Security Directory

D

Dalkia

dalkiasolutions.com

55

Dalkia Solutions is a large energy efficiency solutions provider offering a comprehensive range of services including chiller services, combined heat and power, digital services, intelligent load management, LED lighting and controls, operations and maintenance, refrigeration, retail energy, smart infrastructure solutions, solar plus storage, and strategic energy management. The company targets commercial and industrial clients nationwide and is part of the EDF Group, a well-known energy conglomerate. The website demonstrates a professional and consistent brand presence with detailed service descriptions and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and OwlCarousel, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS with CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No explicit incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. The absence of WHOIS data is a concern but the website content and branding align with a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security headers, explicit contact information, and improved privacy compliance mechanisms to strengthen its security posture and user trust.

P

PowerFlex

powerflex.com

66

PowerFlex is a medium-sized company specializing in clean energy and intelligent energy management solutions, targeting commercial and industrial clients seeking to reduce carbon footprints and optimize energy usage. Their offerings include commercial solar, energy storage, EV charging infrastructure, and a proprietary intelligent energy management platform. The website is professionally designed, mobile-optimized, and rich in relevant content, showcasing strong branding and trust signals such as customer testimonials and partnerships with major corporations. Technically, the site leverages modern web technologies including Webflow CMS, Google Analytics, HubSpot forms, and Osano for cookie consent, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie management, though explicit security headers and policies are not fully documented. WHOIS data is missing, which raises some concerns about domain legitimacy, but the overall business credibility and website quality mitigate this risk. Strategic recommendations include publishing a security policy, improving WHOIS transparency, and adding vulnerability disclosure mechanisms.

R

RE/MAX Alfa

realitnikariera.cz

68

The website www.realitnikariera.cz serves as a professional career portal for RE/MAX Alfa, a leading real estate brokerage office in the Czech Republic. It offers comprehensive information about becoming a real estate agent, company mission, vision, strategy, and testimonials from current agents. The site is well-structured, content-rich, and targets individuals interested in real estate careers within the Czech market. Technically, it is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not confirmed. WHOIS data is unavailable due to privacy protection, which is common and justified for business domains. Overall, the site is trustworthy, professional, and compliant with GDPR regulations.

C

Cesta z krize, z. ú.

cestazkrize.net

10

Cesta z krize, z. ú. is a Czech non-profit organization specializing in crisis intervention and support services, particularly focusing on endangered children and psychological first aid for adults. The organization operates recognized crisis helplines 116 000 and 116 123, with official government authorizations and memberships in European federations. Their website reflects a professional and consistent brand presence, targeting families, educators, and the general public in crisis situations within the Czech Republic. Technically, the website uses modern web technologies including Cookiebot for cookie consent, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is provided by Active24, and the site is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is moderate; a cookie policy and consent mechanism exist, but no explicit privacy policy or terms of service pages were found in the provided content. No incident response or vulnerability disclosure information is available. Overall, the domain registration is consistent with the organization's history and shows no suspicious patterns. The website is safe for general audiences and does not contain adult or explicit content.

G

Gymnathlon Foundation

kidslovesport.org

46

Gymnathlon Foundation is a Czech non-profit organization dedicated to providing sports scholarships and organizing sports activities for disadvantaged children, particularly those from single-parent and low-income families. The website is professionally designed using the Framer platform and incorporates modern analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service policies, as well as the lack of contact information, limits transparency and user trust. The security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure policies. The WHOIS data shows an unusual future domain creation date, which may be a data error but slightly reduces trustworthiness. Overall, the website is functional and serves its non-profit mission but would benefit from enhanced compliance and security documentation.

D

DĚLEJ CO TĚ BAVÍ z.ú.

delejcotebavi.com

10

DĚLEJ CO TĚ BAVÍ z.ú. is a Czech non-profit organization dedicated to providing meaningful leisure activities for children and youth through courses, workshops, festivals, and conferences. The organization focuses on promoting physical activity, creativity, and personal development while fostering social equality and environmental responsibility. Their market position is that of a small, locally focused non-profit with a network of recognized partners and a clear mission to support youth development. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for analytics, and reCAPTCHA for bot protection. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site demonstrates good privacy compliance with a cookie consent mechanism and a privacy policy in place. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the organization's claims, supporting legitimacy. The site does not currently provide explicit security policies or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers and DNS security would further strengthen its posture.

S

Spravia Sp. z o.o.

spravia.pl

52

Spravia Sp. z o.o. is a Polish real estate developer specializing in new apartment sales in Warsaw districts such as Mokotów, Bemowo, and Praga Południe. Founded in 2021, the company presents a professional online presence with a well-structured website optimized for SEO and user experience. The site targets general consumers interested in purchasing residential properties in Warsaw, offering detailed plans and pricing information. Technically, the website is built on WordPress with modern marketing and analytics integrations including Google Tag Manager, Hotjar, and Cookiebot for GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are not explicitly published. Overall, the website reflects a medium-sized real estate business with a consistent brand and good digital maturity.

