Security Directory

Fine Sax is a small German-based live music service specializing in saxophone performances for corporate events, weddings, and private parties. The website presents a professional and consistent brand image with good quality content including testimonials, videos, and references to partner bands. The technical infrastructure uses common web technologies such as Bootstrap, jQuery, and Google Analytics, providing a moderate performance and good mobile optimization. Security posture is moderate with no visible security headers and no explicit cookie consent mechanism, indicating partial GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from improved security and privacy practices.

S

Sax & the DJ

sax-and-dj.com

41

Sax & the DJ is a small German-based event entertainment service specializing in live DJ and saxophone performances for private and corporate events. The website presents a professional and engaging user experience with clear descriptions of services, testimonials, and multimedia content to attract event organizers and private clients. Technically, the site uses modern front-end frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers highlight compliance and security gaps. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. Overall, while the business appears credible and professionally presented, the technical and security posture requires improvements to enhance trust and compliance.

C

Circus Roncalli GmbH

roncalli-shop.com

63

Circus Roncalli GmbH operates an official online souvenir shop offering a variety of merchandise including souvenirs, posters, program booklets, and gift ideas. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party integrations such as FastBundle for product bundling, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and user experience, targeting general consumers interested in Circus Roncalli memorabilia. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and visible privacy or terms of service documentation. Contact information is not readily available in the analyzed content, which may impact user trust and compliance. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

E

EKG zvířat - dlouhodobé měření EKG bez stresu zvířete

ekgzvirat.cz

40

The website ekgzvirat.cz is a Czech veterinary service specializing in long-term EKG monitoring of animals, primarily dogs, for cardiac and neurological health diagnostics. The business operates in a niche healthcare segment, offering preventive and diagnostic cardiac monitoring services with a focus on stress-free measurement. The site is professionally designed using WordPress with Oxygen Builder and includes essential service descriptions, references, and contact information. Technically, the site uses modern web technologies including Google Tag Manager for analytics and Contact Form 7 for user inquiries. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy compliance mechanisms. The domain registration data is consistent with the business profile and location, indicating legitimacy. Overall, the website presents a trustworthy and professional service but could improve privacy compliance and security best practices.

S

Svět Dam - magazín pre ženy

svetdam.sk

37

Svět Dam is an online women's magazine based in Slovakia, providing content focused on women, family, health, and advice. The website operates on a WordPress platform using the Newspaper theme and several plugins for newsletter and content management. It targets a regional audience with a niche focus on female readers. The site is relatively new, established in 2021, and hosts advertising content to support its business model. Technically, the site uses modern web technologies including HTTPS, DNSSEC, and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS and DNSSEC enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security best practices.

S

SL One s.r.o.

sl-one.cz

63

SL One s.r.o. operates as an investment special purpose vehicle (SPV) founded by colleagues from the legal firm SEDLAKOVA LEGAL. The company provides a unique employee benefit allowing its staff to invest alongside each other in promising startups, sharing both risks and profits. The business model focuses on supporting startups with capital and legal backing, targeting employees of the parent legal firm and innovative startups seeking investment. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a small but focused enterprise in the Czech Republic. Technically, the website leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. It is built on the Solidpixels CMS platform and employs HTTPS with good SSL configuration. However, explicit security headers such as CSP and HSTS are not detected, indicating room for improvement in security hardening. Privacy and cookie policies are present and GDPR compliant, with a functional cookie consent mechanism. From a security perspective, the site demonstrates a moderate security posture with secure forms and no visible vulnerabilities. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trust scores. No direct contact emails or phone numbers are published, with communication facilitated solely through a contact form. No social media presence is linked from the site. Overall, SL One presents a credible and professional investment vehicle with a niche market focus. Enhancing domain transparency and security headers would strengthen trust and security posture. The site is safe for general audiences with no adult or questionable content detected.

T

TaxCounting, s.r.o.

taxcounting.cz

66

TaxCounting, s.r.o. is a Czech-based small business specializing in accounting, payroll, and tax advisory services. The company positions itself as a modern, digitally enabled service provider with a personal approach, serving over 100 clients and operating for approximately 5 years. It is part of the larger SEDLAKOVA LEGAL group, enhancing its market credibility. The website reflects a professional and consistent brand image with clear service offerings targeted at small and medium enterprises in the Czech Republic. Technically, the site uses a modern CMS (Solidpixels), integrates standard marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs responsive design and lazy loading for performance optimization. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is mitigated by the professional web presence and business transparency. Overall, the website is well-structured, user-friendly, and compliant with GDPR requirements.

G

Gorkana

gorkana.com

65

Gorkana is a UK-based leader in media intelligence, offering a comprehensive suite of services including media databases, monitoring, social media services, analysis, surveys, and media distribution. The company operates under the parent company Cision and targets communications professionals and journalists. The website is professionally designed, mobile-optimized, and integrates modern analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data is a notable concern but does not detract from the professional presentation and market position. Overall, Gorkana presents as a credible and established media intelligence provider with room for improvement in transparency and security disclosures.

