sports enthusiasts in the Czech Republic. The site provides basic information about the club, ticket sales, and news updates. The business model is focused on sports club promotion and fan engagement within the regional football league context. The website is modest in content and design, reflecting a small-sized organization with limited digital maturity. Technically, the website uses basic JavaScript and CSS with legacy character encoding (windows-1250). There is no evidence of modern CMS or advanced frameworks. Mobile optimization and accessibility are basic, and no advanced SEO or analytics tools are detected. The site lacks HTTPS, security headers, and privacy compliance mechanisms, indicating a low level of security and privacy maturity. From a security perspective, the absence of HTTPS and security headers is a significant vulnerability. No privacy policy or cookie consent mechanisms are present, which may expose the organization to GDPR compliance risks. The lack of contact information and incident response details further weakens the security posture. However, no malicious or adult content is detected, and the site is accessible without WAF or blocking mechanisms. Overall, the website presents moderate trustworthiness based on content alignment with the football club's identity but suffers from critical security and privacy shortcomings. Strategic improvements in HTTPS implementation, privacy compliance, and security best practices are recommended to enhance trust and protect user data.

F

FK Teplice, eSports.cz, s.r.o.

fkteplice.cz

37

FK Teplice is a well-established Czech football club with a strong digital presence through its official website. The site offers comprehensive information about the club's activities, including news, match schedules, team rosters, fan engagement, and community initiatives such as CSR and esports. The domain has been registered since 1998, reflecting the club's longstanding history. Technically, the website employs modern web technologies including Google Analytics, Adsense, and Google Translate, hosted on Websupport infrastructure. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is moderate with cookie consent implemented but lacks visible advanced security headers and explicit privacy or terms of service pages. No direct contact information or incident response details are provided, which could be improved to enhance trust and compliance. Overall, the website is a credible and functional digital asset for FK Teplice, serving its target audience effectively.

F

FK Pardubice

fkpardubice.cz

45

FK Pardubice is a Czech football club with an official website providing comprehensive information about the club, teams, matches, tickets, and fan engagement. The site targets fans and the local community, offering news, multimedia content, and official club details. The domain is well-established since 2011, supporting the club's legitimacy and presence in the regional sports market. Technically, the website uses modern JavaScript libraries, CSS frameworks, and tracking tools with proper consent mechanisms, hosted on a Czech provider's infrastructure. Security posture is good with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

F

Fotbalový Klub Jablonec a.s.

fkjablonec.cz

47

FK Jablonec is a well-established Czech football club with a strong digital presence through its official website. The site serves as a comprehensive platform for fans and stakeholders, offering news, match information, player statistics, ticketing details, and a merchandise e-shop. The club maintains active engagement with its audience via multiple social media channels and partners with various sponsors and organizations, reflecting a solid market position within Czech football. The website's design is professional and consistent with the club's branding, targeting football enthusiasts and the local community. Technically, the site employs modern web technologies including JavaScript, Google Tag Manager, and custom CSS, hosted on a Czech hosting provider, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security headers and incident response contact information. Overall, FK Jablonec's website demonstrates a mature digital infrastructure with room for enhanced security practices and transparency. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clearer contact information for privacy and incident response. These improvements would strengthen the club's trustworthiness and compliance posture while maintaining its strong fan engagement and business credibility.