S

Slovenia Games

sloveniagames.com

63

Slovenia Games Conference is a well-established annual event focused on the game development industry in Slovenia, attracting local and international professionals including programmers, artists, designers, and business leaders. The conference offers educational tracks, an indie expo, and networking opportunities, positioning itself as the largest games industry event in Slovenia. The website is built on WordPress with WooCommerce and uses common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is via Amazon AWS nameservers, indicating a reliable infrastructure. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to an official email address. Overall, the site is professional, content-rich, and trustworthy but could improve in security and privacy transparency.

Nuki Home Solutions GmbH is an Austrian technology company specializing in innovative smart lock solutions designed for easy retrofitting. The company has established a strong market position in Europe by offering a range of smart locks and accessories that integrate seamlessly with major smart home platforms. Their business model focuses on direct consumer sales and business reseller partnerships, supported by a comprehensive digital presence including mobile apps and web management tools. Technically, the website is built on modern frameworks such as Next.js and React, with robust analytics and marketing integrations, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site enforces HTTPS, employs standard security headers, and maintains good privacy compliance with clear policies and consent mechanisms. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain registration and website content are consistent and trustworthy, reflecting a mature and professional business entity.

S

SSI SCHÄFER Gruppe

ssi-schaefer.com

10

SSI SCHÄFER Gruppe is a globally operating enterprise specializing in modular warehouse and logistics systems, software solutions, and comprehensive intralogistics services. The company positions itself as a worldwide leader in intralogistics, offering innovative technologies and software to enhance efficiency and sustainability in warehousing, order picking, and transport processes. Their business model focuses on B2B engagements across multiple industries, providing tailored solutions for various market segments. The website reflects a mature digital presence with professional design, multilingual support, and extensive content covering products, services, corporate philosophy, and sustainability initiatives. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Usercentrics for cookie consent management, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and an incident response contact is absent. Overall, the website demonstrates a strong security and compliance stance suitable for an enterprise of its scale, with clear business credibility and trust indicators. The absence of WHOIS data suggests privacy protection, which is reasonable for a large corporation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security transparency.

2

2Racing autodíly nejen pro rally, tuning, motorsport

2racing.cz

41

2Racing.cz is a Czech Republic-based e-commerce website specializing in the sale of automotive parts focused on racing, rally, and tuning enthusiasts. The site offers a wide range of products including racing seats, suspension components, filters, and accessories from reputable brands such as Strongflex, Koni, Sparco, and others. The business targets motorsport hobbyists and professionals seeking specialized car parts. The website is professionally designed with clear navigation and product categorization by car brand and year, supporting a good user experience.

A

AutoTužil

autotuzil.cz

54

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

TAC-TAC agency s.r.o. is a small Czech advertising company specializing in promotional products and client advertising services. The website presents basic information about the company and its offerings, targeting businesses seeking advertising solutions. The company has been established since 2000, indicating a stable presence in the local market. The website uses SuitableCMS and is hosted by Wedos, with integrations of common marketing and analytics tools such as Google Analytics, Google Tag Manager, Hotjar, and Google reCAPTCHA for bot protection. From a technical perspective, the website employs older technologies such as jQuery 1.7.2, which is outdated and poses security risks. The site lacks modern security headers and visible privacy or cookie policies, indicating compliance gaps with GDPR and other privacy regulations. The website is accessible without WAF or blocking mechanisms, but the security posture is moderate due to missing best practices and outdated libraries. Security-wise, the site uses HTTPS (implied by origin-trial meta tag referencing HTTPS Google services) and reCAPTCHA, but lacks explicit security headers and incident response information. No vulnerabilities such as exposed credentials or SQL injection are visible, but the outdated jQuery version is a concern. Contact information is minimal but present, with a company email and phone number displayed. Overall, the website scores moderately on AI evaluation with strengths in business credibility and basic technical implementation but weaknesses in privacy compliance and security best practices. Strategic improvements in updating technology, adding privacy and cookie policies, and enhancing security headers would significantly improve the site's security posture and compliance.

N

Northstar Travel Media LLC

phocuswrighteurope.com

63

Phocuswright Europe is a prominent travel and technology conference organized by Northstar Travel Media LLC, targeting top executives, innovators, and influencers in the travel industry. The website promotes the 2026 event in Barcelona, Spain, offering professional development, networking, and insights into travel technology trends. The business holds a strong market position as a leading European travel tech event with a medium-sized organizational footprint. Technically, the site employs modern web technologies including Bootstrap, jQuery, and advanced analytics tools such as Google Analytics, Google Tag Manager, RudderStack, and Intercom, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, with good SEO practices and professional design. Security posture is solid with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration and publishing security policies.

