Security Directory

S

SHERWOOD Digital a.s.

sherwood.cz

50

SHERWOOD Digital a.s. is a well-established Czech digital agency founded in 2006, specializing in premium custom websites, robust e-commerce platforms, online marketing, and digital ecosystems for events and festivals. The company holds a strong market position in the Czech Republic, serving both domestic and export-oriented businesses with a portfolio of reputable clients and multiple industry awards. Their business model focuses on delivering tailored digital solutions that drive measurable business results for B2B clients. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Leady, hosted on reliable Czech hosting providers, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

R

Rubena, s.r.o.

rubena.cz

55

Rubena, s.r.o. is a Czech manufacturing company specializing in a broad range of rubber products including V-belts, air springs, flexible and inflatable rubber products, hockey pucks, technical molded rubber, rubber compounds, and mold production. The company operates multiple e-commerce platforms targeting industrial and commercial customers, indicating a diversified business model and a solid market position in the manufacturing sector. The website is professionally designed with clear navigation and consistent branding, supporting a positive user experience and trustworthiness. Technically, the website employs modern analytics tools such as Google Analytics and Google Tag Manager, alongside a comprehensive cookie consent management system via CookieScript. The site appears to be custom-built or uses a proprietary CMS platform by SHERWOOD Media s.r.o. Performance is moderate with good mobile optimization and basic accessibility features. However, security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. The absence of explicit incident response contacts or a security.txt file indicates an opportunity to enhance transparency and readiness for security incidents. Overall, the domain WHOIS data is unavailable or privacy protected, which is common for medium-sized enterprises but limits direct verification of domain registration details. The website’s content, social media presence, and compliance measures provide strong trust signals. Strategic recommendations include implementing security headers, publishing incident response information, and enhancing accessibility compliance to further strengthen the security posture and user trust.

R

Rubena Tyres

rubena-tyres.com

73

Rubena Tyres operates an e-commerce website specializing in cycling tyres designed and manufactured in Europe. The company targets cycling enthusiasts and outdoor sports consumers, positioning itself as a European manufacturer with a focus on quality and performance. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing and analytics tools to enhance user experience and business operations. The technical infrastructure is solid, with good mobile optimization and SEO practices, although some security headers could be improved. The security posture is good with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and privacy policies. However, explicit security policies and incident response information are not published, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

F

FRABEX GmbH

frabex.com

51

FRABEX GmbH is an Austrian company specializing in the distribution of high-quality bearings and linear technology products, representing brands such as FBJ, HIWIN, and MYT. The company serves a diverse clientele including industrial, agricultural, commercial, and private customers, offering both a physical presence and an online webshop tailored for business customers. Their market position is strengthened by being the European distribution center for FBJ and a key dealer for HIWIN in Austria, supported by an in-house linear workshop enabling customized solutions. Technically, the website is built on modern web technologies including UIkit and jQuery, with a proprietary CMS by EWAY. The site is mobile optimized, SEO friendly, and includes essential accessibility features. Performance is moderate with good design and navigation clarity, supporting a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies and incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, FRABEX GmbH presents a professional and trustworthy online presence with solid business credibility and compliance posture. Strategic improvements in security transparency and incident response readiness would further strengthen their security maturity and customer trust.

M

MERKUR.com AG

merkur.com

54

MERKUR.com AG operates a comprehensive German-language website focused on gaming, sports betting, and casino entertainment. The company is well-established with a domain age dating back to 1997, indicating a mature market presence. The website offers rich content including articles, news, and links to partner sites, targeting gaming enthusiasts and bettors. Technically, the site uses modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as Dynamic Yield, Matomo, and Google Tag Manager. Privacy compliance is supported by a Usercentrics consent management platform, although no explicit privacy policy or terms of service were found in the provided content. Security posture is generally good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing security policies. Overall, the site is professional, content-rich, and trustworthy, serving a large audience in the gaming sector.

A

Asia Pacific Lottery Association

asiapacific-lotteries.com

10

Asia Pacific Lottery Association Limited is a non-profit organization serving the lottery industry in the Asia Pacific region. The website provides information about the association's events, news, members, and knowledge sharing initiatives. The site is professionally designed using WordPress with modern plugins and SEO optimization. Security posture is good with HTTPS enabled, but lacks some security headers and published policies. WHOIS data is missing, which raises some concerns about domain legitimacy. Overall, the website is trustworthy and serves its business purpose effectively.

