Security Directory

Miele Romania operates as a premium brand retailer and service provider for household and commercial appliances, including kitchen, laundry, and cleaning products. The website demonstrates a strong market position with a focus on quality and customer experience, targeting Romanian consumers and commercial clients. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, integrated with SAP Commerce Cloud and Contentstack CMS, indicating a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not explicitly found. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility, supporting a high level of business credibility.

Miele is a premium global brand specializing in high-quality household appliances, including kitchen equipment, laundry care, vacuum cleaners, and cleaning agents. The Polish website serves as an e-commerce and brand showcase platform targeting consumers seeking premium appliances. The site is built on modern web technologies such as Nuxt.js and integrates with Contentstack CMS and Hybris commerce platform, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent implemented, though explicit security headers and privacy policy details are lacking. The absence of WHOIS data from the .pl registry is noted but does not detract from the site's legitimacy given the brand's global recognition and professional presentation. Overall, the site is well-designed, accessible, and trustworthy, with moderate tracking via Google Tag Manager.

Miele Nederland is a premium household appliance provider with a strong market presence in the Netherlands. The company offers a wide range of products including kitchen appliances, washing and drying machines, vacuum cleaners, and cleaning products. Their website reflects a mature digital infrastructure using modern frameworks like Nuxt.js and integrates with platforms such as SAP Commerce Cloud and Contentstack CMS. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though a dedicated security policy and incident response contact could enhance trust further. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the brand's premium positioning.

Miele is a globally recognized premium brand specializing in household and commercial appliances, including kitchen, laundry, and vacuum cleaning products. The website presents a professional and comprehensive digital presence with detailed product categories, promotions, and customer support resources. The technical infrastructure leverages modern web technologies such as Nuxt.js and Vue.js, ensuring a responsive and accessible user experience. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth. WHOIS data could not be retrieved due to domain naming rules error, but the website content and branding strongly indicate legitimacy. Overall, the site is well-positioned to serve its target audience with a high level of professionalism and trustworthiness.

Miele is a globally recognized premium brand specializing in the manufacturing and retail of household and commercial appliances. The website reflects a mature digital presence with a focus on kitchen, laundry, vacuum cleaning, and cleaning products. The site is well-structured, mobile-optimized, and uses modern web technologies such as Nuxt.js. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies are not evident. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website demonstrates high professionalism and trustworthiness consistent with an enterprise-level manufacturer and retailer.

Miele is a globally recognized premium brand specializing in the manufacturing and retail of high-quality household appliances including kitchen equipment, laundry care, vacuum cleaners, and cleaning products. The French website serves as a comprehensive e-commerce and informational platform targeting consumers seeking durable and efficient home appliances. The site demonstrates a mature digital infrastructure leveraging modern frameworks such as Nuxt.js and Vue.js, integrated with commerce platforms like Hybris and content management via Contentstack. Security measures are robust with HTTPS enforcement and multiple security headers, while privacy compliance is evidenced by clear privacy and cookie policies. However, WHOIS data is unavailable, likely due to AFNIC policies, but this does not detract from the site's legitimacy given the brand's global presence and professional presentation.

Miele Denmark operates a premium retail website offering a wide range of household appliances including kitchen products, laundry care, vacuum cleaners, and related accessories. The site targets both consumers and professional users in Denmark, emphasizing innovation, design, and quality. The business is positioned as a premium brand with a strong market presence and offers both online and physical retail experiences. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and privacy compliance indicators. No WHOIS data was available to verify domain registration details, limiting full trust assessment. Overall, the website is professional, trustworthy, and safe for general audiences.

Miele.hr is the Croatian localized website for Miele, a premium global brand specializing in household and commercial appliances. The website offers a comprehensive catalog of products including kitchen appliances, laundry care devices, vacuum cleaners, and cleaning agents. The site targets Croatian consumers seeking high-quality, durable appliances. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Akamai CDN for hosting and performance. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and privacy policies are not explicitly found in the provided content. WHOIS data confirms the domain's legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a trustworthy and professional digital presence for Miele in Croatia.

Miele USA operates as a premium global brand specializing in household and commercial appliances, offering a wide range of products including kitchen appliances, laundry care, vacuum cleaners, and cleaning products. The website demonstrates a strong market position with comprehensive product offerings and dedicated support and trade sections, targeting both consumers and trade professionals. Technically, the site is built on modern frameworks such as Nuxt.js and integrates with platforms like SAP Commerce Cloud and Contentstack CMS, ensuring a performant and mobile-optimized user experience. Security measures are robust with HTTPS enforcement and multiple security headers, though the absence of a dedicated security policy and incident response information suggests room for improvement. The WHOIS data is notably missing, which is unusual for a brand of this stature and may indicate privacy protection or registry issues, warranting further monitoring. Overall, the website is professional, secure, and user-friendly, supporting Miele's premium brand image.