N

NIVEA

nivea.cz

61

NIVEA.cz is the Czech Republic localized website for the globally recognized skincare brand NIVEA, owned by Beiersdorf AG. The site offers a comprehensive catalog of skincare and cosmetic products, along with tips and advice for skin and body care. The website targets general consumers interested in personal care products and maintains a strong brand presence consistent with NIVEA's global identity. Technically, the site is built on the Sitecore CMS platform, employs modern web technologies, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Consent Manager for GDPR compliance. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security-wise, the website enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms, reflecting a mature security posture. However, it lacks publicly available explicit security policies and incident response contacts, which could be improved. The domain WHOIS data is unavailable, likely due to registry policies, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the brand's reputation. Overall, the website is well-maintained, secure, and compliant with privacy regulations, serving as a reliable digital presence for NIVEA in the Czech market.

C

Crestyl

crestyl.com

50

Crestyl is a well-established real estate development company based in the Czech Republic, specializing in multi-sector projects including residential, office, and retail properties. The company positions itself as a market leader with a strong portfolio and multiple industry awards, reflecting its prominence and credibility in the real estate sector. The website content is professionally presented, targeting investors, tenants, and clients interested in high-quality real estate developments. Technically, the website employs modern JavaScript libraries such as jQuery and Leaflet, integrates Google Analytics and Tag Manager for tracking, and implements a granular cookie consent mechanism, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent but lacks visible security headers and published security policies, suggesting room for improvement in security posture and compliance documentation. Overall, the website is accessible, well-branded, and trustworthy, though it would benefit from enhanced privacy and security disclosures to align with best practices.

C

Cesta z krize, z.ú.

linkapsychickepomoci.cz

48

The website linkapsychickepomoci.cz represents a non-profit organization named Cesta z krize, z.ú., providing free, anonymous, and 24/7 psychological crisis support services primarily to adults in the Czech Republic. The service offers telephone and chat support to individuals facing acute psychological distress or crisis situations. The organization is government co-financed and partners with other NGOs, positioning itself as a trusted social service provider in the mental health support sector. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and Smartsupp for live chat functionality. The site is hosted by Active24 and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO and metadata are present but could be enhanced for better discoverability. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a privacy policy and terms of service pages, as well as no security.txt file, indicates areas for compliance and security improvement. Overall, the website is safe, professional, and trustworthy, with a clear focus on mental health crisis support. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility compliance to strengthen user trust and regulatory adherence.

C

Cesta z krize, z.ú.

linkaztracenedite.cz

49

The website 'Linka pro rodinu a školu' is a Czech non-profit social service platform operated by 'Cesta z krize, z.ú.' focused on supporting families, children, and adults in crisis situations, particularly related to missing children and school or family problems. It offers telephone crisis intervention, online chat support, and professional counseling, positioning itself as a trusted and officially recognized service with backing from national and European institutions. The site targets a broad audience including families, educators, and the general public. Technically, the website employs modern web technologies such as Google Tag Manager and Cookiebot for consent management, with a moderate performance profile and good mobile optimization. Hosting is provided by Active24, consistent with the domain registration data. The site implements a comprehensive cookie consent mechanism with granular user controls, reflecting a good level of privacy compliance, although explicit privacy policy and terms of service pages are not clearly found in the provided content. From a security perspective, the site uses HTTPS (implied by external scripts loaded via HTTPS), but no explicit security headers or advanced security policies are evident in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the organization's profile, indicating a legitimate and stable domain registration. Overall, the website demonstrates a solid risk posture with good privacy compliance and business credibility. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

D

DreamHost

dreamhost.com

67

DreamHost is a well-established web hosting and domain registration provider offering a variety of services including managed WordPress hosting and business email solutions. The company targets small to medium businesses, developers, and enterprises seeking reliable hosting with a 100% uptime guarantee and 24/7 support. Their market position is strong within the technology sector, emphasizing growth and customer service. Technically, the website leverages modern frameworks such as React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Integration of Google Tag Manager and OneTrust for cookie consent reflects a mature digital infrastructure. The site is hosted likely on DreamHost's own infrastructure or CDN, with excellent SSL and security headers implemented. From a security perspective, DreamHost demonstrates good practices including HTTPS enforcement, security headers, and captcha on forms. However, explicit security policies, incident response details, and vulnerability disclosure programs are not publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The lack of WHOIS data transparency slightly impacts trust but is likely due to privacy protection or query limitations. Strategic recommendations include publishing detailed security policies and establishing a vulnerability disclosure program to further strengthen security posture.