I

Incident Prevention

incidentprevention.com

62

Incident Prevention is a well-established digital platform founded in 2003, dedicated to providing comprehensive safety resources for utility professionals. The website offers expert articles, podcasts, training materials, and hosts a major industry conference, positioning itself as a premier resource in the energy sector. The business model revolves around content publishing, professional education, event hosting, and advertising services targeting utility safety and operations professionals. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Google Tag Manager, and UIkit for UI components. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site employs HTTPS with good SSL configuration and domain registrar locks to prevent unauthorized changes. While DNSSEC is not enabled, other security best practices are observed. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Overall, the website demonstrates a strong security posture, high content quality, and solid business credibility. It effectively serves its target audience with professional, relevant content and maintains trust through consistent branding and transparent domain registration. Strategic recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and continuous monitoring of third-party scripts to maintain security integrity.

Studio JADES.cz is a small Czech technology company specializing in custom digital solutions including website development, mobile applications, and internal business systems. The company positions itself as a client-focused digital agency offering tailored services to businesses seeking functional, reliable, and scalable online presence and tools. Their website reflects a professional and modern design with clear service offerings and strong client testimonials, indicating a positive market reputation within their niche. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and slick carousel libraries, integrated with multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and ManyChat. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. The absence of a CMS suggests a custom or static site approach. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No explicit security policies or incident response contacts are published, limiting the security posture visibility. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from enhanced security practices and privacy compliance measures. The missing WHOIS data is a notable gap that should be addressed to improve domain legitimacy and trustworthiness.

Netfirms is a well-established web hosting and domain registration provider targeting small businesses and individuals. The company offers a range of services including domain name registration, web hosting, email accounts, website building tools, and SSL certificates. As a part of Newfold Digital, Netfirms benefits from a strong corporate backing and a broad service portfolio. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages modern frameworks such as Next.js and integrates advanced analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high trustworthiness and business credibility, though WHOIS data is not publicly available, likely due to privacy protection. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.

C

C O R E 1

core1.digital

54

C O R E 1 is a Czech digital agency specializing in advanced web technologies and AI integration, operating since 2007. The company positions itself as a leader in AI-enhanced web solutions, offering services including UI/UX design, custom web development, and marketing campaigns. Their client base includes over 220 active clients, supported by strong testimonials and partnerships with recognized associations in UX and AI. Technically, the website is built on a proprietary CMS with modern web technologies, including video.js and multiple marketing and analytics integrations. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable due to TLD restrictions, but the website content and contact information align with a legitimate business presence. Overall, the site demonstrates a mature digital infrastructure and credible business operations.

P

Parkum s.r.o.

parkum.cz

56

Parkum s.r.o. operates a professional online parking payment platform primarily serving drivers, municipalities, and parking operators in the Czech Republic and Slovakia. The website offers a modern, user-friendly interface enabling online payment of parking fees without the need for physical tickets or cash. The platform integrates with various parking infrastructures including parking houses, open parking lots, and virtual parking areas. The company positions itself as a digital innovator in the transportation sector, collaborating with municipalities and commercial centers to streamline parking management. Technically, the website employs modern JavaScript frameworks, responsive design, and reputable third-party services such as Pays.cz for secure payment processing. Privacy and cookie policies are clearly presented with consent mechanisms in place, reflecting good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and use of trusted payment gateways, though explicit security headers and incident response information could be improved. The absence of WHOIS registration data slightly impacts trust but the overall professional presentation and business model indicate a legitimate and credible operation.

W

WBENC

wbenc.org

62

WBENC (Women's Business Enterprise National Council) is a leading non-profit organization dedicated to certifying and supporting women-owned businesses in the United States. It holds the position as the largest third-party certifier of women-owned businesses and provides a broad range of services including certification, business development programs, networking events, and corporate membership opportunities. The organization targets women entrepreneurs and corporations committed to supplier diversity and inclusion. The website is professionally designed, well-branded, and offers comprehensive resources and testimonials that reinforce its credibility and market position. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for UI components. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is solid with HTTPS enforced and use of sanitization libraries, though explicit security headers could be improved. Privacy compliance is partially addressed with a privacy policy present but lacks a cookie consent mechanism. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. The site demonstrates good security hygiene but could enhance its security headers and publish an incident response or vulnerability disclosure policy. WHOIS data is unavailable or restricted, which slightly reduces trust but the overall professional presence and content quality strongly support legitimacy. Overall, WBENC's website is a trustworthy, authoritative resource for women-owned business certification and advocacy, with strong business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security headers would further enhance its security posture and user trust.