D

David Grudl

dibiphp.com

56

The website dibi.nette.org presents Dibi, a smart database abstraction library for PHP, authored by David Grudl. It targets PHP developers seeking a secure and efficient database layer, especially those using the Nette Framework. The site offers comprehensive technical documentation, code examples, and community resources, positioning itself as a niche but well-regarded open source project within the PHP ecosystem. The hosting is provided by CESNET, indicating a reliable infrastructure. Technically, the site uses modern web technologies including PHP 8.0+, JavaScript ES modules, Algolia search, and Google Analytics for tracking. The design is professional, mobile-optimized, and accessible, with clear navigation and rich content. Security-wise, the site enforces HTTPS and promotes secure coding practices, though it lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, limiting domain trust verification, but the site’s branding and community presence support legitimacy.

U

Universeodon.com

universeodon.com

67

Universeodon.com operates as a decentralized Mastodon social media server focused on connecting users interested in science, philosophy, and diverse hobbies within the fediverse. It offers extended post length support and is community-driven, funded by Atlas Media Group and supporter contributions. The platform leverages Mastodon open-source software and is hosted on Superior Networks in London. The website is well designed, mobile optimized, and provides clear information about its mission and administration. Security practices include HTTPS everywhere and local/offsite backups, with encouragement for users to enable two-factor authentication. However, DNSSEC is not enabled, and security headers are missing, which are areas for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service page. Overall, the domain registration details align with the business claims, indicating legitimacy and trustworthiness.

T

TheCanadian.Social

thecanadian.social

69

TheCanadian.Social is a niche Mastodon social networking platform focused on Canadian politics, sports, and current events, serving a small but active user base. It operates as an independent Mastodon instance within the fediverse, providing users with a decentralized social media experience without ads or algorithms. The platform leverages modern web technologies including Ruby on Rails and React, with media assets hosted on Backblaze B2, ensuring a contemporary and mobile-optimized user experience. Security posture is moderate with HTTPS implied, but lacks explicit security headers and formal policies such as terms of service or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is legitimate and trustworthy within its community but could improve transparency and compliance.

H

Hachyderm

hachyderm.io

68

Hachyderm.io operates as an independent Mastodon social networking server primarily serving LGBTQIA+ and BLM communities within the tech industry worldwide. It provides a safe, moderated space for social interaction leveraging the open-source Mastodon platform. The website demonstrates a consistent brand and community focus with active user engagement and a profile directory. Technically, the site uses modern web technologies including React and is hosted on AWS infrastructure, ensuring reasonable performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are not explicitly confirmed. Privacy compliance is basic with a privacy policy present but lacking cookie consent and terms of service. Business credibility is moderate given the community-driven nature and absence of formal company contact details. Overall, the site is trustworthy and safe for general audiences.

T

The Type Founders, LLC

typographer.io

60

Typographer.com is a specialized platform offering designers and creatives a curated collection of over 10,000 fonts with tools for discovery, syncing, testing, and licensing. Powered by The Type Founders, LLC, the service targets professionals and students with subscription plans, including free trials and student offers. The website demonstrates a mature digital presence with a clean, professional design and clear navigation, optimized for mobile and desktop users. Technically, it leverages modern web technologies such as Astro, integrates with popular design tools, and uses reputable third-party services for analytics and marketing. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Typographer.com presents a trustworthy and professional service in the font licensing niche.

E

eFotbal

efotbal.cz

59

eFotbal.cz is a Czech Republic-based online media platform specializing in football news, interviews, analyses, and coverage of domestic and international football events. The site targets football fans primarily in the Czech Republic and provides comprehensive content on local leagues, teams, players, and major European competitions. The platform demonstrates a mature digital presence with modern web technologies such as React and integrates analytics and cookie consent tools to comply with privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structured data suggest a legitimate media entity. Security posture is generally good with HTTPS and privacy policies in place, but lacks explicit security policy and incident response contacts. Overall, the site offers a professional user experience with good content quality and SEO optimization, making it a trusted source for football news in its market segment.

The Atlas of MS website is a professionally designed and maintained platform operated by the Multiple Sclerosis International Federation (MSIF), a UK-based non-profit organization. It serves as a comprehensive global resource for epidemiological data on multiple sclerosis, providing detailed visualizations, downloadable reports, and advocacy tools. The site targets healthcare professionals, researchers, policy makers, and the general public interested in MS data. Its market position is strong as a leading global data resource and advocacy tool in the MS healthcare sector. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, and Google Analytics, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Performance is moderate, with asynchronous loading of analytics and tag management scripts. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No exposed sensitive data or vulnerabilities were detected in the provided content. Privacy compliance is strong, with clear links to comprehensive privacy and terms policies hosted on the MSIF domain. Contact is primarily via forms and external MSIF contact pages, with no direct emails or phone numbers disclosed. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies to further strengthen the security posture and user trust.