S

Stratacache

stratacache.com

11

Stratacache is a well-established technology company specializing in digital signage solutions and retail media networks. Founded in 1999 and headquartered in Dayton, Ohio, the company offers scalable end-to-end digital signage hardware, software, and managed services tailored for various business sectors. Their market position is strong, supported by partnerships with major retailers such as Albertsons and Loblaw Advance, and a global presence with millions of managed devices. Technically, the website is built on a modern WordPress platform with advanced plugins like Gravity Forms, Yoast SEO, and WP Rocket for performance optimization. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. Tracking and analytics are implemented via Google Tag Manager and Hotjar, providing moderate user behavior insights. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs Google reCAPTCHA v3 to protect forms. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Stratacache's website reflects a professional, trustworthy, and mature digital presence aligned with its business objectives. Strategic improvements in privacy compliance and security policy transparency would further strengthen its security posture and regulatory adherence.

The website totalizatorsportowy.pl currently serves as a parked domain page with no active business content or services. The domain is registered since 2003 via Aftermarket.pl Limited, a domain aftermarket provider, and the website content aligns with this by indicating the domain is for sale. There is no visible business information, contact details, or privacy and cookie policies, which significantly limits the site's credibility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with external scripts for advertising and tracking, but lacks HTTPS enforcement and security headers, exposing it to potential security risks. The embedded iframe points to an external suspicious domain, which could pose security concerns. Overall, the site is low trust and minimal in content, serving primarily as a domain sales landing page.

У

Українська національна лотерея

unl.ua

51

The website represents the official Ukrainian National Lottery, providing state lottery services and online ticket purchases. It targets Ukrainian citizens interested in participating in national lotteries. The site uses modern web technologies including React and integrates multiple analytics and tracking services such as Google Analytics, TikTok Pixel, and Facebook Pixel. The technical infrastructure appears moderately optimized for performance and mobile usage, with a good level of design and user experience. Security posture is adequate with HTTPS enabled, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of accessible privacy and cookie policies and no clear consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

T

Tippspiel für Unternehmen

tippspiel-fuer-unternehmen.com

54

Tippspiel für Unternehmen is a specialized service provider offering customizable corporate football World Cup betting games for the 2026 men's tournament. The platform targets businesses aiming to engage employees and customers through branded, multi-language, and interactive betting games. The company operates a professional WordPress-based website with WooCommerce for e-commerce functionality and Elementor for design. The technical infrastructure includes hosting with netcup and analytics via Matomo, emphasizing privacy by disabling cookies. Security posture is strong with SSL encryption, ISO 27001 certification, and GDPR compliance claims, although explicit privacy and cookie policies are not found on the main page. The domain is relatively new, created in 2022, aligning with the upcoming 2026 World Cup event.

S

SBC Connect

sbcconnect.com

53

SBC Connect operates as a specialized networking and event planning platform primarily serving the iGaming and sports betting industries. The platform facilitates seamless meeting scheduling, attendee discovery, and real-time event updates, positioning itself as a premier tool for professionals attending industry conferences. The website reflects a mature business with a domain age dating back to 2012 and a consistent brand presence across its digital assets. Technically, the site leverages modern frameworks such as Angular and integrates multiple analytics and marketing tools including Matomo, Google Analytics, Hotjar, and HubSpot, indicating a well-developed digital infrastructure. Hosting and DNS services are provided via reputable providers like Windows Azure and Cloudflare, enhancing reliability and security. From a security perspective, the site enforces HTTPS and provides a comprehensive cookie consent mechanism, though it lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, SBC Connect demonstrates a solid security posture and compliance with privacy regulations, though improvements in security header implementation and transparency around incident response would strengthen its security maturity. The site is professionally designed, mobile-optimized, and offers clear navigation, contributing to a positive user experience and high trustworthiness.

S

SBC Advisory Partners

sbcadvisory.com

59

SBC Advisory Partners is a specialized consulting and intermediary firm serving the international iGaming, sports betting, and sports business sectors. Founded in 2020, the company leverages a highly experienced and connected team to provide strategic and regulatory advice, supported by a broad network of local contacts and market access. Their market position is strengthened by global conferences and media reach, positioning them as a trusted advisor in their niche. Technically, the website is built on WordPress with modern plugins and integrates GDPR-compliant cookie consent and analytics tools such as Matomo and Google Tag Manager. Security posture is solid with HTTPS enabled and Cloudflare DNS, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and credible business presence with good digital maturity.