I

Incident Prevention

incident-prevention.com

62

Incident Prevention is a well-established digital platform founded in 2003, dedicated to providing comprehensive safety resources for utility professionals. The website offers expert articles, podcasts, training materials, and hosts a prominent utility safety conference, positioning itself as a leading authority in the energy sector's safety domain. The platform targets utility safety and operations professionals, delivering valuable content to support best practices and professional growth. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and UIkit, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS, domain locking, and standard best practices, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are present with consent mechanisms, reflecting good privacy compliance. Overall, the website demonstrates high professionalism, trustworthiness, and content quality, with no detected adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to enhance security transparency and trust.

D

Diözesanverband München und Freising e.V.

michaelsbund.de

64

The website www.michaelsbund.de/shop is an established German e-commerce platform specializing in books and media products, with a strong focus on religious, thematic, and children's literature. It is operated by the Diözesanverband München und Freising e.V., a regional diocesan association, positioning itself as a niche retailer with cultural and religious affiliations. The platform offers a broad catalog, including specialized collections and library services, targeting German-speaking readers, libraries, and religious communities. Technically, the site is built on the OXID eShop Enterprise Edition platform, utilizing modern web technologies such as jQuery, Owl Carousel, and Usercentrics for consent management. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site demonstrates good mobile optimization, SEO practices, and accessibility at a basic level. Structured data and Open Graph tags are implemented to enhance search engine visibility. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with privacy regulations. However, explicit security headers like CSP and X-Frame-Options are not visibly configured, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and secure e-commerce experience with room for improvement in privacy documentation and security header implementation. The business is legitimate and consistent with its domain registration and WHOIS data.

S

Sharp Health Plan

sharpmedicareadvantage.com

61

Sharp Health Plan operates as a prominent Medicare Advantage health insurance provider serving primarily San Diego County residents, former Sharp employees, and city retirees. The company positions itself as a high-quality, affordable healthcare plan provider with direct access to Sharp HealthCare, emphasizing its local nonprofit status and strong community ties. The website reflects a mature digital presence with comprehensive plan information, enrollment resources, and wellness programs tailored to Medicare-eligible individuals. Technically, the website is built on the Sitefinity CMS platform and utilizes modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Snowplow Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. However, some improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. While no critical vulnerabilities were detected, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The missing WHOIS registration data raises questions about domain registration legitimacy, although the professional branding and content quality mitigate immediate concerns. Overall, Sharp Health Plan's website demonstrates a strong business and technical foundation with good security hygiene but would benefit from enhanced privacy compliance features and clearer domain registration transparency to bolster trust and regulatory adherence.

G

GFBio e.V.

nfdi4biodiversity.org

56

NFDI4Biodiversity is a German consortium under the National Research Data Infrastructure (NFDI) umbrella, focused on developing services, tools, and training for biodiversity data management. It is supported by over 50 partners including scientific institutions, museums, and environmental agencies. The website reflects a mature and professional organization with a clear mission to support biodiversity research through data infrastructure and community engagement. The consortium offers events, helpdesk support, knowledge bases, and use case projects to its target audience of researchers and data managers. Technically, the website uses modern web technologies including jQuery, Carbon Design System, and Swiper.js for UI components, and integrates Google Analytics with IP anonymization for privacy-conscious tracking. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some security headers and DNSSEC for enhanced DNS security. The domain is registered with a reputable registrar, has a consistent registration history, and is not privacy protected, which aligns with the consortium's transparency. Security posture is generally good with HTTPS enforced and clientTransferProhibited domain status, but improvements are recommended such as enabling DNSSEC, adding security headers, and implementing a cookie consent mechanism to enhance GDPR compliance. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and serves its educational and research community well. Strategic recommendations include enhancing security headers, DNS security, and privacy compliance mechanisms to further strengthen trust and security culture.

C

Charles Darwin Foundation

darwinfoundation.org

52

The Charles Darwin Foundation website serves as a comprehensive platform for promoting conservation and scientific research efforts focused on the Galapagos Islands. The organization is positioned as a reputable non-profit entity dedicated to safeguarding biodiversity through various marine, land, and community programs. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and integrated analytics and marketing tools. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though improvements can be made by implementing security headers and publishing explicit privacy and cookie policies. The absence of WHOIS registrant data is likely due to privacy protection, which is justified for a non-profit organization. Overall, the website is trustworthy, professional, and well-optimized for its audience.

