Security Directory

M

MeDitorial s.r.o.

meditorial.cz

0

MeDitorial s.r.o. is a Czech Republic-based company specializing in healthcare-related online media and educational platforms. With over 20 years of experience, it operates multiple specialized portals targeting healthcare professionals such as doctors, nurses, pharmacists, veterinarians, and also patients and the general public interested in health topics. Their services include expert articles, e-learning courses, online conferences, and virtual patient meetings, positioning them as a significant player in the Czech healthcare media sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and responsive design principles, ensuring good performance and accessibility. The site is well-structured with comprehensive metadata and structured data enhancing SEO. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good GDPR compliance. From a security perspective, the site uses HTTPS and secure forms with CSRF tokens, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or malicious content were detected. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and business details support legitimacy. Overall, MeDitorial demonstrates a mature digital presence with strong content quality and privacy compliance. Strategic improvements in security headers and transparency around security policies would enhance their security posture and trust further.

D

Destillation und Likörfabrik Ernst F. Ullmann

lauterbacher-tropfen.de

0

The website www.lauterbacher-tropfen.de represents a small, family-owned German business specializing in the production and retail of traditional spirits and liqueurs since 1869. The company operates both physical locations including a museum and tasting events, as well as an online shop powered by Magento 2. The site is well-structured, professionally designed, and targets mature consumers interested in alcoholic beverages and regional heritage. Technically, the site uses modern eCommerce technologies with integrations such as Google Analytics, Google Tag Manager, and Amazon Pay, ensuring a functional and user-friendly experience. Security posture is good with HTTPS enforced and secure cookie settings, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site is trustworthy and credible, with no signs of blocking or malicious activity.

F

Freiberger Brauhaus

freiberger-pils.de

0

Freiberger Brauhaus is a well-established German brewery with a rich heritage spanning approximately 175 years of pilsner brewing tradition. The company emphasizes authenticity, regional pride, and tradition in its branding and product offerings. The website serves as a marketing and informational platform showcasing their beer products, brewery tours, events, and an online shop. The target audience is mature adults interested in traditional beer culture. Technically, the website employs modern web technologies including Google Tag Manager and Usercentrics for consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professionally maintained, with clear compliance to privacy regulations and responsible marketing practices for alcoholic beverages.

E

Erzgebirgssparkasse

erzgebirgssparkasse.de

0

Erzgebirgssparkasse is a regional financial institution based in Germany, offering a broad range of banking and financial services including online banking, loans, investments, insurance, and real estate services. The website targets both private and corporate customers, providing comprehensive digital access to their products and services. The bank maintains a strong local presence and positions itself as a trusted financial partner in the Erzgebirge region. Technically, the website is built on Adobe Experience Manager, indicating a mature and enterprise-grade digital infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, although some security headers are not explicitly visible in the HTML. Privacy policies and cookie management comply with GDPR requirements. No critical vulnerabilities or suspicious activities were detected. Overall, Erzgebirgssparkasse demonstrates a solid digital presence with good security and compliance practices, supporting its role as a reputable regional bank.

W

Wendt & Kühn KG

wendt-kuehn.de

0

Wendt & Kühn KG is a well-established German manufacturer specializing in handcrafted wooden figures and Christmas decorations, with a history dating back to 1925. The company maintains a strong market position in the niche of collectible wooden art, serving collectors and gift buyers worldwide through its own stores, authorized dealers, and an online marketplace. The website reflects a mature digital presence built on TYPO3 CMS, featuring rich content, multilingual support, and customer engagement tools such as an official app and a customer magazine. Technically, the site is hosted by Alfahosting and employs modern web technologies with good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website projects high professionalism and trustworthiness, aligned with the company's heritage and business model.