N

Nadace České pošty

nadaceceskeposty.cz

61

Nadace České pošty is a Czech non-profit foundation established in 2016, dedicated to supporting social and health care, education, volunteering, and crisis assistance. The foundation operates multiple charitable programs and partners with various organizations to improve the quality of life for individuals and communities in need. Their website presents a professional and consistent brand image, targeting a general audience including donors and social organizations. Technically, the website uses modern web technologies including modular CSS and JavaScript, Google and Fontshare fonts, and is built on a CMS platform likely Pux. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-maintained, suitable for its non-profit mission.

T

Telia Lietuva, AB

domoplius.lt

59

Domoplius.lt is a Lithuanian real estate online marketplace operated by Telia Lietuva, AB. The platform offers a comprehensive range of property listings including apartments, houses, commercial spaces, and land both within Lithuania and abroad. It targets buyers, renters, and investors seeking real estate opportunities, positioning itself as a leading property portal in Lithuania. The website features a modern, responsive design with clear navigation and extensive listings, supported by advanced search and filtering capabilities. The business model centers on providing a digital platform for real estate transactions and advertising.

W

WAL International AG

wal.world

53

WAL International AG operates a digital legal services platform providing global access to lawyers, contract templates, legal knowledge, and digital courts. The platform targets individuals and businesses seeking accessible legal solutions worldwide, leveraging a web interface and mobile applications available on iOS and Android. The business model centers on connecting users with legal professionals and offering standardized legal documents, positioning WAL as a niche player in the legal tech industry with a medium-sized operational scale based in Switzerland. Technically, the website employs modern JavaScript modules, integrates Stripe for payment processing, and uses Google Identity Services for authentication. The platform is mobile-optimized and offers a professional user experience, though some technical enhancements such as improved accessibility and SEO could be beneficial. Hosting and CMS details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and uses reputable third-party services for payments and authentication, indicating a solid baseline security posture. However, the absence of explicit security headers and a cookie consent mechanism suggests room for improvement in compliance and defense-in-depth strategies. The WHOIS data is privacy protected, which is typical for commercial entities, and no suspicious patterns were detected. Overall, WAL presents a credible and professional legal services platform with good technical and security foundations. Strategic enhancements in privacy compliance, security policy transparency, and contact information availability would further strengthen trust and regulatory adherence.

Č

Český statistický úřad (ČSÚ)

czso.cz

68

Český statistický úřad (ČSÚ) is the official statistical authority of the Czech Republic, providing extensive statistical data and analysis across demographics, economy, society, and regional statistics. The website serves government officials, researchers, media, and the general public with a broad range of databases, publications, and methodological resources. It holds a strong market position as the primary source of official statistics in the country. Technically, the website employs modern JavaScript modules, a custom government UI framework, and Matomo analytics configured to respect user privacy by disabling cookies. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS exclusively and avoids exposing sensitive data. However, it lacks explicit HTTP security headers and a published security or incident response policy. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and security posture. Overall, the site is professional, trustworthy, and compliant with GDPR, with comprehensive privacy and cookie policies. The absence of WHOIS data is noted but likely due to registry policies for government domains. The risk level is low, but recommendations include enhancing security headers and publishing security policies to further strengthen trust and compliance.

Random State is a Swedish-based technology company specializing in innovative lottery and bingo gaming solutions. They provide a comprehensive platform including player account management, random number generation, game modules, cloud hosting, and compliance support. Their team comprises industry veterans and creative professionals focused on delivering exclusive and engaging real money gaming experiences. The company holds recognition such as the Swedish Gambling Award and has secured strategic investments, positioning them as a notable player in the iLottery sector. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, leveraging Storyblok CMS and AWS CloudFront CDN for performance and scalability. The site is mobile-optimized, fast-loading, and SEO-friendly, with multimedia content enhancing user engagement. Security headers are implemented, and HTTPS is enforced, though DNSSEC is not enabled. No major vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site lacks published privacy and terms of service policies, which is a notable gap for GDPR compliance. Cookie consent is implemented, but no incident response or vulnerability disclosure information is available. Contact information is clearly provided, but no phone numbers are listed. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and terms policies, enabling DNSSEC, adding security.txt or vulnerability disclosure, and enhancing security headers. These steps will improve compliance, trust, and security maturity.