T

tagDiv

tagdiv.com

72

tagDiv is a software company specializing in the development and sale of premium WordPress themes, notably the Newspaper and Newsmag themes, alongside offering a suite of web development and design services. Established in 2012, the company targets web developers, news publishers, and businesses seeking customized web solutions. Their market position is that of an established and reputable WordPress theme developer with a medium-sized operation and a consistent brand presence. Technically, the website is built on WordPress 6.7.2, leveraging modern JavaScript libraries like jQuery, and optimized with caching and SEO plugins such as WP Rocket and Yoast SEO Premium. Hosting and DNS services are provided by reputable providers including GoDaddy and Cloudflare, ensuring good performance and security. The site is mobile-optimized and integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security policy disclosures. Cookie consent mechanisms are implemented, indicating some privacy compliance, though no explicit privacy policy or terms of service pages were detected in the homepage HTML. No critical vulnerabilities or suspicious patterns were found, and the domain registration data aligns well with the business claims. Overall, tagDiv presents a professional and trustworthy online presence with good technical infrastructure and marketing integration. However, improvements in explicit privacy and security policy disclosures and DNS security could enhance their compliance and security posture.

S

Svět Stromků

svetstromku.cz

50

Svět Stromků is a Czech Republic-based e-commerce retailer specializing in high-quality artificial Christmas trees and 3D trees, offering over 80 varieties with fast delivery and a large satisfied customer base. The website is built on a modern WordPress and WooCommerce platform, enhanced with SEO tools like Yoast and performance optimizations such as WP Rocket. It integrates comprehensive cookie consent management via Cookiebot and employs multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Hotjar. Security posture is solid with HTTPS enforced and cookie consent compliance, though additional security headers could improve defenses. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business profile, registered since 2015 with a reputable registrar. Overall, the website presents a professional, trustworthy, and GDPR-compliant online retail presence.

B

bydlet.eu

bydlet.eu

55

bydlet.eu is an online magazine focused on housing, lifestyle, and garden-related content primarily targeting a Czech-speaking audience interested in home improvement, inspiration, and advice. The website operates on a WordPress platform with a modern theme and several plugins enhancing content delivery and user experience. The technical infrastructure is supported by a reputable hosting provider, WEDOS Internet, a.s., and integrates Google Analytics and Tag Manager with consent mode enabled to respect user privacy in the EU region. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and explicit privacy and cookie policies indicates room for improvement. The website does not display any adult or NSFW content and maintains a professional and consistent branding approach. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

D

Dámský magazín

dmag.cz

39

Dámský magazín is a Czech online women's lifestyle magazine established around 2020, focusing on topics such as fashion, health, finance, housing, and advice. The website targets a mature female audience with content that includes articles on lingerie, seasonal recipes, and child care. The business model centers on content publishing supported by advertising, with partnerships to related media sites. Technically, the site runs on WordPress with common plugins and uses Google Analytics and Tag Manager for tracking. Mobile optimization and SEO are good, but accessibility is basic. Security posture is moderate with HTTPS enabled and secure login forms, but lacks security headers and formal privacy or cookie policies. No WAF or blocking mechanisms were detected, and the domain registration is consistent and legitimate. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

carVertical is a professional automotive data provider specializing in vehicle history reports that help users detect mileage fraud, accident history, and other critical vehicle information. The company positions itself as a leading European player with multiple awards and a broad international presence. Their website is well-designed, mobile-optimized, and uses modern web technologies such as Next.js and React, supported by analytics and marketing tools like Google Tag Manager and Visual Website Optimizer. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable, possibly due to privacy protection, but the website's professional content and trust signals support legitimacy. Overall, the site demonstrates a mature digital presence with good security and privacy compliance, suitable for its business model and audience.

C

Cebia.cz

cebia.cz

75

Cebia.cz is a leading Czech company specializing in vehicle verification and security services. The website positions itself as the market leader in the Czech Republic, offering services that assist motorists and companies in the safe purchase, operation, and sale of vehicles. The business targets both individual consumers and corporate clients within the automotive sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements a comprehensive cookie consent mechanism, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and technology usage suggest a legitimate and professional operation. Overall, the site demonstrates a solid security posture with room for enhancements in transparency and compliance documentation.

A

AutoScout24

autoscout24.cz

69

AutoScout24.cz is a leading European online marketplace specializing in the sale and purchase of new and used vehicles, including cars, motorcycles, trucks, and trailers. The platform offers extensive search filters and a dealer cockpit for professional sellers. The website is well-established with a strong market position as the largest European automotive marketplace, targeting consumers and dealers across multiple countries with localized versions. Technically, the site employs modern web technologies such as React, service workers, and integrates major analytics and advertising platforms like Google Tag Manager, Facebook Pixel, and Bing Ads. It demonstrates good digital maturity with mobile optimization, accessibility features, and GDPR-compliant consent management. Security posture is strong with HTTPS enforcement, security headers, and reCaptcha Enterprise integration, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high legitimacy score despite the absence of public WHOIS data due to privacy protection.