A

Ars Technica

arstechnica.com

11

Ars Technica is a well-established online media company specializing in technology news, reviews, and analysis since 1998. It targets technologists, IT professionals, and tech enthusiasts with comprehensive coverage of IT, AI, science, cybersecurity, and related fields. The website operates under the Condé Nast parent company, reflecting a large-scale media presence with a professional and consistent brand identity. Technically, the site leverages WordPress CMS, modern JavaScript libraries, and advanced analytics tools such as Google Tag Manager and Snowplow, hosted on AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, Ars Technica enforces HTTPS, employs security headers, and restricts domain transfers, though it lacks DNSSEC and explicit security policies in the visible content. Privacy compliance is partially implemented with a consent management system but lacks visible privacy and cookie policies in the provided data. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Virtuplex

virtuplex.space

63

Virtuplex operates the world's largest commercial virtual reality labs with locations in Dubai, Bratislava, and Prague. The company specializes in providing VR solutions that allow clients to experience and interact with buildings, products, and spaces before they are physically built. Their market position is strong, supported by over 100 projects and a diverse client base across industries such as real estate, urban planning, retail, manufacturing, and defense. The website reflects a mature digital presence with modern technologies and comprehensive service descriptions.

C

Cooperpress

golangweekly.com

10

Golang Weekly is a niche technology newsletter focused on the Go programming language, published by Cooperpress. It targets developers and enthusiasts interested in Go, providing weekly curated content and an RSS feed. The business model centers on subscription-based newsletter distribution, with a long-standing presence since 2012, indicating stable market positioning within its niche. The website branding is consistent and professional, supporting trust and engagement within its target audience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Cloudflare Turnstile CAPTCHA for form security. DNS hosting is managed via DNSimple, and the site uses standard HTML5, CSS, and JavaScript. Mobile optimization and SEO practices are good, though accessibility is basic. Performance is moderate, with no major technical debt or CMS detected. From a security perspective, the site uses HTTPS (implied by Google Analytics and Turnstile usage), includes CSRF protection on forms, and employs CAPTCHA to mitigate spam. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is partially addressed with clear privacy and GDPR policies, but no cookie consent mechanism is present despite tracking scripts. No vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance maturity.

Z

ZDNET

zdnet.com

11

ZDNET is a well-established technology news and professional advice platform, serving IT professionals and business decision makers globally. As part of Ziff Davis, it holds a strong market position with a comprehensive offering of technology news, product reviews, and industry analysis. The website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks, advanced analytics, and advertising technologies. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, ZDNET presents a trustworthy and professional online presence with excellent content quality and user experience.

G

Global Energy and Water cycle Exchanges (GEWEX)

gewexevents.org

46

The Global Energy and Water cycle Exchanges (GEWEX) website serves as an informational and event platform for a core project under the World Climate Research Programme (WCRP). It focuses on scientific research related to Earth's water and energy cycles, providing resources, reports, and organizing meetings and webinars for the scientific community. The site targets researchers and professionals in climate science and related fields, positioning itself as a reputable non-profit scientific network. Technically, the website is built on WordPress 6.7.4, utilizing jQuery and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security is enforced through HTTPS, but lacks advanced security headers and cookie consent mechanisms, which could be improved for better compliance and protection. From a security perspective, the site shows no signs of vulnerabilities or malicious content. However, the absence of WHOIS data due to privacy or registry restrictions limits full domain trust verification. Contact information is clearly provided, and the site maintains a professional appearance with consistent branding and affiliation to recognized organizations. Overall, the website is trustworthy and serves its purpose well, but could benefit from enhanced privacy compliance and security best practices to strengthen its posture and user trust.

Bethesda Web Design Inc. is a small regional web design and branding firm serving clients in Maryland, DC, and Virginia. They specialize in web development using Drupal and WordPress, branding, and SEO services, with a particular sensitivity to nonprofit organizations. The website presents a professional portfolio and clear contact information, positioning the company as a thoughtful and client-focused service provider in the technology sector. Technically, the site is built on WordPress 6.8.3 with modern plugins such as Gravity Forms and Google reCAPTCHA v3, indicating a moderate level of digital maturity. The site uses HTTPS and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. Security posture is generally good with encrypted connections and spam protection on forms, but lacks security headers and visible privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, though the website content and contact details appear legitimate. Overall, the site is functional, professional, and secure but would benefit from improved privacy compliance and transparency.