R

RESPECT, a.s.

respect.cz

69

RESPECT, a.s. is a well-established Czech insurance brokerage firm specializing in tailored insurance solutions for businesses and entrepreneurs. With over 30 years of experience, the company offers comprehensive risk management, insurance program design, and claims handling services. The website reflects a mature market position with a focus on B2B clients across various industry sectors. Technically, the site employs modern JavaScript frameworks and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The lack of WHOIS data reduces domain trust slightly but is mitigated by strong business content and contact transparency.

M

Mars, Incorporated

marspromo.cz

51

Mars Czech promotional website serves as a regional marketing platform for Mars, Incorporated, focusing on brand promotions, initiatives, and consumer engagement within the Czech Republic. The site features official Mars branding and links to global Mars social media channels, reinforcing its legitimacy and corporate alignment. The business model centers on consumer goods promotion and marketing campaigns tailored to the local market. Technically, the site employs modern JavaScript modules and the Vue.js framework, with Bootstrap and FontAwesome for styling and icons, indicating a contemporary front-end approach. However, no CMS or hosting provider details are evident, and performance is moderate with basic SEO and accessibility features. Security posture is moderate; HTTPS is assumed but no security headers or incident response information are present. Privacy compliance is strong with clear links to comprehensive privacy, cookie, and legal policies hosted on mars.com, though no cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in security and contact transparency.

S

Sedo.com

riceforce.eu

70

Sedo.com operates as a well-established domain marketplace platform, offering domain sales and transfer services globally. The analyzed page is a sales landing page for the domain riceforce.eu, providing options to buy immediately or submit an offer. Sedo emphasizes its 26 years of experience, high volume of domain transfers, and multilingual support, positioning itself as a trusted intermediary in the domain brokerage market. The platform supports multiple payment methods and provides personal assistance to buyers, targeting domain investors and businesses seeking domain acquisitions. Technically, the website employs modern web technologies including JavaScript ES modules and Cloudflare DNS services, ensuring good performance and mobile optimization. The SSL configuration is excellent, and the domain registration is consistent and legitimate, with no privacy protection masking ownership details. However, DNSSEC is not enabled, and some security headers are missing, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service policies on this page. Contact information is clearly provided, enhancing business credibility and user trust. Overall, the website is professional, trustworthy, and safe, with good technical and security foundations. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and adding security headers to further strengthen the security posture.

O

OVH SAS

urlr.me

66

URLR is a French-based SaaS platform specializing in branded URL shortening, QR code generation, and link analytics, targeting businesses and marketers who want to maintain brand identity in their digital communications. The company emphasizes GDPR compliance and French origin, positioning itself as a trustworthy and privacy-conscious alternative to generic link shorteners. The website is professionally designed, mobile-optimized, and uses modern web technologies including Symfony, Stimulus, and Matomo analytics. Security measures include HTTPS, CSRF protection, and CAPTCHA integration, though some advanced security headers and policies could be improved. The domain registration is consistent with the business profile, registered with OVH SAS in France since 2019, indicating legitimacy and stability.

I

InnoTrans

innotrans.com

56

InnoTrans is a prominent international trade fair specializing in transport technology, offering a comprehensive platform for industry professionals, exhibitors, and visitors. The website reflects a mature digital presence built on modern technologies such as React and Next.js, with a content management system likely powered by Episerver. The site provides extensive information about the event, including exhibitor directories, programs, and press releases, although explicit privacy and terms of service pages are not detected in the provided content. Security measures include HTTPS enforcement and cookie consent via Usercentrics, but lack of visible security headers and incident response contacts suggest room for improvement. Overall, the website is professional and trustworthy, serving a large audience in the transportation sector primarily in Germany.

J

J&T INVESTIČNÍ SPOLEČNOST, a.s.

jtarchinvestments.cz

47

J&T ARCH INVESTMENTS is a Czech-based qualified investor fund managed under the supervision of the Czech National Bank. The fund focuses on co-investing alongside the founding families of J&T and leading Czech-Slovak business figures, targeting sectors such as energy, banking, e-commerce, media, real estate, hospitality, and professional sports. The website is built on a modern Nuxt.js framework, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly implemented, though privacy and cookie policies are absent, which is a compliance gap. WHOIS data is missing, which slightly reduces domain trustworthiness but the business content and partner references support legitimacy. Overall, the site is professional and trustworthy for its target audience of qualified investors.

B

bluesign technologies ag

bluesignguide.com

44

The website bluesignguide.com serves as a public database for bluesign® APPROVED textile articles, focusing on sustainable fabrics and trims manufactured with minimal environmental and social impact. It is positioned as a niche service supporting manufacturers, brands, and consumers interested in sustainable textile products. The site is branded consistently with bluesign technologies ag, a Swiss company known for its bluesign® certification. However, the domain WHOIS data is missing or indicates no registration, which raises concerns about domain legitimacy and requires further verification. Technically, the site uses modern Vue.js and Vuetify frameworks, providing a good user experience with moderate performance and mobile optimization. Security posture is moderate but lacks visible security headers and contact information, which are areas for improvement. Privacy compliance is supported by a comprehensive privacy policy and legal note, but no cookie consent mechanism is present. Overall, the site is professional and trustworthy in content but needs to address domain registration transparency and enhance security and privacy features.