D

Digitain

paydrom.co

49

Paydrom is a payment gateway and service provider specializing in secure and quality payment solutions tailored for the iGaming industry. The company operates under the parent brand Digitain and offers a comprehensive suite of services including cashier integration, business intelligence, transaction management, refunds, risk and fraud management, and payment account management. Their market position is focused on enabling iGaming businesses to optimize payment flows and scale efficiently with a broad range of payment methods and local market coverage. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Swiper Slider, and Font Awesome Pro, providing a responsive and visually appealing user experience. The site includes tracking via Google Tag Manager but lacks visible advanced security headers and privacy compliance mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and displays a PCI certification logo, indicating adherence to payment security standards. However, it lacks a published privacy policy, cookie consent mechanism, and incident response contact details, which are critical for GDPR compliance and overall security posture. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for its business, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Random State is a Swedish-based technology company specializing in innovative lottery and bingo gaming solutions. They provide a comprehensive platform including player account management, random number generation, game modules, cloud hosting, and compliance support. Their team comprises industry veterans and creative professionals focused on delivering exclusive and engaging real money gaming experiences. The company holds recognition such as the Swedish Gambling Award and has secured strategic investments, positioning them as a notable player in the iLottery sector. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, leveraging Storyblok CMS and AWS CloudFront CDN for performance and scalability. The site is mobile-optimized, fast-loading, and SEO-friendly, with multimedia content enhancing user engagement. Security headers are implemented, and HTTPS is enforced, though DNSSEC is not enabled. No major vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site lacks published privacy and terms of service policies, which is a notable gap for GDPR compliance. Cookie consent is implemented, but no incident response or vulnerability disclosure information is available. Contact information is clearly provided, but no phone numbers are listed. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and terms policies, enabling DNSSEC, adding security.txt or vulnerability disclosure, and enhancing security headers. These steps will improve compliance, trust, and security maturity.

The website www.pawduketreats.com/retail-order-form/ presents itself as an e-commerce platform promoting an online slot gaming application named WASLOT, targeting the Indonesian market. It offers bonus promotions and claims a high user rating with numerous reviews. The site is built on or heavily integrated with the Etsy platform, utilizing various modern JavaScript libraries and tracking tools such as Google Tag Manager, Bing Ads, and Sentry for error monitoring. However, the absence of WHOIS registration data and domain legitimacy concerns reduce overall trust. The site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security headers are not detected, and no explicit company contact information is provided, limiting transparency. Overall, the site appears functional but has significant gaps in security posture and compliance.

NaturallookingSmiles is a niche gaming blog focused on legendary PlayStation 1 games, providing reviews, guides, and gaming news targeted at enthusiasts of classic PS1 titles. The website is built on WordPress with Yoast SEO plugin, uses Cloudflare DNS, and includes standard web technologies such as jQuery and Font Awesome. The site demonstrates good content quality and basic mobile optimization but lacks comprehensive privacy, cookie, and security policies. No contact information or social media presence is provided, limiting business credibility and user trust. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and the domain WHOIS data shows inconsistencies that reduce trustworthiness.

C

CADENAS GmbH

cadenas.de

53

CADENAS GmbH is a reputable German software company specializing in Strategic Parts Management and Electronic Product Catalogs, serving a broad range of engineering and manufacturing clients globally. The company holds a strong market position with significant adoption among top manufacturers and global players. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and active social media engagement. Technically, the site uses modern web technologies including Contao CMS, jQuery, Plyr, and integrates analytics tools with GDPR-compliant consent management. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the domain and website content align well, indicating a trustworthy and professional business. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

Home | Smart Mobile Gamers

smartmobilegamers.org

41

The website www.smartmobilegamers.org appears to be a basic Wix-built site with minimal content and no visible business or contact information. The lack of privacy policies, terms of service, or security disclosures indicates a low level of digital maturity. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and registrant information reduces trust and raises concerns about domain legitimacy. Overall, the security posture is weak with no evident security headers or incident response mechanisms. The site is accessible without WAF or security challenges but provides limited business or user engagement value.

S

Spotlight Studios Ltd

spotlightstudios.co.uk

58

Spotlight Studios Ltd is a well-established creative digital agency based in Manchester, UK, founded in 2012. The company offers a broad range of digital services including bespoke website design, SEO, PPC, social media management, AI integrations, and automation solutions. They position themselves as a top digital agency in Manchester with a strong reputation supported by multiple 5-star reviews on Trustpilot, Facebook, and Google, as well as partnerships with Microsoft and Shopify. Their flagship offering, Spotlight Unlimited, provides comprehensive digital marketing and automation services tailored to business growth. Technically, the website is built on WordPress using the Yootheme framework and UKit, integrating modern analytics and marketing tools such as Microsoft Clarity, Facebook Pixel, LinkedIn Insight, and Mouseflow. The site is mobile-optimized, SEO-friendly, and performs moderately well. Security posture is strong with HTTPS enforced and appropriate security headers, though the site lacks visible cookie consent mechanisms and public security policies. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