Obec Osov is the official municipal website for the village of Osov in the Czech Republic, providing residents and visitors with local government information, community services, event announcements, and historical context. The site serves as a central hub for municipal communication and public service access, targeting local citizens and stakeholders. The business model is that of a small government entity focused on transparency and community engagement. Technically, the website is built on a custom PHP-based CMS with legacy JavaScript libraries such as jQuery 1.11.0 and Lightbox.js. It integrates Google Analytics and Google Tag Manager for visitor tracking but lacks modern security headers and cookie consent mechanisms. Hosting appears to be with a Czech provider (WEDOS), and the site performance and mobile optimization are basic but functional. From a security perspective, the site shows moderate maturity with no visible critical vulnerabilities but suffers from outdated libraries, lack of security headers, and missing cookie consent, which may expose it to some risks and compliance issues under GDPR. The WHOIS data confirms the domain's legitimacy and long-standing presence, consistent with the municipal nature of the site. Overall, the website is trustworthy and serves its purpose well but would benefit from technical and security improvements to enhance compliance, user privacy, and protection against emerging threats.

B

Bezplatná právní poradna online zdarma pro všechny

bezplatnapravniporadna.cz

47

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

O

Openplace s.r.o.

nafialce.cz

64

Na Fialce is a small hospitality and cultural center located in Říčany near Prague, operated by Openplace s.r.o. The center caters to sports enthusiasts, film lovers, and fans of quality food and coffee, offering a variety of services including sports facilities, cultural events, cinema, and dining options. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. However, the absence of WHOIS data and explicit privacy and terms policies limits full trust verification. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and detailed security policies. Overall, the site is safe for general audiences and demonstrates a moderate level of digital maturity.

O

Olivova dětská léčebna o.p.s.

olivovna.cz

53

Olivova dětská léčebna o.p.s. is a well-established non-profit pediatric healthcare organization based in Říčany u Prahy, Czech Republic. Founded in 1896, it provides comprehensive inpatient treatment and rehabilitation services for children aged 1 to 18 years, fully covered by public health insurance. The organization focuses on treating respiratory and musculoskeletal diseases, childhood obesity, and related conditions, emphasizing prevention and follow-up care. The website reflects a professional and trustworthy presence with clear service offerings and engagement channels for parents, children, and medical professionals. Technically, the website is built on the SKY:CMS platform and employs modern web technologies including asynchronous JavaScript loading, Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, explicit security headers are not fully implemented, and no dedicated security or incident response policies are published. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection slightly reduces transparency but is understandable for a healthcare non-profit. Overall, the site demonstrates a mature digital presence with good privacy compliance and user engagement, though improvements in security headers and incident response transparency are recommended. The risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing compliance and security.

The website panoramaticke-fotografie.cz is operated by Galileo Corporation and focuses on panoramic photography services and galleries showcasing locations primarily in the Czech Republic. It positions itself as an early adopter in the Czech market with over 7 years of experience in panoramic photography. The site targets general audiences interested in scenic photography and potential clients seeking commercial or private photographic services. Technically, the site uses a traditional JavaScript stack including jQuery and Highslide for image display, with Google Analytics and Tag Manager for user tracking. A cookie consent mechanism is implemented, reflecting some privacy awareness. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is provided on the main page, which may impact user trust and compliance. Security headers and SSL configuration details are not evident from the data, though external scripts are loaded over HTTPS. WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site is functional and content-rich but could improve in privacy compliance, security posture, and business transparency.

N

National Heritage Institute

zamek-mnisek.cz

44

The website represents the official web presence of Mníšek pod Brdy Castle, managed by the National Heritage Institute of the Czech Republic. It provides detailed visitor information, including tours, events, opening hours, and contact details, targeting tourists and heritage enthusiasts. The site is well-positioned as a government-operated cultural heritage site with a medium-sized operational scope and a history dating back to 2007. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and integrates map services from Mapy.cz, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but present, with clear privacy and cookie policies linked from the site. Overall, the site is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.

O

Obec Hlásná Třebaň

hlasnatreban.cz

54

The website www.hlasnatreban.cz serves as the official online presence for the municipality of Hlásná Třebaň in the Czech Republic. It provides residents and visitors with information about local government services, community news, cultural events, waste management, and public participation opportunities. The site targets local citizens and stakeholders interested in municipal affairs and community development. The business model is that of a local government entity focused on public service and communication. Technically, the website is built on the Solidpixels CMS platform and employs modern web technologies including JavaScript, jQuery, Google Tag Manager, and Microsoft Clarity for analytics. The site is mobile-optimized, accessible, and includes SEO best practices such as meta tags and Open Graph data. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR. However, no advanced security headers were detected, and no explicit security or incident response policies are published. The absence of WHOIS data limits domain legitimacy verification, but the official nature of the site and consistent branding support trustworthiness. Overall, the website is a well-maintained municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing explicit security policies and incident response contacts, and improving transparency around domain registration. These steps will strengthen the site's security posture and trustworthiness.