P

Levné pojištění online a srovnávač pojišťoven | Pojištění-24.CZ

pojisteni-24.cz

51

The website pojisteni-24.cz operates as an online insurance comparison platform targeting Czech consumers. It offers services including travel insurance, mandatory vehicle insurance, and property insurance, providing users with price comparisons and calculators to facilitate informed purchasing decisions. The site is positioned as a small but focused player in the Czech insurance market, leveraging online tools to attract and serve its audience. Technically, the website is built on the Yola platform with indications of Next.js usage, incorporating modern web technologies such as Google Tag Manager, Adsense, and web font loaders. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices appear adequate with proper meta tags and site verification. From a security perspective, the site employs HTTPS and includes Google site verification, but lacks visible security headers and explicit security or privacy policies. No critical vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, though the absence of privacy and terms of service pages is a notable gap. Overall, the site presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic enhancements in security headers, policy transparency, and contact information visibility would strengthen trust and compliance.

N

Srovnejte pojištění online a ušetřete | Nej-Pojištění.cz

nej-pojisteni.cz

50

Nej-Pojištění.cz is a newly launched Czech online platform specializing in insurance comparison and sales, focusing on providing users with quick access to affordable insurance options such as mandatory liability, comprehensive, and travel insurance. The website targets Czech-speaking consumers seeking to compare and purchase insurance products efficiently. The business model centers on aggregating insurance offers and facilitating immediate insurance acquisition, positioning itself as a convenient intermediary in the Czech insurance market. Technically, the website is built on the Yola site builder platform, utilizing common web technologies including Google Adsense for advertising and multiple analytics services for user tracking. The site demonstrates basic mobile optimization and moderate performance but lacks advanced technical frameworks or custom backend technologies. Security posture is limited; no security headers were detected, and there is no visible privacy or terms of service documentation, which may impact user trust and compliance. The domain registration is recent, consistent with a new business venture, and registered through a reputable Czech registrar, Active24. Overall, the site is functional but would benefit from enhanced security measures, clearer privacy compliance, and more transparent business information to improve credibility and user confidence.

S

Pojištění a povinné ručení výhodně online | Super-Pojištění.CZ

super-pojisteni.cz

51

Super-Pojištění.cz is a newly established Czech online insurance platform launched in May 2024, offering various insurance products including mandatory vehicle insurance, collision insurance, and travel insurance. The website provides an online calculator to help consumers find advantageous insurance deals. Targeting Czech-speaking consumers, it operates as an intermediary in the finance sector, focusing on ease of access and online service delivery. The business model centers on digital insurance comparison and sales, positioning itself as a convenient online solution for insurance needs in the Czech Republic. Technically, the website is built using a proprietary or custom framework (ws-intense-next-blank) hosted by Active24, with integration of Google Tag Manager, Google Adsense, and multiple analytics services. The site is mobile-optimized with good design quality and clear navigation, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and structured fonts. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks explicit security headers and does not provide a privacy policy or terms of service pages. There is no evidence of vulnerability disclosure or incident response policies. User tracking is extensive via multiple analytics and advertising scripts, but privacy compliance is limited. WHOIS data is transparent and consistent with the business launch timeline, indicating legitimacy. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

F

Firma usługowo-konsultingowa MAGFIN

magfin.pl

36

Firma usługowo-konsultingowa MAGFIN is a Polish consulting and service company established in 2012, offering a broad range of services including accounting, tax advisory, legalization of stay and work, construction cost estimates, company formation, and consultations. The website targets businesses and individuals in Poland, providing multi-language support in Polish, Russian, and English. The company positions itself as experienced with a professional team, aiming to serve clients requiring comprehensive business and legal services in Poland. Technically, the website is built on WordPress 6.8.3, integrated with Bitrix24 CRM and live chat for customer engagement. It uses modern web technologies including jQuery and Google Tag Manager for analytics and marketing. The site is hosted by cyber_Folks S.A., a reputable Polish hosting provider. Performance and mobile optimization are moderate to good, with basic accessibility features and good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers. Cookie consent mechanisms are implemented, indicating some GDPR compliance awareness, but no explicit privacy policy, terms of service, or security policy documents are found. No vulnerability disclosure or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy with a stable domain registration consistent with the business history. The main risks relate to incomplete privacy and security documentation. Strategic improvements in these areas would strengthen compliance and security posture.