T

Tourismus Marketing Gesellschaft Sachsen mbH

sachsen-angebote.de

52

Tourismus Marketing Gesellschaft Sachsen mbH operates the website www.sachsen-angebote.de to promote tourism offers and facilitate accommodation bookings in the Saxony region of Germany. The site targets tourists and travelers interested in exploring Saxony, providing curated travel packages and booking options. The business is positioned as a regional tourism marketing entity with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript, CSS, and accessibility tools such as Eye-Able. Hosting is provided by SchlundTech, a reputable provider. The site demonstrates good mobile optimization and basic SEO practices, with consent management implemented for GDPR compliance. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit security headers and a published security policy. No vulnerabilities or malicious content were detected. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Contact information is available via a clearly labeled phone number and booking form. Overall, the website presents a professional and trustworthy front for regional tourism marketing, with moderate technical maturity and security posture. Strategic improvements in privacy policy publication, security header implementation, and incident response readiness would enhance compliance and trustworthiness.

D

Dunajovské kopce - spolek vinařů

dunajovskekopce.cz

43

Dunajovské kopce - spolek vinařů is a regional association of winemakers from the Czech Republic, specifically from the villages of Březí u Mikulova and Dolní Dunajovice. The association focuses on producing and promoting wines made from grapes grown in their local terroir. Their website serves as a platform to showcase member wineries, promote wine tourism through events like open cellar days, and operate an e-shop for wine sales. The business is small-sized, with 16 members, and targets wine enthusiasts and tourists interested in local wine culture. Technically, the website is built on Joomla CMS using Yootheme templates and UIkit framework, offering a modern and responsive design with good navigation and content quality. However, there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and obfuscates emails but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

V

Vinařství Pavlica

vinarstvipavlica.cz

38

Vinařství Pavlica is a small family-owned winery based in the Czech Republic, specializing in producing wines from grapes grown on their own vineyards. The business has a local market focus, supplying wines to restaurants, bistros, cafes, wine shops, and direct customers. The website provides detailed business background and product information but lacks critical security and privacy features. Technically, the site uses common frontend libraries such as Bootstrap and Owl Carousel but does not implement HTTPS or security headers, which poses risks to user data and trust. No privacy or cookie policies are present, and no contact information is provided, limiting user engagement and compliance with data protection regulations. Overall, the site is functional and informative but requires significant improvements in security, privacy, and compliance to enhance trust and protect visitors.

Vinařství Entrée is a small family-owned boutique winery established in 2017 in Mikulov, Czech Republic. The winery focuses on producing exceptional wines from the Mikulov region, emphasizing quality and the natural aging process. The business model centers on limited production batches and direct sales primarily to private clients through personal tastings and an external e-shop. The website reflects a professional but modest digital presence built on WordPress, with clear branding and contact information. However, the absence of WHOIS data limits domain trust verification. Technically, the site uses standard WordPress themes and jQuery, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy for its niche but could improve compliance and security practices.

I

Integrační centrum Praha

konferenceintegrace.cz

39

Integrační centrum Praha operates as a non-profit organization focused on integration and migration communication, primarily organizing conferences such as "Komunikací k integraci". The website serves as an informational and promotional platform for these events, targeting professionals in public administration, NGOs, media, and academia. Technically, the site is built on WordPress using the Enfold theme and WPML for multilingual support, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting its role as a government/non-profit entity in the Czech Republic.

The website www.priserkyvhlave.cz is an educational platform in Czech language focused on teaching about monsters through interactive games and resources, primarily targeting schools and children. It is a project supported and co-financed by the European Union and the Czech Ministry of Interior, indicating a non-commercial, public service nature. The site uses modern web technologies such as React and Next.js, providing a good user experience with responsive design and clear navigation. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided, which limits transparency and user trust. From a technical perspective, the site is built on a modern JavaScript framework with client-side rendering and moderate performance. No analytics or tracking scripts were detected, suggesting minimal user tracking. Security posture is limited due to the absence of security headers and no visible SSL configuration details. The WHOIS data for the domain is unavailable, likely due to privacy protection or domain registration issues, which negatively impacts the trustworthiness assessment. Overall, the website is safe and suitable for general audiences, with no adult or explicit content detected. The lack of WHOIS transparency and privacy policies are the main concerns. Strategic recommendations include implementing comprehensive privacy and cookie policies, improving security headers, providing clear contact and incident response information, and verifying domain registration details to enhance trust and compliance.