5

599media GmbH

599media.de

0

599media GmbH is a specialized design and digital agency based in Germany with offices in Freiberg and Leipzig. The company focuses on TYPO3 CMS web development, branding, corporate design, and digital marketing services. Their market position is that of a regional agency serving corporate clients and public sector organizations with a comprehensive suite of design and digital solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Paper.js for interactive elements. It uses Matomo Analytics for privacy-conscious user tracking and includes a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing. From a security perspective, the site enforces HTTPS and uses secure session cookies for backend access. However, it lacks a publicly available security policy or incident response contact, and no security.txt file is present. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the website demonstrating strong business credibility, privacy compliance, and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

M

Montanregion Krušné hory

montanregion.cz

0

Montanregion Krušné hory is a cultural heritage organization managing a UNESCO World Heritage mining region in the Czech Republic. The website serves as an informational and tourism portal, offering details about the mining landscape, component parts, associated objects, and tour bookings. The site targets tourists, researchers, and cultural enthusiasts interested in mining history and heritage. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but lacks published privacy and cookie policies and security headers, which are areas for improvement. Overall, the website is professional, trustworthy, and well-branded, though it could enhance compliance and security transparency.

F

Förderverein Montanregion Erzgebirge e.V.

fv-montanregion-erzgebirge.de

0

Förderverein Montanregion Erzgebirge e.V. is a small non-profit organization dedicated to promoting and supporting the mining heritage of the Erzgebirge region in Germany. The website serves as a platform to communicate their projects, sponsorship opportunities, and community engagement activities. Their market position is regional and cultural, targeting local stakeholders and heritage enthusiasts. Technically, the website is built on WordPress using the Enfold theme, with modern web technologies and a cookie consent mechanism that supports GDPR compliance. Security posture is adequate with HTTPS enforced and cookie consent blocking, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit incident response or vulnerability disclosure information.

W

Wirtschaftsförderung Erzgebirge GmbH

erzgebirge-gedachtgemacht.de

0

The website Erzgebirge – Gedacht. Gemacht. is a professionally managed regional promotion platform operated by Wirtschaftsförderung Erzgebirge GmbH. It focuses on showcasing the cultural, economic, and touristic strengths of the Erzgebirge region in Germany. The site offers rich content including success stories, news, ambassador profiles, and local product promotion, targeting residents, businesses, and tourists. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and marketing tools with proper consent mechanisms. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Overall, the site demonstrates strong compliance with GDPR and provides clear contact information, enhancing trust and credibility.

The website themely.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification. No actual business content, metadata, or contact information is available for analysis. The domain is registered since 2008 with Cloudflare, Inc. as the registrar and hosting provider, indicating a mature and legitimate domain registration. However, the lack of accessible content prevents assessment of the company's business model, services, or compliance posture. The technical infrastructure includes Cloudflare's security mechanisms such as Turnstile captcha, but no further technology stack or CMS details are available. Security posture cannot be evaluated beyond the presence of Cloudflare protection. Overall, the site appears to be protected by a WAF, limiting visibility into its operations and content.

J

James Hardie

aestuver.com

0

The website www.aestuver.com represents a specialized business unit under the James Hardie brand, focusing on passive fire protection solutions including fire protection boards, expansion joints, and electrical fire protection for structural and tunnel applications. The site targets industry professionals and OEMs in sectors such as energy, transportation, and manufacturing. The digital infrastructure is built on ASP.NET with Kentico CMS, integrating modern marketing tools like Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data is a notable concern for domain legitimacy, although the professional branding and corporate association mitigate some risk. Overall, the site is functional, professional, and safe for general audiences, but would benefit from enhanced transparency and security practices.

The website bikerentalmanager.com is currently inaccessible due to a 403 Forbidden error served by Cloudflare's Web Application Firewall (WAF). This indicates that access to the site is blocked, possibly due to security policies or misconfiguration. The page content is minimal, consisting solely of an error message with no business or contact information, privacy policies, or terms of service. The domain is registered since 2013 with a reputable registrar and uses Cloudflare DNS services, but DNSSEC is not enabled. No structured data or SEO metadata is present, and the site is set to noindex, preventing search engine indexing. Overall, the site lacks visible content and compliance information, limiting the ability to assess its business or security posture fully.