P

Nejlevnější povinné ručení a pojištění online | Pojištění-Levně.CZ

pojisteni-levne.cz

50

The website pojisteni-levne.cz is a newly launched Czech online platform specializing in insurance comparison services, including mandatory vehicle insurance, comprehensive vehicle insurance, and travel insurance. It offers users an online calculator to find the cheapest insurance options, targeting Czech-speaking consumers seeking affordable insurance solutions. The business model focuses on providing a convenient digital comparison and quotation service in the finance sector. The domain was registered recently in May 2024, consistent with a new market entrant. Technically, the website is built using SiteW's platform with Next.js framework elements, leveraging Google Tag Manager and Adsense for analytics and advertising. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is adequate for a small business but could benefit from enhanced security headers and privacy disclosures. From a security perspective, the site uses HTTPS and includes Google site verification, indicating basic security hygiene. However, it lacks explicit security policies, vulnerability disclosures, and security headers, which are important for trust and compliance. No contact information or privacy policy was found, which may impact user trust and GDPR compliance. The cookie consent banner is present, showing some awareness of privacy regulations. Overall, the website presents a basic but functional online insurance comparison service with room for improvement in privacy, security, and transparency. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, publishing vulnerability disclosure information, and providing clear contact details to enhance trust and compliance.

P

Srovnání pojištění online, rychle, snadno a zdarma | Pojistíme-se.cz

pojistime-se.cz

52

Pojistime-se.cz is a newly launched Czech online insurance comparison platform specializing in mandatory liability, comprehensive, and travel insurance. The website offers a user-friendly online calculator to compare insurance offers quickly and easily, targeting Czech-speaking individuals seeking insurance solutions. The business operates in the finance sector with a small-scale footprint and a focus on digital lead generation. Technically, the site is built on the Yola platform, leveraging modern web fonts, Google Tag Manager, and Google Adsense for monetization and analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security-wise, the site uses HTTPS but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is minimal with no visible privacy or terms of service pages, though a cookie consent banner is present. Overall, the domain registration is consistent with a legitimate new business, and no suspicious patterns were detected. Strategic recommendations include enhancing security headers, publishing privacy and terms policies, and improving contact transparency to boost trust and compliance.

T

Top Installateure s.r.o.

top-instalaterstvi.eu

54

Top Installateure s.r.o. is a small Czech Republic based company specializing in plumbing, heating, and gas services primarily serving Prague and its surrounding areas. The company offers a wide range of services including installation, repairs, servicing, and inspections of gas boilers, water heaters, and domestic water systems. With over 10,000 customers served and a strong social media presence, the company positions itself as a reliable and professional local service provider. The website is built on WordPress with WooCommerce and Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security posture is good with HTTPS, security headers, and reCAPTCHA implemented, though no explicit security or incident response policies are published. Privacy compliance is strong with GDPR and cookie consent mechanisms in place. Overall, the website and business demonstrate a mature digital presence suitable for their market niche.

E

Endo-Exo

endo-exo.net

10

Endo-Exo is a specialized consultancy focused on event marketing, digital experiences, and operations, primarily serving clients interested in online and hybrid events. The company offers a comprehensive suite of services including event planning, marketing strategy, content development, logistics, resource management, and budget optimization. Their market position is that of a niche, experienced player with international reach and a strong digital orientation. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on the Tilda CMS platform, hosted on WordPress.com, and employs modern JavaScript libraries and Google Analytics for tracking. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is adequate with HTTPS enforced and form validations, but lacks advanced security headers and DNSSEC is not enabled. Privacy compliance is limited by the absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

S

SlidesLive

slideslive.com

10

SlidesLive is a professional service provider specializing in conference recording, live streaming, and hosting recorded talks. With over 13 years of experience and thousands of events recorded globally, the company targets event organizers and professional communities seeking comprehensive event capture solutions. The website demonstrates a mature digital presence with modern technologies such as Google Maps API, Vimeo Player, Cloudflare DNS, and multiple analytics and advertising tools integrated. The design is professional, mobile-optimized, and user-friendly, supporting a positive user experience. Security posture is good with HTTPS enforced and bot protection mechanisms like Google reCAPTCHA and Cloudflare Turnstile, though some improvements are recommended such as enabling DNSSEC and publishing security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Z

Základní škola Duhovka, s.r.o.

duhovkaskola.cz

10

Základní škola Duhovka, s.r.o. operates a private Czech-English Montessori elementary school in Prague 6, targeting children aged 6 to 15. The school emphasizes a bilingual environment with native speakers and Montessori-certified teachers, fostering independence and responsibility in students. The website reflects a professional and comprehensive presentation of the school's educational programs, values, and services, including after-school activities and psychological support. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and consent management, though additional security headers and published policies could enhance trust. The absence of WHOIS data is a notable gap, limiting domain legitimacy verification. Overall, the site is well-designed, user-friendly, and trustworthy from a business and content perspective.

A

Aisa International

aisainternational.cz

9

Aisa International is a small financial services company specializing in investment portfolio management and financial planning for US and UK expatriates. The company positions itself as a trusted financial partner for expats, offering experienced and solid investment management services. The website is built on WordPress using the Divi theme, integrating modern technologies such as Google Tag Manager and CookieYes for cookie consent. The site demonstrates good SEO practices and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, though some security headers and explicit privacy policies are missing. Overall, the website presents a credible and professional front for a niche financial services provider, though the absence of WHOIS data and explicit privacy policies slightly reduce trust levels.