A

AF-CIX powered by DE-CIX Management GmbH

af-cix.net

62

AF-CIX is a telecommunications interconnection exchange hub based in Lagos, Nigeria, serving the West African region with strategic connectivity to Europe. Powered by DE-CIX Management GmbH, it offers services such as GlobePEER, Blackholing, and VirtualPNI to network operators and content providers. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and access. Technically, it uses modern frameworks including Neos CMS and PHP Flow, with Google Tag Manager for analytics and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain reduces transparency but the association with DE-CIX supports legitimacy. Overall, the site is trustworthy, business-focused, and compliant with GDPR requirements.

S

SEECIX powered by DE-CIX Management GmbH

seecix.net

65

SEECIX powered by DE-CIX Management GmbH operates a neutral interconnection exchange platform based in Athens, Greece, targeting the South East Europe region and acting as a gateway between Europe, Africa, and Asia. The platform offers a range of interconnection services including peering, cloud connectivity, and security features, integrated with the global DE-CIX ecosystem. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of network operators and cloud service customers. Technically, the site uses modern PHP frameworks and Neos CMS, with Google Tag Manager for analytics, hosted likely at Digital Realty's Athens data center. Security posture is good with HTTPS and GDPR-compliant cookie consent, though explicit security policies and incident response contacts are absent. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional presentation and association with DE-CIX. Overall, the site is trustworthy but would benefit from improved transparency on domain registration and security policies.

A

AqabaIX powered by DE-CIX Management GmbH

aqabaix.com

66

AqabaIX is a telecommunications interconnection hub located in Aqaba, Jordan, operated under the umbrella of DE-CIX Management GmbH. It provides neutral internet exchange services, enabling network operators and content providers to interconnect efficiently. The website reflects a professional and modern digital presence, leveraging Neos CMS and PHP frameworks, with integrated Google Tag Manager for analytics. Privacy and cookie compliance are well implemented, including a consent mechanism aligned with GDPR requirements. However, the absence of publicly available WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Despite this, the strong association with DE-CIX and the professional quality of the website support the business's credibility. Security posture is solid with HTTPS and cookie consent but could be improved by adding security headers and publishing explicit security policies. Overall, AqabaIX presents as a trustworthy and technically competent entity in the regional telecommunications market.

A

ACIX powered by DE-CIX Management GmbH

acix.net

64

ACIX powered by DE-CIX Management GmbH operates a new internet exchange hub located in Kinshasa, Democratic Republic of Congo, targeting the Central African telecommunications market. The company offers interconnection services such as GlobePEER, Blackholing, and VirtualPNI, positioning itself as a regional hub bridging West and East Africa. The website reflects a professional and consistent brand image aligned with DE-CIX, a recognized global internet exchange operator. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Privacy compliance is well addressed with a comprehensive privacy policy and a cookie consent mechanism supporting GDPR requirements. From a security perspective, the site enforces HTTPS and implements cookie consent controls but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. Overall, ACIX's website demonstrates a solid digital presence and business positioning in the telecommunications sector but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen trust and compliance.

C

CIO

cio.com

67

CIO.com Netherlands is a regional edition of the established CIO media brand, providing technology news, analysis, and thought leadership content targeted at IT professionals and business leaders in the Netherlands. The website offers a broad range of content including news, opinion pieces, buyer’s guides, and event information, positioning itself as a trusted source for technology decision-makers. The parent company, Foundry, manages this and other technology media properties, indicating a strong market presence and professional media operations. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and various advertising and analytics integrations. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security posture is strong with HTTPS enforced, security headers present, and a GDPR-compliant consent management platform in use. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly visible, representing areas for improvement. Overall, the website demonstrates a mature digital presence with good privacy compliance and professional content quality, suitable for its target audience. The lack of public WHOIS data is consistent with privacy protection practices common among media companies and does not detract from the site's legitimacy.

H

Heroine s.r.o.

eduzin.cz

62

Heroine.cz is a Czech online media platform specializing in education and societal topics, integrating the Eduzín magazine content to provide in-depth educational materials and commentary. The site targets Czech-speaking audiences interested in education policy, social issues, and culture, offering articles, podcasts, and newsletters. The business operates under Heroine s.r.o., a medium-sized media company with a professional online presence and e-commerce capabilities for magazine subscriptions. Technically, the website employs a modern Ruby on Rails-based infrastructure with Turbolinks, integrates multiple analytics and advertising services including Google Tag Manager, Microsoft Clarity, Gemius, and Caroda ads, and uses Cloudflare Turnstile for bot protection. The site is mobile-optimized with good SEO and basic accessibility features. Security posture is solid with HTTPS, CSRF protections, and bot mitigation, though it lacks some advanced security headers and publicly available incident response policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. However, no direct company contact emails or phone numbers are publicly listed, relying mainly on newsletter subscription forms for user interaction. Overall, the website is professional, content-rich, and trustworthy, though the absence of WHOIS data and direct contact details slightly reduce transparency. Strategic improvements in security headers, incident response disclosure, and contact information would enhance trust and compliance.