V

VML

labstore.cz

67

VML is a globally recognized creative agency operating in the Czech Republic, formed from the merger of Wunderman Thompson and VMLY&R. It offers a comprehensive suite of services including creative campaigns, customer experience management, scalable content production, technology and AI integration, and data privacy governance. The company is positioned as the largest agency in the Czech market with a strong global network supported by its parent company WPP. Technically, the website employs modern web technologies such as Google Analytics, OneTrust for cookie consent, and Cloudinary for media delivery, ensuring a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response policies are recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data transparency slightly impacts domain trustworthiness.

SAIMON, s.r.o is a Czech technology company specializing in AI-powered smart search and personalized product recommendation solutions for e-commerce platforms. Their website presents a professional and modern interface targeting online shops seeking to increase sales and improve customer experience through advanced search and recommendation tools. The company integrates with popular platforms such as Shoptet and offers API and XML feed-based integration options. The website is well-structured, mobile-optimized, and includes client references, legal pages, and clear contact information, enhancing business credibility. Technically, the site uses modern frontend technologies including Nuxt.js and Tailwind CSS, ensuring good performance and accessibility. However, explicit security headers are not detected, and no cookie consent mechanism is present despite GDPR compliance indications. The WHOIS data for the domain is missing, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and business legitimacy evident on the site. Security posture is moderate with HTTPS implied but lacking some best practice headers. Privacy compliance is good based on the presence of GDPR and terms of service pages, though cookie consent could be improved. Overall, the site presents a low-risk profile with recommendations to enhance security headers and privacy mechanisms. Strategically, SAIMON is positioned as a niche AI technology provider for e-commerce personalization in the Czech market, with a small company size and a focused business model. The company benefits from partnerships and client references that support its market presence.

S

Saqurai

saqurai.nl

46

Saqurai is a newly established technology company (founded in 2024) specializing in AI-powered chatbot solutions designed to enhance customer support and business process automation. Their flagship product is a Retrieval-Augmented Generation (RAG) chatbot that integrates with websites and social media platforms, leveraging OpenAI's GPT-4o to provide intelligent, real-time responses based on uploaded business documents. The company targets businesses seeking to improve customer engagement and operational efficiency through AI-driven chatbots. Technically, the website is built using modern web technologies including Svelte framework and integrates Google Fonts and Google Analytics for tracking. The site is mobile-optimized and presents a professional design with clear navigation. However, it lacks some advanced SEO and accessibility features. The use of HTTPS and DNSSEC indicates a good baseline security posture, though the absence of security headers and privacy/cookie policies highlights areas for improvement. From a security perspective, the site shows no signs of WAF or content blocking and does not expose sensitive data. However, the lack of published privacy and cookie policies, as well as incident response or vulnerability disclosure information, suggests incomplete compliance with GDPR and best security practices. The contact mechanism is limited to a web form without direct email or phone contacts, which may affect user trust and support responsiveness. Overall, Saqurai presents as a credible startup with a focused AI chatbot offering and a solid technical foundation. To enhance trust and compliance, the company should prioritize publishing comprehensive privacy and cookie policies, implement security headers, and provide clearer contact and incident response information. These steps will improve their security posture, regulatory compliance, and customer confidence.

A

ALIS spol. s r.o.

alis.cz

64

ALIS spol. s r.o. is a Czech Republic-based software company specializing in modern information systems tailored for public administration, municipalities, schools, and similar organizations. Their flagship product, KEO4, is a cloud-based multitenant application used by thousands of organizations, including over 2,700 municipalities. The company offers a broad range of software solutions including accounting, payroll, document management, and digital citizen services, positioning itself as a key player in the government and education technology sector. Technically, the website demonstrates a moderate level of digital maturity with modern HTML5, CSS3, and JavaScript usage, integration of Google Fonts, and responsive design elements. However, no major JavaScript frameworks or CMS platforms are detected, indicating a custom or lightweight implementation. The site is well-structured with good SEO and accessibility basics but could improve on security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of WHOIS data and security.txt files, as well as missing explicit security policies, suggests room for improvement in transparency and incident response readiness. The privacy policy is present and GDPR compliant, but cookie consent mechanisms are lacking. Overall, the website is professional, trustworthy, and content-rich, serving a specialized audience in the public sector. The lack of WHOIS data and some security best practices slightly reduce the trust score but do not critically impair the site's credibility. Strategic improvements in security policies, WHOIS transparency, and cookie consent would enhance the company's security posture and compliance standing.