R

Radimský Mlýn

radimsky-mlyn.cz

10

Radimský Mlýn is a prominent residential real estate development project based in Kolín, Czech Republic, focusing on the reconstruction and expansion of a historic mill into modern apartments. The project targets local and regional homebuyers seeking quality housing blending historical charm with contemporary living. The website is built on WordPress with a multilingual setup and integrates modern tracking and consent management tools such as Cookiebot, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the site reflects a mature digital presence appropriate for a medium-sized real estate developer, with room for improvement in transparency and security documentation.

P

Perrott Hill British School Prague

perrotthillprague.cz

54

Perrott Hill British School Prague is a private international school offering a British curriculum in Prague, targeting families seeking high-quality British education. The website presents a professional and well-structured digital presence with good content quality and SEO optimization. The technical infrastructure is based on WordPress with integration of Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA usage; however, the absence of security headers and a privacy policy page suggests room for improvement in compliance and security best practices. The lack of WHOIS data limits domain trust assessment but the website content and technical setup appear legitimate and professional. Overall, the site is safe, family-friendly, and focused on education.

K

Kyocera Mobile

kyoceramobile.com

51

Kyocera Mobile operates as a provider of ultra-rugged mobile devices designed for industries where durability and reliability are critical. The company positions itself as a specialist in connectivity and productivity solutions through ruggedized phones. The website reflects a professional business presence with clear branding and targeted messaging towards industrial and enterprise customers. Technically, the site employs modern JavaScript libraries, analytics tools, and a service worker for enhanced performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and terms of service documents are not clearly found. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall digital footprint suggests a legitimate enterprise. Strategic recommendations include improving transparency with clear privacy and security policies and providing direct contact information for enhanced trust.

K

KYOCERA AVX

kyocera-avx.com

60

KYOCERA AVX operates as a leading global manufacturer specializing in advanced electronic components and solutions designed to accelerate innovation. The company targets businesses and engineers in the electronics manufacturing sector, positioning itself as a B2B enterprise with a strong market presence. The website reflects a professional and consistent brand image, supporting its enterprise-level stature. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and FontAwesome. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant technical debt detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a baseline security posture. However, the absence of explicit security headers and lack of published security policies or incident response information suggest areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is trustworthy and professional, but the missing WHOIS registration data and lack of privacy policy reduce the confidence level. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving transparency around incident response and vulnerability disclosures.

S

Sharp Health Plan

sharphealthplan.com

64

Sharp Health Plan is a well-established not-for-profit health insurance provider serving San Diego, California since 1992. The company offers a range of health insurance products including individual and family plans, Medicare advantage plans, and group plans. It operates as part of the Sharp HealthCare integrated delivery system, providing members access to a network of medical groups, hospitals, and providers. The website reflects a strong market position with multiple awards and high member ratings, targeting a broad audience including individuals, families, employers, brokers, and providers. Technically, the website is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Slick Carousel. It integrates analytics tools including Google Tag Manager, Snowplow, and Qualtrics for user tracking and feedback. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and uses secure login and payment mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a clear cookie consent mechanism. The absence of WHOIS data for the domain is a concern but does not detract significantly from the overall trustworthiness given the strong branding and business presence. Overall, Sharp Health Plan's website demonstrates a mature digital presence with good security posture and business credibility. Strategic improvements in privacy compliance and security header implementation would enhance trust and regulatory adherence.

I

in magazin

inmag.sk

51

The website inmag.sk operates as a small regional online magazine focused on lifestyle, family, women's interests, and advice content. It uses WordPress CMS with a Newspaper theme and several plugins to deliver a content-rich experience. The site targets a general adult audience interested in lifestyle and family topics, monetizing primarily through advertising. Technically, the site is hosted on svethostingu.cz with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and secure login forms, but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate with consistent WHOIS data but no explicit contact information or certifications. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

E

ekonomie.sk

ekonomie.sk

37

ekonomie.sk is a Slovak online media platform specializing in business, finance, investment news, and advice. The website operates on WordPress using the Newspaper theme and targets a general audience interested in business news. The business model appears to be content publishing supported by advertising. Technically, the site uses modern web technologies including HTTPS, DNSSEC, Google Analytics, and Google Tag Manager, ensuring a baseline of security and analytics capabilities. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The security posture is moderate with good SSL configuration but missing some best practices. Overall, the site is safe for general audiences and does not contain adult or questionable content.