N

Nevypusť duši, z. s.

nevypustdusi.cz

53

Nevypusť duši is a Czech non-profit organization dedicated to mental health education, prevention, and support primarily targeting children, youth, parents, educators, and social workers. The organization offers a range of preventive programs, support groups, and educational resources to foster open conversations about mental health and provide practical help. It has a strong partnership ecosystem and a clear mission to integrate mental health awareness into everyday life in Czech society. The website reflects a professional and well-established presence with comprehensive content and multiple communication channels.

Ö

Översättare.nu

oversattare.nu

54

Översättare.nu is a Swedish-based online platform offering authorized translation services for both companies and private individuals. The website provides a professional and user-friendly interface to upload documents, receive free quotes, and connect with qualified translators. The business targets a niche market in Sweden, focusing on legal and official document translations with GDPR-compliant privacy practices. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS and security headers implemented, though the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the site is well-structured, compliant, and trustworthy but would benefit from clearer contact information and verified domain registration details.

G

Game Lounge Ltd.

gamelounge.com

65

Game Lounge Ltd. operates as a global leader in the iGaming affiliate marketing sector, connecting online casino players with iGaming brands through a network of over 130 SEO-driven websites across more than 60 countries. The company emphasizes data-driven innovation and offers a range of services including SEO content marketing, unique player tools, brand exposure, lead generation, and data analytics. Their market position is strong within the media and affiliate marketing industry, targeting mature audiences interested in online gambling. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, delivering a professional and mobile-optimized user experience. Security posture is good with HTTPS and reCAPTCHA in place, though there is room for improvement in security headers and published policies. The absence of WHOIS registration data raises some legitimacy concerns, but the professional web presence and active social media mitigate these. Overall, the site is well-designed and functional, but lacks explicit privacy and cookie policies, which impacts compliance and trust scores.

C

Computer Sweden

idg.se

61

Computer Sweden is a leading Swedish IT news media outlet owned by Foundry, established in 2004. The website offers daily news and in-depth articles targeting IT decision makers and professionals, supported by newsletters and advertising revenue. The site is well-branded, professionally designed, and consistently updated, reflecting a mature digital presence. Technically, it is built on WordPress with modern SEO and analytics tools, including Google Tag Manager and Permutive, and uses Cloudflare for DNS services. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent management for GDPR and CCPA, though DNSSEC is not enabled and some security headers are not explicitly confirmed. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, compliance, and trustworthiness.

B

Bonnier News AB

sydsvenskan.se

72

Sydsvenskan.se is a leading regional news website serving the Skåne and Öresund regions in Sweden, operated by Bonnier News AB. The site provides continuous news coverage and targets a broad general audience in its region. It operates on a business model combining subscription services and advertising revenue, positioning itself as a key media player in the Swedish regional news market. Technically, the website employs modern web technologies including JavaScript frameworks, consent management via Didomi, and integrates advertising and analytics platforms such as Google Tag Manager and Rubicon Project. The site is well-optimized for mobile and desktop platforms, with good SEO and accessibility features.

S

Sälja fakturor

xn--sljafakturor-gcb.se

41

The website 'Sälja fakturor' offers financial services focused on invoice selling, factoring, and invoice financing to Swedish businesses. It positions itself as a niche provider helping companies improve cash flow by enabling faster payment through invoice sales. The site is well-structured, professionally designed, and uses modern web technologies including WordPress, Elementor, and CleanTalk anti-spam solutions. Analytics and marketing tools such as Google Analytics and Tag Manager are integrated for user behavior tracking. Security posture is solid with HTTPS and anti-spam measures, though lacks explicit security headers and published privacy or cookie policies, which are compliance gaps. The domain is registered with a reputable Swedish registrar since 2013, consistent with the business claims, indicating legitimacy. Overall, the site is trustworthy and functional but should improve privacy compliance and security header implementation.