Media Solution is a Czech Republic based marketing agency with offices in Prague and Liberec, specializing in strategy, content creation, design, web development, and AI integration into business processes. The company targets a broad range of clients from small to large brands across multiple industries, emphasizing measurable marketing results and creative data-driven solutions. The website demonstrates a high level of digital maturity with modern technologies and a professional design, including multimedia elements and client testimonials. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains solid based on website professionalism and client references.

Stephen Band's website is a personal portfolio showcasing photography and music content, along with custom web components developed by the owner. The site targets a general audience interested in artistic and creative works. The business model is primarily a personal brand and creative showcase without commercial transactions or extensive business infrastructure. Technically, the site uses modern HTML5, CSS3, and JavaScript ES modules, with a focus on visual content and custom elements. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate due to lack of visible security headers and policies, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is safe, professional, and trustworthy for its intended purpose.

S

Sauto.cz

sauto.cz

68

Sauto.cz operates as the largest online automotive marketplace in the Czech Republic, offering a comprehensive platform for buying and selling new, used, and demo vehicles. The website targets car buyers and sellers primarily within the Czech market, providing extensive listings and automotive news content. Technically, the site employs modern web technologies including JavaScript ES modules, JSON-LD structured data for SEO, and is hosted behind a performant Nginx server with strong integration into the Seznam.cz ecosystem. Security posture is robust with HTTPS enforced and multiple security headers configured, although explicit privacy and cookie policies are not clearly presented in the analyzed content. The absence of WHOIS data reduces transparency but does not detract significantly from the professional appearance and functionality of the site. Overall, Sauto.cz demonstrates a mature digital presence with good security practices but could improve privacy compliance and transparency.

S

Sport.cz - s námi jste ve hře

sport.cz

61

Sport.cz is a prominent Czech sports news website offering comprehensive coverage of various sports including football, hockey, tennis, motorsport, and winter sports. The platform targets sports enthusiasts primarily within the Czech Republic and operates under an advertising-supported business model. It is likely affiliated with Seznam.cz, a major Czech internet company, which enhances its market position and credibility. The website provides live scores, news articles, video highlights, and a fantasy sports league, catering to a broad audience of sports fans. From a technical perspective, Sport.cz employs modern web technologies including ES modules, SVG graphics, and CSS3, ensuring good mobile optimization and a professional user experience. The site integrates with Seznam.cz's internal APIs and uses various tracking and advertising services such as Gemius and Google Tag Manager. Performance is moderate with room for improvement in accessibility and explicit privacy compliance features. Security-wise, the website enforces HTTPS and appears to follow good security practices, although explicit security headers and vulnerability disclosure mechanisms are not evident. The absence of public WHOIS data due to privacy protection is common for media websites but limits trust signals from domain registration information. No signs of malicious activity or adult content were detected, indicating a safe environment for general audiences. Overall, Sport.cz is a well-established media platform with a solid technical foundation and good business credibility. However, it would benefit from enhanced privacy compliance transparency, explicit security policies, and improved accessibility features to strengthen user trust and regulatory adherence.

M

MONIN 1912

monin.com

71

MONIN 1912 operates a professionally designed e-commerce website specializing in syrups and flavours for cocktails and coffees, targeting bar and restaurant professionals as well as beverage enthusiasts. The site leverages Shopify as its platform, integrating modern technologies such as JavaScript ES modules, Globo Form Builder, and Weglot for multilingual support. Marketing tools like Klaviyo and ElfSight are also employed to enhance customer engagement. The website demonstrates a good level of digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, though explicit security headers and policies are lacking. Privacy compliance is partial, with GDPR notices and a data protection officer contact present but no visible privacy or cookie policies. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy and security transparency.

A

ALUKOV a.s.

alukov.cz

70

ALUKOV a.s. is a well-established Czech manufacturer specializing in custom aluminum enclosures for pools, whirlpools, terraces, and solar roofing solutions. With over 30 years of experience and a presence in more than 40 countries, the company emphasizes modern design, safety, and quality. Their business model focuses on bespoke manufacturing, direct customer engagement, and comprehensive after-sales service including warranty and maintenance. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Google Analytics, and reCAPTCHA for form security. Privacy and cookie policies are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the site is professional, user-friendly, and trustworthy, supporting ALUKOV's market position as a leading manufacturer in their sector.