T

Tatry Super Ski

tatrysuperski.pl

0

Tatry Super Ski is a prominent Polish platform specializing in the sale of ski and snowboard skipasses, integrating major ski resorts across the Podhale, Spisz, Beskid, and Pieniny regions. Positioned as the largest project in Poland's ski industry, it targets winter sports enthusiasts seeking convenient access to multiple ski areas. The website demonstrates a solid digital infrastructure, leveraging modern analytics and tracking technologies such as Google Analytics, Google Tag Manager, and Facebook Pixel, all integrated with a GDPR-compliant cookie consent mechanism. The technical implementation is robust with good SSL configuration and security headers, ensuring secure user interactions. However, the absence of a dedicated security policy and incident response information indicates room for improvement in transparency and security governance. Overall, the site maintains a professional and trustworthy online presence with clear contact information and comprehensive privacy practices.

The website coopdisk.cz is a login portal for the COOP organization, leveraging Nextcloud technology for file storage and collaboration services. The platform appears targeted at internal users or members of the COOP group, providing access to file sharing, notifications, and user management features. The domain is registered in the Czech Republic and has been active since 2018, consistent with the business's operational timeline. Technically, the site uses modern web technologies including Nextcloud and Vue.js, with HTTPS enforced, but lacks comprehensive privacy and cookie policies, as well as public contact information. Security posture is moderate with room for improvement in security headers and incident response transparency.

C

COOP Morava

nacoopka.cz

0

COOP Morava operates the naCOOPka platform, a retail loyalty application designed to provide customers with benefits such as discounted products, store locators, and contest participation. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeting consumers shopping at COOP Morava stores in the Czech Republic. Technically, the site uses modern web technologies including JavaScript and Google Tag Manager, with HTTPS enforced and a cookie consent mechanism implemented. However, the absence of WHOIS data and a dedicated privacy policy page slightly reduce trust from a compliance and domain legitimacy perspective. Security posture is generally good but could be improved by adding security headers and publishing a security policy. Overall, the site is functional, trustworthy, and serves its business purpose effectively.

T

The Blog Starter

theblogstarter.com

0

The Blog Starter is a specialized educational website dedicated to helping beginners start their own blogs with minimal technical skills. The site offers comprehensive step-by-step tutorials, videos, and personal assistance, positioning itself as a trusted resource in the blogging education niche. It leverages affiliate marketing, particularly with BlueHost, to monetize its content while providing valuable guidance on blogging best practices. Technically, the site is built on WordPress, employs modern tracking and analytics tools, and demonstrates good SEO and mobile optimization. Security posture is strong with HTTPS and security headers, though improvements in privacy compliance such as cookie consent are recommended. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the website content and author credibility mitigate this concern. Overall, the site presents a professional, trustworthy, and user-friendly platform for aspiring bloggers.

GreenGeeks is a well-established web hosting provider specializing in eco-friendly and green energy hosting solutions. Founded in 2008 and based in Agoura Hills, California, the company offers a broad range of hosting services including shared, reseller, VPS, dedicated servers, and specialized WordPress and WooCommerce hosting. Their market position is strong within the green hosting niche, supported by certifications such as the EPA Green Power Partner and a commitment to sustainability through renewable energy matching and tree planting initiatives. The website reflects a professional and trustworthy brand with clear service offerings and customer support channels. Technically, the website is built on modern frameworks such as Nuxt.js and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight. The site is fast, mobile-optimized, and SEO-friendly, providing a positive user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness slightly, but the overall business credibility remains high due to strong branding, customer testimonials, and transparent contact information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, GreenGeeks presents a mature and reliable hosting service with a strong environmental focus, suitable for customers seeking sustainable web hosting solutions.