I

Integrační centrum Praha o.p.s.

saladbowlofprague.cz

39

Salad Bowl of Prague is a culturally focused non-profit project managed by Integrační centrum Praha o.p.s., aimed at promoting understanding and integration of migrants in Prague through guided tours, cultural events, and educational content. The website is built on WordPress with a modern tech stack including SEO and multilingual plugins, and integrates Google Maps and Facebook Pixel for enhanced user engagement and analytics. The site demonstrates good security practices with HTTPS and GDPR compliance, though some security headers could be improved. Contact information and privacy policies are clearly presented, supporting trust and transparency.

A

Atlas předsudků

atlaspredsudku.cz

39

Atlas předsudků is a Czech Republic based educational and informational website focused on debunking prejudices and misinformation about foreigners and integration within the country. The site is funded by the European Union and the Czech Ministry of Interior, positioning it as a government-backed public awareness campaign. It offers interactive quizzes, detailed factual content, and multimedia resources to educate the general public on migration and integration topics. The target audience is the Czech general public interested in social issues and combating misinformation. Technically, the website uses modern web technologies including Bootstrap 5 and Google Analytics, with a cookie consent mechanism that respects user privacy by default denying ad and analytics cookies. The site is hosted on a Czech hosting provider and uses a domain registered in 2020, consistent with its recent campaign nature. Security posture is moderate with room for improvement in security headers and incident response transparency. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional, trustworthy, and serves an important social function with good content quality and user experience.

C

Centrum Czech in

centrumczechin.cz

37

Centrum Czech in is a small educational organization based in the Czech Republic specializing in Czech language courses for adults and children. The website is professionally designed using WordPress with modern SEO practices and social media integration. The technical infrastructure includes common plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively but should improve compliance and security transparency.

C

Centrum na podporu integrace cizinců v Ústeckém kraji

centrumcizincu.cz

47

Centrumcizincu.cz is a Czech Republic based regional integration center focused on supporting foreigners, especially Ukrainian citizens and other immigrants, in the Ústecký region. The organization provides free legal, social, and educational counseling, Czech language courses, and integration activities funded by the European Union and the Czech Ministry of Interior. The website is professionally designed using WordPress CMS with modern technologies and includes multilingual support via Google Translate. Contact information and cookie consent mechanisms are clearly implemented, reflecting good privacy compliance. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy and serves a clear non-profit government-related mission.

P

Poradna pro integraci

barevnaplaneta.cz

47

Barevná planeta is a well-established multietnic world music festival organized by the non-profit organization Poradna pro integraci, held in Ústí nad Labem, Czech Republic. The website provides comprehensive event information, supported by local government and international organizations such as UNICEF. The festival targets a broad audience interested in multicultural music and cultural events. Technically, the site is built on WordPress with modern plugins and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-maintained, reflecting the festival's long history and community support.

PXLRBLL is a small creative agency based in Germany, specializing in print, web design, and photography services since 2009. The company targets businesses and organizations primarily in Sachsen and Berlin, offering a portfolio of references that demonstrate their expertise in these areas. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress using the Avada theme and jQuery, hosted via DomainControl (GoDaddy). Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled and secure form handling, but lacks important security headers and formal privacy and cookie policies, which are compliance gaps. No social media or direct contact emails/phone numbers are provided, limiting direct communication channels. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security best practices.

M

MindMontan

mindmontan.de

45

MindMontan is a German-based environmental technology project focused on reducing water pollution caused by mining activities. The website presents the project as a collaborative effort with strong partners, funded by the German Federal Ministry of Education and Research (BMBF). It offers information about innovative technologies aimed at mitigating environmental impacts both regionally and globally. The site targets stakeholders interested in environmental protection and mining impact reduction. Technically, the website is built on WordPress with the Avada theme, employing modern web technologies and plugins for gallery and cookie management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Overall, the website is trustworthy, professional, and compliant with GDPR, though it could improve in security policy transparency and technical security headers.

OPA Group s. r. o. operates the website oculocin.cz, specializing in the development, manufacturing, and distribution of natural eye care products, including eye drops designed to treat chronic conjunctivitis and irritated eyes without antibiotics. The company positions itself as a provider of safe, effective, and innovative healthcare products with certifications such as ISO 13485 and CE MDD 0434, targeting consumers seeking natural and hygienic eye care solutions. The website is professionally designed using WordPress with multilingual support and SEO optimization, providing clear product information and customer engagement through a registration form and social media links. Technically, the site employs modern web technologies and is hosted by Wedos, with good SSL configuration and basic security practices in place. However, security headers and explicit security policies could be enhanced. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of business credibility and technical maturity, with no signs of blocking or malicious content.