M

Ministerstvo spravedlnosti České republiky

justice.cz

59

The website msp.gov.cz is the official portal of the Ministry of Justice of the Czech Republic, serving as a comprehensive resource for justice-related information, public registries, legal news, and e-services. It targets the general public, legal professionals, and government officials, providing authoritative content and access to various justice system components. The site is well-branded, consistent, and maintains a high level of trust as a government domain. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI. It employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and uses nonce-based inline scripts to mitigate injection risks. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a government domain but likely due to registry policies rather than malicious intent. Overall, the site presents a strong security posture and digital maturity appropriate for a government entity, with room for improvement in security header implementation and publishing a formal security policy or vulnerability disclosure program.

M

Mercedes-Benz Financial Services Česká republika s.r.o.

operativni-leasing-mercedes.cz

55

The website www.operativni-leasing-mercedes.cz serves as an official platform for Mercedes-Benz Financial Services Česká republika s.r.o., offering operational leasing services for Mercedes-Benz vehicles in the Czech Republic. The site targets businesses and individuals interested in leasing various Mercedes-Benz models, providing a configurator tool and detailed vehicle information. The business is positioned as a key player in automotive financial services within its regional market, leveraging the strong Mercedes-Benz brand. Technically, the website employs modern JavaScript modules, Google Analytics, and Google Tag Manager for tracking, and is built with a focus on responsive design and user experience. The site loads moderately fast and is mobile-optimized, though some SEO and accessibility features could be enhanced. The absence of a detected CMS suggests a custom or proprietary platform. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The missing WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security posture. Overall, the website presents a professional and trustworthy front for Mercedes-Benz leasing services, with room for improvement in security transparency and contact information availability. The risk level is moderate, primarily due to the lack of WHOIS data and some security best practices not fully implemented.

A

Alkotó Ifjúság Alapítvány

scheiber.hu

48

The website represents the BZSH Scheiber Iskola and the Alkotó Ifjúság Alapítvány, a non-profit educational foundation based in Budapest, Hungary. It provides educational services including school management systems (eKréta), online meal registration (eMenza), and community engagement through events and social media. The target audience includes students, parents, educators, and community members. The site positions itself as a local educational institution with a focus on youth development and community support. Technically, the website is built using modern web technologies such as React and Material-UI, providing a responsive and visually consistent user experience. The site loads moderately fast and is optimized for mobile devices, though accessibility features are basic. SEO optimization is minimal but present through structured content and meta tags. From a security perspective, the site lacks visible security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. No incident response contacts or vulnerability disclosure information is provided. The site uses HTTPS (assumed from URL) but lacks advanced security best practices. No analytics or advertising scripts were detected, indicating minimal user tracking. Overall, the website is functional and professional for its educational and non-profit purpose but requires improvements in privacy compliance, security headers, and incident response readiness to enhance trust and regulatory adherence.

C

Community OFFICEsax.de

officesax.de

52

OFFICEsax.de is a specialized job board and social recruiting platform focused on business administration jobs and internships in the Saxony region of Germany. It operates as a community under the Empfehlungsbund network, leveraging a recommendation code system to facilitate candidate referrals among partner companies. The platform targets job seekers and employers within the regional business administration sector, offering curated job listings and internship opportunities. The website demonstrates a consistent brand presence and a professional design that supports user engagement and navigation. Technically, the website employs modern frontend technologies including Vite, Bootstrap, and JavaScript ES modules, with integration of Sentry for error tracking. The site is mobile optimized and provides a moderate performance experience. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The site uses HTTPS and includes CSRF tokens, indicating a baseline security posture. From a security perspective, the website is accessible without WAF or blocking mechanisms, and no critical vulnerabilities were detected in the provided content. The absence of privacy and cookie policies, as well as incident response contacts, represents compliance gaps that should be addressed. The domain WHOIS data is limited but does not raise immediate concerns, though registrant details are sparse. Overall, OFFICEsax.de is a credible and focused regional job platform with good business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

S

So Loved Manufacture

soloved.de

74

So Loved Manufacture is a small German e-commerce retailer specializing in handcrafted and personalized jewelry such as rings, earrings, and necklaces made from materials like 925 silver, Fimo, and stainless steel. The company leverages an online platform to offer laser engraving personalization, targeting consumers seeking modern and lovingly designed accessories. The website is built on the Shopify platform, utilizing modern web technologies and third-party integrations for marketing, analytics, and customer support. The technical infrastructure is robust, with fast performance, mobile optimization, and good SEO practices. Security posture is strong, with HTTPS enforced, appropriate security headers, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly available. Overall, the site presents a professional and trustworthy online presence with room for improvement in transparency and accessibility.