Matyáš Herman is an independent fullstack developer specializing in React, Node.js, PHP, and modern web technologies, targeting brands and businesses seeking modern website solutions. The website serves as a personal portfolio showcasing skills and services. The technical infrastructure is based on modern frontend frameworks such as React and Next.js, providing a responsive and visually appealing user experience. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the active social media presence supports legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

S

Supabase

supabase.com

0

Supabase is a technology company providing a Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The company is positioned as a modern, open-source alternative to Firebase, targeting developers seeking a robust and extensible backend platform. The website demonstrates a high level of digital maturity with a modern tech stack including React and Next.js, hosted with Cloudflare and registered via Amazon Registrar. The site is well-designed, mobile-optimized, and provides clear navigation and rich content, reflecting professionalism and strong market positioning. Security posture is good with HTTPS and domain protection statuses, but could be enhanced by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

N

Nethost s.r.o.

nethost.cz

0

Nethost s.r.o. is a Czech-based technology company specializing in reliable hosting, cloud solutions, and Kubernetes cluster management with 24/7 support. The company offers a broad portfolio of services including web hosting, cloud VPS, managed servers, security monitoring, and DDoS protection, targeting businesses and individual professionals seeking scalable and secure IT infrastructure. Their market position is supported by over 20 years of experience and a strong focus on customer-centric, secure, and high-availability solutions. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, integrated with multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, and SmartEmailing. The site is mobile-optimized and SEO-friendly, with a cookie consent mechanism ensuring GDPR compliance. Security measures include HTTPS enforcement and anti-spam protections, though HTTP security headers are not explicitly detected. From a security perspective, the site demonstrates good practices with encrypted connections, form protection, and user consent for cookies. However, the absence of a dedicated security policy page and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and detailed business information mitigate concerns. Overall, Nethost presents a mature and professional digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security header implementation, publishing explicit security policies, and improving incident response visibility to further strengthen trust and compliance.

F

FDJ UNITED

kindredgroup.com

0

FDJ UNITED is a European gaming company with a strong focus on responsible gaming and corporate social responsibility. The company serves 33 million players worldwide and positions itself as a European Gaming Champion with a broad portfolio of gaming brands and technological excellence. The website provides comprehensive corporate information, investor relations, career opportunities, and CSR initiatives, reflecting a mature and professional business presence. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo, and it implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS and security headers, but lacks explicit published security policies or incident response details. The WHOIS data is missing or indicates the domain may not be registered, which is inconsistent with the professional website and lowers domain trustworthiness. Overall, the website is well-designed, accessible, and content-rich, targeting a general audience interested in gaming and corporate information.

The website at ptstaging.eu is currently inaccessible beyond a minimal error page indicating 'file not found'. There is no meaningful content, metadata, or business information available to analyze. The domain is registered with Safenames Ltd, a reputable registrar, but lacks detailed registrant data or visible business presence. Technically, the site shows no evidence of HTTPS, security headers, or modern web technologies. The security posture is weak due to the absence of content and configuration. Overall, the site appears to be a staging or placeholder domain without active deployment. Strategic recommendations include deploying actual website content, implementing HTTPS, adding privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

B

Betting & Gaming Council

bettingandgamingcouncil.com

0

The Betting and Gaming Council (BGC) is the principal industry body representing the regulated UK betting and gaming sector, excluding the National Lottery. Founded in 2019, it serves as a standards organization working with members ranging from betting shops to online gaming platforms to promote ethical standards, safer gambling, and public trust. The website reflects a professional and consistent brand presence, targeting industry stakeholders and the general public interested in safer gambling initiatives. Technically, the website employs modern web technologies including Font Awesome for icons, Flickity for carousels, and Google Tag Manager for analytics. It is hosted on Microsoft Online infrastructure, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are missing. From a security perspective, the site shows a mature posture with HTTPS enforcement, cookie consent, and domain registration protections. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended enhancement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations. It serves its business purpose effectively with clear contact information and social media integration. Strategic improvements in security policy transparency and DNS security would further strengthen its posture.

T

The Bingo Association Ltd

bingo-association.co.uk

0

The Bingo Association Ltd is a UK-based trade association representing all land-based licensed bingo operators in Great Britain. Established in 1998, it focuses on promoting professional excellence, ethical gaming, and responsible gambling practices within the bingo sector. Key services include membership management, a self-exclusion scheme, events, governance support, and publication of the official magazine, Bingo Connect. The association serves licensed operators and customers seeking safe bingo environments. Technically, the website is built on WordPress with Bootstrap 4 and uses modern web technologies such as Google Fonts, FontAwesome, and Google Maps API. The site is hosted by Fasthosts Internet Ltd, a reputable UK hosting provider. The website demonstrates good mobile optimization, clear navigation, and solid SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, explicit HTTP security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The domain is long-established and consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for the Bingo Association, with good content quality and compliance. Strategic improvements include enhancing security headers, publishing security policies, and expanding accessibility features to further strengthen the security posture and user trust.