O

OPAGROUP s.r.o.

nasaleze.eu

9

Nasaleze.eu is a Czech healthcare-focused website offering clinically proven natural nasal sprays designed to protect against airborne viruses, bacteria, and allergens. The business operates primarily through partnerships with pharmacies and online shops, targeting consumers seeking natural preventive nasal care products. The website is built on WordPress using the Divi theme, hosted by a reputable Czech provider, and demonstrates good technical implementation with moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security best practices.

A

Asseco Store

asseco-store.com

51

The website 'Asseco Store' presents minimal visible content and appears to be a JavaScript-heavy single-page application with no accessible textual content in the provided HTML. The WHOIS lookup for the domain www.asseco-store.com returned no registration data, indicating the domain may not be registered or WHOIS data is hidden, which raises concerns about legitimacy and transparency. The site loads multiple third-party analytics scripts including Amplitude, Microsoft Clarity, and Maze Analytics, suggesting extensive user tracking without visible privacy or cookie policies. Security headers and SSL configuration details are not available from the data provided, limiting the assessment of security posture. Overall, the website lacks basic business and contact information, privacy compliance, and visible content, resulting in a low trust and credibility score.

A

Asseco Solutions, a. s.

asseco-qasida.com

10

Asseco Solutions, a. s. operates the Asseco QASIDA platform, a comprehensive cloud-based ecosystem of business applications including ERP, CRM, AI-driven inventory prediction, service management, and rental management. The company targets small and medium enterprises in Slovakia and offers modular SaaS solutions designed to optimize business processes and enhance operational efficiency. The website reflects a modern, professional digital presence with clear business focus and strong branding consistency. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google reCAPTCHA v3 for security. Hosting is provided via Websupport.cz, and the site is well-optimized for mobile devices with good SEO and accessibility features. The presence of cookie consent mechanisms and GDPR compliance documents indicates a mature approach to privacy. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response contacts suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, the website and business demonstrate a strong market position in cloud ERP and business applications within Slovakia, with a good balance of technical sophistication and compliance. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and resilience.

The website hitachimorava.cz represents Tepelná čerpadla Mazur s.r.o., a small Czech company specializing in the sale, installation, and servicing of heat pumps and HVAC systems, primarily under the HITACHI brand. The company positions itself as an official distributor in the Czech Republic with over 60 years of experience in the industry. The site targets residential and commercial customers seeking high-quality, energy-efficient heating and cooling solutions. The business model focuses on product sales, professional installation, and after-sales service, supported by a user-friendly website with clear product offerings and contact channels. Technically, the website employs a modern but somewhat dated technology stack including AngularJS 1.6.7, jQuery, Bootstrap, and integrates Google Analytics, Google Tag Manager, and Smartsupp live chat for customer engagement and analytics. The site is hosted likely via WEDOS, a Czech hosting provider, consistent with the domain registrar information. The site is mobile optimized and SEO friendly with proper meta tags and structured navigation. From a security perspective, the website demonstrates good privacy compliance with a comprehensive GDPR policy and cookie consent mechanism. However, no explicit security headers were detected, and the use of an older AngularJS version may pose some security risks. There is no visible incident response or vulnerability disclosure information, which could be improved. The site uses HTTPS for all external resources, but direct SSL configuration details are not available. Overall, the website is professional, trustworthy, and well-aligned with the business goals. The risk level is moderate with recommendations to enhance security headers, update frameworks, and publish incident response contacts. The domain registration data is consistent with the business claims, supporting legitimacy. The site contains no adult or questionable content and is safe for general audiences.

F

FK Džiugas

fcdziugas.lt

9

FK Džiugas operates a professional and content-rich website focused on providing comprehensive information about the football club's activities, players, schedules, and league standings. The site targets football fans, club members, and the local sports community in Lithuania. The business model centers on sports club operations, community engagement, and merchandise sales via a dedicated subdomain. Technically, the website is built on WordPress with popular plugins such as SportsPress Pro and WooCommerce, indicating a mature digital infrastructure. The site is mobile-optimized and uses modern JavaScript libraries and frameworks, ensuring a good user experience. Security posture is solid with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response information is published. Privacy compliance is addressed with visible cookie consent and privacy policy pages, reflecting GDPR awareness. However, the absence of WHOIS data limits domain legitimacy verification, which slightly impacts overall trust. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

P

Panevėžio „Lietkabelis“

kklietkabelis.lt

40

Panevėžio „Lietkabelis“ is a Lithuanian basketball club with a professionally maintained website providing comprehensive information about the team, news, schedules, sponsors, and community projects. The site targets basketball fans and stakeholders, offering ticket and merchandise sales through partner platforms. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and Slick Carousel, and integrates Google Analytics and Klaviyo for marketing and analytics. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and privacy/cookie policies. WHOIS data is unavailable, raising some concerns about domain registration transparency. Overall, the website is professional, content-rich, and safe for general audiences, but could improve privacy compliance and security best practices.