D

DE-CIX Management GmbH

de-cix.net

75

DE-CIX Management GmbH operates a globally recognized network of neutral Internet Exchanges, providing premium interconnection services across multiple continents including Europe, the Middle East, Africa, Asia, and the Americas. The company targets enterprises, network operators, cloud providers, and ISPs, offering a broad portfolio of services such as peering, private interconnects, cloud connectivity, and infrastructure solutions. DE-CIX holds a leading market position as a large-scale telecommunications provider with a strong brand and extensive international presence. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with modern JavaScript libraries and Google Tag Manager for analytics and tracking. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, comprehensive security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well implemented with clear privacy and cookie policies, GDPR consent mechanisms, and transparent data collection practices. Business credibility is high, supported by professional content, consistent branding, and trust indicators such as customer logos and social media presence. Overall, DE-CIX presents a trustworthy and professional online presence aligned with its role as a critical telecommunications infrastructure provider. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details to further strengthen trust and compliance.

A

AMBIS vysoká škola, a.s.

ambis.cz

67

AMBIS vysoká škola, a.s. is a private higher education institution operating primarily in the Czech Republic with campuses in Prague and Brno, and a presence in Bratislava, Slovakia. The institution offers a variety of bachelor's and master's degree programs, including distance and online learning options, targeting students interested in fields such as security management, pedagogy, psychology, economics, marketing, and tourism. The website is professionally designed, content-rich, and includes extensive student testimonials and program details, positioning the school as a reputable player in the private education sector in the region. Technically, the website is built on the Solidpixels CMS platform and utilizes modern web technologies including Google Analytics, Microsoft Clarity, and various marketing and tracking scripts. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of certain security headers and lack of published incident response information suggest areas for improvement. The WHOIS data for the domain www.ambis.cz is unavailable, which limits the ability to fully verify domain registration legitimacy and age. Despite this, the presence of detailed contact information, privacy policies, and certifications such as the HR AWARD support the legitimacy of the institution. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a strong business credibility and compliance posture for a private educational institution, with recommendations to enhance security headers, publish incident response contacts, and consider adding a terms of service page to further improve trust and compliance.

P

Project Childsafe

projectchildsafe.org

11

Project Childsafe is a well-established non-profit program under the National Shooting Sports Foundation focused on promoting firearm safety and education. The organization targets gun owners, law enforcement, safety instructors, and the general public with educational resources, free gun locks, and community outreach initiatives. The website reflects a strong market position as the nation’s most comprehensive firearm safety program, supported by consistent branding and trust indicators such as testimonials and social media presence. Technically, the site is built on WordPress with modern frameworks and tools, including Yoast SEO, Google Analytics, and accessibility enhancements via Monsido. The site is mobile-optimized and performs moderately well, with good SEO and accessibility scores. Security posture is solid with HTTPS enforced and anti-enumeration plugins, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the domain registration is consistent with the organization's history and legitimacy, supporting a high trust score.

A

AIM Partner AB

aimpartner.se

47

AIM Partner AB is a Swedish digital marketing agency specializing in SEO, SEM, AI-driven marketing, and GEO marketing services. Established in 2011, the company has grown to a medium-sized enterprise with over 40 employees and serves more than 10,000 clients annually. Their market position is strong within Sweden, offering tailored digital marketing solutions to businesses seeking to enhance their online presence and lead generation capabilities. The website reflects a professional and modern digital infrastructure, leveraging Next.js, React, and Prismic CMS, hosted with Cloudflare DNS and CDN services. The site is well-optimized for SEO, mobile responsiveness, and user experience, with clear navigation and comprehensive content.

M

Modifinder AB

mansgullberg.com

44

Måns Gullberg operates as an SEO expert and entrepreneur primarily through his company Modifinder AB, founded in 2013. The business focuses on providing affordable and quality search engine optimization services to Swedish companies, with a strong track record of success and client satisfaction. The website presents a professional image with clear business information, social media presence, and published SEO-related content, positioning the company as a credible player in the Swedish SEO market. Technically, the website is built on a modern stack including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for tracking. The site is mobile optimized and accessible, with good SEO practices implemented. Security-wise, HTTPS is enforced, but the site lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a notable compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site scores well on content and technical implementation but needs improvements in privacy compliance and domain registration transparency.

S

Spådam.se

spadam.se

45

Spådam.se is a Swedish website offering professional psychic and medium services including tarot readings, spiritual guidance, and coaching. The business targets adults interested in spiritual and psychic consultations, operating primarily through paid phone lines and online services. The website presents a professional and consistent brand image with clear navigation and multiple contact phone numbers for different service lines. Technically, the site uses a modern tech stack including Materialize CSS, jQuery, and Cookiebot for cookie consent management, with integrations for Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers are not clearly detected and no incident response or security policy pages are found. WHOIS data for the www.spadam.se subdomain is missing, which slightly reduces trustworthiness, but the main domain spadam.se is presumably registered. Overall, the website is compliant with GDPR cookie consent requirements and provides a good user experience with moderate tracking and advertising transparency.