M

Multi Operator Self Exclusion Scheme

self-exclusion.co.uk

0

The Multi Operator Self Exclusion Scheme operates a specialized service enabling individuals in Great Britain to self-exclude from multiple betting shops via a single phone call. The organization positions itself as a trusted provider in the responsible gambling sector, offering tailored self-exclusion services and additional support options. The website is professionally designed, content-rich, and targets individuals concerned about gambling habits. Technically, the site is built on WordPress with a reputable theme and SEO plugin, hosted by GoDaddy, and includes modern web technologies and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though explicit security headers and policies could be enhanced. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and company registration details. Strategic recommendations include improving security headers, adding incident response information, and enhancing accessibility compliance.

B

Bacta

bacta.org.uk

0

Bacta is a well-established UK trade association representing the amusement and land-based low-stake gambling entertainment industry. Founded in 1998, it holds a leading market position, providing advocacy, membership services, and industry events such as the EAG Expo. The website reflects a professional and consistent brand image targeting industry stakeholders and members. Technically, the site is built on WordPress with Elementor and uses modern plugins for SEO and membership management. It is hosted by GoDaddy and employs HTTPS with a cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with no critical vulnerabilities detected, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

I

Independent Publishers Guild

independentpublishersguild.com

0

The Independent Publishers Guild (IPG) is a UK-based membership organization dedicated to supporting the independent publishing community. The website serves as a comprehensive portal offering membership benefits, events such as the Independent Publishing Awards, a jobs board, training resources, and industry news. The IPG positions itself as the UK's largest publishing community for independent publishers, emphasizing support, diversity, and sustainability within the sector. The organization is registered in the UK with a clear company registration number and charity status, reinforcing its legitimacy and non-profit nature. Technically, the website is built on a mature ASP.NET Web Forms platform utilizing Telerik UI controls, jQuery, and modern web fonts. It integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and accessibility features, although some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling practices including anti-forgery tokens. However, DNSSEC is not enabled, and security headers are absent, which are areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. No incident response or security policy pages were found, suggesting an opportunity to enhance transparency and preparedness. Overall, the IPG website presents a professional, trustworthy, and content-rich platform for its target audience. The security posture is solid but could benefit from additional hardening measures. The business credibility is high, supported by clear registration details and consistent branding. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy to further strengthen trust and compliance.

The website at yfdnza.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, indicating the site may be a placeholder or used for advertising/tracking purposes rather than a legitimate business presence. The domain WHOIS data is highly suspicious, showing a creation date in the future (2025-07-22) and listing the registrar as PDR Ltd., a domain registrar, rather than an end-user or business entity. This inconsistency undermines the trustworthiness of the domain and website. Technically, the site lacks security best practices such as DNSSEC, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, and no GDPR compliance indicators are found. Overall, the site exhibits a low level of digital maturity and security posture, with significant gaps in transparency and compliance.

M

META, o.p.s.

meta-ops.eu

0

META, o.p.s. is a Czech non-profit organization dedicated to supporting the educational development of young migrants, particularly children of foreigners, to facilitate their successful integration into society. The organization operates a website primarily in Czech, offering information about its mission and encouraging volunteer involvement in tutoring and educational support. The site positions itself as a niche player in the education and migrant support sector within the Czech Republic. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and Google Fonts, hosted by a reputable provider (WEDOS Internet, a.s.). It employs standard web technologies and plugins, including Google Analytics and Facebook SDK for social media integration and analytics. Security-wise, the site uses HTTPS and some best practices but lacks explicit security policies, vulnerability disclosures, and comprehensive security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is functional, professionally designed, and trustworthy but could improve in privacy and security transparency.