G

Gargždai Basketball

gargzdaibasketball.lt

54

Gargždai Basketball is a professional basketball club based in Lithuania competing in the Lithuanian Basketball League. The website serves as a hub for fans and community members to access team news, schedules, ticket sales, and partnership information. The club positions itself as a regional sports entity with active community engagement and sponsorships. Technically, the website is built on WordPress with a modern tech stack including popular plugins for sports management and e-commerce. The site is mobile optimized and uses HTTPS, ensuring secure communications. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with no obvious vulnerabilities detected, but could be improved with explicit security headers and incident response information. Overall, the website is professional and trustworthy, serving its target audience effectively.

K

KK NEPTŪNAS

bcneptunas.lt

40

KK Neptūnas is a professional basketball club based in Lithuania, operating an official website that provides comprehensive information about the team, match schedules, ticket sales, and merchandise. The website targets basketball fans and sports enthusiasts primarily in Lithuania and Europe. The business model revolves around sports entertainment, sponsorships, and fan engagement through digital channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap and Owl Carousel for UI components. Google Analytics and Tag Manager are used for visitor tracking with IP anonymization enabled, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but visible PHP warnings and lack of security headers indicate areas for improvement. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is functional and professional but requires backend fixes and enhanced privacy compliance to improve trust and security.

L

Löwen Play

loewen-play.de

58

Löwen Play operates as a licensed German online casino platform specializing in virtual slot games and online gambling services. The website targets adult German-speaking users interested in legal and secure online gaming experiences. The platform emphasizes compliance with German licensing requirements and offers popular slot games with payment options such as PayPal. Technically, the site employs modern JavaScript frameworks, integrates Cookiebot for GDPR-compliant cookie consent, and uses Cloudflare for DNS and likely CDN services. Analytics and user engagement are tracked via etracker and Google Analytics, while customer support is facilitated through LiveChat. Security posture is solid with HTTPS enforced and CSRF protections in login forms, though explicit security headers and policies are not visible. Overall, the site presents a professional and trustworthy front with good mobile optimization and user experience.

O

OPA Group s.r.o.

obchodproalergiky.cz

54

ObchodProAlergiky.cz is a specialized Czech e-commerce platform operated by OPA Group s.r.o., focusing on allergy-related healthcare products such as nasal rinses, anti-allergics, and eye drops. The company holds exclusive distribution rights for notable brands like Nasaleze, NeilMed, and Oculocin in the Czech and Slovak markets, positioning itself as a trusted niche retailer with a history dating back to 1993. The website offers a professional user experience with clear navigation, product categorization, and customer support features. Technically, the site leverages modern web technologies including Google Analytics 4, Google Ads, and the Upgates e-commerce platform, ensuring a responsive and moderately performant infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and exclusive partnerships.

E

European Federation of Tank Cleaning Organisations

eftco.org

60

The European Federation of Tank Cleaning Organisations (EFTCO) operates as a non-profit federation representing over 630 tank cleaning depots across 25 European countries. It focuses on promoting reliable, trustworthy, and environmentally friendly tank cleaning services through standardization and collaboration with related European federations. The EFTCO Cleaning Document (ECD) is a key service that provides traceable and multilingual documentation of tank cleaning processes, supporting supply chain safety and compliance. The website targets industry professionals, transport companies, and regulatory bodies, positioning EFTCO as a unique and authoritative federation in its niche. Technically, the website employs a traditional tech stack including jQuery 1.8.3, Modernizr, and Bootstrap, with Google Analytics for visitor tracking. While the site is accessible and well-structured with good content quality and navigation, some technical debt is evident due to the use of outdated JavaScript libraries and missing modern security headers. The cookie consent mechanism is implemented, but privacy and terms of service pages are not found, indicating partial privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks visible security headers and uses an outdated jQuery version that may expose it to vulnerabilities. The WHOIS data is malformed and unavailable, limiting trust verification of domain registration details. No incident response or security policies are publicly disclosed. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment suggests the website is legitimate and professional but has gaps in privacy compliance and security best practices. Strategic recommendations include updating technical components, enhancing security headers, publishing privacy and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

A

Agricultural Industries Confederation

agindustries.org.uk

66

The Agricultural Industries Confederation (AIC) is a leading UK trade association representing the agri-supply industry. The organization provides a broad range of services including trade assurance schemes, policy advocacy, member support, and industry events. Their website reflects a mature digital presence with comprehensive content targeting UK agri-supply businesses and stakeholders. The site emphasizes sustainability, regulatory compliance, and industry collaboration. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and implements a robust cookie consent mechanism, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie security best practices, though there is room for improvement in publishing explicit security policies and enhancing security headers. Overall, the website is professional, trustworthy, and well-structured, supporting the organization's market position as a key industry voice.