W

Wolf Tucker

wolftucker.co.uk

72

Wolf Tucker is a UK-based e-commerce business specializing in raw dog food, including complete meals, complementary meals, dried treats, supplements, and meal toppers. Founded in 2011, the company operates a professionally designed Shopify store with subscription options and bundle deals, targeting dog owners seeking high-quality raw pet food. The website demonstrates a solid market position within its niche, supported by trust signals such as Trustpilot integration and social media presence. Technically, the site leverages modern Shopify infrastructure, third-party marketing tools like Klaviyo, and shipping/pickup apps to enhance customer experience. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the domain age and WHOIS data support the legitimacy of the business. Strategic recommendations include publishing detailed security and incident response policies and enhancing contact information visibility to further improve trust and compliance.

K

KELLO Könyvtárellátó Nonprofit Kft.

kello.hu

10

KELLO Könyvtárellátó Nonprofit Kft. is a Hungarian nonprofit organization focused on the distribution of textbooks, educational materials, and cultural products. It serves a broad audience including students, parents, schools, publishers, and libraries, positioning itself as a key national distributor and retailer in Hungary's educational sector. The website supports this mission by providing access to a webshop, library professional portal, and cultural magazine, all integrated under the KELLO brand. Technically, the website employs modern web technologies including jQuery, Bootstrap Icons, and ES modules, with Google Analytics for visitor tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and presents a consistent, professional design with clear navigation. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's nonprofit educational claims, supporting high legitimacy and trustworthiness. Overall, the website presents a secure, professional, and compliant online presence for KELLO, with room for enhancements in security policy transparency and accessibility. The risk level is low, but strategic improvements in security headers and incident response disclosures are recommended.

P

Projektově.CZ s.r.o.

projektove.cz

67

Projektově.CZ s.r.o. operates a Czech-language SaaS platform focused on project and task management for businesses and teams. The website presents a professional, well-structured digital presence with clear descriptions of services such as project scheduling, task delegation, and visual project management tools including mind maps and Gantt charts. The company targets small to medium-sized enterprises in the Czech Republic, offering online collaboration tools accessible via web and mobile applications. The platform is positioned as a niche player with a strong local market focus and positive client testimonials enhancing its credibility. Technically, the website employs modern web technologies including Tailwind CSS, JavaScript ES modules, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Mautic. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. Privacy and cookie policies are clearly presented with consent mechanisms, indicating good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses asynchronous loading for third-party scripts to minimize performance impact. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, showing consistent registration information without privacy protection, supporting domain legitimacy. Overall, the website demonstrates a strong security posture and compliance maturity for its business scale, with room for improvement in explicit security policies and headers. The digital presence supports trustworthiness and user engagement effectively, making it a reliable platform for its target audience.

H

HARFASPORT

harfasport.cz

63

HARFASPORT is a specialized retail business focused on cycling and skiing equipment, serving primarily Czech-speaking customers. The website presents a modern and mobile-optimized interface with clear navigation and professional design, targeting customers interested in sports gear. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Technically, the site uses modern JavaScript modules and CSS frameworks, likely built with Vue.js and Radix UI components, but lacks visible security headers and analytics integrations. The security posture is moderate but could be improved with better header configurations and explicit privacy measures. Overall, the site appears legitimate and functional but would benefit from enhanced compliance and security practices to increase trust and reduce risk.

BestDrive.cz is a professional automotive service and tire sales network operating extensively across the Czech Republic with over 140 locations. The company offers a wide range of services including tire sales, professional autoservice, seasonal tire storage, and vehicle maintenance. The website reflects a mature digital presence with strong branding linked to Continental AG, indicating a reputable market position. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and optimized for performance and mobile use. Security practices are robust with HTTPS, security headers, and CAPTCHA protections, though public security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and compliant with GDPR, serving both private customers and fleet operators effectively.

M

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt.

mvmtavho.hu

61

MVM Oroszlányi Távhőtermelő és Szolgáltató Zrt. is a regional energy company specializing in district heating services for the Oroszlány and Szolnok areas in Hungary. The website acts as a portal directing users to localized district heating service sites, reflecting a focused business model in the energy utility sector. The company appears to be a medium-sized entity founded in 2020, likely part of the larger MVM group, a major Hungarian energy provider. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, and uses responsive design techniques to ensure usability across devices. However, the site lacks advanced SEO and accessibility features and does not appear to use a CMS or complex frameworks. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or forms on the landing page, which is positive. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is functional and consistent with its business purpose but requires enhancements in privacy compliance, security best practices, and user contact information to improve trust and regulatory adherence.

E

Erste Premier

erstepremier.cz

66

Erste Premier is a premium banking service under the Česká spořitelna and Erste Group umbrella, targeting demanding clients with personalized financial care and exclusive benefits. The website presents a professional and well-structured digital presence, leveraging modern web technologies and frameworks to deliver a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is typical for financial institutions prioritizing privacy. Overall, the site reflects a trustworthy and credible financial service provider with a clear focus on client engagement and premium offerings.