Etnickakuchyne.cz is a niche food blog and cooking course platform focused on ethnic cuisine, primarily targeting families with children interested in exploring traditional recipes from various countries. The website offers recipes and organizes cooking courses led by native cooks, providing an educational and cultural experience. The business operates on a small scale, with content and courses as its main offerings. Technically, the site is built on WordPress with common plugins and uses Active24 as its hosting provider. It employs cookie consent mechanisms and Google Analytics for tracking, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published security policies and incident response information. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the site is functional, professionally designed, and trustworthy, but could improve compliance and security transparency.

R

Refufest 2025

refufest.com

0

Refufest is a Czech Republic-based non-profit festival organization focused on social themes such as courage, resilience, and responsibility. The website promotes the 2026 edition of the festival, featuring workshops, a fair of non-profit organizations, and cultural events including music performances. The event is organized by INBÁZE, a partner organization. The website is built on WordPress using Elementor and related plugins, with a modern and responsive design that supports good user experience and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages, and could benefit from additional security headers and incident response information. Overall, the site is trustworthy and professionally maintained, targeting community members and social activists.

E

ETHNOCATERING

ethnocatering.cz

0

ETHNOCATERING is a Czech Republic based social enterprise specializing in authentic catering services with flavors from the Middle East, Europe, and the Mediterranean. With over 19 years of experience, the company serves a diverse clientele including weddings, conferences, and corporate events, emphasizing social impact by employing disadvantaged women. The website is professionally designed using WordPress and Elementor, featuring good content quality and clear navigation. Technical infrastructure includes modern web technologies and compliance with GDPR through a robust cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site reflects a trustworthy and credible business with a strong social mission.

T

trendtours Touristik GmbH

trendtours.de

0

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

A

Animod GmbH

animod.de

0

Animod GmbH operates a German hospitality e-commerce platform specializing in hotel vouchers and short trips across Germany and Europe. The website targets general consumers looking for discounted travel gift options and short vacation packages. With over 20 years of experience, Animod positions itself as an established player in the travel voucher market. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, and hosted on Hetzner, a reputable German hosting provider. The website demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are detected. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. No incident response or vulnerability disclosure information is publicly available. Overall, the domain registration data is consistent with the business identity, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance.

H

Holiday Extras Ltd

holidayextras.de

0

Holiday Extras Ltd operates a leading online platform specializing in travel extras such as airport parking, hotels, and transfers, primarily targeting German-speaking European markets. The company positions itself as a market leader with over 40 years of experience, offering convenience and enhanced travel experiences to its customers. The website is professionally designed, localized in German, and integrates multiple social media channels to engage its audience. Technically, the website employs modern web technologies including React, extensive use of JavaScript, and third-party optimization and analytics tools such as Visual Website Optimizer and Google Analytics. Hosting and content delivery leverage Amazon Cloudfront CDN, ensuring reliable performance. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong digital presence with good content quality and security posture. The absence of WHOIS data limits domain trust assessment, but the business credibility is supported by consistent branding and market claims. Strategic recommendations include enhancing security transparency, improving accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

N

NORMA connect

norma-connect.de

0

NORMA connect is a German telecommunications provider specializing in 5G mobile tariffs within the premium D-Netz network. The company offers prepaid and postpaid plans with flexible data options, allnet and SMS flat rates, and eSIM support. Their business model includes direct consumer sales via a WordPress-based website integrated with a Shopify webshop partner for order processing. The website is professionally designed, mobile-optimized, and SEO-friendly, targeting German consumers seeking reliable 5G mobile services. Technical infrastructure leverages WordPress CMS with modern plugins for video playback, cookie consent, and image optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. No privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the site is trustworthy, safe for general audiences, and well-positioned in the German telecommunications market.

S

Slovo 21, z. s.

slovo21.cz

0

Slovo 21 is a Czech non-profit organization dedicated to promoting respect, solidarity, and equality, focusing on the inclusion of Roma people and immigrants. Operating since 1999, it offers educational, cultural, and advocacy services to support marginalized communities. The website reflects a mature digital presence with a clear mission, donation mechanisms, and active social media engagement. Technically, the site is built on Webflow with modern tracking and analytics tools, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and incident response details are absent. Overall, the site is trustworthy and professionally maintained, though WHOIS privacy limits transparency on domain registration details.