S

Scope Productions s.r.o.

scopeproduction.cz

51

Scope Productions s.r.o. is a professional video production company based in Prague, Czech Republic, specializing in creating high-quality video content for global brands, Web3 projects, and livestream events. With over 10 years of experience, they offer a comprehensive range of services including timelapse videos, video marketing, livestreams, corporate videos, commercials, animations, and Web3 content. Their market position is that of a trusted small-sized media service provider with a strong international client base and a focus on innovation and measurable results. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, Vimeo Player API, and uses Cloudflare services for CDN and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience with smooth scrolling and interactive elements. From a security perspective, the site employs HTTPS and uses Cloudflare Turnstile CAPTCHA on its contact form to mitigate spam and bot submissions. However, it lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is common for this business type but reduces transparency slightly. Overall, the website presents a professional and trustworthy image with strong business credibility and technical maturity. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit incident response contacts to improve compliance and trust.

E

EdMed Institut, s.r.o.

edmedinstitut.cz

56

EdMed Institut, s.r.o. is a Czech-based company specializing in education and consultancy services within the healthcare sector. Their offerings include seminars, lectures, professional courses, conferences, and symposia targeted primarily at healthcare professionals such as doctors and non-medical healthcare workers. The website is professionally designed, consistent in branding, and provides clear contact information, positioning the company as a specialized provider in its niche market. Technically, the site is built on WordPress, utilizing common libraries like jQuery and Bootstrap, and includes Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS but lacks important security headers and cookie consent mechanisms, which are recommended for compliance and protection. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the site presents a professional and trustworthy front for its business, with room for security and privacy improvements.

ArgoMed.cz is a Czech Republic-based e-commerce platform specializing in the distribution and retail of medical supplies, disinfectants, diabetic care products, and healthcare accessories. Powered by Promedica, the company targets healthcare professionals, medical institutions, and individual consumers within the Czech and Slovak markets. The website presents a well-structured catalog of products with clear navigation and consistent branding, reflecting a medium-sized business with a focused healthcare sector presence. Technically, the website is built on ASP.NET WebForms with jQuery and leverages Amazon Cloudfront CDN for content delivery. Google Tag Manager is used for analytics and marketing tracking. The site is mobile-optimized with good SEO practices but shows signs of legacy technology use, which may pose modernization challenges. Performance is moderate, and accessibility is basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with opt-in/out capabilities, indicating some privacy awareness. However, the absence of explicit security headers and lack of detected privacy policy or terms of service pages represent compliance and security gaps. The WHOIS data is unavailable, limiting domain legitimacy verification and reducing trust scores. Overall, ArgoMed.cz appears to be a legitimate healthcare e-commerce business with room for improvement in security posture, privacy compliance, and domain registration transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

V

Všeobecná zdravotní pojišťovna ČR

zdravakariera.cz

63

The website zdravakariera.cz serves as the official career portal for Všeobecná zdravotní pojišťovna ČR (VZP), the largest health insurance company in the Czech Republic. It provides detailed information about employment opportunities across various professional fields including healthcare, IT, law, marketing, and HR. The site emphasizes benefits, trainee programs, and inclusion initiatives for handicapped individuals, targeting job seekers, students, and graduates. The website is well-branded, consistent, and professionally designed, reflecting the stature of a major public institution. Technically, the site employs modern web technologies including Microsoft Azure hosting, Google Tag Manager, Microsoft Application Insights, and Facebook Pixel for analytics and marketing. It is mobile-optimized, accessible, and uses HTTPS with a cookie consent mechanism that complies with GDPR requirements. However, explicit security headers are not evident in the HTML source, and no direct contact or security incident response information is provided. From a security perspective, the site demonstrates good practices such as encrypted connections and privacy-aware analytics. The absence of WHOIS data is notable but likely due to registry policies or privacy protection rather than malicious intent. No vulnerabilities or exposed sensitive data were detected. Overall, the site presents a low-risk profile with strong business credibility. Strategically, the site could improve by publishing explicit security policies, incident response contacts, and implementing security.txt for vulnerability disclosure. Enhancing security headers would further strengthen its security posture. The site’s comprehensive privacy and cookie policies, combined with official social media presence, contribute to user trust and compliance.