A

Aktiv life.cz

aktivlife.cz

39

Aktiv life.cz is a Czech lifestyle and women's interest online media platform founded in 2017. It provides regularly updated content across categories such as health, fashion, family, horoscopes, and home living. The site targets a general audience interested in lifestyle topics, primarily women. The business operates as a small media content publisher with advertising as a likely revenue stream. Technically, the website is built on WordPress using the Elementor page builder and the Soledad theme, with integration of Google Fonts and Google Tag Manager for analytics and marketing. The site is hosted under the REG-WEDOS registrar, consistent with its Czech domain and content focus. Security posture is moderate with HTTPS enabled and some security best practices like opening external links with noopener, but lacks explicit security headers and privacy/cookie policies. No direct contact or incident response information is publicly available, which limits transparency. Overall, the website is professionally designed, mobile optimized, and SEO friendly, but could improve privacy compliance and security transparency.

C

Časopis Žena

casopiszena.cz

40

Časopis Žena is a Czech online magazine focused on women's lifestyle topics such as fashion, beauty, health, and advice. The website targets Czech-speaking women and operates as a content publishing platform monetized primarily through advertising. The domain was registered in 2021, aligning with the site's relatively recent establishment. Technically, the site is built on WordPress using the Newspaper theme and several plugins, including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

E

EDRONE SP Z O O

edrone.me

54

EDRONE SP Z O O operates the website edrone.me, providing a specialized SaaS platform focused on e-commerce CRM and marketing automation, including voice commerce capabilities. The company targets online stores and e-commerce businesses seeking to optimize sales and customer engagement through automation and data-driven marketing. The website demonstrates a mature digital presence with modern technologies such as Next.js, React, and integrations with major marketing and analytics platforms including HubSpot, Google Analytics, and Hotjar. Hosting and DNS services are managed via AWS, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though improvements are recommended in security headers and formal security policies. Privacy compliance is supported by a detailed cookie consent mechanism powered by CookieYes, offering users granular control over cookie categories. However, explicit privacy policy and terms of service documents were not detected in the scanned content. Overall, the website is professional, well-branded, and trustworthy, with a strong market position in the e-commerce SaaS sector.

T

Technikboerse

technikboerse.com

58

Technikboerse.com operates as a specialized online marketplace focused on new and used agricultural machinery, forestry, construction, municipal, and viticulture equipment. The platform targets professionals and businesses in the agricultural and related sectors primarily in Germany and Europe. It offers a comprehensive search and listing service for machinery buyers and sellers, including dealers and private individuals. The website is multilingual, supporting a broad European audience, and positions itself as a trusted marketplace in its niche. From a technical perspective, the website employs modern web technologies including Vue.js for frontend interactivity, Google Tag Manager and Google Analytics for analytics, and a Consent Management Platform to ensure GDPR compliance. The site is well-structured with SEO best practices, mobile optimization, and accessibility considerations, although some accessibility features could be enhanced. Performance is moderate, with preloading and asynchronous script loading implemented. Security-wise, the site enforces HTTPS with good SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. However, there is no publicly available security policy or incident response contact, and no vulnerability disclosure mechanism is found, which are areas for improvement. Overall, Technikboerse.com presents a professional and trustworthy online marketplace with solid technical infrastructure and privacy compliance. The main risk factor is the lack of publicly available WHOIS data, which slightly reduces domain trustworthiness. Strategic recommendations include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure page to enhance transparency and security posture.

D

dlv Deutscher Landwirtschaftsverlag GmbH

dlv-shop.de

69

The website www.dlv-shop.de is an e-commerce platform operated by dlv Deutscher Landwirtschaftsverlag GmbH, specializing in the sale of subscriptions, books, and products related to agriculture, forestry, beekeeping, gardening, and hunting. It targets professionals and enthusiasts in these sectors, offering a broad catalog of specialized media products. The site is built on Magento CMS and employs modern web technologies such as jQuery, RequireJS, and KnockoutJS, with integrations for Google Tag Manager and consent management to ensure GDPR compliance. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content.

F

Fachmagazin dergartenbau

dergartenbau.ch

53

Fachmagazin dergartenbau is a specialized Swiss media publication serving the gardening, landscaping, and horticulture professional community. The website offers a comprehensive range of services including industry news, event agendas, job listings, and dossiers, positioning itself as a key information source within its niche. The business model revolves around media publishing with revenue streams from subscriptions, advertising, and job market services. The site targets professionals and businesses in the Swiss garden and landscape sector, maintaining a consistent and professional brand presence. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Google Tag Manager, and Google Maps API. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy and cookie compliance are well implemented with a clear consent mechanism and GDPR-aligned policies. Security posture is strong with HTTPS enforced, secure forms, and no exposed sensitive data, though explicit security policy and incident response information are absent. Overall, the site is trustworthy and professional, with clear contact information and transparent WHOIS data supporting legitimacy. No blocking mechanisms or suspicious content were detected. The site maintains minimal user tracking and respects privacy, making it suitable for its professional audience. Recommendations include enhancing security transparency by adding a security policy and incident response contacts, improving accessibility features, and maintaining up-to-date third-party libraries to sustain security and performance.