S

Sdružení pro integraci a migraci

migrace.com

0

Sdružení pro integraci a migraci (SIMI) is a Czech non-profit organization dedicated to defending the rights of migrants and providing comprehensive support services. The organization promotes integration, coexistence, and a fair and open society. The website reflects a mature digital presence with multi-language support and clear navigation, targeting migrants, refugees, and human rights advocates in the Czech Republic. The business model focuses on legal, social, and intercultural support, positioning SIMI as a trusted NGO in its sector. Technically, the website is built on WordPress with modern frontend libraries and SEO optimizations, hosted by a Czech registrar and hosting provider. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Poradna pro integraci, z. ú.

p-p-i.cz

0

Poradna pro integraci is a well-established Czech non-profit organization founded in 2001, dedicated to supporting the integration of foreigners in the Czech Republic. The organization provides free social and legal counseling, Czech language courses, and promotes multiculturalism. Their website reflects a professional and consistent brand presence, with clear navigation and relevant content targeting immigrants and foreigners seeking integration assistance. The organization maintains offices in Prague and Ústí nad Labem, with transparent contact information and active social media engagement. Technically, the website is built on WordPress using popular plugins such as Slider Revolution and Visual Composer, hosted by a reputable Czech provider (Active24). The site is mobile-optimized and performs moderately well, with standard SEO and accessibility features. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though additional security headers and explicit security policies could enhance the posture. From a security perspective, the site shows no signs of vulnerabilities or malicious content. However, it lacks formal incident response contact channels and vulnerability disclosure mechanisms. Privacy compliance is good, with a comprehensive GDPR-related privacy policy present, though cookie consent mechanisms are not evident. Overall, the site demonstrates a solid security baseline appropriate for a non-profit organization. The domain registration data aligns well with the organization's history and location, indicating legitimacy and trustworthiness. The site links to partner organizations, reinforcing its community and sector integration. No advertising or extensive tracking is detected, supporting a privacy-conscious approach. Strategic recommendations include implementing security headers, adding explicit security and incident response policies, and introducing cookie consent mechanisms to improve compliance and trust. These steps will strengthen the organization's digital maturity and security posture while maintaining its mission focus.

M

META, o.p.s.

meta-ops.cz

0

META, o.p.s. is a Czech non-profit organization dedicated to supporting the educational development of young migrants, particularly focusing on children of foreigners in the Czech Republic. The organization aims to facilitate personal growth and integration through educational assistance, including tutoring in the Czech language. The website reflects this mission with content primarily in Czech and targets a niche audience of migrants and their families. The market position is specialized within the education and non-profit sectors in the Czech Republic. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap 4, and integrates analytics tools like Google Analytics and Facebook SDK for tracking and marketing purposes. Hosting is provided by a reputable Czech registrar, WEDOS Internet, a.s., ensuring a stable infrastructure.

I

InBáze, z. s.

inbaze.cz

0

InBáze, z. s. is a Czech non-profit organization established in 2009, dedicated to supporting migrants and their families in the Czech Republic. The organization provides a broad range of services including social and legal counseling, language courses, career guidance, therapy, and community programs. Their website reflects a well-structured and professional digital presence, targeting migrants, the Czech public, and pedagogical workers. The organization maintains active social media channels and partners with related entities to enhance its outreach and service delivery. Technically, the website is built on WordPress with popular plugins such as WooCommerce and Elementor, ensuring a modern and responsive user experience. Cookie consent is implemented with detailed categories, reflecting GDPR compliance. The site uses HTTPS and some security best practices, though additional security headers could improve its posture. Analytics tools like Google Analytics and Sourcebuster are used with moderate user tracking levels. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, there is no explicit security policy or incident response information available. The domain registration data is consistent with the organization's claims, indicating legitimacy and trustworthiness. Overall, InBáze's website is a reliable and professional platform supporting its mission. Strategic improvements in security headers, explicit privacy and security policies, and more visible contact information could further enhance trust and compliance.

I

Integrační centrum Praha o.p.s.

icpraha.com

0

Integrační centrum Praha o.p.s. is a well-established non-profit organization founded in 2012, dedicated to supporting foreigners living legally and long-term in the Czech Republic, with a special focus on Ukrainians under temporary protection. The organization offers a broad range of free services including counseling, Czech language courses, interpreting, networking, and workshops aimed at integration. The website is professionally designed, multilingual, and provides clear navigation and comprehensive content relevant to its target audience. Technically, the site is built on WordPress with modern themes and plugins, and it is hosted on a reputable provider with HTTPS enabled and moderate performance. Security posture is good but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with active social media presence and positive client testimonials.

The website dobrypravnik.eu is currently a parked domain page indicating that the domain is for sale. There is no substantive business content, contact information, or privacy and security policies present. The site primarily serves as a placeholder with advertising links and an iframe loading external content from a third-party domain. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript used for layout and advertising scripts. No modern CMS or frameworks are detected. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. Overall, the site does not represent an active business or service and is positioned for domain resale.

F

Fyziotoncar s.r.o.

fyziotoncar.cz

0

Fyziotoncar s.r.o. is a small, regionally focused healthcare provider specializing in physiotherapy, rehabilitation, and wellness services in the Czech Republic, with physical branches in Děčín, Jílové, and Proboštov. The company emphasizes a family tradition dating back to 1994 and collaborates with sports professionals and medical experts. Their website reflects a professional and consistent brand image, providing clear contact information and service descriptions targeted at patients with musculoskeletal issues and wellness needs. Technically, the website uses modern web technologies including Google Fonts and Flickity for UI components, with custom CSS and JavaScript bundles. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, there is no explicit CMS or hosting provider identified, and performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS (implied by the URL), has a cookie consent mechanism with granular options, and does not expose sensitive data in the HTML. However, no security headers were detected in the provided data, and no incident response or security policies are published. The WHOIS data is unavailable, likely due to privacy protection, which limits domain trust verification. Overall, the security posture is moderate with room for improvement in headers and documented policies. The overall risk is low given the nature of the business and the professionalism of the website, but the lack of WHOIS transparency and security headers suggests the company should enhance its security and compliance posture to build greater trust and resilience.

A

AUTO B.E.K.

autobek.cz

0

AUTO B.E.K. is a small automotive dealership and service center located in Ústí nad Labem, Czech Republic, specializing in sales and servicing of Mazda, SsangYong, Honda, and authorized Subaru servicing. The company offers comprehensive post-sale services including used car sales, trade-ins, financing, and insurance consulting. The website is built on the Wix platform, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent with a legitimate local business. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

C

Constellium

constellium.com

0

Constellium is a global leader specializing in the development, manufacturing, and recycling of aluminum products and solutions, serving key industries such as aerospace, automotive, and beverage can manufacturing. The company emphasizes innovation and sustainability, supported by its global learning program, Constellium University. The website reflects a professional and well-structured digital presence, leveraging modern technologies like Gatsby and React, and integrating analytics and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not published. The absence of WHOIS data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the website demonstrates a mature digital infrastructure aligned with corporate standards, with room for improvement in transparency around security policies and domain registration details.

R

RYKO a.s.

ryko.cz

0

RYKO a.s. is a Czech-based company specializing in modern wagon repair and maintenance services, including modernization, inspections, cleaning, mobile service, and wheelset repairs. Positioned as one of the most modern wagon repair shops in Europe, it targets railway and transportation companies seeking high-quality wagon servicing. The website reflects a professional and consistent brand image with clear service offerings and customer engagement through social media and news updates. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging OpenStreetMap for location services, and implements HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy policy documentation, which are areas for improvement. The absence of WHOIS data reduces transparency but does not critically undermine the business credibility given the professional web presence and certifications. Overall, the site is functional, secure, and business-focused with room for enhanced privacy and security compliance.